last executing test programs: 11.150325625s ago: executing program 1 (id=2105): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44800}, 0x812) 10.460077169s ago: executing program 1 (id=2107): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff000000000000000100000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004000000060022"], 0x4c}}, 0x0) 9.749231424s ago: executing program 1 (id=2112): r0 = socket(0x2b, 0x1, 0x1) r1 = syz_open_dev$vim2m(0x0, 0xe7, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x7fff, 0x8, 0x1, 0xfffffe0000000001, 0xfa11, 0x3}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd70000000000005000000060005004e20000008000300ac"], 0x38}}, 0x4c8c0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mlock2(&(0x7f00005a2000/0x3000)=nil, 0x3000, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x18}], 0x1) r7 = memfd_create(&(0x7f0000000000)='wpan1\x00', 0x5) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x1, r7, 0x4000000, {0x2, 0x200}}, 0x1) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000001500)={0x2, @pix={0x70, 0x9, 0x33524742, 0x1, 0xe5b, 0x200d294, 0x3, 0x7fff, 0x0, 0x6}}) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) 6.963283677s ago: executing program 2 (id=2125): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) (async, rerun: 32) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x37}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) (async, rerun: 32) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix_mp={0xfffffff8, 0x10000, 0x34524742, 0x6, 0x7, [{0x9, 0x3}, {0x8001, 0x200000}, {0x4}, {0x8, 0xb3}, {0x4, 0x678c05e6}, {0x2, 0x800}, {0x8, 0x40000081}, {0x4}], 0xd2, 0x0, 0x1, 0x2, 0x7}}) (async, rerun: 32) fsopen(&(0x7f0000000000)='overlay\x00', 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[]) 6.393653476s ago: executing program 2 (id=2129): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x470, 0x300, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x3d8, 0x230, 0x230, 0x3d8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}, {}, {}, {0x0, 0x0, 0x0, 0x700}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {0x1}, {}, {}, {0x0, 0x0, 0x0, 0x4}]}}, @common=@unspec=@time={{0x38}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x1, 0x3}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4d0) 6.074690849s ago: executing program 2 (id=2132): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2715, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) socket$inet6_sctp(0xa, 0x1, 0x84) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000198725aeba719b0b44e78dbbd62869fe0e0001000080000000000a00802000c3c72e51523081fefa0fa0a73d8f2b8674f99aedc2bff6cde5d9035200000108000100ac1414aa"], 0x2c}}, 0x0) r3 = syz_ublk_setup_io_uring(0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xf}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000400000000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000000100000074770000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48) r11 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x82080, 0x0) ioctl$KDENABIO(r11, 0x4b36) (async) ioctl$KDENABIO(r11, 0x4b36) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r10, 0x0, 0xa0028000}, 0x38) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) 5.824652819s ago: executing program 4 (id=2134): r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x100010, r2, 0xa94000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='fd', &(0x7f0000000100)='\x10\x9cm\'z\x97}\x9d\xa7\xdb\x1f\xd7', 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) close(r3) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x8) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000000c0)={0x0, 0x5, 0x5, 0x4000007, 0x1, "42341f9b1000"}) r4 = syz_open_pts(0xffffffffffffffff, 0x103100) r5 = syz_open_dev$radio(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000100)={0xf010004, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x0, '\x00', @value64=0xfffffffffffffffe}}) dup3(r4, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000480)={0x8f, 0x0, 0x8}) inotify_init1(0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0x0, 0x34524742, 0x640, 0xf0, 0x2, @discrete={0x100, 0x4}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) 4.767779682s ago: executing program 2 (id=2135): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) (async) prlimit64(0x0, 0xe, 0x0, 0x0) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) (async) userfaultfd(0x80001) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0xe, 0x57, 0x7fc00100}]}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000240)={0x0}) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r7 = syz_open_dev$loop(&(0x7f00000000c0), 0xb, 0x80001) ioctl$LOOP_SET_FD(r7, 0x4c00, r6) (async) ioctl$LOOP_GET_STATUS64(r7, 0x4c05, &(0x7f00000002c0)) r8 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) syz_usb_control_io$printer(r8, 0x0, 0x0) (async) syz_usb_control_io$uac1(r8, 0x0, 0x0) (async) r9 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r9, 0xc0045516, 0x0) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x400040, 0x0) (async) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f00000000c0)={r5}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000003c0)={0x0}) (async) r11 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @dev={0xac, 0x14, 0x14, 0x3c}, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x54}, {@remote, 0x4e20, 0x2, 0xf}}, 0x44) (async) sendmsg$sock(r11, &(0x7f00000000c0)={&(0x7f0000000580)=@qipcrtr={0x2a, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}, 0x48490) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r10, 0x0, r2, 0x5}) (async) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000000104030e0000000000000000020000000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x2004000a) 4.735616045s ago: executing program 0 (id=2136): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x48) 4.351351565s ago: executing program 0 (id=2138): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4c, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x5}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x7}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x10000}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x3}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x200}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x3}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x3}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x6}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40488c0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017ffffffa1000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56441, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0xfff, 0x7, 0x5, 0x5, 0xfffffdff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0xfffd, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) r9 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r9, 0xc0844123, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.09961193s ago: executing program 2 (id=2140): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000100100000c00000000000100000000000f11"], 0x30}, 0x400cc90) 3.824255649s ago: executing program 3 (id=2141): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff000000000000000400000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004000000060022"], 0x4c}}, 0x0) 3.582982174s ago: executing program 2 (id=2142): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd23, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x6179}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="ca4034a4a033c023", 0x300}], 0x2}, 0x5) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x80b04) syz_usb_connect(0x2, 0x0, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) mbind(&(0x7f0000bdc000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x3, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r8 = io_uring_setup(0x1cf8, &(0x7f0000000040)={0x0, 0xe83e, 0xc000, 0x2000008, 0x4c1}) pselect6(0x40, &(0x7f0000000380)={0x101, 0xfffffffffffffffc, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000000)={0x8000021000000021, 0x0, 0x0, 0x3, 0x0, 0x401, 0xfffffffffffffffe, 0x3}, 0x0, 0x0, 0x0) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) 3.40192963s ago: executing program 0 (id=2143): r0 = syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x80) ioctl$MEMERASE(r0, 0x40084d02, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x40702) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r7) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000074c0)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x0, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x4, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x4000000, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x3}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x9, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0xa, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x8, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0xff, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r8, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x4000880) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getgroups(0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r12, &(0x7f0000000100)=[{&(0x7f00000000c0)="8c6effde37ad8dd300f7010066000000fb65", 0x12}], 0x1, 0xf) r13 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$USBDEVFS_CONNECTINFO(r13, 0x80045505, &(0x7f0000000040)) 3.285580321s ago: executing program 1 (id=2144): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x0, 0x0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@empty, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xfd}}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0xa]}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) 3.043245766s ago: executing program 3 (id=2145): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000304000000000000000100000300", @ANYRESDEC=r0, @ANYBLOB="0000000000000000140012800a000100767863616e00000062000280080040"], 0x3c}}, 0x4000) r1 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r2, &(0x7f0000000740)=""/377, 0x179) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', r2}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000180), 0x4, 0x181001) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x1, 0x0, 0x1012, 0x4, 0x6, 0x0, 0x5, 0x4}}) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) ioctl$DVB_DVR_DMX_QUERYBUF(r3, 0xc0186f3d, &(0x7f00000000c0)={0x0, 0xfffffffe, 0xc5, 0xfce, 0x10, 0x6}) 2.963231709s ago: executing program 1 (id=2146): syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0xe41, 0x534d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x1, 0x10, 0x1, {0x8, 0xb, 0x0, 0x3, 0x1, 0x1, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xb, 0xa, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xa, 0x9, 0x6, {0xa, 0x25, 0x25, 0x8, 0x4, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8, 0x7, 0x0, {0xa, 0x25, 0x25, 0xc9d, 0x0, 0x1}}}}}}}}]}}, 0x0) r0 = memfd_create(&(0x7f0000000540)='\xef\x15\xe9F\x91N<\xd6\boSaW\x00', 0x5) lseek(r0, 0x8000000000000006, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0x7f) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000000c0)={0x1, 0x0, [{0x1, 0xd2bd, 0x100005, 0xe8e8, 0xfffffffa}]}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000005c0)=0x9) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000001c0)={"c718ae3ddd25e4c2826499cb6a055b56a5a7336f377a556f824db28eb6743cf045afd0e932534b9eb3b847abbcef63c85319991745999ed89ff49783a84d57cf175a89f8733d74a1bdddcb0a6c3f7535e7976e79da1b52de6403f6710d606fafaf685ec19f369b7829b12aa2b8cd2ab52f9c688683979cdb9516cb61f2adb9aefd44fee30bddb81ebefa818f31f60d89a4e390920c7ed0e2512fd59f719e734b0a1d1f3ff7babb54258a1585514aac0b000000733671e0543929c06f72fc598939003ac6777f3497523536fd25ac4f1e265f5038fa7455f2cc6131d4a189a16b0f0b89e6a495e1d95b840c36488adc22cb2d1b8af57f6dce7214152ba1b3c0d3ad0a6db821518e44b24cb36a02d76ea11a1c45879fc77e7bb2af8c345ddddf49f41228df2114f2c27d16499fa36097a5015ad61a6a9484c09e0a2dfb50f7b7ca71135dc32804a80380a6e20e0ae03be775e472cd31d6a31e615937c38e746a5cf6c9d8194242990dd497a2c52ab50300000000000000cebbd983c3f86dbe92c4b751c04693cb09af88521ab305ceabf6d2bab40bb1b219fbe95ace2f6c49fea798e76b4ef336dff5ac0f7ab022b800ac1aa42fd231b52465a410177ed85dcc9c6d794e2aa0b90cdc409541aa85fa16e3cbc3a9d6c83ffd4d01e5ba898555eeffccf0cb28ce5df0ba31cb793675276162de2fdcb486455bca57edf4fb14e1533554eb22527d66a28a960c430f6136927f54e670c46292454fe28485f35405025844fd24fe846f6656c77d9b5f2b4750ac4805897b02c85caba80000bb96f71f468c9e746d860238b3b113ab1eef51e1507f8832d5d69528083d44548e491477cda51d7e083a134097438e9d7ea34eae8a2e6b516327db9310c7478a37f5c562037196131cc7c84fa29c3c2576f2ae7570b5a98aaa49ca7ddfd5a8c046ce82e4a2d06082ad7a3ab0dfbe208630b1410b674781855752c9c57c1c5ab0a74a336ce89b3a9c0d37a3ca4e698a798a85faf7f4f1dc020b7dd5750062c9810c4bc1ad7afe338f2b0f29059e684fe16098eb30da105be01ca11a293635dfc6d25ecc770ba72792fd3c6851d951b770d0f9edafb1cb4241350d85b04ed737a9bfd7e8301c43b65a95dda76d6850860ba3195040b14c8ad1a8b52472785521147182352a1dbd93595cbc26e813ccd75e16f9247fe82ed150c121f0041022522ec76476f0a9cffa3be1d3ffffffffffffffff29358bbfd8b7a12fe94a0355beb9420eee0a5c11220100c782b89e9430de84b220e8c0df4bd40be3400c58f149319f891fe86fba751dab3326bf2deb9e782b37ec9c7adf36025a091a4b3600000000000000000000000000000000000000000000000000000000000000000600"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff04000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x24008802) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xff46}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x4044) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0xc0a41, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.914507998s ago: executing program 3 (id=2147): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x5}]}}}]}, 0x50}, 0x1, 0xc00, 0x0, 0x4}, 0x8044) 1.535979265s ago: executing program 3 (id=2148): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x470, 0x300, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x3d8, 0x230, 0x230, 0x3d8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}, {}, {}, {0x0, 0x0, 0x0, 0x2900}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {0x1}, {}, {}, {0x0, 0x0, 0x0, 0x4}]}}, @common=@unspec=@time={{0x38}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x1, 0x3}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4d0) 1.199451592s ago: executing program 3 (id=2149): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3fffffff}, 0x48) 1.005483142s ago: executing program 4 (id=2150): r0 = epoll_create1(0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x453) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x202d) syz_fuse_handle_req(r1, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x2b, 0xfffffffe, 0x30004004, 0x0, 0xfffe, 0x6, 0xfffffffe, 0x0, 0x0, 0x1, 0x100}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d2672540e4fff5fe7", 0x0, 0x18}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000001240)={{0xd000, 0x0, 0x0, 0x7, 0x8, 0x41, 0x0, 0x3, 0x0, 0x8, 0x6, 0x1}, {0x8080000, 0x200000, 0xc, 0x0, 0x2, 0x0, 0x7, 0xfe, 0x7, 0xff}, {0x2000, 0x8080000, 0x3, 0x0, 0x9, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x0, 0xfc}, {0xeeef0000, 0xdddd1000, 0x18592cbc7c573fc6, 0x9, 0x55, 0xfc, 0x9, 0x0, 0x8, 0x0, 0x4}, {0x80a0000, 0xeeee8000, 0xd, 0x2d, 0x0, 0x4, 0x0, 0x0, 0x8, 0x7}, {0x100000, 0x0, 0xb, 0x78, 0x5, 0x4, 0x2, 0x0, 0x0, 0xff, 0x1}, {0xdddd0000, 0xeeee0000, 0xa, 0x8, 0x0, 0x0, 0xa1, 0x20, 0xfc, 0x0, 0x8}, {0x9000, 0xd000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x22, 0x26, 0x0, 0x0, 0x1}, {0x0, 0x2}, {0xdddd1000}, 0x0, 0x0, 0x0, 0x110, 0x2, 0xf801, 0x80a0000, [0x80000001, 0x0, 0x5, 0x1]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) preadv(r7, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) close(r1) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000000)=0xeeef0000) sendfile(r0, r3, 0x0, 0x7) 819.765916ms ago: executing program 3 (id=2151): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001b40)=ANY=[@ANYBLOB="120100000000002003043060000000000001090224000100000000090400000103000000092100000001220200090581"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040030}, 0x20004080) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005f40)={0x0, 0x0, &(0x7f0000005f00)={&(0x7f0000000000)=@delchain={0x24, 0x65, 0x20, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x1}, {0x10, 0xc}, {0x8, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="a443fcd7770245fc989b50ea09817223dd9fac342f8f7c3d2cdcae3b14f82c974dc1", 0x22}], 0x1}, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) writev(r7, &(0x7f0000000440)=[{&(0x7f0000000ac0)="0058de8c145b", 0x6}], 0x1) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000000000f124000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x22004043}, 0x880) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9c020000", @ANYRES16=r6, @ANYBLOB="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"], 0x29c}, 0x1, 0x0, 0x0, 0x40010}, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000340)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000240)={r8, 0x1d, "128cf1cbd51ee6be54bb733a52b8d5e266ff426a143085fcf29e79665c"}, &(0x7f00000002c0)=0x25) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 756.046307ms ago: executing program 0 (id=2152): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000500000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x2000884c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140016"], 0x4c}, 0x1, 0x0, 0x0, 0x40080}, 0x14) 640.846986ms ago: executing program 0 (id=2153): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000100100000c00000000000100001100001811"], 0x30}, 0x400cc90) 573.20381ms ago: executing program 4 (id=2154): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2a0180, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x6}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)={r1, 0x8, 0x0, 0x45f, 0x100000001}, &(0x7f0000000100)=0x18) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2a0180, 0x0) (async) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x6}, &(0x7f0000000080)=0x8) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)={r1, 0x8, 0x0, 0x45f, 0x100000001}, &(0x7f0000000100)=0x18) (async) 451.937727ms ago: executing program 0 (id=2155): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@allocspi={0xf8, 0x29, 0x1, 0x0, 0x1000000, {{{@in=@rand_addr=0x64010100, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3, 0x0, 0x0, 0x3, 0x0, 0x80, 0xa0, 0x6c}, {@in=@rand_addr=0x64010101, 0x0, 0x33}, @in=@loopback, {0x0, 0x2, 0x0, 0x8, 0xffffffffffffffff, 0xffffffffffffffed, 0x3}, {0x52b, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x12}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x4e20, 0x0, 0x2}, {0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x100000000000}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x10, 0x4}}}}}]}}]}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x2400c000) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) mknod$loop(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) userfaultfd(0x801) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[]) 450.999606ms ago: executing program 4 (id=2156): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x69b, 0x4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e29004218030018258000000000000002801f0c0012", 0x2e}], 0x1}, 0x0) 290.145568ms ago: executing program 4 (id=2157): syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0xe, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "ffffffffffff00000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r0, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, [{0x19, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x22, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x3, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f6164000000020000000000000000020000ffff008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 136.004187ms ago: executing program 1 (id=2158): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44800}, 0x8fc) 0s ago: executing program 4 (id=2159): r0 = socket(0x21, 0x2, 0xa) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1802, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2}) ioctl$TUNSETGROUP(r1, 0x400454ce, 0x0) r2 = semget$private(0x0, 0x6, 0x0) semtimedop(r2, &(0x7f00000003c0)=[{0x0, 0x1}], 0x1, 0x0) semop(r2, &(0x7f00000000c0)=[{0x4}, {0x0, 0x0, 0x1000}], 0x2) semop(r2, &(0x7f0000001240)=[{}, {0x0, 0x0, 0x2000}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000071103a00000000009c050100000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) semctl$GETZCNT(r2, 0x3, 0xf, 0x0) semctl$SEM_STAT(r2, 0x2, 0x12, &(0x7f0000000000)=""/43) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): runcated [ 288.484091][ T4995] loop2: p2 start 1702059890 is beyond EOD, truncated [ 288.983735][ T9715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.003105][ T9715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.197445][ T9719] syzkaller0: entered promiscuous mode [ 289.198072][ T9721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1296'. [ 289.220795][ T9719] syzkaller0: entered allmulticast mode [ 289.761838][ T9732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.797781][ T9732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.845470][ T9732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1301'. [ 289.892187][ T9732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1301'. [ 290.079356][ T7482] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.110413][ T7482] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.156554][ T7482] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.183364][ T7482] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.341713][ T30] kauditd_printk_skb: 83 callbacks suppressed [ 291.341734][ T30] audit: type=1326 audit(1784053378.002:3068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9762 comm="syz.1.1312" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048279de59 code=0x7ffc0000 [ 291.462709][ T30] audit: type=1326 audit(1784053378.002:3069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9762 comm="syz.1.1312" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048279de59 code=0x7ffc0000 [ 291.544705][ T30] audit: type=1326 audit(1784053378.052:3070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9762 comm="syz.1.1312" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048279de59 code=0x7ffc0000 [ 291.655248][ T30] audit: type=1326 audit(1784053378.052:3071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9762 comm="syz.1.1312" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048279de59 code=0x7ffc0000 [ 291.721138][ T30] audit: type=1326 audit(1784053378.052:3072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9762 comm="syz.1.1312" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f048279de59 code=0x7ffc0000 [ 291.827080][ T30] audit: type=1326 audit(1784053378.052:3073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9762 comm="syz.1.1312" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048279de59 code=0x7ffc0000 [ 291.901257][ T30] audit: type=1326 audit(1784053378.052:3074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9762 comm="syz.1.1312" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048279de59 code=0x7ffc0000 [ 291.971765][ T30] audit: type=1326 audit(1784053378.052:3075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9762 comm="syz.1.1312" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048279de59 code=0x7ffc0000 [ 292.086776][ T30] audit: type=1326 audit(1784053378.062:3076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9762 comm="syz.1.1312" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f048279de59 code=0x7ffc0000 [ 292.162631][ T30] audit: type=1326 audit(1784053378.062:3077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9762 comm="syz.1.1312" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048279de59 code=0x7ffc0000 [ 292.214987][ T9771] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1676948635 (3353897270 ns) > initial count (433553246 ns). Using initial count to start timer. [ 292.302007][ T9781] FAULT_INJECTION: forcing a failure. [ 292.302007][ T9781] name failslab, interval 1, probability 0, space 0, times 0 [ 292.317176][ T9781] CPU: 1 UID: 0 PID: 9781 Comm: syz.3.1318 Tainted: G L syzkaller #0 PREEMPT(full) [ 292.317209][ T9781] Tainted: [L]=SOFTLOCKUP [ 292.317216][ T9781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 292.317228][ T9781] Call Trace: [ 292.317246][ T9781] [ 292.317255][ T9781] dump_stack_lvl+0xe8/0x150 [ 292.317293][ T9781] should_fail_ex+0x40c/0x560 [ 292.317321][ T9781] should_failslab+0xa8/0x100 [ 292.317351][ T9781] __kmalloc_noprof+0xfe/0x720 [ 292.317379][ T9781] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 292.317411][ T9781] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 292.317449][ T9781] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 292.317486][ T9781] genl_family_rcv_msg_doit+0xda/0x340 [ 292.317521][ T9781] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 292.317557][ T9781] ? apparmor_capable+0x126/0x170 [ 292.317586][ T9781] ? bpf_lsm_capable+0x9/0x20 [ 292.317612][ T9781] ? security_capable+0x7e/0x2c0 [ 292.317652][ T9781] genl_rcv_msg+0x614/0x7a0 [ 292.317687][ T9781] ? __pfx_genl_rcv_msg+0x10/0x10 [ 292.317714][ T9781] ? __pfx_tipc_nl_net_set+0x10/0x10 [ 292.317756][ T9781] netlink_rcv_skb+0x226/0x4a0 [ 292.317791][ T9781] ? __pfx_genl_rcv_msg+0x10/0x10 [ 292.317821][ T9781] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 292.317871][ T9781] ? down_read+0x2be/0x330 [ 292.317897][ T9781] genl_rcv+0x28/0x40 [ 292.317922][ T9781] netlink_unicast+0x7bb/0x940 [ 292.317966][ T9781] netlink_sendmsg+0x813/0xb40 [ 292.317998][ T9781] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.318025][ T9781] ? aa_sock_msg_perm+0xf1/0x1b0 [ 292.318053][ T9781] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.318074][ T9781] sock_sendmsg_nosec+0x13a/0x180 [ 292.318104][ T9781] ____sys_sendmsg+0x54e/0x850 [ 292.318143][ T9781] ? __pfx_____sys_sendmsg+0x10/0x10 [ 292.318186][ T9781] ? import_iovec+0x73/0xa0 [ 292.318221][ T9781] ___sys_sendmsg+0x2a5/0x360 [ 292.318261][ T9781] ? __lock_acquire+0x683/0x2cf0 [ 292.318294][ T9781] ? __pfx____sys_sendmsg+0x10/0x10 [ 292.318364][ T9781] ? __fget_files+0x2a/0x420 [ 292.318391][ T9781] ? __fget_files+0x3a2/0x420 [ 292.318429][ T9781] __x64_sys_sendmsg+0x1b1/0x290 [ 292.318466][ T9781] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 292.318518][ T9781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.318542][ T9781] do_syscall_64+0x174/0x580 [ 292.318571][ T9781] ? trace_irq_disable+0x3b/0x140 [ 292.318593][ T9781] ? clear_bhb_loop+0x40/0x90 [ 292.318615][ T9781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.318633][ T9781] RIP: 0033:0x7fda4379de59 [ 292.318650][ T9781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.318666][ T9781] RSP: 002b:00007fda446fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.318685][ T9781] RAX: ffffffffffffffda RBX: 00007fda43a25fa0 RCX: 00007fda4379de59 [ 292.318698][ T9781] RDX: 0000000004004014 RSI: 0000200000000480 RDI: 0000000000000003 [ 292.318709][ T9781] RBP: 00007fda446fc090 R08: 0000000000000000 R09: 0000000000000000 [ 292.318720][ T9781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.318731][ T9781] R13: 00007fda43a26038 R14: 00007fda43a25fa0 R15: 00007fda43b4fa48 [ 292.318760][ T9781] [ 292.912084][ T6573] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 293.062136][ T6573] usb 4-1: Using ep0 maxpacket: 8 [ 293.070985][ T6573] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.093712][ T6573] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.127004][ T9788] Cannot find add_set index 0 as target [ 293.129438][ T6573] usb 4-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 293.167788][ T6573] usb 4-1: config 0 interface 0 has no altsetting 0 [ 293.182992][ T6573] usb 4-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 293.206305][ T6573] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.237645][ T6573] usb 4-1: config 0 descriptor?? [ 293.332199][ T6569] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 293.467900][ T9795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.497447][ T9795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.512207][ T6569] usb 1-1: Using ep0 maxpacket: 32 [ 293.529513][ T6569] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 293.539038][ T6569] usb 1-1: config 0 has no interface number 0 [ 293.558465][ T6569] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 293.577173][ T6569] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.612595][ T6569] usb 1-1: Product: syz [ 293.622062][ T6569] usb 1-1: Manufacturer: syz [ 293.638533][ T6569] usb 1-1: SerialNumber: syz [ 293.660280][ T6573] acrux 0003:1A34:F705.0002: item fetching failed at offset 1/40 [ 293.675198][ T6569] usb 1-1: config 0 descriptor?? [ 293.691176][ T6573] acrux 0003:1A34:F705.0002: parse failed [ 293.701750][ T6569] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 293.722253][ T6573] acrux 0003:1A34:F705.0002: probe with driver acrux failed with error -22 [ 293.859911][ T6589] usb 4-1: USB disconnect, device number 37 [ 293.912353][ T6569] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 293.968038][ T6569] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 294.951704][ T9813] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1327'. [ 295.098462][ T9815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.115920][ T9815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.706167][ T9826] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 295.989067][ T9838] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1334'. [ 296.342985][ T30] kauditd_printk_skb: 106 callbacks suppressed [ 296.343061][ T30] audit: type=1326 audit(1784053383.012:3184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9824 comm="syz.3.1333" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fda4375e68e code=0x7ffc0000 [ 296.377129][ T30] audit: type=1326 audit(1784053383.042:3185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9824 comm="syz.3.1333" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fda4375e68e code=0x7ffc0000 [ 296.403729][ T30] audit: type=1326 audit(1784053383.042:3186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9824 comm="syz.3.1333" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fda4375e68e code=0x7ffc0000 [ 296.430846][ T30] audit: type=1326 audit(1784053383.072:3187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9824 comm="syz.3.1333" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fda4375e68e code=0x7ffc0000 [ 296.456770][ T9824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.468168][ T30] audit: type=1326 audit(1784053383.072:3188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9824 comm="syz.3.1333" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fda4375e68e code=0x7ffc0000 [ 296.529634][ T30] audit: type=1326 audit(1784053383.092:3189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9824 comm="syz.3.1333" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fda4375e68e code=0x7ffc0000 [ 296.584610][ T30] audit: type=1326 audit(1784053383.092:3190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9824 comm="syz.3.1333" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fda4375e68e code=0x7ffc0000 [ 296.637507][ T30] audit: type=1326 audit(1784053383.122:3191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9824 comm="syz.3.1333" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fda4379de59 code=0x7ffc0000 [ 296.672702][ T30] audit: type=1326 audit(1784053383.132:3192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9824 comm="syz.3.1333" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fda4375e68e code=0x7ffc0000 [ 296.697969][ T30] audit: type=1326 audit(1784053383.232:3193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9824 comm="syz.3.1333" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fda4375e68e code=0x7ffc0000 [ 296.864194][ T9855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.934006][ T9855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.081489][ T9859] Cannot find del_set index 0 as target [ 297.483095][ T6585] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 297.598949][ T9871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.609173][ T9871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.686674][ T6585] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.726941][ T6585] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 297.758660][ T6585] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.804652][ T6585] usb 4-1: config 0 descriptor?? [ 297.855967][ T9876] program syz.1.1348 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 297.953072][ T9877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.989893][ T9877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.037148][ T6585] usbhid 4-1:0.0: can't add hid device: -71 [ 298.058716][ T6585] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 298.093371][ T6585] usb 4-1: USB disconnect, device number 38 [ 298.552207][ T6585] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 298.585631][ T9871] xt_bpf: check failed: parse error [ 298.714700][ T6585] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.730965][ T6585] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 298.741410][ T6585] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.758943][ T6585] usb 4-1: config 0 descriptor?? [ 299.305763][ T9886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.331601][ T9886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.705149][ T6585] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 299.740896][ T6585] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input25 [ 299.850640][ T6585] usb 4-1: USB disconnect, device number 39 [ 299.856904][ C0] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 300.614509][ T9915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1359'. [ 300.705163][ T9915] binder: 9912:9915 ioctl c0145608 200000000140 returned -22 [ 300.723299][ T9915] capability: warning: `syz.4.1359' uses 32-bit capabilities (legacy support in use) [ 301.271243][ T9930] netlink: 'syz.3.1356': attribute type 4 has an invalid length. [ 301.671431][ T9941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.709072][ T9941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.737336][ T9943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.763995][ T9939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.766060][ T9943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.787307][ T30] kauditd_printk_skb: 475 callbacks suppressed [ 301.787324][ T30] audit: type=1326 audit(1784053388.452:3669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9944 comm="syz.3.1368" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4379de59 code=0x7ffc0000 [ 301.818038][ T9939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.833748][ T9943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.848787][ T9943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.857306][ T30] audit: type=1326 audit(1784053388.452:3670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9944 comm="syz.3.1368" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4379de59 code=0x7ffc0000 [ 301.889049][ T9941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.898001][ T30] audit: type=1326 audit(1784053388.482:3671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9944 comm="syz.3.1368" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4379de59 code=0x7ffc0000 [ 301.930495][ T9943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.939345][ T9941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.944764][ T9943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.967197][ T30] audit: type=1326 audit(1784053388.482:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9944 comm="syz.3.1368" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fda4379de59 code=0x7ffc0000 [ 301.991441][ T9939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.999979][ T9939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.019808][ T9943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.040064][ T9943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.059708][ T9943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.088639][ T30] audit: type=1326 audit(1784053388.482:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9944 comm="syz.3.1368" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4379de59 code=0x7ffc0000 [ 302.117232][ T9943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.139783][ T9943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.159819][ T9943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.169971][ T9951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.178624][ T30] audit: type=1326 audit(1784053388.482:3675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9944 comm="syz.3.1368" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4379de59 code=0x7ffc0000 [ 302.206736][ T9951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.227585][ T30] audit: type=1326 audit(1784053388.482:3676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9944 comm="syz.3.1368" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4379de59 code=0x7ffc0000 [ 302.253232][ T30] audit: type=1326 audit(1784053388.482:3677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9944 comm="syz.3.1368" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4379de59 code=0x7ffc0000 [ 302.278152][ T30] audit: type=1326 audit(1784053388.482:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9944 comm="syz.3.1368" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4379de59 code=0x7ffc0000 [ 302.303055][ T30] audit: type=1326 audit(1784053388.502:3678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9944 comm="syz.3.1368" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fda4379de59 code=0x7ffc0000 [ 302.754018][ T9961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.783109][ T9961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.802721][ T9959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.834371][ T9959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.915843][ T9963] ipvlan2: entered promiscuous mode [ 302.922258][ T9963] ipvlan2: entered allmulticast mode [ 302.928005][ T9963] gretap0: entered allmulticast mode [ 302.949735][ T9963] team0: Device ipvlan2 failed to register rx_handler [ 302.989366][ T9965] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 303.010362][ T9965] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 303.138459][ T9967] input: syz0 as /devices/virtual/input/input26 [ 304.103965][T10002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1388'. [ 304.366481][T10008] netlink: 'syz.4.1391': attribute type 2 has an invalid length. [ 304.437888][T10010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.467782][T10010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.535314][T10008] H: entered promiscuous mode [ 304.546757][T10010] tunl0: Caught tx_queue_len zero misconfig [ 304.839310][T10017] netlink: 'syz.4.1395': attribute type 12 has an invalid length. [ 304.975955][T10028] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1399'. [ 304.985465][T10028] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 305.111170][T10030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.159471][T10030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.238373][T10037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.247212][T10035] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1400'. [ 305.272833][T10037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.318193][T10042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.343346][T10041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.364337][T10042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.395009][T10032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.404285][T10041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.418144][T10032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.435562][T10035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.457962][T10035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.490624][T10032] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1400'. [ 305.532118][ T6569] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 305.540974][T10038] netlink: 'syz.4.1400': attribute type 4 has an invalid length. [ 305.565723][T10035] netlink: 'syz.4.1400': attribute type 4 has an invalid length. [ 305.578237][T10032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1400'. [ 305.582414][T10035] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1400'. [ 305.602300][T10038] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1400'. [ 305.635754][T10047] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1404'. [ 305.692595][ T6569] usb 4-1: Using ep0 maxpacket: 32 [ 305.717800][ T6569] usb 4-1: unable to get BOS descriptor or descriptor too short [ 305.730862][ T6569] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 305.749891][ T6569] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 305.761513][ T6569] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.770241][ T6569] usb 4-1: Product: syz [ 305.774731][ T6569] usb 4-1: Manufacturer: syz [ 305.779426][ T6569] usb 4-1: SerialNumber: syz [ 305.794791][T10049] syzkaller0: entered promiscuous mode [ 305.800517][T10049] syzkaller0: entered allmulticast mode [ 305.811692][T10049] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 305.819606][T10049] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 305.998287][T10036] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1402'. [ 306.012090][ T6569] usb 4-1: Cannot retrieve CPort count: -71 [ 306.031551][ T6569] usb 4-1: Cannot retrieve CPort count: -71 [ 306.047924][ T6569] es2_ap_driver 4-1:7.0: probe with driver es2_ap_driver failed with error -71 [ 306.083073][ T6569] usb 4-1: USB disconnect, device number 40 [ 306.398987][T10063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.412258][T10063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.437431][T10065] fuse: Unknown parameter '0x0000000000000007' [ 306.795119][ T30] kauditd_printk_skb: 880 callbacks suppressed [ 306.795162][ T30] audit: type=1326 audit(1784053393.462:4559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10055 comm="syz.2.1407" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1e82b5e68e code=0x7ffc0000 [ 306.849979][ T30] audit: type=1326 audit(1784053393.462:4560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10055 comm="syz.2.1407" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1e82b5e68e code=0x7ffc0000 [ 306.889257][ T30] audit: type=1326 audit(1784053393.502:4561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10055 comm="syz.2.1407" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1e82b5e68e code=0x7ffc0000 [ 306.966403][ T30] audit: type=1326 audit(1784053393.502:4562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10055 comm="syz.2.1407" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1e82b5e68e code=0x7ffc0000 [ 307.016669][ T30] audit: type=1326 audit(1784053393.502:4563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10055 comm="syz.2.1407" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1e82b5e68e code=0x7ffc0000 [ 307.060435][ T30] audit: type=1326 audit(1784053393.502:4564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10055 comm="syz.2.1407" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1e82b5e68e code=0x7ffc0000 [ 307.087968][ T30] audit: type=1326 audit(1784053393.512:4565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10055 comm="syz.2.1407" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1e82b5e68e code=0x7ffc0000 [ 307.157801][ T30] audit: type=1326 audit(1784053393.512:4566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10055 comm="syz.2.1407" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1e82b5e68e code=0x7ffc0000 [ 307.255862][ T30] audit: type=1326 audit(1784053393.512:4567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10055 comm="syz.2.1407" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1e82b5e68e code=0x7ffc0000 [ 307.383200][ T30] audit: type=1326 audit(1784053393.542:4568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10055 comm="syz.2.1407" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1e82b5e68e code=0x7ffc0000 [ 307.692094][ T6589] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 307.843131][ T6589] usb 4-1: Using ep0 maxpacket: 32 [ 307.855759][ T6589] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.867000][ T6589] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 307.892048][ T6589] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.915889][ T6589] usb 4-1: config 0 descriptor?? [ 307.937667][ T6589] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 308.008903][T10089] netlink: 'syz.2.1415': attribute type 4 has an invalid length. [ 308.414141][T10100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.438930][T10100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.452880][T10100] netlink: 'syz.0.1424': attribute type 2 has an invalid length. [ 308.461515][T10100] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1424'. [ 308.473434][T10100] netlink: 'syz.0.1424': attribute type 2 has an invalid length. [ 308.481395][T10100] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1424'. [ 308.491262][T10100] netlink: 'syz.0.1424': attribute type 2 has an invalid length. [ 308.499288][T10100] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1424'. [ 308.508884][T10100] netlink: 'syz.0.1424': attribute type 2 has an invalid length. [ 308.518249][T10100] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1424'. [ 308.536236][T10100] netlink: 'syz.0.1424': attribute type 2 has an invalid length. [ 308.553880][T10100] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1424'. [ 308.572995][T10100] netlink: 'syz.0.1424': attribute type 2 has an invalid length. [ 308.594456][T10100] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1424'. [ 308.625426][T10100] netlink: 'syz.0.1424': attribute type 2 has an invalid length. [ 308.642823][T10100] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1424'. [ 308.664750][T10100] netlink: 'syz.0.1424': attribute type 2 has an invalid length. [ 308.685736][T10100] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1424'. [ 308.718379][T10100] netlink: 'syz.0.1424': attribute type 2 has an invalid length. [ 309.478072][T10112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.514579][T10112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.816710][T10116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.842294][T10116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.914011][T10116] kvm: user requested TSC rate below hardware speed [ 309.939381][T10116] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 309.967299][T10116] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 310.297569][T10123] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 310.443642][T10128] fuse: Unknown parameter 'fd18446744073709551615' [ 310.552547][ T6569] usb 4-1: USB disconnect, device number 41 [ 310.645713][T10137] tipc: Enabled bearer , priority 0 [ 310.654719][T10137] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 310.687953][T10137] tipc: Resetting bearer [ 310.701455][T10132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.728720][T10132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.866176][T10142] xt_SECMARK: invalid mode: 9 [ 310.937278][T10145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.948595][T10145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.489656][T10157] __nla_validate_parse: 61 callbacks suppressed [ 311.489685][T10157] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1447'. [ 311.601330][T10159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.610955][T10159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.646924][T10161] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1449'. [ 311.658456][T10155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.668365][T10161] team0: entered promiscuous mode [ 311.674950][T10155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.683660][T10161] team_slave_0: entered promiscuous mode [ 311.689967][T10161] team_slave_1: entered promiscuous mode [ 311.698298][T10161] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.706860][T10161] bridge0: port 3(team0) entered blocking state [ 311.713966][T10161] bridge0: port 3(team0) entered disabled state [ 311.720709][T10161] team0: entered allmulticast mode [ 311.726482][T10161] team_slave_0: entered allmulticast mode [ 311.733508][T10161] team_slave_1: entered allmulticast mode [ 311.762883][ T6573] tipc: Node number set to 3207235137 [ 312.074028][T10170] xt_hashlimit: size too large, truncated to 1048576 [ 312.483027][T10180] ipvlan2: entered promiscuous mode [ 312.492573][T10180] ipvlan2: entered allmulticast mode [ 312.500141][T10180] gretap0: entered allmulticast mode [ 312.518235][T10180] team0: Device ipvlan2 failed to register rx_handler [ 312.805302][T10185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.887941][T10185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.987579][ T30] kauditd_printk_skb: 882 callbacks suppressed [ 312.987599][ T30] audit: type=1326 audit(1784053399.652:5451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10193 comm="syz.0.1460" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4277d9de59 code=0x7ffc0000 [ 313.051186][ T30] audit: type=1326 audit(1784053399.652:5452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10193 comm="syz.0.1460" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4277d9de59 code=0x7ffc0000 [ 313.079867][ T30] audit: type=1326 audit(1784053399.702:5453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10193 comm="syz.0.1460" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4277d9de59 code=0x7ffc0000 [ 313.105409][ T30] audit: type=1326 audit(1784053399.702:5454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10193 comm="syz.0.1460" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f4277d9de59 code=0x7ffc0000 [ 313.130775][ T30] audit: type=1326 audit(1784053399.702:5455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10193 comm="syz.0.1460" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4277d9de59 code=0x7ffc0000 [ 313.158839][ T30] audit: type=1326 audit(1784053399.702:5456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10193 comm="syz.0.1460" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4277d9de59 code=0x7ffc0000 [ 313.202872][ T30] audit: type=1326 audit(1784053399.702:5457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10193 comm="syz.0.1460" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4277d9de59 code=0x7ffc0000 [ 313.231707][ T30] audit: type=1326 audit(1784053399.702:5458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10193 comm="syz.0.1460" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4277d9de59 code=0x7ffc0000 [ 313.306186][ T30] audit: type=1326 audit(1784053399.702:5459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10193 comm="syz.0.1460" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f4277d9de59 code=0x7ffc0000 [ 313.366942][ T30] audit: type=1326 audit(1784053399.702:5460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10193 comm="syz.0.1460" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4277d9de59 code=0x7ffc0000 [ 314.066103][T10207] loop2: detected capacity change from 0 to 7 [ 314.101063][T10207] Dev loop2: unable to read RDB block 7 [ 314.134591][T10207] loop2: AHDI p1 p2 p3 [ 314.148390][T10207] loop2: partition table partially beyond EOD, truncated [ 314.178182][T10207] loop2: p1 start 1601398130 is beyond EOD, truncated [ 314.209579][T10207] loop2: p2 start 1702059890 is beyond EOD, truncated [ 314.282587][T10213] xt_SECMARK: invalid mode: 9 [ 314.494161][T10217] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1466'. [ 314.503692][T10217] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1466'. [ 314.527779][T10217] geneve2: entered promiscuous mode [ 315.144208][T10234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.176415][T10234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.208077][T10234] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1474'. [ 316.113931][T10262] validate_nla: 57 callbacks suppressed [ 316.113952][T10262] netlink: 'syz.4.1475': attribute type 4 has an invalid length. [ 316.272543][ T6585] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 316.324539][T10265] netlink: 'syz.2.1483': attribute type 34 has an invalid length. [ 316.341846][T10265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1483'. [ 316.450131][T10272] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 316.459737][ T6585] usb 4-1: Using ep0 maxpacket: 32 [ 316.466008][T10272] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 316.485449][T10270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1485'. [ 316.504175][ T6585] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.521328][ T6585] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 316.560759][ T6585] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.592908][T10273] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1485'. [ 316.619327][ T6585] usb 4-1: config 0 descriptor?? [ 316.654240][T10275] xt_SECMARK: invalid mode: 9 [ 316.671568][ T6585] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 316.748291][T10273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.763339][T10273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.824847][T10281] syzkaller0: entered promiscuous mode [ 316.830575][T10281] syzkaller0: entered allmulticast mode [ 317.007475][T10290] xt_CT: You must specify a L4 protocol and not use inversions on it [ 317.083913][T10293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.096298][T10293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.111167][T10293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.120612][T10293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.205137][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.211626][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.120252][T10310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.153833][T10310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.508326][T10323] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 318.517180][T10323] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 318.809379][T10327] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1504'. [ 319.028726][ T30] kauditd_printk_skb: 1147 callbacks suppressed [ 319.028745][ T30] audit: type=1326 audit(1784053405.692:6608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10333 comm="syz.1.1506" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048279de59 code=0x7ffc0000 [ 319.060641][ T30] audit: type=1326 audit(1784053405.722:6609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10333 comm="syz.1.1506" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048279de59 code=0x7ffc0000 [ 319.100443][ T30] audit: type=1326 audit(1784053405.762:6610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10333 comm="syz.1.1506" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048279de59 code=0x7ffc0000 [ 319.144158][ T30] audit: type=1326 audit(1784053405.762:6611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10333 comm="syz.1.1506" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f048279de59 code=0x7ffc0000 [ 319.171032][ T30] audit: type=1326 audit(1784053405.762:6612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10333 comm="syz.1.1506" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048279de59 code=0x7ffc0000 [ 319.211663][ T6930] usb 4-1: USB disconnect, device number 42 [ 319.248919][ T30] audit: type=1326 audit(1784053405.762:6613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10333 comm="syz.1.1506" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048279de59 code=0x7ffc0000 [ 319.296566][ T30] audit: type=1326 audit(1784053405.762:6614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10333 comm="syz.1.1506" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048279de59 code=0x7ffc0000 [ 319.365870][ T30] audit: type=1326 audit(1784053405.772:6615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10333 comm="syz.1.1506" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048279de59 code=0x7ffc0000 [ 319.413105][ T30] audit: type=1326 audit(1784053405.782:6616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10333 comm="syz.1.1506" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048279de59 code=0x7ffc0000 [ 319.455126][T10346] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1508'. [ 319.470669][ T30] audit: type=1326 audit(1784053405.792:6617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10333 comm="syz.1.1506" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f048279de59 code=0x7ffc0000 [ 319.550732][T10351] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1511'. [ 319.627011][T10354] ip6gre0: Caught tx_queue_len zero misconfig [ 319.634039][T10354] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 319.883809][T10362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1516'. [ 319.974741][T10366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.034196][T10366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.059893][T10370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.082558][T10370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.169773][T10366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.205158][T10366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.297728][T10380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.309158][T10380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.348569][T10381] EXT4-fs: Conflicting test_dummy_encryption options [ 320.540529][T10388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.574490][T10388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.594536][T10388] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1526'. [ 320.972928][T10399] FAULT_INJECTION: forcing a failure. [ 320.972928][T10399] name failslab, interval 1, probability 0, space 0, times 0 [ 321.006768][T10399] CPU: 0 UID: 0 PID: 10399 Comm: syz.0.1530 Tainted: G L syzkaller #0 PREEMPT(full) [ 321.006801][T10399] Tainted: [L]=SOFTLOCKUP [ 321.006809][T10399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 321.006822][T10399] Call Trace: [ 321.006831][T10399] [ 321.006840][T10399] dump_stack_lvl+0xe8/0x150 [ 321.006878][T10399] should_fail_ex+0x40c/0x560 [ 321.006907][T10399] should_failslab+0xa8/0x100 [ 321.006941][T10399] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 321.006968][T10399] ? auditd_test_task+0x22/0x280 [ 321.007000][T10399] ? audit_log_start+0x103/0xa10 [ 321.007031][T10399] ? audit_log_start+0x103/0xa10 [ 321.007069][T10399] audit_log_start+0x103/0xa10 [ 321.007109][T10399] ? __pfx_audit_log_start+0x10/0x10 [ 321.007145][T10399] ? get_pid_task+0x20/0x1f0 [ 321.007175][T10399] ? get_pid_task+0x20/0x1f0 [ 321.007211][T10399] ? get_pid_task+0x20/0x1f0 [ 321.007250][T10399] audit_seccomp+0x63/0x190 [ 321.007280][T10399] ? clear_bhb_loop+0x40/0x90 [ 321.007302][T10399] ? clear_bhb_loop+0xe/0x90 [ 321.007330][T10399] __seccomp_filter+0xd14/0x1e00 [ 321.007373][T10399] ? __pfx___seccomp_filter+0x10/0x10 [ 321.007402][T10399] ? __mutex_unlock_slowpath+0x731/0x900 [ 321.007438][T10399] ? __fget_files+0x2a/0x420 [ 321.007468][T10399] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 321.007502][T10399] ? __fget_files+0x3a2/0x420 [ 321.007537][T10399] ? fput+0xa0/0xd0 [ 321.007570][T10399] ? __pfx_ksys_write+0x10/0x10 [ 321.007608][T10399] ? __secure_computing+0xe7/0x2b0 [ 321.007640][T10399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.007663][T10399] do_syscall_64+0x10e/0x580 [ 321.007703][T10399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.007726][T10399] ? clear_bhb_loop+0x40/0x90 [ 321.007753][T10399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.007775][T10399] RIP: 0033:0x7f4277d9de59 [ 321.007796][T10399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.007816][T10399] RSP: 002b:00007f4278bec028 EFLAGS: 00000246 ORIG_RAX: 000000000000014d [ 321.007840][T10399] RAX: ffffffffffffffda RBX: 00007f4278025fa0 RCX: 00007f4277d9de59 [ 321.007857][T10399] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 00007f4278bbc000 [ 321.007872][T10399] RBP: 00007f4278bec090 R08: 0000000000000000 R09: 0000000000000000 [ 321.007885][T10399] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 321.007899][T10399] R13: 00007f4278026038 R14: 00007f4278025fa0 R15: 00007f427814fa48 [ 321.007933][T10399] [ 321.824214][T10415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.856654][T10415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.456714][T10428] fuse: Unknown parameter '0x0000000000000007' [ 322.673110][T10434] xt_CT: You must specify a L4 protocol and not use inversions on it [ 323.930015][T10459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.955880][T10459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.122171][ T6930] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 324.292072][ T6930] usb 4-1: Using ep0 maxpacket: 32 [ 324.305291][ T6930] usb 4-1: unable to get BOS descriptor or descriptor too short [ 324.329612][ T6930] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 324.361415][ T6930] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 324.384995][ T6930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.414126][ T6930] usb 4-1: Product: syz [ 324.424826][ T6930] usb 4-1: Manufacturer: syz [ 324.445096][ T6930] usb 4-1: SerialNumber: syz [ 324.698705][T10458] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1551'. [ 324.755913][ T6930] usb 4-1: Cannot retrieve CPort count: -71 [ 324.776822][ T6930] usb 4-1: Cannot retrieve CPort count: -71 [ 324.802192][ T6930] es2_ap_driver 4-1:7.0: probe with driver es2_ap_driver failed with error -71 [ 324.845303][ T6930] usb 4-1: USB disconnect, device number 43 [ 324.865520][T10470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.967039][T10470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.040163][T10476] xt_SECMARK: invalid mode: 9 [ 325.140486][T10475] FAULT_INJECTION: forcing a failure. [ 325.140486][T10475] name failslab, interval 1, probability 0, space 0, times 0 [ 325.154743][T10475] CPU: 1 UID: 0 PID: 10475 Comm: syz.2.1557 Tainted: G L syzkaller #0 PREEMPT(full) [ 325.154777][T10475] Tainted: [L]=SOFTLOCKUP [ 325.154786][T10475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 325.154798][T10475] Call Trace: [ 325.154806][T10475] [ 325.154815][T10475] dump_stack_lvl+0xe8/0x150 [ 325.154857][T10475] should_fail_ex+0x40c/0x560 [ 325.154887][T10475] should_failslab+0xa8/0x100 [ 325.154922][T10475] __kmalloc_noprof+0xfe/0x720 [ 325.154951][T10475] ? tomoyo_encode+0x2ad/0x570 [ 325.154973][T10475] ? tomoyo_encode+0x2ad/0x570 [ 325.155002][T10475] tomoyo_encode+0x2ad/0x570 [ 325.155032][T10475] tomoyo_realpath_from_path+0x5fa/0x640 [ 325.155066][T10475] ? tomoyo_path_number_perm+0x219/0x5f0 [ 325.155099][T10475] tomoyo_path_number_perm+0x246/0x5f0 [ 325.155135][T10475] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 325.155165][T10475] ? __lock_acquire+0x683/0x2cf0 [ 325.155212][T10475] ? hook_file_ioctl+0x1f0/0x5f0 [ 325.155265][T10475] ? __fget_files+0x2a/0x420 [ 325.155294][T10475] ? __fget_files+0x2a/0x420 [ 325.155320][T10475] ? __fget_files+0x3a2/0x420 [ 325.155345][T10475] ? __fget_files+0x2a/0x420 [ 325.155377][T10475] security_file_ioctl+0xc3/0x2a0 [ 325.155409][T10475] __se_sys_ioctl+0x47/0x170 [ 325.155431][T10475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.155461][T10475] do_syscall_64+0x174/0x580 [ 325.155494][T10475] ? clear_bhb_loop+0x40/0x90 [ 325.155519][T10475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.155539][T10475] RIP: 0033:0x7f1e82b9de59 [ 325.155559][T10475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.155579][T10475] RSP: 002b:00007f1e80df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 325.155602][T10475] RAX: ffffffffffffffda RBX: 00007f1e82e25fa0 RCX: 00007f1e82b9de59 [ 325.155618][T10475] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 325.155632][T10475] RBP: 00007f1e80df6090 R08: 0000000000000000 R09: 0000000000000000 [ 325.155645][T10475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.155659][T10475] R13: 00007f1e82e26038 R14: 00007f1e82e25fa0 R15: 00007f1e82f4fa48 [ 325.155694][T10475] [ 325.156785][T10475] ERROR: Out of memory at tomoyo_realpath_from_path. [ 325.600174][T10480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.619340][T10480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.837736][T10497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.890320][T10497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.221417][T10503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1567'. [ 327.413584][T10507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1568'. [ 327.874394][ T5630] Bluetooth: hci3: adv larger than maximum supported [ 327.882187][T10519] xt_SECMARK: invalid mode: 9 [ 328.115308][T10523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.178963][T10523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.188003][T10526] fuse: Unknown parameter '0x0000000000000009' [ 328.509758][T10536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1578'. [ 328.862291][T10550] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 329.640484][T10565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1588'. [ 329.807761][T10572] loop2: detected capacity change from 0 to 7 [ 329.833855][T10572] Dev loop2: unable to read RDB block 7 [ 329.849035][T10572] loop2: AHDI p1 p2 p3 [ 329.868428][T10572] loop2: partition table partially beyond EOD, truncated [ 329.884349][T10572] loop2: p1 start 1601398130 is beyond EOD, truncated [ 329.896021][T10572] loop2: p2 start 1702059890 is beyond EOD, truncated [ 330.158677][T10581] netlink: 'syz.2.1595': attribute type 1 has an invalid length. [ 330.176676][T10581] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1595'. [ 330.186083][T10573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.259164][T10583] Cannot find add_set index 0 as target [ 330.264871][T10573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.498822][T10587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.566312][T10587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.798034][T10595] netlink: 'syz.3.1592': attribute type 4 has an invalid length. [ 330.817079][T10594] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 330.916533][ T5630] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 331.311002][T10604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.343471][T10604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.683613][T10610] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1604'. [ 332.770997][ T30] kauditd_printk_skb: 115 callbacks suppressed [ 332.771017][ T30] audit: type=1326 audit(1784053419.432:6731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.4.1607" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9df9de59 code=0x7ffc0000 [ 332.814604][T10620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.845074][T10620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.870647][T10634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1611'. [ 332.899061][ T30] audit: type=1326 audit(1784053419.472:6732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.4.1607" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9df9de59 code=0x7ffc0000 [ 333.031488][ T30] audit: type=1326 audit(1784053419.472:6733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.4.1607" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fba9df5e68e code=0x7ffc0000 [ 333.133118][ T30] audit: type=1326 audit(1784053419.472:6734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.4.1607" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fba9df9daeb code=0x7ffc0000 [ 333.178856][T10636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.203077][T10636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.233665][ T30] audit: type=1326 audit(1784053419.472:6735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.4.1607" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fba9df9daeb code=0x7ffc0000 [ 333.330120][ T30] audit: type=1326 audit(1784053419.552:6736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.4.1607" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9df9de59 code=0x7ffc0000 [ 333.496941][ T30] audit: type=1326 audit(1784053419.552:6737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.4.1607" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fba9df9de59 code=0x7ffc0000 [ 333.558184][ T30] audit: type=1326 audit(1784053419.552:6738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.4.1607" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9df9de59 code=0x7ffc0000 [ 333.621436][ T30] audit: type=1326 audit(1784053419.552:6739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.4.1607" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9df9de59 code=0x7ffc0000 [ 333.671360][T10643] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1614'. [ 333.696553][ T30] audit: type=1326 audit(1784053419.552:6740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.4.1607" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fba9df9de59 code=0x7ffc0000 [ 333.863625][T10648] Cannot find add_set index 0 as target [ 334.103132][T10658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1620'. [ 334.115903][T10659] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 334.256247][T10658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.270316][T10658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.304051][T10658] tipc: Cannot configure node identity twice [ 334.449104][T10668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1625'. [ 334.704747][T10674] netlink: 'syz.3.1621': attribute type 4 has an invalid length. [ 334.996673][T10684] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1631'. [ 335.276048][T10690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1634'. [ 335.319140][T10693] input: syz0 as /devices/virtual/input/input28 [ 335.345898][T10693] ======================================================= [ 335.345898][T10693] WARNING: The mand mount option has been deprecated and [ 335.345898][T10693] and is ignored by this kernel. Remove the mand [ 335.345898][T10693] option from the mount to silence this warning. [ 335.345898][T10693] ======================================================= [ 335.445981][T10696] xt_CT: You must specify a L4 protocol and not use inversions on it [ 335.490941][T10701] fuse: Unknown parameter '0x0000000000000007' [ 335.544036][ T6569] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 335.632601][T10706] loop2: detected capacity change from 0 to 7 [ 335.653489][T10706] Dev loop2: unable to read RDB block 7 [ 335.673011][T10706] loop2: AHDI p1 p2 p3 [ 335.686299][T10706] loop2: partition table partially beyond EOD, truncated [ 335.707508][T10706] loop2: p1 start 1601398130 is beyond EOD, truncated [ 335.725365][ T6569] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 335.736898][T10706] loop2: p2 start 1702059890 is beyond EOD, truncated [ 335.754263][ T6569] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 138, setting to 64 [ 335.790540][ T6569] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 335.823338][ T6569] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.860991][ T6569] usb 4-1: config 0 descriptor?? [ 335.888911][T10694] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 336.961625][ T6569] ath6kl: Failed to submit usb control message: -110 [ 336.989874][ T6569] ath6kl: unable to send the bmi data to the device: -110 [ 337.017115][ T6569] ath6kl: Unable to send get target info: -110 [ 337.040953][ T6569] ath6kl: Failed to init ath6kl core: -110 [ 337.058312][ T6569] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 337.070818][T10740] ipvlan2: entered promiscuous mode [ 337.089748][T10740] ipvlan2: entered allmulticast mode [ 337.106888][T10740] team0: Device ipvlan2 failed to register rx_handler [ 337.322766][T10751] tipc: Cannot configure node identity twice [ 337.345140][T10752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.365781][T10752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.923671][T10765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.943239][T10765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.972364][T10765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1658'. [ 338.061399][T10768] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1659'. [ 338.131061][T10771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.146086][T10771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.329691][T10779] tipc: Cannot configure node identity twice [ 338.347527][ T6589] usb 4-1: USB disconnect, device number 44 [ 338.441423][T10782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1664'. [ 338.461791][T10780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.462487][ T6585] psmouse serio13: Failed to reset mouse on : -5 [ 338.479916][T10780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.828761][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 338.828806][ T30] audit: type=1326 audit(1784053425.492:6743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10788 comm="syz.1.1666" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048279de59 code=0x7ffc0000 [ 338.909630][ T30] audit: type=1326 audit(1784053425.492:6744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10788 comm="syz.1.1666" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048279de59 code=0x7ffc0000 [ 338.998493][ T30] audit: type=1326 audit(1784053425.552:6745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10788 comm="syz.1.1666" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048279de59 code=0x7ffc0000 [ 339.075670][ T30] audit: type=1326 audit(1784053425.552:6746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10788 comm="syz.1.1666" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048279de59 code=0x7ffc0000 [ 339.111646][T10784] bridge1: entered promiscuous mode [ 339.127336][T10784] bridge1: entered allmulticast mode [ 339.133455][ T30] audit: type=1326 audit(1784053425.562:6747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10788 comm="syz.1.1666" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f048279de59 code=0x7ffc0000 [ 339.143272][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 339.209827][ T30] audit: type=1326 audit(1784053425.562:6748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10788 comm="syz.1.1666" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048279de59 code=0x7ffc0000 [ 339.313115][ T30] audit: type=1326 audit(1784053425.562:6749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10788 comm="syz.1.1666" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048279de59 code=0x7ffc0000 [ 339.409265][ T30] audit: type=1326 audit(1784053425.562:6750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10788 comm="syz.1.1666" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048279de59 code=0x7ffc0000 [ 339.506998][ T30] audit: type=1326 audit(1784053425.572:6751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10788 comm="syz.1.1666" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f048279de59 code=0x7ffc0000 [ 339.565812][T10796] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 339.575933][ T30] audit: type=1326 audit(1784053425.572:6752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10788 comm="syz.1.1666" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048279de59 code=0x7ffc0000 [ 339.862007][ T6589] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 339.928403][T10803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1671'. [ 340.032065][ T6589] usb 4-1: Using ep0 maxpacket: 8 [ 340.040521][ T6589] usb 4-1: config 0 has an invalid interface number: 86 but max is 0 [ 340.051484][ T6589] usb 4-1: config 0 has no interface number 0 [ 340.065134][ T6589] usb 4-1: New USB device found, idVendor=07ca, idProduct=1867, bcdDevice=f0.d3 [ 340.081500][ T6589] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.101816][ T6589] usb 4-1: config 0 descriptor?? [ 340.325212][ T6589] usb 4-1: USB disconnect, device number 45 [ 341.082728][T10816] Cannot find add_set index 0 as target [ 341.164783][T10818] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1677'. [ 341.231818][T10820] netlink: 'syz.3.1678': attribute type 34 has an invalid length. [ 341.243315][T10820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1678'. [ 341.280957][T10823] binder: 10821:10823 ioctl c0046209 0 returned -22 [ 341.461592][T10829] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1682'. [ 341.913145][T10844] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1689'. [ 342.116227][T10851] binder: 10850:10851 ioctl c0046209 0 returned -22 [ 342.244859][ T6569] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 342.336476][T10858] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 342.362140][ T6585] misc userio: Buffer overflowed, userio client isn't keeping up [ 342.403793][ T6569] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 342.430864][ T6569] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.456107][ T6569] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 342.484721][ T6569] usb 4-1: config 1 has no interface number 1 [ 342.510032][ T6569] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 342.539730][ T6569] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 342.556492][ T6569] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 342.573691][ T6569] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.591092][ T6569] usb 4-1: Product: syz [ 342.596363][ T6569] usb 4-1: Manufacturer: syz [ 342.601515][ T6569] usb 4-1: SerialNumber: syz [ 342.841418][ T6569] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 342.865008][ T6569] usb 4-1: MIDIStreaming interface descriptor not found [ 343.088003][ T6569] usb 4-1: USB disconnect, device number 46 [ 343.221528][ T5909] udevd[5909]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 343.467538][ T6585] input: PS/2 Generic Mouse as /devices/serio13/input/input29 [ 343.586094][T10883] netlink: 'syz.1.1697': attribute type 4 has an invalid length. [ 343.721973][ T6585] psmouse serio13: Failed to enable mouse on [ 344.462084][T10915] binder: 10914:10915 ioctl c0046209 0 returned -22 [ 344.538532][T10917] netlink: 276 bytes leftover after parsing attributes in process `syz.0.1704'. [ 344.586931][T10917] netlink: 276 bytes leftover after parsing attributes in process `syz.0.1704'. [ 344.668712][T10917] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 344.698939][T10917] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 345.071094][T10939] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1709'. [ 345.675178][T10955] ip6gre0: Caught tx_queue_len zero misconfig [ 345.700942][T10955] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 345.767414][T10956] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 346.204764][T10951] netlink: 'syz.4.1711': attribute type 21 has an invalid length. [ 346.218818][T10951] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1711'. [ 346.308387][T10951] netlink: 'syz.4.1711': attribute type 4 has an invalid length. [ 346.326441][T10951] netlink: 'syz.4.1711': attribute type 3 has an invalid length. [ 346.351535][T10951] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1711'. [ 346.618015][T10971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.662143][T10971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.850417][T10979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.864823][T10977] netlink: 'syz.3.1722': attribute type 9 has an invalid length. [ 346.882915][T10979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.923494][T10980] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1722'. [ 347.473743][ T6930] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 347.662147][ T6930] usb 4-1: Using ep0 maxpacket: 32 [ 347.689821][ T6930] usb 4-1: unable to get BOS descriptor or descriptor too short [ 347.718297][ T6930] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 347.748068][ T6930] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 347.767893][ T6930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.791265][ T6930] usb 4-1: Product: syz [ 347.803680][ T6930] usb 4-1: Manufacturer: syz [ 347.836563][ T6930] usb 4-1: SerialNumber: syz [ 348.091451][T10982] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1724'. [ 348.148506][ T6930] usb 4-1: Cannot retrieve CPort count: -71 [ 348.184493][ T6930] usb 4-1: Cannot retrieve CPort count: -71 [ 348.209477][ T6930] es2_ap_driver 4-1:7.0: probe with driver es2_ap_driver failed with error -71 [ 348.264866][ T6930] usb 4-1: USB disconnect, device number 47 [ 348.350473][T10996] xt_CT: You must specify a L4 protocol and not use inversions on it [ 348.807648][T11011] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1738'. [ 348.852835][T11016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.879161][T11016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.995403][T11021] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 349.375643][T11030] input: syz1 as /devices/virtual/input/input30 [ 349.638671][T11030] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 350.282110][ T6930] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 350.325218][T11049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.337077][T11050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.357366][T11049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.374221][T11050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.550201][ T6930] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 350.569608][ T6930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.587936][ T6930] usb 4-1: Product: syz [ 350.605132][ T6930] usb 4-1: Manufacturer: syz [ 350.620843][ T6930] usb 4-1: SerialNumber: syz [ 350.666400][ T6930] usb 4-1: config 0 descriptor?? [ 351.272982][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 351.273004][ T30] audit: type=1326 audit(1784053437.932:6788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11043 comm="syz.4.1747" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba9df9de59 code=0x0 [ 352.125177][T11082] gtp0: entered promiscuous mode [ 352.130550][T11082] gtp0: entered allmulticast mode [ 352.138624][T11082] team0: Device gtp0 is up. Set it down before adding it as a team port [ 352.408306][T11085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.458893][T11085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.503922][T11085] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1761'. [ 352.752736][T11090] syzkaller0: entered promiscuous mode [ 352.778910][T11090] syzkaller0: entered allmulticast mode [ 353.317078][T11098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.351465][T11098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.371746][ T6569] usb 4-1: USB disconnect, device number 48 [ 353.635148][T11110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.675288][T11110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.842636][ T30] audit: type=1326 audit(1784053440.502:6789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11112 comm="syz.4.1769" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9df9de59 code=0x7ffc0000 [ 353.921765][ T30] audit: type=1326 audit(1784053440.542:6790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11112 comm="syz.4.1769" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9df9de59 code=0x7ffc0000 [ 353.965398][ T30] audit: type=1326 audit(1784053440.542:6791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11112 comm="syz.4.1769" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9df9de59 code=0x7ffc0000 [ 354.001525][ T30] audit: type=1326 audit(1784053440.542:6792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11112 comm="syz.4.1769" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9df9de59 code=0x7ffc0000 [ 354.036661][ T30] audit: type=1326 audit(1784053440.542:6793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11112 comm="syz.4.1769" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fba9df9de59 code=0x7ffc0000 [ 354.130099][ T30] audit: type=1326 audit(1784053440.542:6794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11112 comm="syz.4.1769" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9df9de59 code=0x7ffc0000 [ 354.130181][ T30] audit: type=1326 audit(1784053440.542:6795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11112 comm="syz.4.1769" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9df9de59 code=0x7ffc0000 [ 354.130335][ T30] audit: type=1326 audit(1784053440.552:6796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11112 comm="syz.4.1769" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9df9de59 code=0x7ffc0000 [ 354.130385][ T30] audit: type=1326 audit(1784053440.552:6797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11112 comm="syz.4.1769" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9df9de59 code=0x7ffc0000 [ 354.686971][T11131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.689259][T11131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.201419][T11141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.241433][T11141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.402889][T11143] gretap1: entered allmulticast mode [ 356.024541][T11152] trusted_key: encrypted_key: insufficient parameters specified [ 356.550561][T11156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.572733][T11156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.056800][T11156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.141055][T11156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.422973][ T6930] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 357.603872][ T6930] usb 4-1: not running at top speed; connect to a high speed hub [ 357.632634][ T6930] usb 4-1: config 139 has an invalid interface number: 150 but max is 2 [ 357.659793][ T6930] usb 4-1: config 139 has an invalid interface number: 220 but max is 2 [ 357.697115][ T6930] usb 4-1: config 139 contains an unexpected descriptor of type 0x2, skipping [ 357.718078][ T6930] usb 4-1: config 139 has an invalid interface number: 122 but max is 2 [ 357.749565][ T6930] usb 4-1: config 139 has no interface number 0 [ 357.767261][ T6930] usb 4-1: config 139 has no interface number 1 [ 357.783548][ T6930] usb 4-1: config 139 has no interface number 2 [ 357.799931][ T6930] usb 4-1: config 139 interface 150 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 357.830229][ T6930] usb 4-1: config 139 interface 150 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 357.872623][ T6930] usb 4-1: config 139 interface 150 altsetting 9 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 357.906401][ T6930] usb 4-1: config 139 interface 150 altsetting 9 has a duplicate endpoint with address 0x2, skipping [ 357.957143][ T6930] usb 4-1: config 139 interface 150 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 357.987500][ T6930] usb 4-1: config 139 interface 150 altsetting 9 has a duplicate endpoint with address 0x2, skipping [ 358.022655][ T6930] usb 4-1: config 139 interface 150 altsetting 9 endpoint 0xA has invalid wMaxPacketSize 0 [ 358.065357][ T6930] usb 4-1: config 139 interface 150 altsetting 9 endpoint 0x3 has invalid wMaxPacketSize 0 [ 358.094384][ T6930] usb 4-1: config 139 interface 150 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 358.135117][ T6930] usb 4-1: config 139 interface 150 altsetting 9 has a duplicate endpoint with address 0xC, skipping [ 358.166654][T11175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.166684][ T6930] usb 4-1: config 139 interface 150 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 358.207504][T11177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.216475][T11175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.231492][T11177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.246882][ T6930] usb 4-1: config 139 interface 220 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 358.278388][ T6930] usb 4-1: config 139 interface 220 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 358.294983][T11173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.306015][T11173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.335157][ T6930] usb 4-1: config 139 interface 220 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 358.372192][ T6930] usb 4-1: config 139 interface 220 altsetting 1 has an endpoint descriptor with address 0x12, changing to 0x2 [ 358.413935][ T6930] usb 4-1: config 139 interface 220 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 358.446526][ T6930] usb 4-1: config 139 interface 220 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 358.462574][ T6930] usb 4-1: config 139 interface 220 altsetting 1 endpoint 0x1 has invalid maxpacket 471, setting to 64 [ 358.475619][ T6930] usb 4-1: config 139 interface 220 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 358.493187][ T6930] usb 4-1: config 139 interface 220 altsetting 1 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 358.505209][ T6930] usb 4-1: config 139 interface 220 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 358.519604][ T6930] usb 4-1: config 139 interface 220 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 358.530908][ T6930] usb 4-1: config 139 interface 220 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 358.542225][ T6930] usb 4-1: config 139 interface 220 altsetting 1 has an endpoint descriptor with address 0x2D, changing to 0xD [ 358.558033][ T6930] usb 4-1: config 139 interface 220 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 358.569304][T11179] netlink: 'syz.4.1791': attribute type 34 has an invalid length. [ 358.578810][T11179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1791'. [ 358.591589][ T6930] usb 4-1: config 139 interface 122 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 358.606166][ T6930] usb 4-1: config 139 interface 150 has no altsetting 0 [ 358.622154][ T6930] usb 4-1: config 139 interface 220 has no altsetting 0 [ 358.630578][ T6930] usb 4-1: config 139 interface 122 has no altsetting 0 [ 358.642160][ T6930] usb 4-1: New USB device found, idVendor=0baf, idProduct=00f6, bcdDevice= 5.02 [ 358.651621][ T6930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.660195][ T6930] usb 4-1: Product: syz [ 358.665156][ T6930] usb 4-1: Manufacturer: syz [ 358.669900][ T6930] usb 4-1: SerialNumber: syz [ 359.067331][T11186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.108748][T11186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.365815][T11194] syzkaller0: entered promiscuous mode [ 359.377414][T11194] syzkaller0: entered allmulticast mode [ 359.401792][T11194] tipc: Enabled bearer , priority 10 [ 359.450534][T11194] tipc: Resetting bearer [ 359.467034][T11193] tipc: Resetting bearer [ 359.526930][T11193] tipc: Disabling bearer [ 359.774311][ T6930] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 359.814700][ T6569] usb 4-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 359.824835][ T6930] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 359.852069][ T6569] usb 4-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 359.923694][ T6930] cdc_ether 4-1:139.220: skipping garbage [ 359.941369][ T6930] cdc_ether 4-1:139.220: bad CDC descriptors [ 359.971455][ T6930] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 359.980079][ T6930] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 360.005954][ T6930] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 360.014714][ T6930] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 360.031206][ T6930] usb 4-1: USB disconnect, device number 49 [ 360.994654][T11213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.036674][T11213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.542286][ T6589] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 361.722092][ T6589] usb 4-1: Using ep0 maxpacket: 8 [ 361.739279][ T6589] usb 4-1: unable to get BOS descriptor or descriptor too short [ 361.760907][ T6589] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 361.791838][ T6589] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 361.840887][ T6589] usb 4-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 361.864860][ T6589] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.887405][ T6589] usb 4-1: Product: syz [ 361.898188][ T6589] usb 4-1: Manufacturer: syz [ 361.915745][ T6589] usb 4-1: SerialNumber: syz [ 362.181288][T11217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.224654][T11217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.280598][ T6589] usb 4-1: 0:1 : does not exist [ 362.293942][ T6589] usb 4-1: unit 5 not found! [ 362.313128][ T6589] usb 4-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8214); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 362.366864][ T6589] usb 4-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 362.628948][T11228] xt_CT: You must specify a L4 protocol and not use inversions on it [ 362.684192][ T6589] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 362.764613][ T6589] usb 4-1: USB disconnect, device number 50 [ 362.895611][T11233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.948967][T11233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.963086][ T5905] udevd[5905]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 363.068999][T11237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.133620][T11237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.164377][T11241] binder: 11238:11241 ioctl c0306201 200000000080 returned -14 [ 363.808783][T11258] pimreg: entered allmulticast mode [ 364.325291][T11266] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1823'. [ 364.684864][T11276] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1826'. [ 364.722629][T11276] openvswitch: netlink: Message has 512 unknown bytes. [ 364.731149][T11278] syzkaller0: entered promiscuous mode [ 364.739328][T11278] syzkaller0: entered allmulticast mode [ 364.768820][T11278] tipc: Enabled bearer , priority 10 [ 364.812411][T11278] tipc: Resetting bearer [ 364.876694][T11277] tipc: Resetting bearer [ 364.999801][T11283] netlink: 'syz.1.1830': attribute type 34 has an invalid length. [ 365.053871][T11283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1830'. [ 365.073449][T11277] tipc: Disabling bearer [ 365.155601][T11287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.208343][T11287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.265794][T11293] loop2: detected capacity change from 0 to 7 [ 365.276839][T11293] Dev loop2: unable to read RDB block 7 [ 365.283069][T11293] loop2: AHDI p1 p2 p3 [ 365.287444][T11293] loop2: partition table partially beyond EOD, truncated [ 365.300301][T11293] loop2: p1 start 1601398130 is beyond EOD, truncated [ 365.308317][T11293] loop2: p2 start 1702059890 is beyond EOD, truncated [ 365.337511][T11292] xt_CT: You must specify a L4 protocol and not use inversions on it [ 365.582276][T11301] sctp: [Deprecated]: syz.1.1837 (pid 11301) Use of struct sctp_assoc_value in delayed_ack socket option. [ 365.582276][T11301] Use struct sctp_sack_info instead [ 365.600951][T11301] sctp: [Deprecated]: syz.1.1837 (pid 11301) Use of struct sctp_assoc_value in delayed_ack socket option. [ 365.600951][T11301] Use struct sctp_sack_info instead [ 365.635761][T11301] sctp: [Deprecated]: syz.1.1837 (pid 11301) Use of struct sctp_assoc_value in delayed_ack socket option. [ 365.635761][T11301] Use struct sctp_sack_info instead [ 365.655807][T11305] Cannot find add_set index 0 as target [ 365.867437][T11307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.903705][T11307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.918082][T11313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.932596][T11313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.109093][T11313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.157767][T11313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.978568][T11334] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1848'. [ 367.019354][T11338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.054210][T11338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.326319][T11344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.379545][T11344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.621369][T11347] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 367.703771][T11347] bond6 (unregistering): Released all slaves [ 367.956426][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 367.956457][ T30] audit: type=1326 audit(1784053454.622:6822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11351 comm="syz.2.1855" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e82b9de59 code=0x7ffc0000 [ 368.071582][ T30] audit: type=1326 audit(1784053454.652:6823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11351 comm="syz.2.1855" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e82b9de59 code=0x7ffc0000 [ 368.143472][ T30] audit: type=1326 audit(1784053454.652:6824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11351 comm="syz.2.1855" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e82b9de59 code=0x7ffc0000 [ 368.180540][ T30] audit: type=1326 audit(1784053454.662:6826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11351 comm="syz.2.1855" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1e82b9de59 code=0x7ffc0000 [ 368.241345][ T30] audit: type=1326 audit(1784053454.662:6827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11351 comm="syz.2.1855" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e82b9de59 code=0x7ffc0000 [ 368.300698][ T30] audit: type=1326 audit(1784053454.662:6828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11351 comm="syz.2.1855" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e82b9de59 code=0x7ffc0000 [ 368.350050][T11338] xt_bpf: check failed: parse error [ 368.353143][ T30] audit: type=1326 audit(1784053454.652:6825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11351 comm="syz.2.1855" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e82b9de59 code=0x7ffc0000 [ 368.410015][ T30] audit: type=1326 audit(1784053454.662:6829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11351 comm="syz.2.1855" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e82b9de59 code=0x7ffc0000 [ 368.493980][ T30] audit: type=1326 audit(1784053454.662:6830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11351 comm="syz.2.1855" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f1e82b9ccc7 code=0x7ffc0000 [ 368.558037][ T30] audit: type=1326 audit(1784053454.662:6831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11351 comm="syz.2.1855" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e82b9de59 code=0x7ffc0000 [ 368.925093][T11364] netlink: 'syz.4.1859': attribute type 34 has an invalid length. [ 368.936464][T11364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1859'. [ 369.123257][T11368] loop2: detected capacity change from 0 to 7 [ 369.221013][T11372] xt_SECMARK: invalid mode: 9 [ 369.238121][T11368] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 369.329727][T11368] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 369.349510][T11374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.373475][T11374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.381743][T11368] Dev loop2: unable to read RDB block 7 [ 369.424470][T11368] loop2: unable to read partition table [ 369.459660][T11368] loop2: partition table beyond EOD, truncated [ 369.520553][T11368] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 369.630931][T11384] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1867'. [ 369.691716][ T4995] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 369.717554][ T4995] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 369.732129][ T4995] Dev loop2: unable to read RDB block 7 [ 369.741322][ T4995] loop2: unable to read partition table [ 369.748770][ T4995] loop2: partition table beyond EOD, truncated [ 370.469452][T11410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.499853][T11413] xt_CT: You must specify a L4 protocol and not use inversions on it [ 370.594367][T11410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.688068][T11415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.723278][T11415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.772329][ T6930] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 370.998505][ T6930] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 371.026358][ T6930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.050267][ T6930] usb 4-1: Product: syz [ 371.065286][ T6930] usb 4-1: Manufacturer: syz [ 371.079053][ T6930] usb 4-1: SerialNumber: syz [ 371.106847][ T6930] usb 4-1: config 0 descriptor?? [ 371.588468][T11421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.654901][T11421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.051244][T11428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1884'. [ 372.312882][T11435] netlink: 'syz.1.1886': attribute type 34 has an invalid length. [ 372.343965][T11435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1886'. [ 372.567415][T11440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.583881][T11440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.563579][ T30] kauditd_printk_skb: 475 callbacks suppressed [ 373.563624][ T30] audit: type=1326 audit(1784053460.232:7307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11453 comm="syz.0.1893" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4277d9de59 code=0x0 [ 374.473926][ T6930] usb 4-1: USB disconnect, device number 51 [ 374.646590][T11480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.684319][T11480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.718787][T11480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.773001][T11480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.831694][T11490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1903'. [ 374.953591][ T6930] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 375.137812][T11494] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1905'. [ 375.165547][T11497] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 375.863200][T11518] fuse: Unknown parameter '0x0000000000000007' [ 376.093173][ T6930] usb 4-1: device descriptor read/64, error -71 [ 376.362272][ T6930] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 376.604537][ T6930] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 376.638870][ T6930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.666864][ T6930] usb 4-1: Product: syz [ 376.684564][ T6930] usb 4-1: Manufacturer: syz [ 376.702726][ T6930] usb 4-1: SerialNumber: syz [ 376.751024][ T6930] usb 4-1: config 0 descriptor?? [ 377.259600][T11532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.273672][T11529] syzkaller0: entered promiscuous mode [ 377.294399][T11529] syzkaller0: entered allmulticast mode [ 377.331530][T11532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.638450][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.648807][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.557015][ T6930] usb 4-1: USB disconnect, device number 53 [ 379.602423][T11544] netlink: 'syz.2.1918': attribute type 4 has an invalid length. [ 379.870463][ T6589] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 380.008942][ T6589] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 380.288810][T11556] fido_id[11556]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 380.319533][T11562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1923'. [ 380.583480][T11566] syzkaller0: entered promiscuous mode [ 380.597293][T11566] syzkaller0: entered allmulticast mode [ 380.622086][ T6930] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 380.655139][T11566] tipc: Enabled bearer , priority 10 [ 380.699152][T11566] tipc: Resetting bearer [ 380.725396][T11564] tipc: Resetting bearer [ 380.807399][T11564] tipc: Disabling bearer [ 380.824110][ T6930] usb 4-1: Using ep0 maxpacket: 8 [ 380.848493][ T6930] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 380.879487][ T6930] usb 4-1: can't read configurations, error -22 [ 381.032265][ T6930] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 381.201998][ T6930] usb 4-1: Using ep0 maxpacket: 8 [ 381.243593][ T6930] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 381.279296][ T6930] usb 4-1: can't read configurations, error -22 [ 381.313706][ T6930] usb usb4-port1: attempt power cycle [ 381.683873][ T6930] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 381.772811][ T6930] usb 4-1: Using ep0 maxpacket: 8 [ 381.801812][ T6930] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 381.836258][ T6930] usb 4-1: can't read configurations, error -22 [ 381.843111][T11587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.858043][T11587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.982150][ T6930] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 382.022924][ T6930] usb 4-1: Using ep0 maxpacket: 8 [ 382.044875][ T6930] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 382.086713][ T6930] usb 4-1: can't read configurations, error -22 [ 382.109365][ T6930] usb usb4-port1: unable to enumerate USB device [ 382.204193][T11598] xt_SECMARK: invalid mode: 9 [ 382.510282][T11609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.581869][T11609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.000007][T11616] netlink: 'syz.2.1939': attribute type 4 has an invalid length. [ 383.466965][T11620] Cannot find add_set index 0 as target [ 383.605622][T11622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1943'. [ 384.415368][T11637] sock: sock_timestamping_bind_phc: sock not bind to device [ 384.451231][T11637] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1948'. [ 385.212835][T11643] xt_CT: You must specify a L4 protocol and not use inversions on it [ 385.458951][T11645] ipvlan2: entered promiscuous mode [ 385.481302][T11645] ipvlan2: entered allmulticast mode [ 385.500236][T11645] gretap0: entered allmulticast mode [ 385.520379][T11645] team0: Device ipvlan2 failed to register rx_handler [ 385.692114][T11650] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 385.852780][T11648] ip6tnl2: entered allmulticast mode [ 385.898226][ T8463] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 385.964073][ T6572] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 385.973710][ T6930] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 385.990710][ T8463] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 386.042325][ T6572] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 386.158999][ T6930] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 386.194201][ T6930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.241156][ T6930] usb 4-1: config 0 descriptor?? [ 386.459333][ T6930] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 386.661116][T11637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.704167][T11637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.749255][T11637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.766361][T11637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.794197][ T6930] [drm:udl_init] *ERROR* Selecting channel failed [ 386.926480][ T6930] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 386.934929][ T6930] [drm] Initialized udl on minor 2 [ 386.950357][ T6930] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 386.959218][ T6929] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 387.006326][ T6930] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 387.082574][ T6930] usb 4-1: USB disconnect, device number 58 [ 387.089055][ T6929] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 387.136486][ T6929] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 387.299573][T11685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.403392][T11685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.441922][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 387.503867][T11691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1965'. [ 387.913260][T11695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1966'. [ 388.121392][T11698] xt_CT: You must specify a L4 protocol and not use inversions on it [ 388.376530][T11700] netlink: 'syz.3.1968': attribute type 34 has an invalid length. [ 388.408834][T11700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1968'. [ 389.140992][T11705] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1970'. [ 389.794045][T11721] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1975'. [ 390.057482][T11719] syzkaller1: entered promiscuous mode [ 390.064735][T11719] syzkaller1: entered allmulticast mode [ 390.072224][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 390.545948][T11728] fuse: Unknown parameter '0x0000000000000007' [ 391.321021][T11744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1984'. [ 391.416207][T11742] netlink: 'syz.4.1983': attribute type 34 has an invalid length. [ 391.537128][T11742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1983'. [ 391.726811][T11749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.763010][T11749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.823261][ T5630] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 391.997943][T11752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.031739][T11753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.046630][T11750] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1980'. [ 392.060873][T11753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.060911][T11752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.127960][T11753] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1987'. [ 393.143934][T11769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.264451][T11769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.454874][T11778] netlink: 'syz.1.1993': attribute type 4 has an invalid length. [ 393.499362][T11777] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 393.991580][T11782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.015360][T11782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.446439][T11791] xt_SECMARK: invalid mode: 9 [ 395.345479][T11812] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 396.389146][T11828] hsr0: entered promiscuous mode [ 396.459047][T11833] syzkaller0: entered promiscuous mode [ 396.488745][T11833] syzkaller0: entered allmulticast mode [ 396.600020][T11830] hsr0: left promiscuous mode [ 397.262069][T11842] netlink: 'syz.4.2011': attribute type 4 has an invalid length. [ 397.768190][T11852] SET target dimension over the limit! [ 397.861216][T11854] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 398.025413][T11857] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2022'. [ 398.120792][T11860] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2022'. [ 398.170476][T11861] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 398.406768][T11850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.437840][T11850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.467775][T11850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2019'. [ 398.477074][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 398.549895][T11868] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2025'. [ 398.583002][T11868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2025'. [ 398.622144][T11850] program syz.0.2019 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 398.855474][T11850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.904210][T11850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.924216][T11876] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2027'. [ 399.258892][T11881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2030'. [ 399.295886][T11884] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2032'. [ 400.026449][T11900] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2035'. [ 400.087589][T11900] netlink: 'syz.4.2035': attribute type 10 has an invalid length. [ 400.198754][T11900] team0: Port device dummy0 added [ 400.247599][T11906] Cannot find add_set index 0 as target [ 400.619264][T11912] syzkaller0: entered promiscuous mode [ 400.637576][T11912] syzkaller0: entered allmulticast mode [ 400.747898][T11921] netlink: 388 bytes leftover after parsing attributes in process `syz.0.2039'. [ 400.849271][T11912] tipc: Enabled bearer , priority 10 [ 400.875447][T11923] tipc: Resetting bearer [ 400.915467][T11911] tipc: Resetting bearer [ 400.976385][T11911] tipc: Disabling bearer [ 401.065731][T11925] ipvlan2: entered promiscuous mode [ 401.086232][T11925] ipvlan2: entered allmulticast mode [ 401.151719][T11925] team0: Device ipvlan2 failed to register rx_handler [ 401.246594][T11930] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 401.589386][T11927] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication [ 401.889768][T11945] xt_SECMARK: invalid mode: 9 [ 401.998499][T11947] netlink: 'syz.1.2049': attribute type 10 has an invalid length. [ 402.080695][T11947] tipc: Disabling bearer [ 402.102847][T11949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.180546][T11949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.256779][T11947] team0 (unregistering): Port device team_slave_0 removed [ 402.299678][ T30] audit: type=1326 audit(1784053488.962:7308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11948 comm="syz.4.2052" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9df9de59 code=0x7ffc0000 [ 402.383774][T11947] team0 (unregistering): Port device team_slave_1 removed [ 402.417042][ T30] audit: type=1326 audit(1784053488.992:7309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11948 comm="syz.4.2052" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9df9de59 code=0x7ffc0000 [ 402.549840][ T30] audit: type=1326 audit(1784053489.032:7310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11948 comm="syz.4.2052" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9df9de59 code=0x7ffc0000 [ 402.623352][T11957] syzkaller0: entered promiscuous mode [ 402.642441][ T30] audit: type=1326 audit(1784053489.032:7311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11948 comm="syz.4.2052" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0x7fba9df9de59 code=0x7ffc0000 [ 402.679747][ T30] audit: type=1326 audit(1784053489.032:7312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11948 comm="syz.4.2052" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9df9de59 code=0x7ffc0000 [ 402.704750][ T30] audit: type=1326 audit(1784053489.032:7313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11948 comm="syz.4.2052" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9df9de59 code=0x7ffc0000 [ 402.732087][T11957] syzkaller0: entered allmulticast mode [ 402.782683][T11954] tipc: Enabled bearer , priority 10 [ 402.792031][ T30] audit: type=1326 audit(1784053489.042:7314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11948 comm="syz.4.2052" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9df9de59 code=0x7ffc0000 [ 402.860058][T11954] tipc: Resetting bearer [ 402.886175][ T30] audit: type=1326 audit(1784053489.042:7315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11948 comm="syz.4.2052" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9df9de59 code=0x7ffc0000 [ 402.961509][T11952] tipc: Resetting bearer [ 402.997063][ T30] audit: type=1326 audit(1784053489.062:7316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11948 comm="syz.4.2052" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9df9de59 code=0x7ffc0000 [ 403.126396][ T30] audit: type=1326 audit(1784053489.072:7317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11948 comm="syz.4.2052" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9df9de59 code=0x7ffc0000 [ 403.170168][T11952] tipc: Disabling bearer [ 403.291643][T11961] Cannot find del_set index 0 as target [ 404.206418][T11970] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 404.255411][T11970] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 404.277524][T11970] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 404.637649][T11949] xt_bpf: check failed: parse error [ 404.947680][T11980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.024847][T11980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.043693][T11987] Cannot find add_set index 0 as target [ 405.554057][ T6589] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 405.736774][ T6589] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 405.775391][ T6589] usb 4-1: config 0 has no interface number 0 [ 405.799174][ T6589] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 405.825625][ T6589] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.854505][ T6589] usb 4-1: Product: syz [ 405.869008][ T6589] usb 4-1: Manufacturer: syz [ 405.887649][ T6589] usb 4-1: SerialNumber: syz [ 405.931644][ T6589] usb 4-1: config 0 descriptor?? [ 406.146190][ T6589] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 406.214119][ T6589] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 406.255582][ T6589] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 406.277568][ T6589] usb 4-1: media controller created [ 406.460050][ T6589] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 406.713966][ T6589] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 406.939358][T12014] __nla_validate_parse: 2 callbacks suppressed [ 406.939404][T12014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2073'. [ 406.965833][ T6589] usb 4-1: USB disconnect, device number 59 [ 407.390516][T12007] veth5: entered allmulticast mode [ 407.422551][T12014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.449377][T12014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.972094][T12022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2076'. [ 408.006551][T12030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.023698][T12022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2076'. [ 408.038972][T12030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.089219][T12023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2076'. [ 408.114162][T12023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2076'. [ 408.217447][T12033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.248698][T12033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.639539][T12041] xt_SECMARK: invalid mode: 9 [ 408.756167][T12042] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 409.058021][T12049] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 409.100862][T12048] syzkaller0: entered promiscuous mode [ 409.125859][T12048] syzkaller0: entered allmulticast mode [ 409.204708][T12052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.231728][T12052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.782587][ T6580] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 409.962085][ T6580] usb 4-1: Using ep0 maxpacket: 8 [ 409.975300][ T6580] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 111, changing to 10 [ 410.002316][ T6580] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 410.046587][ T6580] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 410.093324][ T6580] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 410.108407][ T6580] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.121177][T12062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.149245][ T6580] usb 4-1: Product: syz [ 410.157336][T12062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.172870][ T6580] usb 4-1: Manufacturer: syz [ 410.198722][ T6580] usb 4-1: SerialNumber: syz [ 410.458263][ T6580] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 410.480753][ T6580] cdc_ncm 4-1:1.0: bind() failure [ 410.486866][ T30] kauditd_printk_skb: 174 callbacks suppressed [ 410.486883][ T30] audit: type=1326 audit(1784053497.142:7492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12065 comm="syz.1.2092" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048279de59 code=0x7ffc0000 [ 410.487189][ T30] audit: type=1326 audit(1784053497.152:7493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12065 comm="syz.1.2092" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048279de59 code=0x7ffc0000 [ 410.488594][ T30] audit: type=1326 audit(1784053497.152:7494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12065 comm="syz.1.2092" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048279de59 code=0x7ffc0000 [ 410.497181][ T30] audit: type=1326 audit(1784053497.162:7495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12065 comm="syz.1.2092" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048279de59 code=0x7ffc0000 [ 410.498196][ T30] audit: type=1326 audit(1784053497.162:7496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12065 comm="syz.1.2092" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f048279de59 code=0x7ffc0000 [ 410.622575][ T30] audit: type=1326 audit(1784053497.242:7497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12065 comm="syz.1.2092" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048279de59 code=0x7ffc0000 [ 410.656656][ T6580] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 410.689313][ T6580] cdc_ncm 4-1:1.1: bind() failure [ 410.705413][ T30] audit: type=1326 audit(1784053497.242:7498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12065 comm="syz.1.2092" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048279de59 code=0x7ffc0000 [ 410.731221][ T6580] usb 4-1: USB disconnect, device number 60 [ 410.773500][ T30] audit: type=1326 audit(1784053497.292:7499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12065 comm="syz.1.2092" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048279de59 code=0x7ffc0000 [ 410.848535][T12067] tap0: tun_chr_ioctl cmd 1074025677 [ 410.856759][ T30] audit: type=1326 audit(1784053497.292:7500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12065 comm="syz.1.2092" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048279de59 code=0x7ffc0000 [ 410.887985][T12067] tap0: linktype set to 804 [ 410.916972][ T30] audit: type=1326 audit(1784053497.292:7501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12065 comm="syz.1.2092" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048279de59 code=0x7ffc0000 [ 411.029675][T12070] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2093'. [ 411.040312][T12067] tap0: tun_chr_ioctl cmd 2148553947 [ 411.355169][T12075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.402816][T12068] kvm: pic: non byte write [ 411.413361][T12075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.647972][T12081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.711093][T12081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.774945][T12075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.827443][T12075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.877120][T12075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.907742][T12075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.423680][ T6930] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 412.485875][T12095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.506308][T12095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.574345][T12095] netlink: 'syz.1.2101': attribute type 2 has an invalid length. [ 412.698127][ T6930] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 412.732590][ T6930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.781407][ T6930] usb 4-1: Product: syz [ 412.813652][ T6930] usb 4-1: Manufacturer: syz [ 412.848140][ T6930] usb 4-1: SerialNumber: syz [ 412.897494][ T6930] usb 4-1: config 0 descriptor?? [ 412.946165][T12099] xt_SECMARK: invalid mode: 9 [ 414.173037][T12111] netlink: 'syz.1.2107': attribute type 34 has an invalid length. [ 414.196929][T12111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2107'. [ 414.315705][T12113] Cannot find add_set index 0 as target [ 414.472128][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 415.334543][T12132] xt_SECMARK: invalid mode: 9 [ 415.751090][ T30] kauditd_printk_skb: 249 callbacks suppressed [ 415.751140][ T30] audit: type=1800 audit(1784053502.412:7751): pid=12136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2115" name="nullb0" dev="devtmpfs" ino=3361 res=0 errno=0 [ 416.029977][T12139] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2117'. [ 416.330521][T12142] tipc: Cannot configure node identity twice [ 416.497418][T12130] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2112'. [ 416.584462][T12146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.670953][T12146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.734048][T12148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2121'. [ 416.867578][T12146] kvm: user requested TSC rate below hardware speed [ 416.928611][T12146] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 417.021534][T12146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2119'. [ 417.109322][T12151] syzkaller0: entered promiscuous mode [ 417.143306][T12151] syzkaller0: entered allmulticast mode [ 417.151133][T12155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.187627][T12152] tipc: Enabled bearer , priority 10 [ 417.202881][T12155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.215465][ T6930] usb 4-1: USB disconnect, device number 61 [ 417.298203][T12151] tipc: Resetting bearer [ 417.389935][T12149] tipc: Resetting bearer [ 417.490844][T12149] tipc: Disabling bearer [ 417.835396][T12165] overlay: Unknown parameter '\-' [ 417.847924][T12167] xt_SECMARK: invalid mode: 9 [ 418.118951][T12171] Cannot find del_set index 0 as target [ 418.263938][T12173] xt_CT: You must specify a L4 protocol and not use inversions on it [ 418.447709][T12177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2131'. [ 419.270864][T12189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.335085][ T30] audit: type=1326 audit(1784053506.002:7752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12182 comm="syz.3.2133" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda4379de59 code=0x0 [ 419.367575][T12189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.366810][T12205] xt_SECMARK: invalid mode: 9 [ 420.387573][T12203] syzkaller0: entered promiscuous mode [ 420.412145][T12203] syzkaller0: entered allmulticast mode [ 420.468900][T12203] tipc: Enabled bearer , priority 10 [ 420.547571][T12203] tipc: Resetting bearer [ 420.616596][T12202] tipc: Resetting bearer [ 420.763847][T12202] tipc: Disabling bearer [ 420.891806][T12211] netlink: 'syz.3.2141': attribute type 34 has an invalid length. [ 420.951060][T12211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2141'. [ 421.622830][T12223] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2145'. [ 421.673545][T12225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.688845][T12225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.707442][T12214] syzkaller0: entered promiscuous mode [ 421.727909][T12214] syzkaller0: entered allmulticast mode [ 421.829924][T12225] kvm: user requested TSC rate below hardware speed [ 421.838637][T12223] loop5: detected capacity change from 0 to 7 [ 421.858546][T12225] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 421.878729][T12223] Dev loop5: unable to read RDB block 7 [ 421.885944][T12223] loop5: AHDI p1 p2 p3 [ 421.893666][T12223] loop5: partition table partially beyond EOD, truncated [ 421.904861][T12225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2146'. [ 421.918378][T12223] loop5: p1 start 1601398130 is beyond EOD, truncated [ 421.932880][T12223] loop5: p2 start 1702059890 is beyond EOD, truncated [ 423.139052][T12233] xt_CT: You must specify a L4 protocol and not use inversions on it [ 423.780106][T12237] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 423.972713][ T29] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 424.117572][T12253] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2156'. [ 424.152050][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 424.170091][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.197081][ T29] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 424.219594][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.264668][T12255] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2155'. [ 424.278283][ T29] usb 4-1: config 0 descriptor?? [ 424.315588][ T29] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 424.600633][T12262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.678924][T12262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.736515][ T6571] ================================================================== [ 424.744728][ T6571] BUG: KASAN: slab-use-after-free in uea_upload_pre_firmware+0x8d/0x640 [ 424.753293][ T6571] Read of size 8 at addr ffff88807de690b8 by task kworker/1:13/6571 [ 424.761352][ T6571] [ 424.763810][ T6571] CPU: 1 UID: 0 PID: 6571 Comm: kworker/1:13 Tainted: G L syzkaller #0 PREEMPT(full) [ 424.763869][ T6571] Tainted: [L]=SOFTLOCKUP [ 424.763875][ T6571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 424.763887][ T6571] Workqueue: events request_firmware_work_func [ 424.763986][ T6571] Call Trace: [ 424.764019][ T6571] [ 424.764082][ T6571] dump_stack_lvl+0xe8/0x150 [ 424.764234][ T6571] print_address_description+0x55/0x1e0 [ 424.764263][ T6571] ? uea_upload_pre_firmware+0x8d/0x640 [ 424.764313][ T6571] print_report+0x58/0x70 [ 424.764334][ T6571] kasan_report+0x117/0x150 [ 424.764380][ T6571] ? _request_firmware+0x1322/0x1780 [ 424.764404][ T6571] ? uea_upload_pre_firmware+0x8d/0x640 [ 424.764433][ T6571] uea_upload_pre_firmware+0x8d/0x640 [ 424.764473][ T6571] ? __pfx__request_firmware+0x10/0x10 [ 424.764494][ T6571] ? __pfx_uea_upload_pre_firmware+0x10/0x10 [ 424.764520][ T6571] ? process_scheduled_works+0xa20/0x14e0 [ 424.764547][ T6571] ? process_scheduled_works+0xa20/0x14e0 [ 424.764565][ T6571] ? __pfx_uea_upload_pre_firmware+0x10/0x10 [ 424.764591][ T6571] request_firmware_work_func+0xf7/0x2d0 [ 424.764615][ T6571] ? rcu_is_watching+0x15/0xb0 [ 424.764641][ T6571] ? process_scheduled_works+0xa20/0x14e0 [ 424.764658][ T6571] process_scheduled_works+0xa8e/0x14e0 [ 424.764687][ T6571] ? __pfx_process_scheduled_works+0x10/0x10 [ 424.764708][ T6571] ? assign_work+0x3cf/0x5d0 [ 424.764726][ T6571] worker_thread+0xa47/0xfb0 [ 424.764754][ T6571] kthread+0x388/0x470 [ 424.764777][ T6571] ? __pfx_worker_thread+0x10/0x10 [ 424.764794][ T6571] ? __pfx_kthread+0x10/0x10 [ 424.764824][ T6571] ret_from_fork+0x514/0xb70 [ 424.764859][ T6571] ? __pfx_ret_from_fork+0x10/0x10 [ 424.764881][ T6571] ? __switch_to+0xc89/0x1420 [ 424.764909][ T6571] ? __pfx_kthread+0x10/0x10 [ 424.764932][ T6571] ret_from_fork_asm+0x1a/0x30 [ 424.764953][ T6571] [ 424.764989][ T6571] [ 424.952218][ T6571] Allocated by task 11868: [ 424.956737][ T6571] kasan_save_track+0x3e/0x80 [ 424.961458][ T6571] __kasan_kmalloc+0x93/0xb0 [ 424.966087][ T6571] __kmalloc_noprof+0x375/0x720 [ 424.970998][ T6571] sk_prot_alloc+0xe7/0x210 [ 424.975621][ T6571] sk_alloc+0x3a/0x390 [ 424.979726][ T6571] alg_create+0xa9/0x140 [ 424.984113][ T6571] __sock_create+0x4b3/0x9d0 [ 424.988785][ T6571] __sys_socket+0xd6/0x1b0 [ 424.993238][ T6571] __x64_sys_socket+0x7a/0x90 [ 424.997945][ T6571] do_syscall_64+0x174/0x580 [ 425.002698][ T6571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.008655][ T6571] [ 425.010999][ T6571] Freed by task 11867: [ 425.015088][ T6571] kasan_save_track+0x3e/0x80 [ 425.019801][ T6571] kasan_save_free_info+0x40/0x50 [ 425.024852][ T6571] __kasan_slab_free+0x5c/0x80 [ 425.029738][ T6571] kfree+0x1c5/0x640 [ 425.033672][ T6571] __sk_destruct+0x751/0x9d0 [ 425.038302][ T6571] af_alg_release+0x83/0xf0 [ 425.042845][ T6571] sock_close+0xad/0x220 [ 425.047140][ T6571] __fput+0x418/0xa50 [ 425.051189][ T6571] task_work_run+0x1d9/0x270 [ 425.055813][ T6571] exit_to_user_mode_loop+0x1fa/0x730 [ 425.061220][ T6571] do_syscall_64+0x353/0x580 [ 425.065844][ T6571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.071774][ T6571] [ 425.074117][ T6571] The buggy address belongs to the object at ffff88807de69000 [ 425.074117][ T6571] which belongs to the cache kmalloc-2k of size 2048 [ 425.088197][ T6571] The buggy address is located 184 bytes inside of [ 425.088197][ T6571] freed 2048-byte region [ffff88807de69000, ffff88807de69800) [ 425.102118][ T6571] [ 425.104482][ T6571] The buggy address belongs to the physical page: [ 425.110943][ T6571] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807de68000 pfn:0x7de68 [ 425.121038][ T6571] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 425.129566][ T6571] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 425.138089][ T6571] page_type: f5(slab) [ 425.142103][ T6571] raw: 00fff00000000240 ffff88801b004000 ffffea00014a9a10 ffffea0001e1e410 [ 425.150725][ T6571] raw: ffff88807de68000 0000000800080006 00000000f5000000 0000000000000000 [ 425.159346][ T6571] head: 00fff00000000240 ffff88801b004000 ffffea00014a9a10 ffffea0001e1e410 [ 425.168061][ T6571] head: ffff88807de68000 0000000800080006 00000000f5000000 0000000000000000 [ 425.176770][ T6571] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 425.185563][ T6571] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 425.194262][ T6571] page dumped because: kasan: bad access detected [ 425.200705][ T6571] page_owner tracks the page as allocated [ 425.206460][ T6571] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5650, tgid 5650 (syz-executor), ts 87937190130, free_ts 87801308207 [ 425.227856][ T6571] post_alloc_hook+0x1f9/0x250 [ 425.232667][ T6571] get_page_from_freelist+0x21fa/0x2270 [ 425.238254][ T6571] __alloc_frozen_pages_noprof+0x18d/0x380 [ 425.244104][ T6571] allocate_slab+0x79/0x5e0 [ 425.248640][ T6571] refill_objects+0x2d5/0x350 [ 425.253345][ T6571] __pcs_replace_empty_main+0x2bf/0x6b0 [ 425.258932][ T6571] __kmalloc_cache_noprof+0x3a7/0x660 [ 425.264344][ T6571] rtnl_newlink+0x136/0x1bd0 [ 425.269085][ T6571] rtnetlink_rcv_msg+0x802/0xc00 [ 425.274067][ T6571] netlink_rcv_skb+0x226/0x4a0 [ 425.278975][ T6571] netlink_unicast+0x7bb/0x940 [ 425.283801][ T6571] netlink_sendmsg+0x813/0xb40 [ 425.288597][ T6571] sock_sendmsg_nosec+0x13a/0x180 [ 425.293662][ T6571] __sys_sendto+0x408/0x5a0 [ 425.298225][ T6571] __x64_sys_sendto+0xde/0x100 [ 425.303034][ T6571] do_syscall_64+0x174/0x580 [ 425.307698][ T6571] page last free pid 5652 tgid 5652 stack trace: [ 425.314047][ T6571] __free_frozen_pages+0xc1e/0xd10 [ 425.319192][ T6571] __slab_free+0x274/0x2c0 [ 425.323641][ T6571] qlist_free_all+0x99/0x100 [ 425.328262][ T6571] kasan_quarantine_reduce+0x148/0x160 [ 425.333751][ T6571] __kasan_slab_alloc+0x22/0x80 [ 425.338648][ T6571] kmem_cache_alloc_node_noprof+0x355/0x610 [ 425.344578][ T6571] __alloc_skb+0x1d7/0x7a0 [ 425.349124][ T6571] netlink_sendmsg+0x5d4/0xb40 [ 425.353928][ T6571] sock_sendmsg_nosec+0x13a/0x180 [ 425.358996][ T6571] __sys_sendto+0x408/0x5a0 [ 425.363551][ T6571] __x64_sys_sendto+0xde/0x100 [ 425.368360][ T6571] do_syscall_64+0x174/0x580 [ 425.372989][ T6571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.378915][ T6571] [ 425.381264][ T6571] Memory state around the buggy address: [ 425.387023][ T6571] ffff88807de68f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 425.395114][ T6571] ffff88807de69000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 425.403204][ T6571] >ffff88807de69080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 425.411287][ T6571] ^ [ 425.417288][ T6571] ffff88807de69100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 425.425369][ T6571] ffff88807de69180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 425.433449][ T6571] ================================================================== [ 425.447059][ T6573] (NULL device *): [UEAGLE-ATM] firmware is not available [ 425.456261][ T6573] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN PTI [ 425.468319][ T6573] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 425.476772][ T6573] CPU: 1 UID: 0 PID: 6573 Comm: kworker/1:15 Tainted: G L syzkaller #0 PREEMPT(full) [ 425.487835][ T6573] Tainted: [L]=SOFTLOCKUP [ 425.492204][ T6573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 425.502293][ T6573] Workqueue: events request_firmware_work_func [ 425.508499][ T6573] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 425.514440][ T6573] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 425.534081][ T6573] RSP: 0018:ffffc9000e02f8a8 EFLAGS: 00010002 [ 425.540217][ T6573] RAX: dffffc0000000000 RBX: ffffffff8bd1fbe0 RCX: 0000000080000002 [ 425.548228][ T6573] RDX: 0000000000000000 RSI: ffffffff8bd1fbe0 RDI: 0000000000000004 [ 425.556228][ T6573] RBP: ffffffff819ef898 R08: 0000000000000001 R09: 0000000000000000 [ 425.564234][ T6573] R10: dffffc0000000000 R11: fffffbfff20aefff R12: 0000000000000000 [ 425.572243][ T6573] R13: 0000000000000020 R14: 0000000000000020 R15: 0000000000000001 [ 425.580244][ T6573] FS: 0000000000000000(0000) GS:ffff888125056000(0000) knlGS:0000000000000000 [ 425.589201][ T6573] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 425.595811][ T6573] CR2: 000020000002b030 CR3: 00000000770a2000 CR4: 00000000003526f0 [ 425.603817][ T6573] Call Trace: [ 425.607120][ T6573] [ 425.610072][ T6573] __kasan_check_byte+0x12/0x40 [ 425.614965][ T6573] lock_acquire+0x84/0x350 [ 425.619453][ T6573] ? __pfx__dev_err+0x10/0x10 [ 425.624159][ T6573] ? rcu_is_watching+0x15/0xb0 [ 425.628963][ T6573] _raw_spin_lock_irqsave+0x40/0x60 [ 425.634288][ T6573] ? complete+0x28/0x1b0 [ 425.638576][ T6573] complete+0x28/0x1b0 [ 425.642687][ T6573] ? release_firmware+0x2e/0xb0 [ 425.647615][ T6573] uea_upload_pre_firmware+0x2ef/0x640 [ 425.653129][ T6573] ? __pfx__request_firmware+0x10/0x10 [ 425.658629][ T6573] ? __pfx_uea_upload_pre_firmware+0x10/0x10 [ 425.664651][ T6573] ? process_scheduled_works+0xa20/0x14e0 [ 425.670437][ T6573] ? process_scheduled_works+0xa20/0x14e0 [ 425.676196][ T6573] ? __pfx_uea_upload_pre_firmware+0x10/0x10 [ 425.682220][ T6573] request_firmware_work_func+0xf7/0x2d0 [ 425.687897][ T6573] ? rcu_is_watching+0x15/0xb0 [ 425.692708][ T6573] ? process_scheduled_works+0xa20/0x14e0 [ 425.698463][ T6573] process_scheduled_works+0xa8e/0x14e0 [ 425.704055][ T6573] ? __pfx_process_scheduled_works+0x10/0x10 [ 425.710073][ T6573] ? assign_work+0x3cf/0x5d0 [ 425.714730][ T6573] worker_thread+0xa47/0xfb0 [ 425.719368][ T6573] kthread+0x388/0x470 [ 425.723479][ T6573] ? __pfx_worker_thread+0x10/0x10 [ 425.728618][ T6573] ? __pfx_kthread+0x10/0x10 [ 425.733274][ T6573] ret_from_fork+0x514/0xb70 [ 425.737908][ T6573] ? __pfx_ret_from_fork+0x10/0x10 [ 425.743056][ T6573] ? __switch_to+0xc89/0x1420 [ 425.747770][ T6573] ? __pfx_kthread+0x10/0x10 [ 425.752408][ T6573] ret_from_fork_asm+0x1a/0x30 [ 425.757206][ T6573] [ 425.760266][ T6573] Modules linked in: [ 425.764213][ T6573] ---[ end trace 0000000000000000 ]--- [ 425.769702][ T6573] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 425.775665][ T6573] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 425.795310][ T6573] RSP: 0018:ffffc9000e02f8a8 EFLAGS: 00010002 [ 425.801417][ T6573] RAX: dffffc0000000000 RBX: ffffffff8bd1fbe0 RCX: 0000000080000002 [ 425.809426][ T6573] RDX: 0000000000000000 RSI: ffffffff8bd1fbe0 RDI: 0000000000000004 [ 425.817428][ T6573] RBP: ffffffff819ef898 R08: 0000000000000001 R09: 0000000000000000 [ 425.825424][ T6573] R10: dffffc0000000000 R11: fffffbfff20aefff R12: 0000000000000000 [ 425.833524][ T6573] R13: 0000000000000020 R14: 0000000000000020 R15: 0000000000000001 [ 425.841724][ T6573] FS: 0000000000000000(0000) GS:ffff888125056000(0000) knlGS:0000000000000000 [ 425.850693][ T6573] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 425.857396][ T6573] CR2: 000020000002b030 CR3: 00000000770a2000 CR4: 00000000003526f0 [ 425.865525][ T6573] Kernel panic - not syncing: Fatal exception [ 425.872212][ T6573] Kernel Offset: disabled [ 425.876545][ T6573] Rebooting in 86400 seconds..