last executing test programs: 42m44.497367885s ago: executing program 1 (id=4017): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) write$P9_RSTATu(r0, &(0x7f0000000080)={0x290, 0x2, 0x0, {{0x5fe, 0x14f, 0x0, 0x0, {0x0, 0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x1d, '\xd2\x99\x98\x80\x14\x98l\xe9\x82\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e\x97\xa5\x9ad', 0xac, '\xf8\xf6i\xfbqm\xcf\x10^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9a\xc5\x1b4\a\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00\xf9:\xad$8\x00\a\x88Fc\x88U\x82E\t5\x8d\x8co?\xce\f\xd3[\xe2T\xe6u{k\xb2UMY\xfa\xea\xbd\xd1\xd8+\xc6\xb8\x82\xc1\xee\xd4>\xb5x\x13\xb9x\xdaM\xdf\xa90P\xfb-\xef\x9eB\xb3\xdb*aq\xc1\xb9\x10\x06\xc2m\x03R\xf5\xc8l{^\x93\xe9~\xffn\xa5'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x290) 42m44.310882994s ago: executing program 1 (id=4020): r0 = syz_usb_connect$cdc_ncm(0x3, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="0015b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080), 0x0) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000c40)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, 0x0, 0x0}, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x1ae8, 0x0, 0x2, 0x151}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000500)={0x0, 0x694f, 0x800, 0x3, 0x36f}, &(0x7f0000000f00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x338a, 0x10000, 0x1, 0x27e, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x8, 0x2, 0xe3, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29a7, 0x8200, 0x2, 0x44}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x20, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0x82, 0x0, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x4000000}}) syz_usb_control_io$printer(r3, &(0x7f0000000b00)={0xc, &(0x7f0000000940)={0x20, 0x5, 0xb7, {0xb7, 0x5, "48b489f657d0f6e9004b9271ff16e62366125597a7d2129e749a92b5d3d6668f8aa8ebdbeb12df008f6f57968e09b542168b0496c1a29e1bfb91089415946d3c79b5fcadfbdb0e95b33f061ff97b9cefe15d411accd9f82b1cda4a74ef82eb7f6f735593d0cc7ea26a72a79532b54aee80e5747d60527470ac541f49faf82f72e196984f3a6311060421904e5f03aaf629145ea1fd253f42fa1c80272608021243e7cd9533a7535e753e8b494241995b5c834d12d5"}}, 0x0}, &(0x7f0000000d40)={0x1c, &(0x7f0000000b40)={0x20, 0x3, 0x16, "8883e56fc6fd05ec4fe826ccf241b429085e6a74d060"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x4}, 0x0, &(0x7f0000000c40)={0x20, 0x0, 0x77, {0x75, "1a318ebd3b81ff2e40c95d59879ff69089c07cb29cbc9c1567120f70ee3a792d78c02cfa8d9f5de94bc1a314b9ad8f4d67bf6b501fb8cd880d298b3fbd1d31d94ab0d306e5345b23e758f22ac49183bf6712b1fdf3987cb0c199a5b2360a72e94df51a65e3794df90fa883e298bc7142cb9b7aff43"}}, 0x0, &(0x7f0000000d00)={0x20, 0x0, 0x1, 0x2}}) unshare(0x40000000) sendmmsg$inet(r2, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="1b", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x2, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") r11 = syz_usb_connect$uac2(0x1, 0xc0, &(0x7f00000000c0)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xae, 0x3, 0x1, 0x1, 0x60, 0xff, {0x8, 0xb, 0x1, 0x2, 0x1, 0x6, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x38ec, 0x9, 0x22, 0x9}, [@processing_unit={0x9, 0x24, 0x8, 0x2, 0x4, [0x0, 0x3]}, @multiply_unit={0x7, 0x24, 0xc, 0x8, 0x40, 0x8, 0x6f}, @mixer_unit={0x9, 0x24, 0x4, 0x5, 0x1, "c7cdd8c0"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xf7, 0x9, 0x81, {0x8, 0x25, 0x1, 0x82, 0x30, 0x0, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x8, 0x3, 0x7d, "ca6aec8a"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x4, 0x3, 0xa7, 0x8f}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xb7, 0x1, 0x0, 0x8, "03ed556e"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x6, 0x2, 0x3, 0x10, "5c73b8"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x0, 0x8, 0x7, {0x8, 0x25, 0x1, 0x0, 0x17, 0x1, 0x1000}}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x6, 0x7f, 0xe, 0xff}, 0x23, &(0x7f0000000200)={0x5, 0xf, 0x23, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x42, 0x62, 0xd4, 0x0, 0x6}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0x2, 0x0, 0xc2, [0x3f30]}]}, 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x444}}, {0x3c, &(0x7f0000000300)=@string={0x3c, 0x3, "00ba4e28810b74407c3c8a478deb4c517f082a271e54f149ba6f3089d7f92a6daf33ec47a489c1686e1143fee6bb506aae1301f5708ff9b1ac73"}}]}) syz_usb_control_io$uac2(r11, &(0x7f0000000600)={0xc, &(0x7f0000000380)={0x20, 0xf, 0xc0, {0xc0, 0x30, "a5f8fe1782a619108595424b53971c8b813635de897b71e9d3ec9f175268c2ed6c428c756278940cec1ad8318c86be306c8a9a87d8e70aa884ac424f82c9af1c9cde7fd8c13ab0e01603da16aee4677aeedcfaca04b61f45dd4c6456915f83ac524ad71f4767c287076f25acf3420f04aae9a543dbbaa21aebfd6c06c79475cf7d6583aec31872ee714fdcd0334a2476a0c88a1b4cf2bf8c2b04da96fb1c1d6b90dc1125cc03f08bf770e7086014ba117b439310c14c7b4f7731e33944b9"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x3d, 0x3, 0x40b}}}, &(0x7f0000000040)={0x24, &(0x7f0000000640)={0x20, 0xc, 0x5f, "77350ef5d77ef6a5871fbac59e9cc37114ae2e10e12deccde35d5baa27d9dd1db5c3c72fc7a572ff7fd43e130af61784fb067520f3b630755866c3d472bcf156fbbd56cd736644a3fca612061a0bc018183618e8370358b88bfbe66c972f1f"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x9d}, &(0x7f0000000000)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000740)={0x20, 0x81, 0x2, "8a8e"}, &(0x7f0000000780)={0x20, 0x82, 0x2, "ec55"}, &(0x7f00000007c0)={0x20, 0x83, 0x1, "a7"}, &(0x7f0000000800)={0x20, 0x84, 0x1, 'a'}, &(0x7f0000000840)={0x20, 0x85, 0x3, "8c5e3f"}}) 42m40.942690115s ago: executing program 1 (id=4035): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x84000000, 0x4000850}, 0x40) 42m40.761211143s ago: executing program 1 (id=4036): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x2c, 0x19, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x8004) 42m40.54101317s ago: executing program 1 (id=4038): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x4, 0x458, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0xffffffff, 0x3d8, 0x3d8, 0x3d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @mcast1, [0xffffff00, 0x0, 0xff000000, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'ip6erspan0\x00', 'pim6reg1\x00', {}, {0xd160f2ea0b2a7e83}, 0x1bc, 0x9, 0x4, 0x22}, 0x0, 0x1dc, 0x200, 0x0, {}, [@common=@rt={{0x20}, {0x4, [0x9, 0x62a9], 0x3, 0x10, 0x2, [@private0, @loopback, @empty, @mcast2, @mcast1, @private1, @dev={0xfe, 0x80, '\x00', 0x3d}, @remote, @mcast1, @dev={0xfe, 0x80, '\x00', 0x11}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @remote, @private2, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2], 0x6}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffb}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x3}}}, {{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, [0xff], [0xffffff00, 0xffffff00, 0xff], 'veth0_to_bond\x00', 'pimreg1\x00', {}, {0xff}, 0x3c, 0xfc, 0x0, 0x8}, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4b4) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='map_files\x00') r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='map_files\x00') fcntl$notify(r4, 0x402, 0x1) fcntl$notify(r3, 0x402, 0x80000000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) pipe(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setregid(0xee00, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0xb, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x26, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 42m40.185282797s ago: executing program 1 (id=4040): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = gettid() r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) accept4(r3, 0x0, 0x0, 0x80800) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r7, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) connect$inet6(r2, 0x0, 0x0) (async) connect$inet6(r2, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005600010000000000000000000700c6c9", @ANYRES32=r8, @ANYBLOB="200001"], 0x38}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005600010000000000000000000700c6c9", @ANYRES32=r8, @ANYBLOB="200001"], 0x38}}, 0x0) sendmmsg$inet6(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0), 0x200000000000024a}}], 0x1, 0x4400c800) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000080)=ANY=[@ANYBLOB="1201500200000040532b24004000010203010902690003012b4006080b0201010320080904000000010120000924010080090900090904010000010220000904010101010220000905010910003200090825010230000100090402000001022000090402010101022000090582", @ANYBLOB="05"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000080)=ANY=[@ANYBLOB="1201500200000040532b24004000010203010902690003012b4006080b0201010320080904000000010120000924010080090900090904010000010220000904010101010220000905010910003200090825010230000100090402000001022000090402010101022000090582", @ANYBLOB="05"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) timer_create(0x1, &(0x7f0000000100)={0x0, 0x12, 0x4, @tid=r1}, &(0x7f0000000380)) (async) timer_create(0x1, &(0x7f0000000100)={0x0, 0x12, 0x4, @tid=r1}, &(0x7f0000000380)) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRES64=r1], 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRES64=r1], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) (async) r10 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) r11 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x115) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r11, 0xc000) pwritev2(r10, &(0x7f0000000240)=[{0x0}], 0x1, 0x5000, 0x0, 0x3) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x80000, {0x7, 0x0, 0x0, r9, 0x80, 0x72}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x20000000) 42m39.698081485s ago: executing program 32 (id=4040): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = gettid() r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) accept4(r3, 0x0, 0x0, 0x80800) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r7, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) connect$inet6(r2, 0x0, 0x0) (async) connect$inet6(r2, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005600010000000000000000000700c6c9", @ANYRES32=r8, @ANYBLOB="200001"], 0x38}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005600010000000000000000000700c6c9", @ANYRES32=r8, @ANYBLOB="200001"], 0x38}}, 0x0) sendmmsg$inet6(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0), 0x200000000000024a}}], 0x1, 0x4400c800) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000080)=ANY=[@ANYBLOB="1201500200000040532b24004000010203010902690003012b4006080b0201010320080904000000010120000924010080090900090904010000010220000904010101010220000905010910003200090825010230000100090402000001022000090402010101022000090582", @ANYBLOB="05"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000080)=ANY=[@ANYBLOB="1201500200000040532b24004000010203010902690003012b4006080b0201010320080904000000010120000924010080090900090904010000010220000904010101010220000905010910003200090825010230000100090402000001022000090402010101022000090582", @ANYBLOB="05"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) timer_create(0x1, &(0x7f0000000100)={0x0, 0x12, 0x4, @tid=r1}, &(0x7f0000000380)) (async) timer_create(0x1, &(0x7f0000000100)={0x0, 0x12, 0x4, @tid=r1}, &(0x7f0000000380)) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRES64=r1], 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRES64=r1], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) (async) r10 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) r11 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x115) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r11, 0xc000) pwritev2(r10, &(0x7f0000000240)=[{0x0}], 0x1, 0x5000, 0x0, 0x3) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x80000, {0x7, 0x0, 0x0, r9, 0x80, 0x72}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x20000000) 10m35.479800204s ago: executing program 5 (id=12537): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x5, 0x180) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@ipv6_newrule={0x54, 0x20, 0x1, 0x70bd2a, 0x21dfdbf9, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10012}, [@FRA_DST={0x14, 0x1, @loopback}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xffffffff}, @FRA_SRC={0x14, 0x2, @empty}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000880)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x8}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_fw={{0x7}, {0x50, 0x2, [@TCA_FW_ACT={0x4c, 0x4, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0xfe97, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x60c, 0x7, 0xe4, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x26044028}, 0x800) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x3c, r10, 0x1, 0x0, 0x80, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000005}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r6, &(0x7f0000000740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)={0x18c, r10, 0xa, 0x70bd2c, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xa}, {0x6, 0x16, 0x10}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x129}, {0x6, 0x16, 0xf7c4}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x80000000}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40008000}, 0x800) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x18000015}]}}]}, 0x48}}, 0x0) r13 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r13, 0x29, 0x46, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x70}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) 10m35.411016694s ago: executing program 5 (id=12538): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x303, 0xfffd, 0x0, 0xfffffff9, 0x0}) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r2 = syz_open_dev$vim2m(0x0, 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f000, 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x4100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close(r4) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x27, &(0x7f0000000740)={@multicast1, @loopback}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000000)={0x4, {{0x2, 0x4e23, @multicast2}}}, 0x88) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e80000017f0000010000000000000000"], 0x10) ioctl$KVM_X86_SET_MSR_FILTER(r7, 0x4188aec6, &(0x7f0000002cc0)={0x1, [{0x0, 0x0, 0x6, &(0x7f0000000640)}, {0x0, 0x0, 0x7fffffff, 0x0}, {0x0, 0x0, 0x4100d5ba, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x2, 0x0, 0xa2a, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x3, 0x0, 0x8, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x1, 0x0, 0x4a, 0x0}, {0x1, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x80000003, 0x0}, {0x3, 0x0, 0xfffffffd, 0x0}, {0x0, 0x0, 0x104, 0x0}, {0x2, 0x0, 0x40009, 0x0}]}) r9 = syz_open_dev$hidraw(&(0x7f0000000040), 0x5, 0xc20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) getpeername$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x61) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f00000002c0)={&(0x7f0000002e00)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000fbdbdf251600000038000180080003000000000008000100", @ANYBLOB="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", @ANYBLOB="0800030003fcff0014001d2e775dcf33b476657468305f6d6163767461700000", @ANYRES32=r10, @ANYRESDEC=0x0], 0x54}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000011) ioctl$HIDIOCGFEATURE(r9, 0xc0404807, &(0x7f0000000080)={0x8, "3b3d132ed4deefb0a2b3cb50aa9513c4e7103252446a728608c4baf8d1fcffb7f8336cb11a7704056c641bd9a35eb04ccd7febd8785dd4939670aa7c95bd5d6d"}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r11 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) fgetxattr(r11, &(0x7f0000000040)=@known='user.incfs.size\x00', 0x0, 0xde) 10m33.759987633s ago: executing program 5 (id=12543): r0 = timerfd_create(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timerfd_settime(r0, 0x3000000, &(0x7f00000003c0)={{0x0, 0x989680}}, 0x0) 10m33.589760037s ago: executing program 5 (id=12546): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f00000001c0)={0x0, 0x0, 0x0}) unshare(0x64000600) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x404a3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[@ANYRES8=r2], 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r3, &(0x7f0000000140)={0x2, 0x0, @local, 0x2}, 0x10) 10m32.302952078s ago: executing program 5 (id=12553): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000020601000600000600000000000000000e0003006269746d61703a6970000a0005000400000000000900020073797a3000000000240007800c00028008000140000000000c00018008000140000000000800064000000a0005000500020000000500010006"], 0x6c}}, 0x0) 10m32.207883181s ago: executing program 5 (id=12554): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x303, 0xfffd, 0x0, 0xfffffff9, 0x0}) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r2 = syz_open_dev$vim2m(0x0, 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f000, 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x4100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close(r4) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x27, &(0x7f0000000740)={@multicast1, @loopback}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000000)={0x4, {{0x2, 0x4e23, @multicast2}}}, 0x88) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e80000017f0000010000000000000000"], 0x10) ioctl$KVM_X86_SET_MSR_FILTER(r7, 0x4188aec6, &(0x7f0000002cc0)={0x1, [{0x0, 0x0, 0x6, &(0x7f0000000640)}, {0x0, 0x0, 0x7fffffff, 0x0}, {0x0, 0x0, 0x4100d5ba, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x2, 0x0, 0xa2a, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x3, 0x0, 0x8, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x1, 0x0, 0x4a, 0x0}, {0x1, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x80000003, 0x0}, {0x3, 0x0, 0xfffffffd, 0x0}, {0x0, 0x0, 0x104, 0x0}, {0x2, 0x0, 0x40009, 0x0}]}) r9 = syz_open_dev$hidraw(&(0x7f0000000040), 0x5, 0xc20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) getpeername$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x61) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f00000002c0)={&(0x7f0000002e00)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000fbdbdf251600000038000180080003000000000008000100", @ANYBLOB="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", @ANYBLOB="0800030003fcff0014001d2e775dcf33b476657468305f6d6163767461700000", @ANYRES32=r10, @ANYRESDEC=0x0], 0x54}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000011) ioctl$HIDIOCGFEATURE(r9, 0xc0404807, &(0x7f0000000080)={0x8, "3b3d132ed4deefb0a2b3cb50aa9513c4e7103252446a728608c4baf8d1fcffb7f8336cb11a7704056c641bd9a35eb04ccd7febd8785dd4939670aa7c95bd5d6d"}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r11 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) fgetxattr(r11, &(0x7f0000000040)=@known='user.incfs.size\x00', 0x0, 0xde) 10m17.083260483s ago: executing program 33 (id=12554): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x303, 0xfffd, 0x0, 0xfffffff9, 0x0}) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r2 = syz_open_dev$vim2m(0x0, 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f000, 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x4100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close(r4) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x27, &(0x7f0000000740)={@multicast1, @loopback}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000000)={0x4, {{0x2, 0x4e23, @multicast2}}}, 0x88) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e80000017f0000010000000000000000"], 0x10) ioctl$KVM_X86_SET_MSR_FILTER(r7, 0x4188aec6, &(0x7f0000002cc0)={0x1, [{0x0, 0x0, 0x6, &(0x7f0000000640)}, {0x0, 0x0, 0x7fffffff, 0x0}, {0x0, 0x0, 0x4100d5ba, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x2, 0x0, 0xa2a, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x3, 0x0, 0x8, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x1, 0x0, 0x4a, 0x0}, {0x1, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x80000003, 0x0}, {0x3, 0x0, 0xfffffffd, 0x0}, {0x0, 0x0, 0x104, 0x0}, {0x2, 0x0, 0x40009, 0x0}]}) r9 = syz_open_dev$hidraw(&(0x7f0000000040), 0x5, 0xc20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) getpeername$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x61) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f00000002c0)={&(0x7f0000002e00)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000fbdbdf251600000038000180080003000000000008000100", @ANYBLOB="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", @ANYBLOB="0800030003fcff0014001d2e775dcf33b476657468305f6d6163767461700000", @ANYRES32=r10, @ANYRESDEC=0x0], 0x54}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000011) ioctl$HIDIOCGFEATURE(r9, 0xc0404807, &(0x7f0000000080)={0x8, "3b3d132ed4deefb0a2b3cb50aa9513c4e7103252446a728608c4baf8d1fcffb7f8336cb11a7704056c641bd9a35eb04ccd7febd8785dd4939670aa7c95bd5d6d"}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r11 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) fgetxattr(r11, &(0x7f0000000040)=@known='user.incfs.size\x00', 0x0, 0xde) 5.887844626s ago: executing program 2 (id=13947): r0 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffe000/0x2000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) shmctl$IPC_RMID(r0, 0x0) 4.949614881s ago: executing program 2 (id=13957): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x123402, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) 4.657264315s ago: executing program 4 (id=13960): r0 = io_uring_setup(0x1362, &(0x7f0000000080)={0x0, 0x42d4, 0x1, 0x3, 0x362}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) close_range(r0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) 4.418031905s ago: executing program 2 (id=13965): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00000e1000/0x800000)=nil, 0x800000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x40000000) wait4(r0, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000318000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000f7000/0x3000)=nil, &(0x7f0000215000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) 4.312221893s ago: executing program 4 (id=13967): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r1], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 3.888145702s ago: executing program 2 (id=13970): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x7917e000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 3.833022231s ago: executing program 6 (id=13971): socket(0x10, 0x2, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) dup2(r0, 0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00007c2000/0x4000)=nil, &(0x7f00009dc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000726000/0x13000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000400000002000000000000110400000000000000000000000000000200000000020000000000000602000000020000000000000e"], 0x0, 0x54}, 0x28) r2 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.73014162s ago: executing program 6 (id=13973): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000780)={{0xa}, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x3123, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffff9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xd451, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x1, 0x2000000000, 0x0, 0x0, 0x80, 0x3, 0x0, 0x0, 0x10000, 0x7785, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0xdf, 0x4, 0xffffffffffffffff, 0x2, 0x0, 0x80000000000, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x10004, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000001]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 3.575333734s ago: executing program 6 (id=13975): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x38, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x2, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 3.043606926s ago: executing program 3 (id=13976): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000400)={0x2d, 0x4}, 0xc) 2.983245501s ago: executing program 2 (id=13977): ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000000)={0x53, 0xfffffffffffffffe, 0x2, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="a1f8", 0x0, 0xffff140f, 0x4, 0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000021"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=ANY=[], 0x54) 2.894038016s ago: executing program 3 (id=13978): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x4c, r2, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x60}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r5, 0x8b1a, &(0x7f0000000040)) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000640)="000a18000000004000eb55000000000100aa34745a1945da08e815b218b175e62e90d9c5596d3ef4ddaae57cdcf90884", 0x30, 0x4000000, &(0x7f0000000380)={0x11, 0xe56930649afa540, r7, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) 2.202695252s ago: executing program 0 (id=13979): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x169140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000015c0)={0x1, 0x0, [{0x1, 0x9, 0x7, 0x1, 0x8}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000280)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b76ec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154242066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1000700000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd673c1eeda4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d06c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f9df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235eaa92143ce4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05be23dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac00000000000002000dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66d77df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a8ff47fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a3dfe12a33caf9dd8768ddbc02a484c345c3eff254297b985c39b1d313018068d3809bac8c657e39f4f656163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6f89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) 2.170126034s ago: executing program 4 (id=13980): socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x60}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.091891353s ago: executing program 4 (id=13981): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r1 = eventfd2(0xfffffff9, 0x800) io_submit(r0, 0x1, &(0x7f0000000200)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x9, 0xffffffffffffffff, &(0x7f0000000080)="b5cb2d8452e4732999", 0x9, 0x9, 0x0, 0x1, r1}]) 2.041639531s ago: executing program 6 (id=13982): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r2, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 1.953575025s ago: executing program 3 (id=13983): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000400)={0xf0f03c, 0x3}) 1.867393529s ago: executing program 4 (id=13984): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3f, 0x40206}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.855430215s ago: executing program 0 (id=13985): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000800)={0x54, 0x0, &(0x7f0000000340)=[@request_death={0x400c630e, 0x9e0}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.846460383s ago: executing program 3 (id=13986): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10a00}, [@IFLA_MTU={0x8, 0x4, 0x8f3}, @IFLA_IFNAME={0x14, 0x3, 'vxcan1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 1.817909531s ago: executing program 6 (id=13987): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) syz_80211_inject_frame(&(0x7f0000000200)=@device_b, &(0x7f00000003c0)=@mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x40}, @device_b, @device_b, @random="9fc68cb591f0", {0x3}}, 0x5f7d6947d0efd05b, 0x6a, @random=0x8, @val, @val={0x2d, 0x1a, {0x300, 0x1, 0x0, 0x0, {0x41, 0x1, 0x0, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x1, 0x1d9, 0xbb}}}, 0x3c) 1.698268476s ago: executing program 0 (id=13988): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x13, '\x00', @buffer={"638391fa1b5e124b43175553975a2561ead98593e9060ad61456e06afea3cd65", 0x20}, 0x7ff}, {0xc, '\x00', @data=0x7, 0x5}, {0x19, '\x00', @buffer={"aa3d2639f01c13d50097d0a32983876d26ffc7b5b0bc0dc9a01f00", 0x20}, 0x7a7ce1c1}]}) 1.607230236s ago: executing program 0 (id=13989): socket(0x2b, 0x80004, 0x4000) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0x10000011, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x2, 0x0, 0x0) 1.566326989s ago: executing program 2 (id=13990): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r2, 0x0, 0x40000020) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x25, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 1.40270006s ago: executing program 0 (id=13991): futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x300) mq_open(0x0, 0x40, 0xa8, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x1, 0x70bd24, 0x25dfd402, {0x0, 0x0, 0x0, r3, 0x64e98, 0x12ad1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc084}, 0x200088c2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 324.075533ms ago: executing program 3 (id=13992): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 322.478365ms ago: executing program 3 (id=13993): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x313002, 0x49) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000680)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000200)={r1}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)={0x0}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x137) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={r2, 0x1, r0, 0x6}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000280)={r2, 0x0, 0x5}) 171.221898ms ago: executing program 6 (id=13994): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$evdev(&(0x7f0000000040), 0x75c, 0x10d840) 167.605717ms ago: executing program 4 (id=13995): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x4c, r2, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x60}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000080)="000a18000000090000eb55000000000100aa34745a1945da08e815b218b1752ad5eddec559244805bd238863fd069f79b57f04fcc20ed86b00", 0x39, 0x4000000, &(0x7f0000000380)={0x11, 0xe56930649afa540, r6, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) 0s ago: executing program 0 (id=13996): r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg(r0, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000019240)="0f", 0x1}, {0x0, 0x2}, {0x0, 0x59}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x4d}, {0x0}], 0x9}, 0x4008044) kernel console output (not intermixed with test programs): an-gce-386/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 3413.311384][ T30] audit: type=1326 audit(1784031318.786:4624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17988 comm="syz.3.13211" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 3413.446116][ T30] audit: type=1326 audit(1784031318.786:4625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17988 comm="syz.3.13211" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 3413.497323][ T30] audit: type=1326 audit(1784031318.786:4626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17988 comm="syz.3.13211" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 3413.594148][ T9982] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 3413.603351][ T9982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3413.611370][ T9982] usb 5-1: Product: syz [ 3413.615568][ T9982] usb 5-1: Manufacturer: syz [ 3413.620187][ T9982] usb 5-1: SerialNumber: syz [ 3413.628740][ T30] audit: type=1326 audit(1784031318.786:4627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17988 comm="syz.3.13211" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 3413.653244][ T30] audit: type=1326 audit(1784031318.786:4628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17988 comm="syz.3.13211" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 3413.712071][ T9982] usb 5-1: config 0 descriptor?? [ 3413.965786][ T9982] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 3414.046305][ T9982] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71 [ 3414.070892][ T9982] usb 5-1: USB disconnect, device number 45 [ 3414.686580][T18014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13220'. [ 3414.710172][T18014] netlink: 52 bytes leftover after parsing attributes in process `syz.3.13220'. [ 3415.108208][T18023] loop6: detected capacity change from 0 to 2640 [ 3415.151364][T11881] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 3415.290199][T18023] buffer_io_error: 20 callbacks suppressed [ 3415.290220][T18023] Buffer I/O error on dev loop6, logical block 0, async page read [ 3415.304073][T18023] Buffer I/O error on dev loop6, logical block 0, async page read [ 3415.312058][T18023] Buffer I/O error on dev loop6, logical block 0, async page read [ 3415.320037][T18023] Buffer I/O error on dev loop6, logical block 0, async page read [ 3415.328009][T18023] Buffer I/O error on dev loop6, logical block 0, async page read [ 3415.335991][T18023] Buffer I/O error on dev loop6, logical block 0, async page read [ 3415.343988][T18023] Buffer I/O error on dev loop6, logical block 0, async page read [ 3415.351980][T18023] Buffer I/O error on dev loop6, logical block 0, async page read [ 3415.359843][T18023] ldm_validate_partition_table(): Disk read failed. [ 3415.366595][T18023] Buffer I/O error on dev loop6, logical block 0, async page read [ 3415.374553][T18023] Buffer I/O error on dev loop6, logical block 0, async page read [ 3415.657506][T11881] usb 5-1: device descriptor read/64, error -71 [ 3415.675203][T18027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3415.684098][T18027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3415.692292][T18023] Dev loop6: unable to read RDB block 0 [ 3415.713062][T18023] loop6: unable to read partition table [ 3415.719027][T18023] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 3416.128784][T11881] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 3416.302308][T18035] fuse: Bad value for 'fd' [ 3416.606636][T11881] usb 5-1: device descriptor read/64, error -71 [ 3416.654648][T18041] trusted_key: encrypted_key: insufficient parameters specified [ 3416.677532][T18044] netlink: 'syz.6.13229': attribute type 12 has an invalid length. [ 3416.728492][T11881] usb usb5-port1: attempt power cycle [ 3416.788705][T18046] TC_ACT_REPEAT abuse ? [ 3416.856577][T18075] hid_parser_main: 22 callbacks suppressed [ 3416.856596][T18075] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 3416.869989][T18075] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 3416.877374][T18075] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 3416.884851][T18075] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 3416.892239][T18075] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 3416.899720][T18075] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 3416.907231][T18075] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 3417.097375][T18075] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 3417.104871][T18075] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 3417.112301][T18075] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 3417.195139][T18075] hid-generic 0000:0000:0000.0076: hidraw0: HID v0.03 Device [syz1] on syz1 [ 3417.226314][T11881] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 3417.596238][T11881] usb 5-1: device descriptor read/8, error -71 [ 3418.171214][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 3418.171233][ T30] audit: type=1326 audit(1784031324.076:4658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18063 comm="syz.0.13236" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb60ec code=0x7ffc0000 [ 3418.201852][ T30] audit: type=1326 audit(1784031324.076:4659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18063 comm="syz.0.13236" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb60ec code=0x7ffc0000 [ 3418.226497][ T30] audit: type=1326 audit(1784031324.076:4660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18063 comm="syz.0.13236" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb60ec code=0x7ffc0000 [ 3418.291476][ T30] audit: type=1326 audit(1784031324.076:4661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18063 comm="syz.0.13236" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb60ec code=0x7ffc0000 [ 3418.316099][ T30] audit: type=1326 audit(1784031324.076:4662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18063 comm="syz.0.13236" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf7fb60ec code=0x7ffc0000 [ 3418.341047][ T30] audit: type=1326 audit(1784031324.076:4663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18063 comm="syz.0.13236" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb60ec code=0x7ffc0000 [ 3418.433787][ T30] audit: type=1326 audit(1784031324.076:4664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18063 comm="syz.0.13236" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb60ec code=0x7ffc0000 [ 3418.462350][ T30] audit: type=1326 audit(1784031324.076:4665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18063 comm="syz.0.13236" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb60ec code=0x7ffc0000 [ 3418.518610][ T30] audit: type=1326 audit(1784031324.076:4666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18063 comm="syz.0.13236" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb60ec code=0x7ffc0000 [ 3418.543132][ T30] audit: type=1326 audit(1784031324.076:4667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18063 comm="syz.0.13236" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb60ec code=0x7ffc0000 [ 3418.836738][T18067] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 3419.112245][T11881] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 3419.525202][T18093] netlink: 'syz.0.13242': attribute type 2 has an invalid length. [ 3420.323284][T11881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3420.334304][T11881] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3420.343340][T11881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3420.381138][T11881] usb 5-1: config 0 descriptor?? [ 3420.832297][T18072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3420.844211][T18072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3420.926707][T18072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3420.935442][T18072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3421.119769][T18125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13250'. [ 3421.170248][T18125] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13250'. [ 3421.663929][T18131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3421.771843][T18131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3421.807823][T18127] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13251'. [ 3422.453927][T18139] syz_tun: entered allmulticast mode [ 3422.572041][T18141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13257'. [ 3426.229697][T11881] usbhid 5-1:0.0: can't add hid device: -32 [ 3426.235906][T11881] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 3426.362827][T18170] netlink: 'syz.6.13263': attribute type 10 has an invalid length. [ 3432.659802][T18167] netlink: 'syz.3.13262': attribute type 12 has an invalid length. [ 3433.015730][T18138] syz_tun: left allmulticast mode [ 3433.364811][T18183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3433.373908][T18183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3433.588746][T18182] netlink: 'syz.0.13264': attribute type 2 has an invalid length. [ 3433.671699][T18189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3433.680405][T18189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3434.063963][T18194] fuse: Unknown parameter '000000000000000000060xffffffffffffffff' [ 3434.113236][T18183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3434.123327][T18183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3434.509610][T18198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13269'. [ 3434.666978][T18197] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 3434.957664][T18212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3434.966653][T18212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3435.030687][T18212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3435.039571][T18212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3435.827313][T18219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3435.836262][T18219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3435.844202][T18212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3435.869121][T18212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3436.078863][T18223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3436.088558][T18223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3436.173864][T18223] futex_wake_op: syz.0.13276 tries to shift op by -65; fix this program [ 3436.186141][T18223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3436.202923][T18223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3436.569509][T18225] syz_tun: entered allmulticast mode [ 3437.062952][T18227] netlink: 'syz.2.13278': attribute type 15 has an invalid length. [ 3437.241266][T18232] fuse: Unknown parameter '000000000000000000060x0000000000000007' [ 3438.478181][T18239] netlink: 'syz.0.13281': attribute type 2 has an invalid length. [ 3438.486041][T18239] netlink: 'syz.0.13281': attribute type 2 has an invalid length. [ 3440.301233][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 3440.301255][ T30] audit: type=1326 audit(1784031346.156:4716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18260 comm="syz.0.13290" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb60ec code=0x7ffc0000 [ 3440.375022][ T30] audit: type=1326 audit(1784031346.276:4717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18260 comm="syz.0.13290" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb60ec code=0x7ffc0000 [ 3440.465785][ T30] audit: type=1326 audit(1784031346.276:4718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18260 comm="syz.0.13290" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fb60ec code=0x7ffc0000 [ 3440.490456][ T30] audit: type=1326 audit(1784031346.276:4719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18260 comm="syz.0.13290" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb60ec code=0x7ffc0000 [ 3440.515271][ T30] audit: type=1326 audit(1784031346.276:4720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18260 comm="syz.0.13290" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb60ec code=0x7ffc0000 [ 3440.539738][ T30] audit: type=1326 audit(1784031346.276:4721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18260 comm="syz.0.13290" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=150 compat=1 ip=0xf7fb60ec code=0x7ffc0000 [ 3440.663830][ T30] audit: type=1326 audit(1784031346.276:4722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18260 comm="syz.0.13290" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb60ec code=0x7ffc0000 [ 3440.767875][ T30] audit: type=1326 audit(1784031346.506:4723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18260 comm="syz.0.13290" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb60ec code=0x7ffc0000 [ 3440.879111][ T30] audit: type=1326 audit(1784031346.506:4724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18260 comm="syz.0.13290" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71b71eb code=0x7ffc0000 [ 3440.903972][ T30] audit: type=1326 audit(1784031346.506:4725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18260 comm="syz.0.13290" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb60ec code=0x7ffc0000 [ 3440.975649][T18261] fuse: Bad value for 'rootmode' [ 3446.518856][T18270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3446.527747][T18270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3446.543451][T18270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3446.552655][T18270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3446.570608][T18270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3446.624119][T18270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3446.635248][T18270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13292'. [ 3446.646019][T18270] netlink: 6 bytes leftover after parsing attributes in process `syz.0.13292'. [ 3446.685713][T18277] netlink: 'syz.2.13294': attribute type 2 has an invalid length. [ 3446.693579][T18277] netlink: 'syz.2.13294': attribute type 2 has an invalid length. [ 3446.855159][T18224] syz_tun: left allmulticast mode [ 3447.046916][T18283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3447.206228][T18283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3447.230649][T18289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3447.240337][T18289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3447.264293][T18280] vivid-003: ================= START STATUS ================= [ 3447.272163][T18280] vivid-003: Radio HW Seek Mode: Bounded [ 3447.277840][T18280] vivid-003: Radio Programmable HW Seek: false [ 3447.284018][T18280] vivid-003: RDS Rx I/O Mode: Block I/O [ 3447.289587][T18280] vivid-003: Generate RBDS Instead of RDS: false [ 3447.295936][T18280] vivid-003: RDS Reception: true [ 3447.300893][T18280] vivid-003: RDS Program Type: 0 inactive [ 3447.352812][T18283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3447.365901][T18280] vivid-003: RDS PS Name: inactive [ 3447.398812][T18280] vivid-003: RDS Radio Text: inactive [ 3447.407723][T18280] vivid-003: RDS Traffic Announcement: false inactive [ 3447.417163][T18293] netlink: 'syz.0.13300': attribute type 4 has an invalid length. [ 3447.425009][T18293] netlink: 17 bytes leftover after parsing attributes in process `syz.0.13300'. [ 3447.465906][T18280] vivid-003: RDS Traffic Program: false inactive [ 3447.507117][T18280] vivid-003: RDS Music: false inactive [ 3447.512663][T18280] vivid-003: ================== END STATUS ================== [ 3448.467369][T18304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13303'. [ 3448.733494][T18312] netlink: 'syz.0.13305': attribute type 4 has an invalid length. [ 3448.743822][T18310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3448.752631][T18310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3448.826506][T18310] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13304'. [ 3448.940511][T18313] fuse: Unknown parameter '000000000000000000060x000000000000000c' [ 3449.885145][T18323] syz_tun: entered allmulticast mode [ 3450.759359][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 3450.765743][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 3451.240199][T18327] netlink: 'syz.2.13308': attribute type 17 has an invalid length. [ 3451.545764][T18332] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 3451.844340][T18336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3451.880548][T18336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3457.712895][T18332] geneve2: entered promiscuous mode [ 3458.171848][T18322] syz_tun: left allmulticast mode [ 3458.573755][T18366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3458.584396][T18366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3460.253420][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 3460.253444][ T30] audit: type=1326 audit(1784031366.176:4760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18387 comm="syz.2.13323" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff40ec code=0x7ffc0000 [ 3460.284168][ T30] audit: type=1326 audit(1784031366.176:4761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18387 comm="syz.2.13323" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff40ec code=0x7ffc0000 [ 3460.308886][ T30] audit: type=1326 audit(1784031366.176:4762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18387 comm="syz.2.13323" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff40ec code=0x7ffc0000 [ 3460.333533][ T30] audit: type=1326 audit(1784031366.176:4763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18387 comm="syz.2.13323" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff40ec code=0x7ffc0000 [ 3460.448095][ T30] audit: type=1326 audit(1784031366.176:4764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18387 comm="syz.2.13323" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf7ff40ec code=0x7ffc0000 [ 3460.584326][ T30] audit: type=1326 audit(1784031366.176:4765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18387 comm="syz.2.13323" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff40ec code=0x7ffc0000 [ 3460.691556][ T30] audit: type=1326 audit(1784031366.176:4766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18387 comm="syz.2.13323" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff40ec code=0x7ffc0000 [ 3460.733480][ T30] audit: type=1326 audit(1784031366.176:4767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18387 comm="syz.2.13323" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff40ec code=0x7ffc0000 [ 3460.758618][ T30] audit: type=1326 audit(1784031366.176:4768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18387 comm="syz.2.13323" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff40ec code=0x7ffc0000 [ 3460.783294][ T30] audit: type=1326 audit(1784031366.176:4769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18387 comm="syz.2.13323" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7ff40ec code=0x7ffc0000 [ 3461.755934][T18406] netlink: 'syz.0.13326': attribute type 2 has an invalid length. [ 3461.963027][T18413] syz_tun: entered allmulticast mode [ 3462.322642][T18412] syz_tun: left allmulticast mode [ 3463.201428][T18429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3463.210228][T18429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3464.135613][T18435] netlink: 'syz.3.13333': attribute type 17 has an invalid length. [ 3464.457641][T18441] loop4: detected capacity change from 0 to 7 [ 3464.513582][T18441] loop4: [ 3464.516643][T18441] loop4: partition table partially beyond EOD, truncated [ 3465.011804][T18452] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13337'. [ 3465.208903][T18459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3465.217608][T18459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3465.795699][T18466] tipc: Started in network mode [ 3465.800653][T18466] tipc: Node identity ac14140f, cluster identity 4711 [ 3465.808127][T18466] tipc: New replicast peer: 172.20.20.187 [ 3465.814330][T18466] tipc: Enabled bearer , priority 10 [ 3466.402668][T18477] fuse: Unknown parameter '000000000000000000060x0000000000000007' [ 3466.930399][T11537] tipc: Node number set to 2886997007 [ 3468.035598][T18485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3468.045798][T18485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3468.532680][T18493] IPVS: length: 174 != 24 [ 3468.540439][T18493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3468.549210][T18493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3468.647439][T18485] gtp0: entered allmulticast mode [ 3468.903751][T18500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3468.912545][T18500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3468.938457][T18500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3468.947768][T18500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3469.010139][T18500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3469.018934][T18500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3470.336147][T18506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3470.344877][T18506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3470.969463][T18515] netlink: 'syz.2.13357': attribute type 1 has an invalid length. [ 3471.144505][T18515] 8021q: adding VLAN 0 to HW filter on device bond5 [ 3471.166461][T18519] vlan3: entered allmulticast mode [ 3471.172173][T18519] bond5: entered allmulticast mode [ 3471.260860][T18519] bond5: (slave geneve3): making interface the new active one [ 3471.268458][T18519] geneve3: entered allmulticast mode [ 3471.277487][T18519] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 3472.539821][T18534] netlink: 'syz.2.13361': attribute type 17 has an invalid length. [ 3472.784215][T18522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3472.793246][T18522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3473.056547][T18538] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13363'. [ 3473.195866][T18546] sg_write: data in/out 426972/130 bytes for SCSI command 0x0-- guessing data in; [ 3473.195866][T18546] program syz.6.13367 not setting count and/or reply_len properly [ 3473.320200][T18546] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13367'. [ 3473.399310][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 3473.399359][ T30] audit: type=1326 audit(1784031379.266:4798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18549 comm="syz.3.13368" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 3473.430046][ T30] audit: type=1326 audit(1784031379.266:4799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18549 comm="syz.3.13368" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 3473.632676][ T30] audit: type=1326 audit(1784031379.266:4800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18549 comm="syz.3.13368" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 3473.657284][ T30] audit: type=1326 audit(1784031379.266:4801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18549 comm="syz.3.13368" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 3473.715533][ T30] audit: type=1326 audit(1784031379.266:4802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18549 comm="syz.3.13368" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 3473.740055][ T30] audit: type=1326 audit(1784031379.266:4803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18549 comm="syz.3.13368" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 3473.764546][ T30] audit: type=1326 audit(1784031379.266:4804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18549 comm="syz.3.13368" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 3473.820095][ T30] audit: type=1326 audit(1784031379.266:4805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18549 comm="syz.3.13368" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 3473.900240][ T30] audit: type=1326 audit(1784031379.266:4806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18549 comm="syz.3.13368" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 3473.988586][ T30] audit: type=1326 audit(1784031379.266:4807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18549 comm="syz.3.13368" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 3475.316898][T18591] syz_tun: entered allmulticast mode [ 3475.513321][T18594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3475.522087][T18594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3475.720901][T18599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3475.804353][T18599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3482.630604][T18597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13379'. [ 3483.090471][T18590] syz_tun: left allmulticast mode [ 3483.134455][T18617] fuse: Unknown parameter '000000000000000000060x0000000000000007' [ 3483.290300][T18617] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13385'. [ 3484.297257][T18638] netlink: 'syz.6.13389': attribute type 2 has an invalid length. [ 3485.253052][T18660] sch_tbf: peakrate 11 is lower than or equals to rate 2048 ! [ 3485.660275][T18663] netlink: 128 bytes leftover after parsing attributes in process `syz.4.13398'. [ 3485.937757][T18673] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13400'. [ 3485.946877][T18673] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13400'. [ 3486.243572][T18673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3486.425307][T18681] netlink: 'syz.6.13403': attribute type 17 has an invalid length. [ 3486.732978][T18673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3486.869520][T18684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3486.883628][T18684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3486.925149][T18684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3486.933847][T18684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3487.295526][T18684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3487.475104][T18684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3488.456429][T18697] netlink: 56 bytes leftover after parsing attributes in process `syz.6.13408'. [ 3490.190955][T18722] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13415'. [ 3497.442359][T18708] netlink: 'syz.0.13411': attribute type 2 has an invalid length. [ 3497.450910][T18738] netlink: 'syz.3.13417': attribute type 2 has an invalid length. [ 3497.702896][T18756] netlink: 35 bytes leftover after parsing attributes in process `syz.6.13419'. [ 3497.712029][T18756] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13419'. [ 3497.975957][T18765] netlink: 'syz.2.13424': attribute type 8 has an invalid length. [ 3498.109679][T18764] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13423'. [ 3498.124702][T18765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13424'. [ 3498.537371][T18783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3498.546233][T18783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3498.601841][T18788] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 3498.614211][T18788] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 3498.624730][T18788] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 3498.811575][T18791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3498.820542][T18791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3498.865139][T18789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3498.902161][T18789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3499.031667][T18791] bond8: Removing last ns target with arp_interval on [ 3500.552986][T18811] syzkaller0: entered promiscuous mode [ 3500.558555][T18811] syzkaller0: entered allmulticast mode [ 3501.531395][T18826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3501.542387][T18826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3501.679240][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 3501.679259][ T30] audit: type=1804 audit(1784031407.596:4836): pid=18826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.13446" name="bus" dev="ramfs" ino=269183 res=1 errno=0 [ 3501.746279][ T30] audit: type=1804 audit(1784031407.596:4837): pid=18826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.13446" name="bus" dev="ramfs" ino=269183 res=1 errno=0 [ 3504.071686][T18851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3504.080589][T18851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3504.241846][T18851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3504.250729][T18851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3504.297879][T18851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3504.445473][T18851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3504.533846][T18857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3504.616201][T18857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3504.669574][T18861] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13458'. [ 3504.690775][ T30] audit: type=1326 audit(1784031410.596:4838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18855 comm="syz.3.13457" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 3504.747766][ T30] audit: type=1326 audit(1784031410.596:4839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18855 comm="syz.3.13457" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 3504.791997][T18857] netlink: 144 bytes leftover after parsing attributes in process `syz.3.13457'. [ 3504.807481][ T30] audit: type=1326 audit(1784031410.596:4840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18855 comm="syz.3.13457" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 3504.834686][ T30] audit: type=1326 audit(1784031410.596:4841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18855 comm="syz.3.13457" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 3504.859674][ T30] audit: type=1326 audit(1784031410.596:4842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18855 comm="syz.3.13457" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 3504.884207][ T30] audit: type=1326 audit(1784031410.596:4843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18855 comm="syz.3.13457" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 3504.934684][ T30] audit: type=1326 audit(1784031410.596:4844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18855 comm="syz.3.13457" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 3504.959202][ T30] audit: type=1326 audit(1784031410.716:4845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18855 comm="syz.3.13457" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 3505.367024][T16335] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 3505.392263][T18864] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 3505.401412][T18864] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 3505.508049][T18864] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 3505.548377][T18864] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 3506.219911][T18867] netlink: 380 bytes leftover after parsing attributes in process `syz.4.13460'. [ 3506.351968][T16923] team0: Port device syz_tun removed [ 3506.633335][T18880] fuse: Unknown parameter '000000000000000000060x0000000000000007' [ 3506.682748][T18880] netlink: 40 bytes leftover after parsing attributes in process `syz.6.13462'. [ 3506.789656][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 3506.789674][ T30] audit: type=1326 audit(1784031412.656:4876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18855 comm="syz.3.13457" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 3506.922222][T11881] usb 1-1: USB disconnect, device number 71 [ 3507.003139][T18865] bridge0: port 1(bridge_slave_0) entered blocking state [ 3507.010379][T18865] bridge0: port 1(bridge_slave_0) entered disabled state [ 3507.017686][T18865] bridge_slave_0: entered allmulticast mode [ 3507.025621][T18865] bridge_slave_0: entered promiscuous mode [ 3507.034956][T18865] bridge0: port 2(bridge_slave_1) entered blocking state [ 3507.042279][T18865] bridge0: port 2(bridge_slave_1) entered disabled state [ 3507.202736][T18865] bridge_slave_1: entered allmulticast mode [ 3507.211104][T18865] bridge_slave_1: entered promiscuous mode [ 3507.239908][T18865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3507.331543][T18865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3507.456516][T18865] team0: Port device team_slave_0 added [ 3507.533111][T18865] team0: Port device team_slave_1 added [ 3507.840817][T18864] Bluetooth: hci5: command tx timeout [ 3507.931514][T13573] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3508.933473][T18865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3508.940465][T18865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3509.098566][T18865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3509.674102][T18865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3509.681137][T18865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3509.893676][T18865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3509.939075][T18865] hsr_slave_0: entered promiscuous mode [ 3509.945581][T18865] hsr_slave_1: entered promiscuous mode [ 3509.952000][T18865] debugfs: 'hsr0' already exists in 'hsr' [ 3509.957748][T18865] Cannot create hsr debugfs directory [ 3509.983040][T18864] Bluetooth: hci5: command tx timeout [ 3510.403080][T13573] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3510.884798][T18924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13471'. [ 3510.901123][T13573] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3511.361416][T13573] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3512.009860][T13573] bridge_slave_1: left allmulticast mode [ 3512.016012][T13573] bridge_slave_1: left promiscuous mode [ 3512.021946][T13573] bridge0: port 2(bridge_slave_1) entered disabled state [ 3512.044185][T13573] bridge_slave_0: left allmulticast mode [ 3512.050427][T13573] bridge_slave_0: left promiscuous mode [ 3512.056899][T13573] bridge0: port 1(bridge_slave_0) entered disabled state [ 3512.100205][T18864] Bluetooth: hci5: command tx timeout [ 3512.187133][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 3512.193601][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 3513.180087][T13573] dvmrp6: left allmulticast mode [ 3513.231207][T13573] dvmrp8: left allmulticast mode [ 3513.395657][T18939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3513.404525][T18939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3513.617929][T13573] erspan0 (unregistering): left promiscuous mode [ 3513.661309][T13573] gretap0 (unregistering): left promiscuous mode [ 3513.744390][T13573] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 3513.889982][T13573] bond2 (unregistering): (slave bridge1): Releasing active interface [ 3513.898116][T13573] bridge1 (unregistering): left allmulticast mode [ 3513.910580][T13573] bond3 (unregistering): (slave bridge2): Releasing active interface [ 3513.918690][T13573] bridge2 (unregistering): left allmulticast mode [ 3513.936067][T13573] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3513.946453][T13573] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3513.996572][T13573] bond0 (unregistering): Released all slaves [ 3514.017254][T13573] bond1 (unregistering): (slave veth0_virt_wifi): Releasing active interface [ 3514.030720][T13573] bond1 (unregistering): Released all slaves [ 3514.146059][T13573] bond2 (unregistering): Released all slaves [ 3514.172378][T13573] bond3 (unregistering): Released all slaves [ 3514.189834][T13573] bond4 (unregistering): (slave veth3): Releasing active interface [ 3514.221482][T18864] Bluetooth: hci5: command tx timeout [ 3514.308406][T13573] bond4 (unregistering): Released all slaves [ 3514.409829][T13573] bond5 (unregistering): (slave veth5): Releasing active interface [ 3514.419976][T13573] bond5 (unregistering): Released all slaves [ 3514.466575][T13573] bond6 (unregistering): Released all slaves [ 3514.487585][T13573] bond7 (unregistering): Released all slaves [ 3514.507844][T13573] bond8 (unregistering): Released all slaves [ 3514.644018][ T5288] 8021q: adding VLAN 0 to HW filter on device eth9 [ 3514.901945][T18983] netlink: 'syz.2.13483': attribute type 12 has an invalid length. [ 3515.545437][T13573] tipc: Left network mode [ 3515.893634][T13573] IPVS: stopping master sync thread 14862 ... [ 3516.643637][ T5288] 8021q: adding VLAN 0 to HW filter on device eth10 [ 3517.405825][T19019] fuse: Unknown parameter '000000000000000000060x0000000000000007' [ 3517.540858][T19024] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13487'. [ 3517.829596][T19033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3517.948076][T19033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3518.247075][T19033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3518.256533][T19033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3518.277310][T19038] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13490'. [ 3518.659861][T19033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3518.668992][T19033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3518.929136][T19052] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13494'. [ 3519.202275][T13573] hsr_slave_0: left promiscuous mode [ 3519.209121][T13573] hsr_slave_1: left promiscuous mode [ 3519.220969][T13573] veth1_macvtap: left promiscuous mode [ 3519.241909][T13573] veth0_macvtap: left promiscuous mode [ 3519.247665][T13573] veth1_vlan: left promiscuous mode [ 3519.253332][T13573] veth0_vlan: left promiscuous mode [ 3520.160966][T13573] team0 (unregistering): Port device team_slave_1 removed [ 3520.180269][T13573] team0 (unregistering): Port device team_slave_0 removed [ 3520.635133][T18865] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3520.740875][T18865] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3520.779510][T18865] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3520.854327][T18865] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3520.882558][T18865] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3520.958106][T18865] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3521.038060][T18865] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3521.051079][T18865] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3521.187860][T19091] FAULT_INJECTION: forcing a failure. [ 3521.187860][T19091] name failslab, interval 1, probability 0, space 0, times 0 [ 3521.265980][T19091] CPU: 1 UID: 0 PID: 19091 Comm: syz.6.13498 Tainted: G L syzkaller #0 PREEMPT(full) [ 3521.266014][T19091] Tainted: [L]=SOFTLOCKUP [ 3521.266023][T19091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3521.266047][T19091] Call Trace: [ 3521.266056][T19091] [ 3521.266064][T19091] dump_stack_lvl+0xe8/0x150 [ 3521.266102][T19091] should_fail_ex+0x40c/0x560 [ 3521.266132][T19091] should_failslab+0xa8/0x100 [ 3521.266162][T19091] __kmalloc_noprof+0xfe/0x720 [ 3521.266185][T19091] ? rcu_is_watching+0x15/0xb0 [ 3521.266214][T19091] ? tomoyo_realpath_from_path+0xef/0x640 [ 3521.266235][T19091] ? tomoyo_realpath_from_path+0xef/0x640 [ 3521.266262][T19091] tomoyo_realpath_from_path+0xef/0x640 [ 3521.266291][T19091] ? tomoyo_path_number_perm+0x219/0x5f0 [ 3521.266318][T19091] tomoyo_path_number_perm+0x246/0x5f0 [ 3521.266348][T19091] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 3521.266381][T19091] ? __lock_acquire+0x683/0x2cf0 [ 3521.266420][T19091] ? hook_file_ioctl_compat+0x1f0/0x5f0 [ 3521.266467][T19091] ? __fget_files+0x2a/0x420 [ 3521.266495][T19091] ? __fget_files+0x3a2/0x420 [ 3521.266517][T19091] ? __fget_files+0x2a/0x420 [ 3521.266543][T19091] security_file_ioctl_compat+0xc3/0x2a0 [ 3521.266572][T19091] __ia32_compat_sys_ioctl+0x139/0x950 [ 3521.266594][T19091] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 3521.266614][T19091] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3521.266644][T19091] ? __fget_files+0x3a2/0x420 [ 3521.266673][T19091] ? fput+0xa0/0xd0 [ 3521.266696][T19091] ? ksys_write+0x242/0x270 [ 3521.266734][T19091] __do_fast_syscall_32+0x23e/0x6f0 [ 3521.266762][T19091] ? do_fast_syscall_32+0x33/0x70 [ 3521.266788][T19091] ? lockdep_hardirqs_on+0x7a/0x110 [ 3521.266812][T19091] ? asm_int80_emulation+0x1a/0x20 [ 3521.266831][T19091] ? do_int80_emulation+0x29f/0x550 [ 3521.266862][T19091] do_fast_syscall_32+0x33/0x70 [ 3521.266891][T19091] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3521.266913][T19091] RIP: 0023:0xf6fef0ec [ 3521.266932][T19091] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 3521.266948][T19091] RSP: 002b:00000000f539b50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 3521.266969][T19091] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000c25c4110 [ 3521.266982][T19091] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 3521.266993][T19091] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3521.267004][T19091] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3521.267015][T19091] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3521.267042][T19091] [ 3521.710487][T19091] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3522.066156][T18865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3522.082503][T18865] 8021q: adding VLAN 0 to HW filter on device team0 [ 3522.109532][T16793] bridge0: port 1(bridge_slave_0) entered blocking state [ 3522.116707][T16793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3522.147678][T19111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3522.156812][T19111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3522.455147][T13564] bridge0: port 2(bridge_slave_1) entered blocking state [ 3522.462448][T13564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3522.518149][T19120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3522.526894][T19120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3522.623458][T18865] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3522.633953][T18865] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3522.743942][T18865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3522.785251][T18865] veth0_vlan: entered promiscuous mode [ 3522.798499][T18865] veth1_vlan: entered promiscuous mode [ 3522.921832][T18865] veth0_macvtap: entered promiscuous mode [ 3523.076774][T18865] veth1_macvtap: entered promiscuous mode [ 3523.102326][T18865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3523.119798][T18865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3523.136821][T13568] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3523.145832][T13568] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3523.243475][T13568] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3523.252270][T13568] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3523.567304][T16793] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3523.575195][T16793] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3523.727740][T19125] syz.6.13507 (19125): drop_caches: 2 [ 3523.764313][T13564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3523.772203][T13564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3525.047404][ T30] audit: type=1326 audit(1784031430.846:4877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19148 comm="syz.3.13509" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 3525.073619][ T30] audit: type=1326 audit(1784031430.846:4878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19148 comm="syz.3.13509" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 3525.098568][ T30] audit: type=1326 audit(1784031430.846:4879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19148 comm="syz.3.13509" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 3525.142748][ T30] audit: type=1326 audit(1784031430.846:4880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19148 comm="syz.3.13509" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 3525.197926][ T30] audit: type=1326 audit(1784031430.846:4881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19148 comm="syz.3.13509" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 3525.253961][ T30] audit: type=1326 audit(1784031430.846:4882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19148 comm="syz.3.13509" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 3525.292452][T19154] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13510'. [ 3525.302464][ T30] audit: type=1326 audit(1784031430.846:4883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19148 comm="syz.3.13509" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 3525.327134][ T30] audit: type=1326 audit(1784031430.846:4884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19148 comm="syz.3.13509" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 3525.391851][ T30] audit: type=1326 audit(1784031430.846:4885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19148 comm="syz.3.13509" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 3525.416352][ T30] audit: type=1326 audit(1784031430.846:4886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19148 comm="syz.3.13509" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 3525.879805][T19161] netlink: 'syz.2.13514': attribute type 10 has an invalid length. [ 3525.887873][T19161] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13514'. [ 3532.028653][T19184] netlink: 'syz.3.13519': attribute type 1 has an invalid length. [ 3532.058169][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 3532.058189][ T30] audit: type=1326 audit(1784031437.976:4901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19183 comm="syz.2.13520" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff40ec code=0x7ffc0000 [ 3532.143551][ T30] audit: type=1326 audit(1784031437.976:4902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19183 comm="syz.2.13520" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff40ec code=0x7ffc0000 [ 3532.168635][ T30] audit: type=1326 audit(1784031437.976:4903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19183 comm="syz.2.13520" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff40ec code=0x7ffc0000 [ 3532.193120][ T30] audit: type=1326 audit(1784031437.976:4904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19183 comm="syz.2.13520" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff40ec code=0x7ffc0000 [ 3532.260836][T19184] 8021q: adding VLAN 0 to HW filter on device bond3 [ 3532.268806][ T30] audit: type=1326 audit(1784031437.976:4905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19183 comm="syz.2.13520" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf7ff40ec code=0x7ffc0000 [ 3532.308757][ T30] audit: type=1326 audit(1784031437.976:4906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19183 comm="syz.2.13520" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff40ec code=0x7ffc0000 [ 3532.334060][ T30] audit: type=1326 audit(1784031437.976:4907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19183 comm="syz.2.13520" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff40ec code=0x7ffc0000 [ 3532.409812][ T30] audit: type=1326 audit(1784031437.976:4908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19183 comm="syz.2.13520" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff40ec code=0x7ffc0000 [ 3532.447331][ T30] audit: type=1326 audit(1784031437.976:4909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19183 comm="syz.2.13520" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff40ec code=0x7ffc0000 [ 3532.472134][ T30] audit: type=1326 audit(1784031437.976:4910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19183 comm="syz.2.13520" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7ff40ec code=0x7ffc0000 [ 3532.474141][T19188] bond2: (slave veth0_virt_wifi): Releasing active interface [ 3532.645574][T19188] bond3: (slave veth0_virt_wifi): making interface the new active one [ 3532.654921][T19188] bond3: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 3532.682494][T19194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13522'. [ 3532.831958][T19204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3532.926490][T19204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3532.985706][T19207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3533.005456][T19204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3533.014387][T19204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3533.098584][T19210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3533.107521][T19210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3534.144182][T19219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3534.154657][T19219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3534.596134][T19225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3534.605335][T19225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3534.619184][T19227] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13532'. [ 3535.932657][T19251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3535.942544][T19251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3535.958852][T19251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3535.967731][T19251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3536.045968][T19251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3536.054854][T19251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3536.170924][T19254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13540'. [ 3536.953261][T19261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3536.963049][T19261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3537.017271][T19261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3537.026376][T19261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3537.157825][T19261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3537.166778][T19261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3537.805042][T19271] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13545'. [ 3539.054277][T19243] Set syz1 is full, maxelem 65536 reached [ 3539.716767][T19296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3539.739897][T19296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3539.815106][T19296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3539.872285][T19296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3540.116333][T19296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3540.125063][T19296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3540.149673][T19300] netlink: 'syz.0.13551': attribute type 2 has an invalid length. [ 3540.367544][T19305] netlink: 'syz.6.13552': attribute type 1 has an invalid length. [ 3540.638655][T19305] ipvlan3: entered allmulticast mode [ 3540.644028][T19305] bond6: entered allmulticast mode [ 3540.960572][T19305] bond6: (slave bridge3): making interface the new active one [ 3540.993838][T19305] bridge3: entered allmulticast mode [ 3541.013505][T19305] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 3541.336871][T19314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3541.345811][T19314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3541.651240][T19320] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13556'. [ 3541.800680][T19327] netlink: 'syz.3.13558': attribute type 10 has an invalid length. [ 3542.362347][T19342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3542.511693][T19342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3542.739858][T19334] vivid-000: kernel_thread() failed [ 3542.832225][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 3542.832246][ T30] audit: type=1804 audit(1784031448.646:4931): pid=19342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.13562" name="bus" dev="ramfs" ino=273255 res=1 errno=0 [ 3542.858807][ T30] audit: type=1804 audit(1784031448.646:4932): pid=19342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.13562" name="bus" dev="ramfs" ino=273255 res=1 errno=0 [ 3544.384615][T19356] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 3544.392566][T14517] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 3545.013142][T19367] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13569'. [ 3545.493312][T19380] fuse: fd is not a fuse device [ 3545.507347][T19377] netlink: 328 bytes leftover after parsing attributes in process `syz.6.13573'. [ 3545.815856][T19384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3545.824824][T19384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3546.175251][T19386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3546.192001][T19386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3546.718052][T19391] netlink: 'syz.0.13576': attribute type 2 has an invalid length. [ 3547.081911][T19408] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13582'. [ 3547.185257][ T30] audit: type=1326 audit(1784031453.066:4933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19407 comm="syz.4.13581" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 3547.304818][ T30] audit: type=1326 audit(1784031453.066:4934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19407 comm="syz.4.13581" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 3547.457043][ T30] audit: type=1326 audit(1784031453.066:4935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19407 comm="syz.4.13581" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 3547.535906][ T30] audit: type=1326 audit(1784031453.176:4936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19407 comm="syz.4.13581" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 3547.629739][ T30] audit: type=1326 audit(1784031453.176:4937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19407 comm="syz.4.13581" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 3547.727370][ T30] audit: type=1326 audit(1784031453.176:4938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19407 comm="syz.4.13581" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 3547.752376][ T30] audit: type=1326 audit(1784031453.176:4939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19407 comm="syz.4.13581" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 3547.781230][ T30] audit: type=1326 audit(1784031453.176:4940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19407 comm="syz.4.13581" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 3547.931553][ T30] audit: type=1326 audit(1784031453.176:4941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19407 comm="syz.4.13581" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 3548.019724][ T30] audit: type=1326 audit(1784031453.176:4942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19407 comm="syz.4.13581" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 3548.117033][ T30] audit: type=1326 audit(1784031453.176:4943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19407 comm="syz.4.13581" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 3548.141543][ T30] audit: type=1326 audit(1784031453.176:4944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19407 comm="syz.4.13581" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 3548.182615][ T30] audit: type=1326 audit(1784031453.176:4945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19407 comm="syz.4.13581" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 3548.207122][ T30] audit: type=1326 audit(1784031453.176:4946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19407 comm="syz.4.13581" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 3548.231869][ T30] audit: type=1326 audit(1784031453.176:4947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19407 comm="syz.4.13581" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 3548.256363][ T30] audit: type=1326 audit(1784031453.176:4948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19407 comm="syz.4.13581" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 3548.309277][ T30] audit: type=1326 audit(1784031453.176:4949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19407 comm="syz.4.13581" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 3548.335955][ T30] audit: type=1326 audit(1784031453.176:4950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19407 comm="syz.4.13581" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 3548.366465][T19420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3548.543161][T19425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13588'. [ 3548.552197][T19425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3548.559634][T19425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3548.567108][T19426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3548.611314][T19425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3548.635938][T19420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3548.658746][T19425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3549.991441][T19449] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 3550.754609][T16889] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 3551.246951][T19465] vivid-002: ================= START STATUS ================= [ 3551.254695][T19465] vivid-002: Radio HW Seek Mode: Bounded [ 3551.260402][T19465] vivid-002: Radio Programmable HW Seek: false [ 3551.279786][T19465] vivid-002: RDS Rx I/O Mode: Block I/O [ 3551.286225][T19465] vivid-002: Generate RBDS Instead of RDS: false [ 3551.391912][T19465] vivid-002: RDS Reception: true [ 3551.397053][T19465] vivid-002: RDS Program Type: 0 inactive [ 3551.402850][T19465] vivid-002: RDS PS Name: inactive [ 3551.438691][T19469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3551.448150][T19465] vivid-002: RDS Radio Text: inactive [ 3551.453690][T19465] vivid-002: RDS Traffic Announcement: false inactive [ 3551.460486][T19465] vivid-002: RDS Traffic Program: false inactive [ 3551.466844][T19465] vivid-002: RDS Music: false inactive [ 3551.472338][T19465] vivid-002: ================== END STATUS ================== [ 3551.480755][T19469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3551.534659][T16889] usb 1-1: Using ep0 maxpacket: 32 [ 3551.566965][T19469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3551.575700][T19469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3551.758429][T19460] netlink: 'syz.4.13598': attribute type 2 has an invalid length. [ 3551.807265][T19475] syzkaller0: entered promiscuous mode [ 3551.813429][T19475] syzkaller0: entered allmulticast mode [ 3552.074448][T16889] usb 1-1: config 1 has an invalid interface number: 236 but max is 0 [ 3552.083881][T16889] usb 1-1: config 1 has no interface number 0 [ 3552.090646][T16889] usb 1-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3552.105715][T16889] usb 1-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 3552.122230][T16889] usb 1-1: config 1 interface 236 has no altsetting 0 [ 3552.590319][T16889] usb 1-1: config 1 has an invalid interface number: 236 but max is 0 [ 3552.598559][T16889] usb 1-1: config 1 has no interface number 0 [ 3552.604680][T16889] usb 1-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3552.614501][T16889] usb 1-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 3552.624318][T16889] usb 1-1: config 1 interface 236 has no altsetting 0 [ 3553.453916][T16889] usb 1-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 3553.463128][T16889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3553.471316][T16889] usb 1-1: Product: syz [ 3553.475509][T16889] usb 1-1: Manufacturer: syz [ 3553.480141][T16889] usb 1-1: SerialNumber: syz [ 3553.792184][T16889] usb 1-1: can't set config #1, error -71 [ 3553.813442][T16889] usb 1-1: USB disconnect, device number 72 [ 3554.090945][T19511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3554.187946][T19511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3554.380364][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 3554.380750][ T30] audit: type=1804 audit(1784031460.276:5020): pid=19511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.13612" name="bus" dev="ramfs" ino=274510 res=1 errno=0 [ 3554.408379][ T30] audit: type=1804 audit(1784031460.276:5021): pid=19511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.13612" name="bus" dev="ramfs" ino=274510 res=1 errno=0 [ 3555.168106][T19528] netlink: 380 bytes leftover after parsing attributes in process `syz.0.13619'. [ 3555.470122][T19537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3555.478965][T19537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3556.565273][T11537] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 3557.993937][T11537] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3558.004917][T11537] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3558.014427][T11537] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3558.038630][T11537] usb 1-1: config 0 descriptor?? [ 3558.286754][T19563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3558.295699][T19563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3558.323815][T19563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3558.332545][T19563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3558.367043][T19563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3558.377204][T19563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3558.387526][T19563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13631'. [ 3558.401512][T19563] netlink: 6 bytes leftover after parsing attributes in process `syz.3.13631'. [ 3558.433486][T19540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3558.445717][T19540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3558.541888][T19540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3558.550620][T19540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3559.822105][T19578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3559.830997][T19578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3560.034917][T19584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3560.044489][T19584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3560.052461][T19582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13637'. [ 3560.328200][ T30] audit: type=1804 audit(1784031466.166:5022): pid=19584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.13638" name="bus" dev="ramfs" ino=273758 res=1 errno=0 [ 3560.412357][T19592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3560.421270][T19592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3560.458754][ T30] audit: type=1804 audit(1784031466.166:5023): pid=19584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.13638" name="bus" dev="ramfs" ino=273758 res=1 errno=0 [ 3560.745021][T19600] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 3560.795710][T19592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13640'. [ 3561.001458][T19606] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13641'. [ 3562.324174][T19613] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 3562.344021][T19613] netlink: 'syz.2.13645': attribute type 2 has an invalid length. [ 3562.408628][T19613] netlink: 'syz.2.13645': attribute type 2 has an invalid length. [ 3562.522793][T19618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3562.533679][T19618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3562.636108][T19617] netlink: 'syz.3.13644': attribute type 2 has an invalid length. [ 3563.909663][T19636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13650'. [ 3563.965214][T11537] usbhid 1-1:0.0: can't add hid device: -32 [ 3563.971353][T11537] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 3563.989459][T19634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13649'. [ 3564.083937][T19634] vxlan0: entered promiscuous mode [ 3564.090867][T16793] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 3564.099838][T16793] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 3564.109674][T16793] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 3564.118430][T16793] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 3564.735897][T19645] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13653'. [ 3564.834626][T19645] 8021q: adding VLAN 0 to HW filter on device bond7 [ 3564.942378][T19652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3564.951156][T19652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3565.227905][ T30] audit: type=1804 audit(1784031471.046:5024): pid=19652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.13657" name="bus" dev="ramfs" ino=274813 res=1 errno=0 [ 3565.248474][ T30] audit: type=1804 audit(1784031471.046:5025): pid=19652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.13657" name="bus" dev="ramfs" ino=274813 res=1 errno=0 [ 3565.340874][T19659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3565.349809][T19659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3565.892809][T19666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3565.901737][T19666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3566.591030][T19675] fuse: Invalid uid '00000000000000000003' [ 3569.019484][T19715] kvm: user requested TSC rate below hardware speed [ 3573.567855][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 3573.574321][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 3574.584226][T19684] netlink: 'syz.0.13664': attribute type 2 has an invalid length. [ 3574.814134][T14522] usb 3-1: USB disconnect, device number 60 [ 3574.839512][T19723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13676'. [ 3575.269445][T22110] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3575.289263][T22110] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3575.303712][T22110] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3575.338138][T22110] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3575.462484][T19738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3575.471354][T19738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3575.509317][T22110] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3575.795450][ T30] audit: type=1804 audit(1784031481.626:5026): pid=19738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.13681" name="bus" dev="ramfs" ino=275096 res=1 errno=0 [ 3575.815975][ T30] audit: type=1804 audit(1784031481.626:5027): pid=19738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.13681" name="bus" dev="ramfs" ino=275096 res=1 errno=0 [ 3576.414647][T19761] netlink: 'syz.0.13688': attribute type 1 has an invalid length. [ 3576.466820][T19744] bridge0: port 1(bridge_slave_0) entered blocking state [ 3576.474130][T19744] bridge0: port 1(bridge_slave_0) entered disabled state [ 3576.481419][T19744] bridge_slave_0: entered allmulticast mode [ 3576.489276][T19744] bridge_slave_0: entered promiscuous mode [ 3576.498237][T19744] bridge0: port 2(bridge_slave_1) entered blocking state [ 3576.505510][T19744] bridge0: port 2(bridge_slave_1) entered disabled state [ 3576.513092][T19744] bridge_slave_1: entered allmulticast mode [ 3576.520989][T19744] bridge_slave_1: entered promiscuous mode [ 3576.535343][T19767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13688'. [ 3576.652037][T19761] 8021q: adding VLAN 0 to HW filter on device bond1 [ 3576.677031][T19767] bond1: (slave bridge1): making interface the new active one [ 3576.685428][T19767] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 3576.706017][T19769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13688'. [ 3576.755960][T19744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3576.793121][T19761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13688'. [ 3576.806258][T19744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3576.865139][T19769] bond1: (slave bridge2): Enslaving as an active interface with a down link [ 3576.925687][T19761] bond1: (slave bridge3): Enslaving as an active interface with a down link [ 3576.938131][T19744] team0: Port device team_slave_0 added [ 3576.947677][T19744] team0: Port device team_slave_1 added [ 3577.051127][T13573] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3577.152655][T13573] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3577.162977][T13573] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 3577.256815][T19744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3577.263911][T19744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3577.289819][T19744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3577.302611][T19744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3577.309585][T19744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3577.388450][T19774] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13690'. [ 3577.444145][T19744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3577.532742][T19744] hsr_slave_0: entered promiscuous mode [ 3577.539676][T19744] hsr_slave_1: entered promiscuous mode [ 3577.699110][T22110] Bluetooth: hci1: command tx timeout [ 3578.243219][T13573] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3578.253544][T13573] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3578.263823][T13573] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 3579.045004][T13573] bond0: (slave netdevsim1): Releasing backup interface [ 3579.056458][T19796] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13697'. [ 3579.066887][T13573] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3579.077298][T13573] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3579.087580][T13573] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 3579.461606][T19804] Invalid logical block size (2052) [ 3579.469095][T19801] netlink: 'syz.3.13698': attribute type 2 has an invalid length. [ 3579.654158][T13573] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3579.725510][T13573] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3579.738770][T13573] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 3579.788051][T22110] Bluetooth: hci1: command tx timeout [ 3579.808548][ T30] audit: type=1326 audit(1784031485.696:5028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19816 comm="syz.6.13703" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fef0ec code=0x0 [ 3580.684427][T13573] bridge_slave_1: left allmulticast mode [ 3580.690116][T13573] bridge_slave_1: left promiscuous mode [ 3580.695832][T13573] bridge0: port 2(bridge_slave_1) entered disabled state [ 3580.707832][T13573] bridge_slave_0: left allmulticast mode [ 3580.713515][T13573] bridge_slave_0: left promiscuous mode [ 3580.719257][T13573] bridge0: port 1(bridge_slave_0) entered disabled state [ 3581.834170][T13573] dvmrp6: left allmulticast mode [ 3581.860797][T22110] Bluetooth: hci1: command tx timeout [ 3582.557977][T13573] bond5 (unregistering): (slave geneve3): Releasing active interface [ 3582.566089][T13573] geneve3 (unregistering): left allmulticast mode [ 3582.638037][T13573] bond1 (unregistering): (slave geneve2): Releasing active interface [ 3582.784787][T19853] fuse: Unknown parameter '000000000000000000060x0000000000000007' [ 3583.187365][T13573] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 3583.618167][T13573] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3583.632289][T13573] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3583.693834][T13573] bond0 (unregistering): Released all slaves [ 3583.704850][T13573] bond1 (unregistering): Released all slaves [ 3583.722424][T13573] bond2 (unregistering): Released all slaves [ 3583.743837][T13573] bond3 (unregistering): Released all slaves [ 3583.856813][T13573] bond4 (unregistering): Released all slaves [ 3583.917748][T13573] bond5 (unregistering): Released all slaves [ 3583.938942][ T5288] 8021q: adding VLAN 0 to HW filter on device eth9 [ 3583.963994][T22110] Bluetooth: hci1: command tx timeout [ 3584.284870][T19876] loop5: detected capacity change from 0 to 7 [ 3584.375231][T19876] Dev loop5: unable to read RDB block 7 [ 3584.380887][T19876] loop5: AHDI p1 p3 p4 [ 3584.385088][T19876] loop5: partition table partially beyond EOD, truncated [ 3584.392374][T19876] loop5: p1 size 100663296 extends beyond EOD, truncated [ 3584.520787][T19876] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 3584.689242][T19880] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-16) [ 3584.993656][T19887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3585.002554][T19887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3585.446241][T19898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3585.455140][T19898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3585.469386][T19897] tipc: Enabled bearer , priority 0 [ 3585.488472][T19898] netlink: 40743 bytes leftover after parsing attributes in process `syz.3.13716'. [ 3585.557077][T19889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3585.565955][T19889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3585.674997][T19888] tipc: Disabling bearer [ 3586.550340][T19744] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3586.651978][T19744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3586.660156][T19744] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3586.670996][T19744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3586.680944][T19744] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3586.695167][T19744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3586.703749][T19744] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3586.731099][T19744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3587.121081][T19744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3587.139752][T19744] 8021q: adding VLAN 0 to HW filter on device team0 [ 3587.184523][T16793] bridge0: port 1(bridge_slave_0) entered blocking state [ 3587.191736][T16793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3587.201185][T16793] bridge0: port 2(bridge_slave_1) entered blocking state [ 3587.208359][T16793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3587.264229][T19744] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3587.274610][T19744] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3587.441626][T13573] veth1_macvtap: left promiscuous mode [ 3587.447187][T13573] veth0_macvtap: left promiscuous mode [ 3587.452800][T13573] veth0_vlan: left promiscuous mode [ 3588.007460][T19950] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13722'. [ 3588.114289][T19952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3588.169120][T19952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3588.295990][T19955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3588.352477][ T30] audit: type=1804 audit(1784031494.276:5029): pid=19957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.13723" name="bus" dev="ramfs" ino=276621 res=1 errno=0 [ 3588.378278][T19955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3588.398768][ T30] audit: type=1804 audit(1784031494.306:5030): pid=19957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.13723" name="bus" dev="ramfs" ino=276621 res=1 errno=0 [ 3588.482017][T13573] team0 (unregistering): Port device vlan0 removed [ 3588.516174][T19955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3588.614287][T19955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3588.694158][T19955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3588.733859][T13573] team0 (unregistering): Port device team_slave_1 removed [ 3588.760539][T19955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3588.779334][T19955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13724'. [ 3588.808310][T19955] netlink: 6 bytes leftover after parsing attributes in process `syz.4.13724'. [ 3588.879929][T13573] team0 (unregistering): Port device team_slave_0 removed [ 3589.535988][T19744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3589.971988][T19744] veth0_vlan: entered promiscuous mode [ 3590.040056][T19967] input: syz0 as /devices/virtual/input/input237 [ 3590.163123][T19744] veth1_vlan: entered promiscuous mode [ 3590.444809][T19744] veth0_macvtap: entered promiscuous mode [ 3590.460712][T19744] veth1_macvtap: entered promiscuous mode [ 3590.616679][T19744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3590.660545][T19744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3590.694508][T13568] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3590.734034][T13568] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3590.805615][T13568] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3590.852132][T19967] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 3590.858371][T19967] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 3590.896941][T19967] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 3590.907662][T13568] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3590.917089][T19967] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 3590.987938][T19967] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 3591.078511][T19967] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 3591.179298][T19967] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 3591.187192][T19967] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 3591.210570][T19967] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 3591.245054][T19967] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 3591.252724][T19967] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 3591.314352][T19967] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 3591.456978][T13574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3591.499886][T13574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3591.618610][T19988] netlink: 'syz.6.13729': attribute type 2 has an invalid length. [ 3591.651430][T13561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3591.659375][T13561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3591.689898][T19990] fuse: Unknown parameter '000000000000000000060x0000000000000007' [ 3591.736811][ T30] audit: type=1326 audit(1784031497.666:5031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19980 comm="syz.4.13730" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 3591.796299][ T30] audit: type=1326 audit(1784031497.666:5032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19980 comm="syz.4.13730" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 3592.009645][ T30] audit: type=1326 audit(1784031497.666:5033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19980 comm="syz.4.13730" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 3592.313733][ T30] audit: type=1326 audit(1784031497.666:5034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19980 comm="syz.4.13730" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 3592.380890][T22110] Bluetooth: hci2: command 0x0406 tx timeout [ 3592.472611][ T30] audit: type=1326 audit(1784031497.666:5035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19980 comm="syz.4.13730" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 3592.776194][ T30] audit: type=1326 audit(1784031497.666:5036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19980 comm="syz.4.13730" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=263 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 3592.801512][ T30] audit: type=1326 audit(1784031497.666:5037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19980 comm="syz.4.13730" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 3592.845367][ T30] audit: type=1326 audit(1784031497.666:5038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19980 comm="syz.4.13730" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 3592.949325][T22110] Bluetooth: hci3: command 0x0406 tx timeout [ 3593.055375][T22110] Bluetooth: hci4: command 0x0406 tx timeout [ 3593.268729][T22110] Bluetooth: hci5: command 0x0c1a tx timeout [ 3593.379027][T22110] Bluetooth: hci1: command 0x0c1a tx timeout [ 3594.474714][T22110] Bluetooth: hci2: command 0x0406 tx timeout [ 3595.027267][T22110] Bluetooth: hci3: command 0x0406 tx timeout [ 3595.131824][T22110] Bluetooth: hci4: command 0x0406 tx timeout [ 3595.351083][T22110] Bluetooth: hci5: command 0x0c1a tx timeout [ 3595.365071][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 3595.365090][ T30] audit: type=1326 audit(1784031501.296:5044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20021 comm="syz.0.13737" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f090ec code=0x0 [ 3595.463693][T18864] Bluetooth: hci1: command 0x0c1a tx timeout [ 3595.953044][T20029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3595.963169][T20029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3595.979329][T20029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3595.988356][T20029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3596.049758][T20029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3596.060138][T20029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3597.428780][T18864] Bluetooth: hci5: command 0x0c1a tx timeout [ 3597.563959][T18864] Bluetooth: hci1: command 0x0c1a tx timeout [ 3598.552178][T20042] netlink: 'syz.4.13741': attribute type 10 has an invalid length. [ 3598.560245][T20042] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13741'. [ 3601.857305][T20055] netlink: 'syz.6.13747': attribute type 1 has an invalid length. [ 3601.962645][T20055] ipvlan4: entered allmulticast mode [ 3601.973038][T20055] bond8: entered allmulticast mode [ 3602.078200][T20063] bond8: (slave bridge4): making interface the new active one [ 3602.144063][T20063] bridge4: entered allmulticast mode [ 3602.172747][T20063] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 3602.198181][T20070] netlink: 'syz.0.13748': attribute type 2 has an invalid length. [ 3602.285003][T14517] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 3602.443939][T14517] usb 3-1: device descriptor read/64, error -71 [ 3602.733651][T14517] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 3603.034134][T14517] usb 3-1: device descriptor read/64, error -71 [ 3603.179365][T14517] usb usb3-port1: attempt power cycle [ 3603.636417][T14517] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 3603.705692][T14517] usb 3-1: device descriptor read/8, error -71 [ 3603.954006][T14517] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 3603.992697][T14517] usb 3-1: device descriptor read/8, error -71 [ 3604.114479][T14517] usb usb3-port1: unable to enumerate USB device [ 3605.240704][T20097] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13756'. [ 3606.184011][T20099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3606.211810][T20099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3606.248279][T20099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3606.262330][T20099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3606.400324][T20099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3606.452181][T20099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3607.535501][T20079] Set syz1 is full, maxelem 65536 reached [ 3608.998091][T20116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3609.010635][T20116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3609.026754][T20116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3609.042956][T20116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3609.062516][T20116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3609.076948][T20116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3609.089417][T20116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13762'. [ 3609.100371][T20116] netlink: 6 bytes leftover after parsing attributes in process `syz.3.13762'. [ 3609.880650][T20120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3609.895171][T20120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3612.578226][T20097] bridge1: entered promiscuous mode [ 3612.786119][T20126] tipc: Enabling of bearer rejected, failed to enable media [ 3612.839776][T20139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3612.883523][T18077] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 3612.981983][T20136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3613.055777][T18077] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3613.072664][T20136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3613.083858][T18077] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3613.093032][T18077] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3613.132308][T18077] usb 3-1: config 0 descriptor?? [ 3613.248141][T20142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3613.258042][T20142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3613.370015][T20134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3613.394365][T20134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3613.491185][T20134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3613.515425][T20134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3614.279970][T20157] netlink: 'syz.4.13774': attribute type 1 has an invalid length. [ 3614.357655][T20157] bond1: entered promiscuous mode [ 3614.365189][T20157] 8021q: adding VLAN 0 to HW filter on device bond1 [ 3614.562686][T20157] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13774'. [ 3614.571802][T20157] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13774'. [ 3614.690404][T20162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3614.709988][T20162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3614.742951][T20162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3614.788938][T20162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3614.804984][T20157] bond1: (slave bridge1): making interface the new active one [ 3614.829197][T20157] bridge1: entered promiscuous mode [ 3614.838986][T20162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3614.858967][T20157] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 3614.923225][T20162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3614.948143][T20162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13775'. [ 3614.963522][T20162] netlink: 6 bytes leftover after parsing attributes in process `syz.0.13775'. [ 3615.179662][ T30] audit: type=1326 audit(1784031521.106:5045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20164 comm="syz.3.13776" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 3615.273627][ T30] audit: type=1326 audit(1784031521.106:5046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20164 comm="syz.3.13776" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 3615.298146][ T30] audit: type=1326 audit(1784031521.106:5047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20164 comm="syz.3.13776" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 3615.353223][ T30] audit: type=1326 audit(1784031521.136:5048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20164 comm="syz.3.13776" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 3615.377913][ T30] audit: type=1326 audit(1784031521.146:5049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20164 comm="syz.3.13776" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 3615.405518][ T30] audit: type=1326 audit(1784031521.146:5050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20164 comm="syz.3.13776" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 3615.430312][ T30] audit: type=1326 audit(1784031521.146:5051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20164 comm="syz.3.13776" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 3615.488097][T20167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3615.497072][T20167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3615.527035][T20167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3615.535915][T20167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3615.547271][ T30] audit: type=1326 audit(1784031521.146:5052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20164 comm="syz.3.13776" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 3615.586559][ T30] audit: type=1326 audit(1784031521.156:5053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20164 comm="syz.3.13776" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 3615.611233][ T30] audit: type=1326 audit(1784031521.156:5054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20164 comm="syz.3.13776" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 3615.735020][T18077] usbhid 3-1:0.0: can't add hid device: -71 [ 3615.741059][T18077] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 3615.752667][T18077] usb 3-1: USB disconnect, device number 65 [ 3616.082910][T20175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3616.097978][T20175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3623.215506][T20180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3623.235666][T20180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3623.245428][T20180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3623.252848][T20180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3623.359533][T20199] netlink: 'syz.6.13785': attribute type 2 has an invalid length. [ 3623.522930][T20210] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13787'. [ 3623.705912][T20214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3623.721036][T20216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13789'. [ 3623.733165][T20214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3623.768704][T20220] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13790'. [ 3623.922710][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 3623.922725][ T30] audit: type=1326 audit(1784031529.846:5084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20225 comm="syz.2.13793" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcf0ec code=0x7ffc0000 [ 3624.033555][ T30] audit: type=1326 audit(1784031529.846:5085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20225 comm="syz.2.13793" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcf0ec code=0x7ffc0000 [ 3624.103749][ T30] audit: type=1326 audit(1784031529.846:5086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20225 comm="syz.2.13793" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcf0ec code=0x7ffc0000 [ 3624.135940][ T30] audit: type=1326 audit(1784031529.846:5087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20225 comm="syz.2.13793" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf6fcf0ec code=0x7ffc0000 [ 3624.161244][ T30] audit: type=1326 audit(1784031529.846:5088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20225 comm="syz.2.13793" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcf0ec code=0x7ffc0000 [ 3624.221178][ T30] audit: type=1326 audit(1784031529.846:5089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20225 comm="syz.2.13793" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcf0ec code=0x7ffc0000 [ 3624.350788][T20235] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 3624.351342][ T30] audit: type=1326 audit(1784031529.846:5090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20225 comm="syz.2.13793" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcf0ec code=0x7ffc0000 [ 3624.644917][ T30] audit: type=1326 audit(1784031529.846:5091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20225 comm="syz.2.13793" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fcf0ec code=0x7ffc0000 [ 3624.704062][ T30] audit: type=1326 audit(1784031529.846:5092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20225 comm="syz.2.13793" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcf0ec code=0x7ffc0000 [ 3624.841449][ T30] audit: type=1326 audit(1784031529.846:5093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20225 comm="syz.2.13793" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcf0ec code=0x7ffc0000 [ 3625.221015][T20246] netlink: 'syz.3.13797': attribute type 2 has an invalid length. [ 3626.914104][T20267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3626.965105][T20267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3627.202131][T20272] netlink: 32 bytes leftover after parsing attributes in process `syz.6.13803'. [ 3627.992075][T20276] ip6gretap0: entered promiscuous mode [ 3628.091141][T20281] netlink: 'syz.2.13806': attribute type 10 has an invalid length. [ 3628.111044][T20281] bridge0: port 2(bridge_slave_1) entered disabled state [ 3628.118617][T20281] bridge0: port 1(bridge_slave_0) entered disabled state [ 3628.178653][T20281] bridge0: port 2(bridge_slave_1) entered blocking state [ 3628.194881][T20281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3628.202526][T20281] bridge0: port 1(bridge_slave_0) entered blocking state [ 3628.209805][T20281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3628.268968][T20281] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 3628.344886][T20288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3628.427242][T20288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3628.554202][T20294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3628.974990][T20304] fuse: Unknown parameter '000000000000000000060x0000000000000007' [ 3629.013337][T20304] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13811'. [ 3629.148423][T20306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3629.175782][T20306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3629.308106][T20308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3629.341590][T20308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3630.586851][T14522] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 3633.335065][T20358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3633.365916][T20358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3633.473840][T20359] netlink: 'syz.6.13828': attribute type 2 has an invalid length. [ 3633.507328][T20358] syzkaller0: entered promiscuous mode [ 3633.547150][T20358] syzkaller0: refused to change device tx_queue_len [ 3634.041131][T20372] netlink: 52 bytes leftover after parsing attributes in process `syz.0.13832'. [ 3634.136891][T20372] netlink: 5 bytes leftover after parsing attributes in process `syz.0.13832'. [ 3634.167573][T20372] netlink: 52 bytes leftover after parsing attributes in process `syz.0.13832'. [ 3634.198590][T20376] netlink: 'syz.4.13831': attribute type 2 has an invalid length. [ 3634.255437][T20372] netlink: 5 bytes leftover after parsing attributes in process `syz.0.13832'. [ 3634.336754][T20372] netlink: 52 bytes leftover after parsing attributes in process `syz.0.13832'. [ 3634.531938][T14522] hid-generic 0006:0008:0001.0077: ignoring exceeding usage max [ 3634.547268][T14522] hid_parser_main: 73 callbacks suppressed [ 3634.547301][T14522] hid-generic 0006:0008:0001.0077: unknown main item tag 0x0 [ 3634.594149][T14522] hid-generic 0006:0008:0001.0077: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 3634.979273][T20382] fido_id[20382]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 3635.008136][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 3635.014652][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 3635.890205][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 3635.890225][ T30] audit: type=1326 audit(1784031541.796:5111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20392 comm="syz.6.13837" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fef0ec code=0x0 [ 3636.481955][T20401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13840'. [ 3636.541746][T20406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3636.553360][T20406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3636.619511][T20406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3636.631861][T20406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3636.970462][T20415] tipc: Enabled bearer , priority 0 [ 3636.978701][T20415] syzkaller0: entered promiscuous mode [ 3636.984229][T20415] syzkaller0: entered allmulticast mode [ 3637.020629][T20415] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 3637.076097][T20415] tipc: Resetting bearer [ 3637.510026][T20427] fuse: Unknown parameter '000000000000000000060x0000000000000007' [ 3637.627880][T20429] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13847'. [ 3637.638254][T20430] netlink: 40 bytes leftover after parsing attributes in process `syz.6.13845'. [ 3638.163666][ T9982] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 3638.388987][ T9982] usb 3-1: device descriptor read/64, error -71 [ 3638.687210][T20451] netlink: 'syz.3.13853': attribute type 2 has an invalid length. [ 3638.704784][ T9982] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 3638.935804][ T9982] usb 3-1: device descriptor read/64, error -71 [ 3638.952703][ T30] audit: type=1326 audit(1784031544.856:5112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20455 comm="syz.0.13855" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f090ec code=0x7ffc0000 [ 3639.008515][T20456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3639.032214][T20456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3639.058766][ T30] audit: type=1326 audit(1784031544.856:5113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20455 comm="syz.0.13855" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f090ec code=0x7ffc0000 [ 3639.099058][ T9982] usb usb3-port1: attempt power cycle [ 3639.231005][ T30] audit: type=1326 audit(1784031544.856:5114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20455 comm="syz.0.13855" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f090ec code=0x7ffc0000 [ 3639.345077][ T30] audit: type=1326 audit(1784031544.856:5115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20455 comm="syz.0.13855" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f090ec code=0x7ffc0000 [ 3639.477433][ T9982] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 3639.485381][T20456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3639.505487][T20456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3639.530597][ T30] audit: type=1326 audit(1784031544.856:5116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20455 comm="syz.0.13855" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f090ec code=0x7ffc0000 [ 3639.530653][ T30] audit: type=1326 audit(1784031544.916:5117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20455 comm="syz.0.13855" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7f090ec code=0x7ffc0000 [ 3639.530699][ T30] audit: type=1326 audit(1784031544.916:5118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20455 comm="syz.0.13855" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f090ec code=0x7ffc0000 [ 3639.530743][ T30] audit: type=1326 audit(1784031544.916:5119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20455 comm="syz.0.13855" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f090ec code=0x7ffc0000 [ 3639.530790][ T30] audit: type=1326 audit(1784031544.916:5120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20455 comm="syz.0.13855" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71071eb code=0x7ffc0000 [ 3639.604139][T20456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13855'. [ 3639.611894][ T9982] usb 3-1: device descriptor read/8, error -71 [ 3639.943898][ T9982] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 3639.975618][ T9982] usb 3-1: device descriptor read/8, error -71 [ 3640.014976][T20470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3640.015299][T20470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3640.057268][T20470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3640.059344][T20470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3640.085120][ T9982] usb usb3-port1: unable to enumerate USB device [ 3640.443473][T20475] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13860'. [ 3640.794024][T20479] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13862'. [ 3641.938091][T20505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3641.946820][T20505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3642.002029][T20505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3642.010803][T20505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3642.104122][T20505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3642.120530][T20505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3643.226865][T20513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13874'. [ 3645.216768][T18864] Bluetooth: hci5: command 0x0c1a tx timeout [ 3647.664634][T20500] netlink: 180 bytes leftover after parsing attributes in process `syz.2.13868'. [ 3647.813459][T20528] xt_l2tp: missing protocol rule (udp|l2tpip) [ 3647.916269][T20534] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 3647.933463][T20534] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 3647.965858][T20534] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 3647.973469][T20533] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.13880'. [ 3647.982461][T20534] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 3648.032707][T20534] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 3648.049266][T20534] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 3648.081270][T20534] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 3648.091160][T20545] bridge0: port 1(syz_tun) entered blocking state [ 3648.100931][T20534] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 3648.123648][T20545] bridge0: port 1(syz_tun) entered disabled state [ 3648.144192][T20545] syz_tun: entered allmulticast mode [ 3648.159505][T20534] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 3648.188565][T20534] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 3648.208578][T20545] syz_tun: entered promiscuous mode [ 3648.231730][T20545] bridge0: port 1(syz_tun) entered blocking state [ 3648.238382][T20545] bridge0: port 1(syz_tun) entered forwarding state [ 3648.540309][T20566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13892'. [ 3648.551340][T20564] syz_tun: entered promiscuous mode [ 3648.624050][T20569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13894'. [ 3648.657545][T20569] 8021q: adding VLAN 0 to HW filter on device bond2 [ 3648.762171][T20569] bond2: (slave ip6erspan0): making interface the new active one [ 3648.837895][T20569] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 3648.957380][T20575] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 3648.977558][T20575] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 3648.986821][T14522] bond_slave_0: entered promiscuous mode [ 3648.993219][T14522] bond_slave_1: entered promiscuous mode [ 3649.304319][T20592] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.13903'. [ 3650.598538][T20633] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.13917'. [ 3650.608728][T20632] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.13917'. [ 3650.696240][T20635] netlink: 'syz.4.13918': attribute type 10 has an invalid length. [ 3650.765346][T20635] bridge0: port 1(syz_tun) entered disabled state [ 3650.794371][T20635] syz_tun: left allmulticast mode [ 3650.812192][T20635] bridge0: port 1(syz_tun) entered disabled state [ 3650.893970][T20635] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 3650.993441][T20640] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.13920'. [ 3651.760017][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 3651.760036][ T30] audit: type=1326 audit(1784031557.676:5183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20654 comm="syz.4.13926" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7fc00000 [ 3651.859092][T20660] binder_alloc: 20657: pid 20657 spamming oneway? 1 buffers allocated for a total size of 4096 [ 3651.923197][T20659] TCP: TCP_TX_DELAY enabled [ 3651.954143][ T30] audit: type=1326 audit(1784031557.846:5184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20654 comm="syz.4.13926" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf707f0ec code=0x7fc00000 [ 3651.988175][T20663] binder_alloc: 20657: pid 20657 spamming oneway? 2 buffers allocated for a total size of 5120 [ 3652.075962][ T30] audit: type=1326 audit(1784031557.916:5185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20654 comm="syz.4.13926" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7fc00000 [ 3652.418057][T20670] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.13931'. [ 3652.529736][T20628] Set syz1 is full, maxelem 65536 reached [ 3652.616397][T20678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3652.647364][T20678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3652.696824][T20681] syzkaller0: entered promiscuous mode [ 3652.702376][T20681] syzkaller0: entered allmulticast mode [ 3652.722276][T20678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3652.731132][T20678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3653.507635][ T30] audit: type=1326 audit(1784031559.396:5186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20709 comm="syz.2.13947" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fcf0ec code=0x0 [ 3653.940237][T20721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3654.025596][T20724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3654.056020][T20724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3654.086939][T14517] IPVS: starting estimator thread 0... [ 3654.096808][T20728] pim6reg: entered allmulticast mode [ 3654.181128][T20724] bridge0: port 2(bridge_slave_1) entered disabled state [ 3654.188488][T20724] bridge0: port 1(bridge_slave_0) entered disabled state [ 3654.224570][T20729] IPVS: using max 38 ests per chain, 91200 per kthread [ 3654.436377][T20724] tipc: Resetting bearer [ 3654.470725][T20731] bridge0: port 3(syz_tun) entered blocking state [ 3654.477302][T20731] bridge0: port 3(syz_tun) entered disabled state [ 3654.514241][T20731] syz_tun: entered allmulticast mode [ 3654.525682][T20731] syz_tun: entered promiscuous mode [ 3654.533957][T20731] bridge0: port 3(syz_tun) entered blocking state [ 3654.540575][T20731] bridge0: port 3(syz_tun) entered forwarding state [ 3654.576673][T13573] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3654.595106][T13573] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3654.604078][T13573] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3654.613187][T13573] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3654.635236][T20740] openvswitch: netlink: Unknown key attributes 2 [ 3654.843283][T20749] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 3655.202695][T20763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13968'. [ 3655.254612][T20764] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 3655.753942][T20786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3655.763261][T20786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3655.827925][T20761] syz_tun: left promiscuous mode [ 3656.462856][T20801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13977'. [ 3656.528063][T20804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3656.921992][T20761] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 3657.003032][T20761] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING) [ 3657.104109][T20761] bond1: left promiscuous mode [ 3657.109085][T20761] bridge1: left promiscuous mode [ 3657.292497][T20810] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4277939134 (8555878268 ns) > initial count (5867140230 ns). Using initial count to start timer. [ 3657.336139][T11991] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3657.378224][T11991] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3657.414463][T11991] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3657.425093][T11991] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3657.652961][T20829] netlink: 'syz.4.13984': attribute type 10 has an invalid length. [ 3657.671196][T20830] netlink: 'syz.6.13987': attribute type 10 has an invalid length. [ 3657.726457][T20832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3659.109190][T20829] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 3659.138542][T11990] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3659.173883][T11990] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3659.205169][T20844] bridge0: port 2(bridge_slave_1) entered disabled state [ 3659.218191][ T30] audit: type=1326 audit(1784031565.146:5187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20850 comm="syz.3.13993" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7fc00000 [ 3659.267358][T11990] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3659.291482][ T30] audit: type=1326 audit(1784031565.216:5188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20850 comm="syz.3.13993" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf700f0ec code=0x7fc00000 [ 3659.303370][T11990] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3659.403476][ T30] audit: type=1326 audit(1784031565.296:5189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20850 comm="syz.3.13993" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7fc00000 [ 3659.463175][T20856] ------------[ cut here ]------------ [ 3659.474217][T20856] hwsim_get_chanwidth(bw) > hwsim_get_chanwidth(confbw) [ 3659.474259][T20856] WARNING: drivers/net/wireless/virtual/mac80211_hwsim_main.c:2248 at mac80211_hwsim_tx+0x1ab4/0x2500, CPU#0: syz.4.13995/20856 [ 3659.494586][T20856] Modules linked in: [ 3659.499328][T20856] CPU: 0 UID: 0 PID: 20856 Comm: syz.4.13995 Tainted: G L syzkaller #0 PREEMPT(full) [ 3659.510494][T20856] Tainted: [L]=SOFTLOCKUP [ 3659.514926][T20856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3659.525113][T20856] RIP: 0010:mac80211_hwsim_tx+0x1ab4/0x2500 [ 3659.531085][T20856] Code: c6 05 c7 5b 13 09 01 48 c7 c7 20 87 9b 8c be 6b 08 00 00 48 c7 c2 60 88 9b 8c e8 a7 dc 74 fa e9 ff ee ff ff e8 ed df 98 fa 90 <0f> 0b 90 49 bc 00 00 00 00 00 fc ff df e9 dd fe ff ff e8 d5 df 98 [ 3659.550832][T20856] RSP: 0018:ffffc9001c6fefc0 EFLAGS: 00010287 [ 3659.557058][T20856] RAX: ffffffff872d9173 RBX: 0000000000000000 RCX: 0000000000080000 [ 3659.565155][T20856] RDX: ffffc900107e9000 RSI: 000000000000022a RDI: 000000000000022b [ 3659.573832][T20856] RBP: ffffc9001c6ff150 R08: ffff88802603be00 R09: 000000000000000e [ 3659.581854][T20856] R10: 000000000000000d R11: 0000000000000002 R12: 0000000000000014 [ 3659.589927][T20856] R13: ffff888078a78df0 R14: 0000000000000028 R15: 0000000000000030 [ 3659.598029][T20856] FS: 0000000000000000(0000) GS:ffff888124f56000(0063) knlGS:00000000f546db40 [ 3659.607076][T20856] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 3659.613758][T20856] CR2: 000000002e612ff8 CR3: 0000000084b9c000 CR4: 00000000003526f0 [ 3659.621875][T20856] DR0: 0000000040000005 DR1: 0000000100000000 DR2: 0000000000000898 [ 3659.629959][T20856] DR3: 0000000000000006 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 3659.638053][T20856] Call Trace: [ 3659.641383][T20856] [ 3659.644415][T20856] ? do_raw_spin_lock+0x12b/0x2f0 [ 3659.649543][T20856] ? __pfx_mac80211_hwsim_tx+0x10/0x10 [ 3659.655224][T20856] ieee80211_tx_frags+0x3df/0x890 [ 3659.660462][T20856] ? __pfx_ieee80211_tx_frags+0x10/0x10 [ 3659.666140][T20856] __ieee80211_tx+0x267/0x580 [ 3659.670965][T20856] ieee80211_tx+0x312/0x4b0 [ 3659.675602][T20856] ? __pfx_ieee80211_tx+0x10/0x10 [ 3659.680713][T20856] ? ieee80211_xmit+0x2e5/0x3c0 [ 3659.685683][T20856] ieee80211_monitor_start_xmit+0xb33/0x1280 [ 3659.691819][T20856] ? ieee80211_monitor_start_xmit+0x5ea/0x1280 [ 3659.698095][T20856] ? __pfx_ieee80211_monitor_start_xmit+0x10/0x10 [ 3659.704623][T20856] dev_hard_start_xmit+0x2cd/0x830 [ 3659.709810][T20856] __dev_queue_xmit+0x1435/0x37f0 [ 3659.714943][T20856] ? __dev_queue_xmit+0x29b/0x37f0 [ 3659.720166][T20856] ? _copy_from_iter+0x21b/0x1660 [ 3659.725307][T20856] ? skb_set_owner_w+0x263/0x3d0 [ 3659.730347][T20856] ? __pfx___dev_queue_xmit+0x10/0x10 [ 3659.735929][T20856] ? __pfx__copy_from_iter+0x10/0x10 [ 3659.741289][T20856] ? packet_parse_headers+0x4c5/0x7a0 [ 3659.746787][T20856] ? packet_parse_headers+0x571/0x7a0 [ 3659.752225][T20856] ? __pfx_packet_parse_headers+0x10/0x10 [ 3659.758072][T20856] ? packet_xmit+0x68/0x330 [ 3659.762637][T20856] ? skb_put+0x112/0x210 [ 3659.767001][T20856] packet_sendmsg+0x3d95/0x5040 [ 3659.771931][T20856] ? futex_unqueue+0x22/0x240 [ 3659.776742][T20856] ? futex_unqueue+0x211/0x240 [ 3659.781575][T20856] ? __futex_wait+0x1e1/0x400 [ 3659.786587][T20856] ? __lock_acquire+0x683/0x2cf0 [ 3659.791616][T20856] ? __pfx_packet_sendmsg+0x10/0x10 [ 3659.796955][T20856] ? __might_fault+0xaf/0x130 [ 3659.801694][T20856] ? __pfx_aa_sk_perm+0x10/0x10 [ 3659.806675][T20856] ? aa_sock_msg_perm+0xf1/0x1b0 [ 3659.811701][T20856] ? __pfx_packet_sendmsg+0x10/0x10 [ 3659.817027][T20856] sock_sendmsg_nosec+0x13a/0x180 [ 3659.822121][T20856] __sys_sendto+0x408/0x5a0 [ 3659.826802][T20856] ? file_init_path+0x3b/0x5a0 [ 3659.831629][T20856] ? __pfx___sys_sendto+0x10/0x10 [ 3659.836808][T20856] ? rcu_is_watching+0x15/0xb0 [ 3659.841653][T20856] __ia32_sys_sendto+0xdd/0x100 [ 3659.846828][T20856] __do_fast_syscall_32+0x23e/0x6f0 [ 3659.852104][T20856] ? do_fast_syscall_32+0x33/0x70 [ 3659.857292][T20856] ? lockdep_hardirqs_on+0x7a/0x110 [ 3659.862967][T20856] ? asm_int80_emulation+0x1a/0x20 [ 3659.868370][T20856] ? do_int80_emulation+0x29f/0x550 [ 3659.873688][T20856] ? trace_irq_disable+0x3b/0x140 [ 3659.878889][T20856] do_fast_syscall_32+0x33/0x70 [ 3659.883925][T20856] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3659.890426][T20856] RIP: 0023:0xf707f0ec [ 3659.896192][T20856] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 3659.916060][T20856] RSP: 002b:00000000f546d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 3659.924606][T20856] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000080 [ 3659.932649][T20856] RDX: 0000000000000039 RSI: 0000000004000000 RDI: 0000000080000380 [ 3659.940733][T20856] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 3659.948813][T20856] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3659.956917][T20856] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3659.965028][T20856] [ 3659.968113][T20856] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 3659.975440][T20856] CPU: 0 UID: 0 PID: 20856 Comm: syz.4.13995 Tainted: G L syzkaller #0 PREEMPT(full) [ 3659.986527][T20856] Tainted: [L]=SOFTLOCKUP [ 3659.990890][T20856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3660.001028][T20856] Call Trace: [ 3660.004349][T20856] [ 3660.007321][T20856] vpanic+0x56c/0xa60 [ 3660.011363][T20856] ? __pfx__printk+0x10/0x10 [ 3660.016014][T20856] ? __pfx_vpanic+0x10/0x10 [ 3660.020583][T20856] ? is_bpf_text_address+0x292/0x2b0 [ 3660.025948][T20856] ? is_bpf_text_address+0x26/0x2b0 [ 3660.031192][T20856] panic+0xc5/0xd0 [ 3660.034958][T20856] ? __pfx_panic+0x10/0x10 [ 3660.039421][T20856] __warn+0x315/0x4c0 [ 3660.043428][T20856] ? mac80211_hwsim_tx+0x1ab4/0x2500 [ 3660.048748][T20856] ? mac80211_hwsim_tx+0x1ab4/0x2500 [ 3660.054069][T20856] __report_bug+0x331/0x530 [ 3660.058683][T20856] ? mac80211_hwsim_tx+0x1ab4/0x2500 [ 3660.063994][T20856] ? __pfx___report_bug+0x10/0x10 [ 3660.069057][T20856] ? ieee80211_encrypt_tx_skb+0x2fc/0x3f0 [ 3660.074809][T20856] ? __pfx___skb_flow_dissect+0x10/0x10 [ 3660.080388][T20856] ? mac80211_hwsim_tx+0x1ab4/0x2500 [ 3660.085702][T20856] report_bug+0x16a/0x220 [ 3660.090100][T20856] ? mac80211_hwsim_tx+0x1ab4/0x2500 [ 3660.095414][T20856] ? mac80211_hwsim_tx+0x1ab6/0x2500 [ 3660.100723][T20856] handle_bug+0x9c/0x200 [ 3660.104989][T20856] exc_invalid_op+0x1a/0x50 [ 3660.109515][T20856] asm_exc_invalid_op+0x1a/0x20 [ 3660.114385][T20856] RIP: 0010:mac80211_hwsim_tx+0x1ab4/0x2500 [ 3660.120310][T20856] Code: c6 05 c7 5b 13 09 01 48 c7 c7 20 87 9b 8c be 6b 08 00 00 48 c7 c2 60 88 9b 8c e8 a7 dc 74 fa e9 ff ee ff ff e8 ed df 98 fa 90 <0f> 0b 90 49 bc 00 00 00 00 00 fc ff df e9 dd fe ff ff e8 d5 df 98 [ 3660.139964][T20856] RSP: 0018:ffffc9001c6fefc0 EFLAGS: 00010287 [ 3660.146066][T20856] RAX: ffffffff872d9173 RBX: 0000000000000000 RCX: 0000000000080000 [ 3660.154059][T20856] RDX: ffffc900107e9000 RSI: 000000000000022a RDI: 000000000000022b [ 3660.162051][T20856] RBP: ffffc9001c6ff150 R08: ffff88802603be00 R09: 000000000000000e [ 3660.170046][T20856] R10: 000000000000000d R11: 0000000000000002 R12: 0000000000000014 [ 3660.178043][T20856] R13: ffff888078a78df0 R14: 0000000000000028 R15: 0000000000000030 [ 3660.186053][T20856] ? mac80211_hwsim_tx+0x1ab3/0x2500 [ 3660.191393][T20856] ? do_raw_spin_lock+0x12b/0x2f0 [ 3660.196446][T20856] ? __pfx_mac80211_hwsim_tx+0x10/0x10 [ 3660.201957][T20856] ieee80211_tx_frags+0x3df/0x890 [ 3660.207032][T20856] ? __pfx_ieee80211_tx_frags+0x10/0x10 [ 3660.212629][T20856] __ieee80211_tx+0x267/0x580 [ 3660.217336][T20856] ieee80211_tx+0x312/0x4b0 [ 3660.221889][T20856] ? __pfx_ieee80211_tx+0x10/0x10 [ 3660.226971][T20856] ? ieee80211_xmit+0x2e5/0x3c0 [ 3660.231860][T20856] ieee80211_monitor_start_xmit+0xb33/0x1280 [ 3660.237884][T20856] ? ieee80211_monitor_start_xmit+0x5ea/0x1280 [ 3660.244078][T20856] ? __pfx_ieee80211_monitor_start_xmit+0x10/0x10 [ 3660.250537][T20856] dev_hard_start_xmit+0x2cd/0x830 [ 3660.255703][T20856] __dev_queue_xmit+0x1435/0x37f0 [ 3660.260770][T20856] ? __dev_queue_xmit+0x29b/0x37f0 [ 3660.265914][T20856] ? _copy_from_iter+0x21b/0x1660 [ 3660.270966][T20856] ? skb_set_owner_w+0x263/0x3d0 [ 3660.275933][T20856] ? __pfx___dev_queue_xmit+0x10/0x10 [ 3660.281435][T20856] ? __pfx__copy_from_iter+0x10/0x10 [ 3660.286953][T20856] ? packet_parse_headers+0x4c5/0x7a0 [ 3660.292359][T20856] ? packet_parse_headers+0x571/0x7a0 [ 3660.297771][T20856] ? __pfx_packet_parse_headers+0x10/0x10 [ 3660.303534][T20856] ? packet_xmit+0x68/0x330 [ 3660.308063][T20856] ? skb_put+0x112/0x210 [ 3660.312332][T20856] packet_sendmsg+0x3d95/0x5040 [ 3660.317218][T20856] ? futex_unqueue+0x22/0x240 [ 3660.321937][T20856] ? futex_unqueue+0x211/0x240 [ 3660.326767][T20856] ? __futex_wait+0x1e1/0x400 [ 3660.331500][T20856] ? __lock_acquire+0x683/0x2cf0 [ 3660.336497][T20856] ? __pfx_packet_sendmsg+0x10/0x10 [ 3660.341833][T20856] ? __might_fault+0xaf/0x130 [ 3660.346550][T20856] ? __pfx_aa_sk_perm+0x10/0x10 [ 3660.351439][T20856] ? aa_sock_msg_perm+0xf1/0x1b0 [ 3660.356421][T20856] ? __pfx_packet_sendmsg+0x10/0x10 [ 3660.361657][T20856] sock_sendmsg_nosec+0x13a/0x180 [ 3660.366719][T20856] __sys_sendto+0x408/0x5a0 [ 3660.371254][T20856] ? file_init_path+0x3b/0x5a0 [ 3660.376050][T20856] ? __pfx___sys_sendto+0x10/0x10 [ 3660.381131][T20856] ? rcu_is_watching+0x15/0xb0 [ 3660.386025][T20856] __ia32_sys_sendto+0xdd/0x100 [ 3660.390915][T20856] __do_fast_syscall_32+0x23e/0x6f0 [ 3660.396156][T20856] ? do_fast_syscall_32+0x33/0x70 [ 3660.401215][T20856] ? lockdep_hardirqs_on+0x7a/0x110 [ 3660.406440][T20856] ? asm_int80_emulation+0x1a/0x20 [ 3660.411578][T20856] ? do_int80_emulation+0x29f/0x550 [ 3660.416809][T20856] ? trace_irq_disable+0x3b/0x140 [ 3660.421874][T20856] do_fast_syscall_32+0x33/0x70 [ 3660.426763][T20856] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3660.433127][T20856] RIP: 0023:0xf707f0ec [ 3660.437226][T20856] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 3660.456869][T20856] RSP: 002b:00000000f546d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 3660.465319][T20856] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000080 [ 3660.473320][T20856] RDX: 0000000000000039 RSI: 0000000004000000 RDI: 0000000080000380 [ 3660.481323][T20856] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 3660.489327][T20856] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3660.497678][T20856] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3660.505690][T20856] [ 3660.509348][T20856] Kernel Offset: disabled [ 3660.513689][T20856] Rebooting in 86400 seconds..