last executing test programs: 7m2.351098229s ago: executing program 0 (id=8104): sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000500), 0x2, 0x2001) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1, 0x4, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x343a8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xcae3c2511b326ebe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'bridge0\x00'}) sendmsg$nl_route(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e"], 0x38}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000880)={@random="ffffffffffff", @random="aabbccddeeff", @void, {@generic={0x88ca, "4b500028000000000000000001000001000000000000126700"/40}}}, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000006c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x40000, 0x0, 0x0, 0x1e, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e6baa86bc100007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd0000008019000000020000008000", [0x6, 0xffffffff9673e35d]}}) 7m1.908199413s ago: executing program 0 (id=8105): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000b40)=ANY=[@ANYBLOB], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r2, 0x0, 0xe, 0x0, &(0x7f0000000500)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000240)={0x0, 0x5}, 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0x8) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x80080) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, 0xffffffffffffffff) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000040)={r3, 0xffffffffffffffff, 0x800}, &(0x7f0000000080)=0xc) r6 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x3a8, 0x1f0, 0x43, 0xa0, 0x1f0, 0x98, 0x310, 0x178, 0x178, 0x310, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x190, 0x1f0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x4, 0x0, 0x8, 0x0, 'syz0\x00', 0xfe}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x7, 0x2, 0x2, 0x1, 0x0, 0x1], 0x20, 0x2}, {0xffffffffffffffff, [0x4, 0x4, 0x2, 0x6, 0x6], 0x6, 0x1}}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x4, 0x6, 0x1, 0x0, 0x0, 0x2], 0x6, 0x4}, {0x1, [0x2, 0x0, 0x6, 0x0, 0x7, 0x2], 0x3, 0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x408) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0x2c, "3fe6baa2e7f4b5b3624b5fe14344800c3ec53344f9ac6ce517b5c207f58abd9211b2adef2fc876189eb0fa37"}, &(0x7f00000001c0)=0x34) 7m1.717979903s ago: executing program 0 (id=8106): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a320000000014000000020a01"], 0x94}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 7m1.512137414s ago: executing program 0 (id=8108): timer_create(0x3, &(0x7f0000000600)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000640)) timer_settime(0x0, 0x1, &(0x7f0000000700)={{0x77359400}, {0x0, 0x9}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="f4000000000101"], 0xf4}}, 0x0) 7m1.368866588s ago: executing program 0 (id=8109): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000002a40)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002a80)='./sys/class/net/bond0/bonding/arp_ip_target\x00', 0x1, 0x0) syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) ioctl$COMEDI_SETRSUBD(0xffffffffffffffff, 0x6410) write(r0, &(0x7f0000002d80)="23f2568505", 0x5) 7m1.05450013s ago: executing program 0 (id=8112): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f0000000880)={0xa, 0x4e22, 0x80000000, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="2800000000000000290000000400"], 0x28}, 0x4004800) 6m58.840386164s ago: executing program 3 (id=8122): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@filename='mtd0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='jffs2\x00', 0x800000, 0x0) socket(0x1, 0x803, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) 6m58.532794465s ago: executing program 3 (id=8124): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000b40)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000900000085"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r2, 0x0, 0xe, 0x0, &(0x7f0000000500)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000240)={0x0, 0x5}, 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0x8) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x80080) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, 0xffffffffffffffff) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000040)={r3, 0xffffffffffffffff, 0x800}, &(0x7f0000000080)=0xc) r6 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x3a8, 0x1f0, 0x43, 0xa0, 0x1f0, 0x98, 0x310, 0x178, 0x178, 0x310, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x190, 0x1f0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x4, 0x0, 0x8, 0x0, 'syz0\x00', 0xfe}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x7, 0x2, 0x2, 0x1, 0x0, 0x1], 0x20, 0x2}, {0xffffffffffffffff, [0x4, 0x4, 0x2, 0x6, 0x6], 0x6, 0x1}}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x4, 0x6, 0x1, 0x0, 0x0, 0x2], 0x6, 0x4}, {0x1, [0x2, 0x0, 0x6, 0x0, 0x7, 0x2], 0x3, 0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x408) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0x2c, "3fe6baa2e7f4b5b3624b5fe14344800c3ec53344f9ac6ce517b5c207f58abd9211b2adef2fc876189eb0fa37"}, &(0x7f00000001c0)=0x34) 6m58.428884306s ago: executing program 3 (id=8126): timer_create(0x3, &(0x7f0000000600)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000640)) timer_settime(0x0, 0x1, &(0x7f0000000700)={{0x77359400}, {0x0, 0x9}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="f4000000000101"], 0xf4}}, 0x0) 6m58.305743019s ago: executing program 3 (id=8128): r0 = socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x8042, 0x48) r1 = io_uring_setup(0x3c46, &(0x7f00000002c0)={0x0, 0xeb7f, 0x3000, 0x2, 0x26c}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xd, &(0x7f0000000340)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xe, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}], &(0x7f0000000400), 0x1}, 0x20) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000440), 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xe, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}, 0x20) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40042, 0x1) close(r3) r4 = socket$inet6(0xa, 0x80002, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000cc0)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x5, 0x6, "8591cf", 0x0, 0x2, 0x0, @remote, @local}}}}, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x20010, r0, 0xfe136000) 6m58.165298123s ago: executing program 3 (id=8129): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0xfa) mount(0x0, &(0x7f00000007c0)='./mydev\x00', 0x0, 0x0, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) write$sysctl(r0, &(0x7f0000000240)='0', 0x1) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x8922, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @rand_addr=0xff}}) syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x2, 0x23, 0x2c, 0x68, 0x0, 0x7, 0x6, 0x0, @remote, @remote, {[@timestamp_prespec={0x44, 0x4, 0x37}]}}, {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) 6m57.921355867s ago: executing program 3 (id=8131): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000740)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000007c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000840)='net/unix\x00') pread64(r2, &(0x7f0000000880)=""/172, 0xac, 0xe0) 6m45.943159921s ago: executing program 32 (id=8112): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f0000000880)={0xa, 0x4e22, 0x80000000, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="2800000000000000290000000400"], 0x28}, 0x4004800) 6m42.776836662s ago: executing program 33 (id=8131): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000740)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000007c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000840)='net/unix\x00') pread64(r2, &(0x7f0000000880)=""/172, 0xac, 0xe0) 3.503112442s ago: executing program 5 (id=11252): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./sys\x00', &(0x7f0000000580)='pipefs\x00', 0x400, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/bus/pnp/drivers/serial\x00', 0x80, 0x0) r1 = openat(r0, &(0x7f0000000600)='bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000640)='00:03', 0x5) mkdir(&(0x7f0000000000)='./dev\x00', 0x1fc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000240)='./dev/sda1\x00', 0x0, &(0x7f0000000700), 0x800) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x2, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x200000, 0x200000, 0x7}) set_mempolicy(0x3, &(0x7f0000000300)=0x4, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x46eb, &(0x7f0000000340)={0x0, 0x1f8a, 0x10000, 0x40003, 0x37f, 0x0, r2}) r4 = landlock_create_ruleset(&(0x7f00000006c0)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@setneightbl={0x34, 0x43, 0x1, 0x2, 0x3, {0x2}, [@NDTA_NAME={0xe, 0x1, 'arp_cache\x00'}, @NDTA_THRESH2={0x8, 0x3, 0xffffffff}, @NDTA_THRESH3={0x8, 0x4, 0x7f}]}, 0x34}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x2c0442, 0xa6) 2.722200643s ago: executing program 5 (id=11258): close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x101841, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1, &(0x7f0000000500)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x4040040}, 0x4000011) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x1d0, 0x11, 0x148, 0x0, 0x0, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [0xffffff00, 0xff, 0xffffff00], @ipv6=@dev={0xfe, 0x80, '\x00', 0xe}, [0x0, 0xffffff00], @ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xff000000, 0xff], 0x8, 0x6, 0x5e, 0x4e21, 0x4e23, 0x4e24, 0x4e21}, 0x40, 0x8e0}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0xffffffff, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x242, 0x75f65a4e97d6873f, 0x1}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x0, 0x100, @empty, 0x8d}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000b40)=0x3, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000540)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0x7fff3ffc}]}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000ac0)={'sit0\x00', &(0x7f0000000a40)={@multicast1, 0x1}}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}]}}}]}, 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 2.326957219s ago: executing program 5 (id=11261): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_ublk_setup_io_uring(0x543d, &(0x7f0000000900)={0x0, 0xe3c1, 0x8000, 0x0, 0x4207}, &(0x7f0000000980), &(0x7f0000000240), &(0x7f0000000a00)) fcntl$getflags(r0, 0x1) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000600)={0x1, &(0x7f0000000640)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) io_setup(0x1, &(0x7f00000006c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000700)=[0x0]) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) sendto(r2, 0x0, 0x0, 0x24004051, 0x0, 0x0) close(0x3) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r6, &(0x7f0000000280)="871e0d82b23b466c7c7bab7df9d32bd3e282c1c197a2ca7b6f2223eb166e09ef926c1be6f254f491bf1c1c8a0e5614f6c973548b5f24b60881622d429d79d604c4ad3470af4b15540589b60318f43e4e8c6225106c62dba571f343a38c4edf10c4ff5e44060d0aedb9219dc5c2b3216eba097f5e1e411f19122dc6e9c3fa210b4e7afc251ae54ff17cb5e21b2c8fc52a576c64a35358514a89f84e382d4d7afcd76429e7471b21de0b1518fca6ae409c7900", &(0x7f00000008c0)=@tcp, 0x1}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000007c0)=[@in6={0xa, 0x4e22, 0x1, @loopback, 0x5}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f00000000c0)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x30}], 0x1, 0x8000) r8 = openat$rtc(0xffffff9c, 0x0, 0x8a000, 0x0) fallocate(r8, 0x10, 0xfaba, 0xc219) connect$inet(0xffffffffffffffff, 0x0, 0x0) 2.277275785s ago: executing program 2 (id=11262): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000380)=0x2, 0x4) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000400)={0x2, 0x4e22, @broadcast}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000ff0f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0], 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x8, &(0x7f00000008c0)=ANY=[@ANYBLOB="24732b64251a18518477b631802634916225dbd0f2402ab37a5ad1720b1701c8e613743fd8e7e5ef4779edcbcb0a009fc1ebbd3e25fb34215864f02a33819e163bcae47510d37f2e249b3fb312cf8b4f71ba9efe706d18db9014d172bdab09c62237a539ffaa4a8ac9db0ce6504da7d1916cf4d2cc227b5a8d25dc4a2b99c6747250a621e36d6b49de3a5a305f17a97c75a10968cffaaa747295ce75760b167f67a9782ad71ed1d26d2213bf81425740d1d5190bebb74d69b899175aa607000000e0f47cf27327d81ab178754de1e024c798c2e182289191249aabd32a3831376d4658976e893f0ec485d959c14e80", @ANYRES32=r5], &(0x7f00000005c0)='syzkaller\x00', 0xc, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8dee}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xd, 0x0, &(0x7f0000000680)="0000000000000000000051229d", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) semop(0x0, &(0x7f00000006c0)=[{0x4, 0x6, 0x800}], 0x5b) semtimedop(0x0, &(0x7f0000000700)=[{0x0, 0x1}, {0x4, 0x4, 0x1800}], 0x2, 0x0) semop(0x0, &(0x7f0000000740)=[{0x4}, {0x2}], 0x2) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0xffffffffffffffff, &(0x7f00000007c0)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 2.041660972s ago: executing program 5 (id=11265): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r0 = fsopen(0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000012940)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000012a00), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000012ac0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f00000108c0)='cmdline\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000012d00)='./tracing\x00', &(0x7f0000012d40)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000012d80)='./tracing/events/sched/filter\x00', 0x1, 0x0) write$binfmt_format(r4, &(0x7f0000012dc0)='0\x00', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x200000a, 0x401d031, 0xffffffffffffffff, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000012e00)={0x1, &(0x7f0000012e40)=[{0x6, 0x5, 0x4, 0x7ffc0001}]}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES64=0x0], 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r5, 0x4048587b, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route(r6, &(0x7f0000013380)={0x0, 0x4d, &(0x7f00000133c0)={&(0x7f0000000040)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x8d1}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000013440)={@loopback}, 0x14) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r7) 1.960857432s ago: executing program 2 (id=11266): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./sys\x00', &(0x7f0000000580)='pipefs\x00', 0x400, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/bus/pnp/drivers/serial\x00', 0x80, 0x0) r1 = openat(r0, &(0x7f0000000600)='bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000640)='00:03', 0x5) mkdir(&(0x7f0000000000)='./dev\x00', 0x1fc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000240)='./dev/sda1\x00', 0x0, &(0x7f0000000700), 0x800) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x2, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x200000, 0x200000, 0x7}) set_mempolicy(0x3, &(0x7f0000000300)=0x4, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x46eb, &(0x7f0000000340)={0x0, 0x1f8a, 0x10000, 0x40003, 0x37f, 0x0, r2}) r4 = landlock_create_ruleset(&(0x7f00000006c0)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@setneightbl={0x34, 0x43, 0x1, 0x2, 0x3, {0x2}, [@NDTA_NAME={0xe, 0x1, 'arp_cache\x00'}, @NDTA_THRESH2={0x8, 0x3, 0xffffffff}, @NDTA_THRESH3={0x8, 0x4, 0x7f}]}, 0x34}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000003c0), 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x2c0442, 0xa6) 1.816021389s ago: executing program 5 (id=11269): close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x101841, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1, &(0x7f0000000500)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x4040040}, 0x4000011) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x1d0, 0x11, 0x148, 0x0, 0x0, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [0xffffff00, 0xff, 0xffffff00], @ipv6=@dev={0xfe, 0x80, '\x00', 0xe}, [0x0, 0xffffff00], @ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xff000000, 0xff], 0x8, 0x6, 0x5e, 0x4e21, 0x4e23, 0x4e24, 0x4e21}, 0x40, 0x8e0}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0xffffffff, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x242, 0x75f65a4e97d6873f, 0x1}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x0, 0x100, @empty, 0x8d}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000b40)=0x3, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000540)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0x7fff3ffc}]}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000ac0)={'sit0\x00', &(0x7f0000000a40)={@multicast1, 0x1}}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}]}}}]}, 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 1.688442703s ago: executing program 1 (id=11270): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000840), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000880)={0xf, &(0x7f0000000140)=[{0x3d, '\x00', @buffer={"5b1eb09cba626c6323a67ed7aeeb3e040000000000000000000000007ff900", 0x20}, 0x1}]}) 1.512177364s ago: executing program 1 (id=11271): r0 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x0) ioctl$FE_READ_STATUS(r0, 0x80046f45, &(0x7f0000000000)) 1.337377854s ago: executing program 1 (id=11272): ioctl$FE_READ_STATUS(0xffffffffffffffff, 0x80046f45, &(0x7f0000000000)) 1.297197339s ago: executing program 5 (id=11274): r0 = socket$inet(0x2, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004ea", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) close_range(r1, r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.160674175s ago: executing program 1 (id=11275): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @dev={0xac, 0x14, 0x14, 0xa}, 0x15, 0x3, 'ovf\x00', 0x1, 0x400000, 0x5e}, 0x2c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000040)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@rand_addr=0x64010100, 0x4e23, 0x0, 0x244, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000140)=@in={0x2, 0x4e23, @remote}, 0x80, 0x0, 0x0, &(0x7f00000001c0)}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000700)={{{@in6=@empty, @in=@empty}}, {{@in6}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast1}}}, &(0x7f0000000800)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000240)={{0x84, @multicast2, 0x4e22, 0x3, 'lc\x00', 0x0, 0x5, 0x77}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x4e23, 0xdac098b1337ed02a, 0xcb, 0x4}}, 0x44) sendmsg$sock(r2, &(0x7f00000002c0)={&(0x7f0000000300)=@in6={0x2, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.097408532s ago: executing program 1 (id=11276): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000780)={'s526\x00', [0x3, 0x8a0, 0xfd, 0x8, 0x2f, 0x80000002, 0xf1, 0x5, 0x200e1, 0x2, 0x0, 0x8500, 0x1003, 0x1000004, 0x11, 0x481, 0x6, 0x0, 0x1ff, 0x9ea, 0x6, 0xfffffffe, 0xe8d, 0x6, 0x746f, 0x1, 0x6, 0x8, 0x7fffffff, 0xfffffffc, 0x207ffd]}) 1.072021635s ago: executing program 4 (id=11277): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18}], 0x48}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x10000, 0x1, 0x1000, 0x2000, &(0x7f0000f64000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 944.75374ms ago: executing program 1 (id=11278): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x401, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121a03, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) setfsuid(0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000280), 0xcd79, 0x141000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f00000002c0)={0xd, 0x0, 0x6, 0x5, 0x4}) 887.811587ms ago: executing program 2 (id=11279): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_ublk_setup_io_uring(0x543d, &(0x7f0000000900)={0x0, 0xe3c1, 0x8000, 0x0, 0x4207}, &(0x7f0000000980), &(0x7f0000000240), &(0x7f0000000a00)) fcntl$getflags(r0, 0x1) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000600)={0x1, &(0x7f0000000640)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) io_setup(0x1, &(0x7f00000006c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000700)=[0x0]) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) sendto(r2, 0x0, 0x0, 0x24004051, 0x0, 0x0) close(0x3) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r6, &(0x7f0000000280)="871e0d82b23b466c7c7bab7df9d32bd3e282c1c197a2ca7b6f2223eb166e09ef926c1be6f254f491bf1c1c8a0e5614f6c973548b5f24b60881622d429d79d604c4ad3470af4b15540589b60318f43e4e8c6225106c62dba571f343a3", &(0x7f00000008c0)=@tcp, 0x1}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000007c0)=[@in6={0xa, 0x4e22, 0x1, @loopback, 0x5}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f00000000c0)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x30}], 0x1, 0x8000) r8 = openat$rtc(0xffffff9c, 0x0, 0x8a000, 0x0) fallocate(r8, 0x10, 0xfaba, 0xc219) connect$inet(0xffffffffffffffff, 0x0, 0x0) 779.308809ms ago: executing program 4 (id=11280): r0 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x0) ioctl$FE_READ_STATUS(r0, 0x80046f45, &(0x7f0000000000)) 702.199148ms ago: executing program 2 (id=11281): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r0 = fsopen(0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000012940)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000012a00), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000012ac0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f00000108c0)='cmdline\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000012d40)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000012d80)='./tracing/events/sched/filter\x00', 0x1, 0x0) write$binfmt_format(r4, &(0x7f0000012dc0)='0\x00', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x200000a, 0x401d031, 0xffffffffffffffff, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000012e00)={0x1, &(0x7f0000012e40)=[{0x6, 0x5, 0x4, 0x7ffc0001}]}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="a114b77c8c6e47701d422be3075be6ce", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r5, 0x4048587b, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route(r6, &(0x7f0000013380)={0x0, 0x4d, &(0x7f00000133c0)={&(0x7f0000000040)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x8d1}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000013440)={@loopback}, 0x14) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r7) 701.181528ms ago: executing program 4 (id=11282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000070000000900010073797a300000000040000000030a01040000000000000000070000000900010073797a30000000000900030073797a300000000014000480080001400000000408000240ffffff3865000000060a01040000000000000000070000000900010073797a30000000000900020073797a30000000002800048024000180090001006d6574610000000014000280080001400000000108000240"], 0xdc}}, 0x0) 487.366933ms ago: executing program 2 (id=11283): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x1ff) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000400)='./bus\x00') chdir(&(0x7f0000000380)='./mnt\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000027c0)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, 0x0, &(0x7f0000002900)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0xee00, @ANYBLOB="040004000000000008000300", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="08000600", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB="100006000000000020"], 0x54, 0x1) 416.620822ms ago: executing program 4 (id=11284): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @dev={0xac, 0x14, 0x14, 0xa}, 0x15, 0x3, 'ovf\x00', 0x1, 0x400000, 0x5e}, 0x2c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000040)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@rand_addr=0x64010100, 0x4e23, 0x0, 0x244, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000140)=@in={0x2, 0x4e23, @remote}, 0x80, 0x0, 0x0, &(0x7f00000001c0)}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000700)={{{@in6=@empty, @in=@empty}}, {{@in6}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast1}}}, &(0x7f0000000800)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000240)={{0x84, @multicast2, 0x4e22, 0x3, 'lc\x00', 0x0, 0x5, 0x77}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x4e23, 0xdac098b1337ed02a, 0xcb, 0x4}}, 0x44) sendmsg$sock(r2, &(0x7f00000002c0)={&(0x7f0000000300)=@in6={0x2, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 189.435058ms ago: executing program 4 (id=11285): syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @remote, {[@noop, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@remote}, {@remote}, {@dev}, {}, {@multicast2}, {@local}, {@local}, {@multicast1}]}]}}}}}}}, 0x0) 186.988679ms ago: executing program 2 (id=11286): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_ublk_setup_io_uring(0x543d, &(0x7f0000000900)={0x0, 0xe3c1, 0x8000, 0x0, 0x4207}, &(0x7f0000000980), &(0x7f0000000240), &(0x7f0000000a00)) fcntl$getflags(r0, 0x1) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000600)={0x1, &(0x7f0000000640)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) io_setup(0x1, &(0x7f00000006c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000700)=[0x0]) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) sendto(r2, 0x0, 0x0, 0x24004051, 0x0, 0x0) close(0x3) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r6, &(0x7f0000000280)="871e0d82b23b466c7c7bab7df9d32bd3e282c1c197a2ca7b6f2223eb166e09ef926c1be6f254f491bf1c1c8a0e5614f6c973548b5f24b60881622d429d79d604c4ad3470af4b15540589b60318f43e4e8c6225106c62dba571f343a38c4edf10c4ff5e44060d0aedb9219dc5c2b3216eba097f5e1e411f19122dc6e9c3fa210b4e7afc251ae54ff17cb5e21b2c8fc52a576c64a35358514a89f84e382d4d7afcd76429e7471b21de0b1518fca6ae409c7900000000", &(0x7f00000008c0)=@tcp, 0x1}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000007c0)=[@in6={0xa, 0x4e22, 0x1, @loopback, 0x5}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f00000000c0)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x30}], 0x1, 0x8000) r8 = openat$rtc(0xffffff9c, 0x0, 0x8a000, 0x0) fallocate(r8, 0x10, 0xfaba, 0xc219) connect$inet(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 4 (id=11287): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./sys\x00', &(0x7f0000000580)='pipefs\x00', 0x400, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/bus/pnp/drivers/serial\x00', 0x80, 0x0) r1 = openat(r0, &(0x7f0000000600)='bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000640)='00:03', 0x5) mkdir(&(0x7f0000000000)='./dev\x00', 0x1fc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000240)='./dev/sda1\x00', 0x0, &(0x7f0000000700), 0x800) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x2, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x200000, 0x200000, 0x7}) set_mempolicy(0x3, &(0x7f0000000300)=0x4, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x46eb, &(0x7f0000000340)={0x0, 0x1f8a, 0x10000, 0x40003, 0x37f, 0x0, r2}) r4 = landlock_create_ruleset(&(0x7f00000006c0)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@setneightbl={0x34, 0x43, 0x1, 0x2, 0x3, {0x2}, [@NDTA_NAME={0xe, 0x1, 'arp_cache\x00'}, @NDTA_THRESH2={0x8, 0x3, 0xffffffff}, @NDTA_THRESH3={0x8, 0x4, 0x7f}]}, 0x34}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000003c0), 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x2c0442, 0xa6) kernel console output (not intermixed with test programs): rch=c000003e syscall=321 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1000.066909][ T1426] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10630'. [ 1000.127883][ T1427] netlink: 'syz.2.10630': attribute type 10 has an invalid length. [ 1000.149289][ T1384] Bluetooth: hci1: command tx timeout [ 1000.187475][T29244] tipc: Left network mode [ 1000.203633][ T28] audit: type=1326 audit(1700000804.652:61011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1412 comm="syz.2.10626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1000.380680][ T28] audit: type=1326 audit(1700000804.652:61012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1412 comm="syz.2.10626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1000.501366][ T28] audit: type=1326 audit(1700000804.652:61013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1412 comm="syz.2.10626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1000.606899][ T28] audit: type=1326 audit(1700000804.652:61014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1412 comm="syz.2.10626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1000.707785][ T28] audit: type=1326 audit(1700000804.652:61015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1412 comm="syz.2.10626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1000.791410][ T28] audit: type=1326 audit(1700000804.652:61016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1412 comm="syz.2.10626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1000.935634][T24721] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1001.090957][ T1380] chnl_net:caif_netlink_parms(): no params data found [ 1001.164287][T24721] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1001.173893][ T5866] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1001.191055][T24721] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1001.231672][T24721] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1001.273464][T24721] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1001.329110][T24721] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1001.376337][T24721] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1001.394281][ T5866] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1001.431647][T24721] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1001.445536][ T5866] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1001.467091][ T1452] ip_tables: iptables: counters copy to user failed while replacing table [ 1001.524750][T24721] usb 3-1: Product: syz [ 1001.529402][ T5866] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1001.549988][T24721] usb 3-1: Manufacturer: syz [ 1001.575523][T24721] cdc_wdm 3-1:1.0: skipping garbage [ 1001.622913][ T5866] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1001.646292][T24721] cdc_wdm 3-1:1.0: skipping garbage [ 1001.659081][ T1453] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1001.680478][T24721] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1001.694036][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1001.713182][ T1452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10639'. [ 1001.723729][T24721] cdc_wdm 3-1:1.0: Unknown control protocol [ 1001.734956][ T5866] usb 6-1: Product: syz [ 1001.739677][ T5866] usb 6-1: Manufacturer: syz [ 1001.760852][ T1380] bridge0: port 1(bridge_slave_0) entered blocking state [ 1001.797806][ T790] usb 3-1: USB disconnect, device number 7 [ 1001.823596][ T1443] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1001.854220][ T1380] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.874026][ T5866] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected [ 1001.911672][ T1380] bridge_slave_0: entered allmulticast mode [ 1001.944365][ T5866] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1001.963976][ T1380] bridge_slave_0: entered promiscuous mode [ 1002.051860][ T1380] bridge0: port 2(bridge_slave_1) entered blocking state [ 1002.104258][ T5774] usb 6-1: USB disconnect, device number 8 [ 1002.151315][ T1380] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.172322][ T5774] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1002.209230][ T1380] bridge_slave_1: entered allmulticast mode [ 1002.228633][ T1384] Bluetooth: hci1: command tx timeout [ 1002.246764][ T5774] garmin_gps 6-1:1.0: device disconnected [ 1002.257840][ T1380] bridge_slave_1: entered promiscuous mode [ 1002.354159][T29244] hsr_slave_0: left promiscuous mode [ 1002.372431][T29244] hsr_slave_1: left promiscuous mode [ 1002.389614][T29244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1002.409408][T29244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1002.437363][T29244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1002.454236][T29244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1002.474016][T29244] bridge_slave_1: left allmulticast mode [ 1002.489197][T29244] bridge_slave_1: left promiscuous mode [ 1002.517445][T29244] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.548375][T29244] bridge_slave_0: left allmulticast mode [ 1002.564319][T29244] bridge_slave_0: left promiscuous mode [ 1002.582913][T29244] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.691639][T29244] veth1_macvtap: left promiscuous mode [ 1002.709478][T29244] veth0_macvtap: left promiscuous mode [ 1002.729284][T29244] veth1_vlan: left promiscuous mode [ 1002.738328][T29244] veth0_vlan: left promiscuous mode [ 1003.042338][T29244] bond18 (unregistering): Released all slaves [ 1003.061036][T29244] bond17 (unregistering): Released all slaves [ 1003.083181][T29244] bond16 (unregistering): Released all slaves [ 1003.112033][T29244] bond15 (unregistering): Released all slaves [ 1003.134150][T29244] bond14 (unregistering): Released all slaves [ 1003.158545][T29244] bond13 (unregistering): Released all slaves [ 1003.179047][T29244] bond12 (unregistering): Released all slaves [ 1003.203199][T29244] bond11 (unregistering): Released all slaves [ 1003.230220][T29244] bond10 (unregistering): Released all slaves [ 1003.256045][T29244] bond9 (unregistering): Released all slaves [ 1003.281436][T29244] bond8 (unregistering): Released all slaves [ 1003.302426][T29244] bond7 (unregistering): Released all slaves [ 1003.331591][T29244] bond6 (unregistering): Released all slaves [ 1003.356947][T29244] bond5 (unregistering): Released all slaves [ 1003.381882][T29244] bond4 (unregistering): Released all slaves [ 1003.402605][T29244] bond3 (unregistering): Released all slaves [ 1003.433190][T29244] bond2 (unregistering): Released all slaves [ 1003.462471][T29244] bond1 (unregistering): Released all slaves [ 1004.302929][T29244] team0 (unregistering): Port device team_slave_1 removed [ 1004.313867][ T1384] Bluetooth: hci1: command tx timeout [ 1004.390516][T29244] team0 (unregistering): Port device team_slave_0 removed [ 1004.452956][T29244] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1004.514363][T29244] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1005.030944][T29244] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1005.042323][T29244] bond0 (unregistering): Released all slaves [ 1005.191273][ T28] kauditd_printk_skb: 145 callbacks suppressed [ 1005.191294][ T28] audit: type=1800 audit(1700000810.522:61162): pid=1456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.10640" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 1005.227103][ T1466] syzkaller0: left promiscuous mode [ 1005.245358][ T1456] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1005.262820][ T1466] syzkaller0: left allmulticast mode [ 1005.283599][ T1456] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1005.321179][ T1380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1005.374933][ T1456] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1005.433845][ T1380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1005.641496][ T1380] team0: Port device team_slave_0 added [ 1005.688701][ T1380] team0: Port device team_slave_1 added [ 1005.705601][ T1481] ip_tables: iptables: counters copy to user failed while replacing table [ 1005.822384][ T1486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10647'. [ 1005.900259][ T1481] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1005.932260][ T1380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1005.971130][ T1380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1006.030083][ T28] audit: type=1326 audit(1700000811.352:61163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1487 comm="syz.5.10650" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855fda8f19 code=0x7ffc0000 [ 1006.123405][ T1380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1006.160545][ T28] audit: type=1326 audit(1700000811.352:61164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1487 comm="syz.5.10650" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855fda8f19 code=0x7ffc0000 [ 1006.219956][ T1380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1006.256010][ T1380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1006.314747][ T28] audit: type=1326 audit(1700000811.352:61165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1487 comm="syz.5.10650" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855fda8f19 code=0x7ffc0000 [ 1006.354718][T24721] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1006.395822][ T1384] Bluetooth: hci1: command tx timeout [ 1006.434699][ T1380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1006.454767][ T1494] input: syz0 as /devices/virtual/input/input11 [ 1006.463527][ T28] audit: type=1326 audit(1700000811.352:61166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1487 comm="syz.5.10650" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855fda8f19 code=0x7ffc0000 [ 1006.618333][T24721] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1006.702334][T24721] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1006.737221][ T28] audit: type=1326 audit(1700000811.352:61167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1487 comm="syz.5.10650" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f855fda8f19 code=0x7ffc0000 [ 1006.816243][T24721] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1006.843859][ T1380] hsr_slave_0: entered promiscuous mode [ 1006.887856][ T1380] hsr_slave_1: entered promiscuous mode [ 1006.925913][T24721] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1006.939203][ T1380] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1006.977255][ T28] audit: type=1326 audit(1700000811.352:61168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1487 comm="syz.5.10650" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855fda8f19 code=0x7ffc0000 [ 1007.014901][T24721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1007.023696][ T1380] Cannot create hsr debugfs directory [ 1007.063446][T24721] usb 3-1: Product: syz [ 1007.098639][T24721] usb 3-1: Manufacturer: syz [ 1007.160338][ T1490] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1007.188713][ T28] audit: type=1326 audit(1700000811.352:61169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1487 comm="syz.5.10650" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855fda8f19 code=0x7ffc0000 [ 1007.249072][T24721] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 1007.305979][T24721] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1007.370839][ T28] audit: type=1326 audit(1700000811.352:61170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1487 comm="syz.5.10650" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855fda8f19 code=0x7ffc0000 [ 1007.495473][ T790] usb 3-1: USB disconnect, device number 8 [ 1007.563376][ T790] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1007.611314][ T28] audit: type=1326 audit(1700000811.352:61171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1487 comm="syz.5.10650" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855fda8f19 code=0x7ffc0000 [ 1007.683368][ T790] garmin_gps 3-1:1.0: device disconnected [ 1007.757085][ T1511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10659'. [ 1007.811923][ T1512] netlink: 'syz.1.10659': attribute type 10 has an invalid length. [ 1008.045951][ T1518] ip_tables: iptables: counters copy to user failed while replacing table [ 1008.187789][ T1518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10662'. [ 1008.239171][ T1518] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1008.780208][ T1380] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1008.873411][ T1380] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1008.967788][ T1380] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1009.078221][ T1380] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1009.284629][ T5774] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1009.503284][ T5774] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.560060][ T5774] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1009.609670][ T1380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1009.627606][ T5774] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1009.647615][ T1547] ip_tables: iptables: counters copy to user failed while replacing table [ 1009.720720][ T1380] 8021q: adding VLAN 0 to HW filter on device team0 [ 1009.730157][ T5774] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1009.783508][ T5774] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1009.826295][ T1547] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1009.839463][ T5774] usb 6-1: Product: syz [ 1009.843770][ T5774] usb 6-1: Manufacturer: syz [ 1009.867679][ T1549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10674'. [ 1009.887662][ T1538] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1009.923156][ T5774] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected [ 1009.932443][ T1551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10675'. [ 1009.956539][ T5774] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1009.976174][T29244] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.983521][T29244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1010.024038][T29244] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.032098][T29244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1010.088883][ T1551] netlink: 'syz.1.10675': attribute type 10 has an invalid length. [ 1010.142121][ T5774] usb 6-1: USB disconnect, device number 9 [ 1010.181952][ T1380] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1010.204309][ T5774] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1010.246227][ T5774] garmin_gps 6-1:1.0: device disconnected [ 1010.278436][ T1380] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1010.539209][ T1561] xt_hashlimit: max too large, truncated to 1048576 [ 1010.657221][ T28] kauditd_printk_skb: 246 callbacks suppressed [ 1010.657232][ T28] audit: type=1326 audit(1700000815.992:61418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1562 comm="syz.2.10679" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1010.856889][ T28] audit: type=1326 audit(1700000816.032:61419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1562 comm="syz.2.10679" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1011.000872][ T1380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1011.041836][ T28] audit: type=1326 audit(1700000816.032:61420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1562 comm="syz.2.10679" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1011.217007][ T28] audit: type=1326 audit(1700000816.032:61421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1562 comm="syz.2.10679" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1011.287714][ T1580] ip_tables: iptables: counters copy to user failed while replacing table [ 1011.342877][ T1580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10683'. [ 1011.362861][ T28] audit: type=1326 audit(1700000816.032:61422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1562 comm="syz.2.10679" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1011.403791][ T1580] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1011.418410][ T1583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10684'. [ 1011.455180][T24721] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1011.473746][ T1583] netlink: 'syz.2.10684': attribute type 10 has an invalid length. [ 1011.488196][ T28] audit: type=1326 audit(1700000816.032:61423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1562 comm="syz.2.10679" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1011.650311][ T28] audit: type=1326 audit(1700000816.032:61424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1562 comm="syz.2.10679" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1011.704937][T24721] usb 6-1: Using ep0 maxpacket: 32 [ 1011.735541][T24721] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1011.774744][T24721] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 1011.813256][T24721] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 1011.828806][ T28] audit: type=1326 audit(1700000816.032:61425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1562 comm="syz.2.10679" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1011.883429][T24721] usb 6-1: config 14 has no interface number 0 [ 1011.922527][T24721] usb 6-1: config 14 has no interface number 1 [ 1011.956468][T24721] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1011.990363][ T1380] veth0_vlan: entered promiscuous mode [ 1011.998429][ T28] audit: type=1326 audit(1700000816.032:61426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1562 comm="syz.2.10679" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1012.049099][T24721] usb 6-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 1012.068850][ T1380] veth1_vlan: entered promiscuous mode [ 1012.096415][T24721] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1012.128814][ T28] audit: type=1326 audit(1700000816.042:61427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1562 comm="syz.2.10679" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1012.163560][ T1380] veth0_macvtap: entered promiscuous mode [ 1012.171456][T24721] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1012.209625][ T1380] veth1_macvtap: entered promiscuous mode [ 1012.222921][T24721] usb 6-1: config 14 interface 57 has no altsetting 0 [ 1012.255059][T24721] usb 6-1: config 14 interface 228 has no altsetting 0 [ 1012.277467][ T1380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1012.304816][T23784] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1012.321259][T24721] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1012.345595][T24721] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.354314][ T1380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1012.372392][T24721] usb 6-1: Product: syz [ 1012.382281][ T1380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1012.397398][T24721] usb 6-1: Manufacturer: syz [ 1012.402043][T24721] usb 6-1: SerialNumber: syz [ 1012.429860][ T1380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1012.466495][ T1380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1012.500081][ T1380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1012.524644][T23784] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.553188][T23784] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1012.566909][ T1380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1012.588278][T23784] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1012.609838][ T1380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1012.638623][ T1380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1012.695212][T23784] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1012.730380][ T1380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1012.768707][T23784] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1012.797409][ T1380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1012.821661][T23784] usb 3-1: Product: syz [ 1012.837196][T23784] usb 3-1: Manufacturer: syz [ 1012.852247][ T1380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1012.884851][ T1597] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1012.899439][T24721] legousbtower 6-1:14.57: interrupt endpoints not found [ 1012.934008][ T1380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1012.948479][T23784] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 1012.985226][T23784] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1013.030516][ T1380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1013.100719][T24721] legousbtower 6-1:14.228: interrupt endpoints not found [ 1013.120710][ T1380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1013.196811][ T1380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1013.277736][ T5774] usb 3-1: USB disconnect, device number 9 [ 1013.304323][ T1380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1013.340623][ T5774] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1013.413121][ T1380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1013.458365][ T5774] garmin_gps 3-1:1.0: device disconnected [ 1013.499800][ T1380] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.554374][ T1380] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.580205][ T1380] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.604304][ T1380] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.861922][ T1626] xt_hashlimit: max too large, truncated to 1048576 [ 1013.891977][T29243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1013.935457][T29243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1014.050576][T13098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1014.122218][T13098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1014.469332][ T1645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10693'. [ 1014.550777][ T1645] netlink: 'syz.1.10693': attribute type 10 has an invalid length. [ 1014.740003][ T1651] ip_tables: iptables: counters copy to user failed while replacing table [ 1014.833294][ T1651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10694'. [ 1014.890879][ T1651] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1015.078583][ T1663] xt_hashlimit: max too large, truncated to 1048576 [ 1015.217680][ T5774] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1015.253870][T23784] usb 6-1: USB disconnect, device number 10 [ 1015.481505][ T5774] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1015.563785][ T5774] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1015.623046][ T5774] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1015.734183][ T5774] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1015.790993][ T5774] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1015.859254][ T5774] usb 2-1: Product: syz [ 1015.889128][ T5774] usb 2-1: Manufacturer: syz [ 1015.965497][ T1659] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1016.007858][ T5774] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 1016.072315][ T28] kauditd_printk_skb: 304 callbacks suppressed [ 1016.072326][ T28] audit: type=1326 audit(1700000821.402:61732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1689 comm="syz.5.10707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855fda8f19 code=0x7ffc0000 [ 1016.126183][ T5774] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1016.309335][ T5774] usb 2-1: USB disconnect, device number 11 [ 1016.380374][ T5774] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1016.395178][ T28] audit: type=1326 audit(1700000821.442:61733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1689 comm="syz.5.10707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855fda8f19 code=0x7ffc0000 [ 1016.470353][ T5774] garmin_gps 2-1:1.0: device disconnected [ 1016.500525][ T1703] netlink: 'syz.5.10710': attribute type 10 has an invalid length. [ 1016.538963][ T1704] xt_hashlimit: max too large, truncated to 1048576 [ 1016.570823][ T1703] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.578246][ T1703] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.605767][ T28] audit: type=1326 audit(1700000821.442:61734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1689 comm="syz.5.10707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855fda8f19 code=0x7ffc0000 [ 1016.780293][ T28] audit: type=1326 audit(1700000821.442:61735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1689 comm="syz.5.10707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855fda8f19 code=0x7ffc0000 [ 1016.997541][ T28] audit: type=1326 audit(1700000821.442:61736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1689 comm="syz.5.10707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f855fda8f19 code=0x7ffc0000 [ 1017.149600][ T1720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10715'. [ 1017.218858][ T28] audit: type=1326 audit(1700000821.442:61737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1689 comm="syz.5.10707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855fda8f19 code=0x7ffc0000 [ 1017.262077][ T1720] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1017.365639][ T28] audit: type=1326 audit(1700000821.442:61738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1689 comm="syz.5.10707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855fda8f19 code=0x7ffc0000 [ 1017.563556][ T28] audit: type=1326 audit(1700000821.442:61739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1689 comm="syz.5.10707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855fda8f19 code=0x7ffc0000 [ 1017.816063][ T28] audit: type=1326 audit(1700000821.442:61740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1689 comm="syz.5.10707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f855fda8f19 code=0x7ffc0000 [ 1017.970054][ T28] audit: type=1326 audit(1700000821.452:61741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1689 comm="syz.5.10707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855fda8f19 code=0x7ffc0000 [ 1018.311719][ T1761] xt_hashlimit: max too large, truncated to 1048576 [ 1018.464986][ T5774] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1018.687161][ T5774] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1018.734942][ T1779] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10728'. [ 1018.760087][ T5774] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1018.813436][ T1779] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1018.863379][ T5774] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1018.927765][ T5774] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1018.988280][ T5774] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1019.044835][ T5774] usb 2-1: Product: syz [ 1019.049369][ T5774] usb 2-1: Manufacturer: syz [ 1019.092400][ T1787] input: syz0 as /devices/virtual/input/input12 [ 1019.122916][ T1755] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1019.190373][ T5774] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 1019.259251][ T5774] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1019.450695][T24721] usb 2-1: USB disconnect, device number 12 [ 1019.486619][T24721] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1019.564216][T24721] garmin_gps 2-1:1.0: device disconnected [ 1019.820913][ T1809] xt_hashlimit: max too large, truncated to 1048576 [ 1019.890861][ T1811] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10739'. [ 1019.930238][ T1811] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1020.333708][ T1823] input: syz0 as /devices/virtual/input/input13 [ 1020.600095][ T1835] netlink: 'syz.4.10746': attribute type 10 has an invalid length. [ 1020.697345][ T1835] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.705063][ T1835] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.816187][ T1835] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.824828][ T1835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1020.832539][ T1835] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.840554][ T1835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1020.886049][ T1843] ip_tables: iptables: counters copy to user failed while replacing table [ 1020.980816][ T1835] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1021.035658][ T1849] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1021.095562][ T1847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10749'. [ 1021.179786][ T1852] xt_hashlimit: max too large, truncated to 1048576 [ 1021.686281][ T1872] netlink: 'syz.5.10756': attribute type 1 has an invalid length. [ 1021.824214][ T1872] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1021.950928][ T1875] bond1: (slave ip6gretap1): making interface the new active one [ 1022.044052][ T1875] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1022.401364][ T1900] xt_hashlimit: max too large, truncated to 1048576 [ 1022.497051][ T1903] ip_tables: iptables: counters copy to user failed while replacing table [ 1022.619787][ T1903] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10763'. [ 1022.668038][ T1903] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1023.169951][ T1927] FAULT_INJECTION: forcing a failure. [ 1023.169951][ T1927] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1023.218319][ T28] kauditd_printk_skb: 508 callbacks suppressed [ 1023.218330][ T28] audit: type=1326 audit(1700000828.552:62250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1925 comm="syz.2.10771" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1023.272205][ T1927] CPU: 0 PID: 1927 Comm: syz.1.10770 Not tainted syzkaller #0 [ 1023.280226][ T1927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1023.292340][ T1927] Call Trace: [ 1023.295739][ T1927] [ 1023.299142][ T1927] dump_stack_lvl+0x18c/0x250 [ 1023.304823][ T1927] ? show_regs_print_info+0x20/0x20 [ 1023.310121][ T1927] ? load_image+0x420/0x420 [ 1023.315082][ T1927] ? __might_fault+0xaa/0x120 [ 1023.320131][ T1927] should_fail_ex+0x394/0x4c0 [ 1023.325171][ T1927] get_futex_key+0x134/0xf40 [ 1023.330073][ T1927] ? futex_setup_timer+0xc0/0xc0 [ 1023.335310][ T1927] futex_wake+0x127/0x4f0 [ 1023.339830][ T1927] ? futex_wake_mark+0x150/0x150 [ 1023.344880][ T1927] ? __lock_acquire+0x7eb0/0x7eb0 [ 1023.352460][ T1927] ? file_end_write+0x159/0x250 [ 1023.358844][ T1927] ? vfs_write+0x5de/0x9a0 [ 1023.363440][ T1927] do_futex+0x35d/0x3e0 [ 1023.370148][ T1927] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1023.377379][ T1927] __se_sys_futex+0x3a9/0x440 [ 1023.382158][ T1927] ? __x64_sys_futex+0xf0/0xf0 [ 1023.387099][ T1927] ? __x64_sys_futex+0x21/0xf0 [ 1023.393102][ T1927] do_syscall_64+0x55/0xb0 [ 1023.398684][ T1927] ? clear_bhb_loop+0x40/0x90 [ 1023.403451][ T1927] ? clear_bhb_loop+0x40/0x90 [ 1023.408940][ T1927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1023.415041][ T1927] RIP: 0033:0x7f0bbb3a8f19 [ 1023.419990][ T1927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1023.444691][ T1927] RSP: 002b:00007f0bbc1f30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1023.454386][ T1927] RAX: ffffffffffffffda RBX: 00007f0bbb625fa8 RCX: 00007f0bbb3a8f19 [ 1023.463605][ T1927] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0bbb625fac [ 1023.472738][ T1927] RBP: 00007f0bbb625fa0 R08: 0000000000745a01 R09: 0000000000000000 [ 1023.481073][ T1927] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1023.490270][ T1927] R13: 00007f0bbb626038 R14: 00007ffd1182cbc0 R15: 00007ffd1182cca8 [ 1023.500535][ T1927] [ 1023.534721][ T28] audit: type=1326 audit(1700000828.582:62251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1925 comm="syz.2.10771" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1023.584266][ T28] audit: type=1326 audit(1700000828.582:62252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1925 comm="syz.2.10771" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1023.643466][ T28] audit: type=1326 audit(1700000828.582:62253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1925 comm="syz.2.10771" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1023.716221][ T28] audit: type=1326 audit(1700000828.582:62254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1925 comm="syz.2.10771" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1023.831578][ T28] audit: type=1326 audit(1700000828.582:62255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1925 comm="syz.2.10771" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1023.954707][ T28] audit: type=1326 audit(1700000828.592:62256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1925 comm="syz.2.10771" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1024.002631][ T1941] ip_tables: iptables: counters copy to user failed while replacing table [ 1024.031619][ T28] audit: type=1326 audit(1700000828.592:62257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1925 comm="syz.2.10771" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1024.068207][ T1941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10776'. [ 1024.088569][ T1941] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1024.124839][ T28] audit: type=1326 audit(1700000828.592:62258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1925 comm="syz.2.10771" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1024.269117][ T28] audit: type=1326 audit(1700000828.592:62259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1925 comm="syz.2.10771" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1024.337719][ T1948] xt_hashlimit: max too large, truncated to 1048576 [ 1024.721792][ T1961] netlink: 'syz.2.10780': attribute type 1 has an invalid length. [ 1024.869319][ T1961] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1024.884638][T23784] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1025.003001][ T1964] bond4: (slave ip6gretap1): making interface the new active one [ 1025.105326][T23784] usb 6-1: device descriptor read/64, error -71 [ 1025.178409][ T1964] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1025.424638][T23784] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1025.529501][ T1984] ip_tables: iptables: counters copy to user failed while replacing table [ 1025.540714][ T1982] FAULT_INJECTION: forcing a failure. [ 1025.540714][ T1982] name failslab, interval 1, probability 0, space 0, times 0 [ 1025.601308][ T1982] CPU: 0 PID: 1982 Comm: syz.1.10787 Not tainted syzkaller #0 [ 1025.610938][ T1982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1025.622142][ T1982] Call Trace: [ 1025.626065][ T1982] [ 1025.629270][ T1982] dump_stack_lvl+0x18c/0x250 [ 1025.634322][ T1982] ? show_regs_print_info+0x20/0x20 [ 1025.639879][ T1982] ? load_image+0x420/0x420 [ 1025.645175][ T1982] ? __might_sleep+0xe0/0xe0 [ 1025.650284][ T1982] ? __lock_acquire+0x7eb0/0x7eb0 [ 1025.656563][ T1982] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1025.662810][ T1982] should_fail_ex+0x394/0x4c0 [ 1025.668065][ T1982] should_failslab+0x9/0x20 [ 1025.673514][ T1982] slab_pre_alloc_hook+0x59/0x300 [ 1025.679431][ T1982] ? lockdep_hardirqs_on+0x98/0x150 [ 1025.684647][ T1982] kmem_cache_alloc+0x5a/0x2d0 [ 1025.689627][ T1982] ? taskstats_exit+0x14d/0xce0 [ 1025.695304][ T1982] taskstats_exit+0x14d/0xce0 [ 1025.701081][ T1982] ? sysctl_delayacct+0x220/0x220 [ 1025.708554][ T1982] ? rcu_read_lock_any_held+0xb4/0x140 [ 1025.715526][ T1982] ? rcu_read_lock_bh_held+0x100/0x100 [ 1025.722398][ T1982] do_exit+0x8fc/0x2530 [ 1025.727692][ T1982] ? put_task_struct+0xc0/0xc0 [ 1025.732846][ T1982] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1025.739201][ T1982] ? get_signal+0x100e/0x1390 [ 1025.745039][ T1982] ? lock_chain_count+0x20/0x20 [ 1025.750897][ T1982] do_group_exit+0x22d/0x2f0 [ 1025.756962][ T1982] ? lockdep_hardirqs_on+0x98/0x150 [ 1025.763031][ T1982] get_signal+0x12a6/0x1390 [ 1025.768190][ T1982] arch_do_signal_or_restart+0xc2/0x7b0 [ 1025.775591][ T1982] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1025.781721][ T1982] ? get_sigframe_size+0x20/0x20 [ 1025.787113][ T1982] ? exit_to_user_mode_loop+0x3b/0x110 [ 1025.794193][ T1982] exit_to_user_mode_loop+0x70/0x110 [ 1025.799590][ T1982] exit_to_user_mode_prepare+0xee/0x180 [ 1025.805154][ T1982] syscall_exit_to_user_mode+0x1a/0x50 [ 1025.811643][ T1982] do_syscall_64+0x61/0xb0 [ 1025.816411][ T1982] ? clear_bhb_loop+0x40/0x90 [ 1025.821396][ T1982] ? clear_bhb_loop+0x40/0x90 [ 1025.826649][ T1982] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1025.833359][ T1982] RIP: 0033:0x7f0bbb3a8f19 [ 1025.838398][ T1982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1025.858739][ T1982] RSP: 002b:00007f0bbc1f30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1025.867430][ T1982] RAX: fffffffffffffe00 RBX: 00007f0bbb625fa8 RCX: 00007f0bbb3a8f19 [ 1025.875478][ T1982] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0bbb625fa8 [ 1025.884234][ T1982] RBP: 00007f0bbb625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1025.892445][ T1982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1025.900922][ T1982] R13: 00007f0bbb626038 R14: 00007ffd1182cbc0 R15: 00007ffd1182cca8 [ 1025.909142][ T1982] [ 1025.938004][T23784] usb 6-1: device descriptor read/64, error -71 [ 1025.985325][ T1989] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1026.045315][ T1987] team0 (unregistering): Port device team_slave_0 removed [ 1026.064844][T23784] usb usb6-port1: attempt power cycle [ 1026.086672][ T1987] team0 (unregistering): Port device team_slave_1 removed [ 1026.137854][ T1984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10786'. [ 1026.393503][ T1998] xt_hashlimit: max too large, truncated to 1048576 [ 1026.474817][T23784] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1026.505757][T23784] usb 6-1: device descriptor read/8, error -71 [ 1026.804915][T23784] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1026.866079][T23784] usb 6-1: device descriptor read/8, error -71 [ 1027.034788][T23784] usb usb6-port1: unable to enumerate USB device [ 1027.317728][ T2026] team0 (unregistering): Port device team_slave_0 removed [ 1027.391401][ T2026] team0 (unregistering): Port device team_slave_1 removed [ 1027.760627][ T2043] xt_hashlimit: max too large, truncated to 1048576 [ 1028.406170][ T28] kauditd_printk_skb: 398 callbacks suppressed [ 1028.406180][ T28] audit: type=1326 audit(1700000833.742:62658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2068 comm="syz.2.10810" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1028.523717][ T28] audit: type=1326 audit(1700000833.772:62659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2063 comm="syz.4.10809" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221c1a8f19 code=0x7ffc0000 [ 1028.592216][ T28] audit: type=1326 audit(1700000833.772:62660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2063 comm="syz.4.10809" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221c1a8f19 code=0x7ffc0000 [ 1028.650757][ T2075] team0 (unregistering): Port device team_slave_0 removed [ 1028.664375][ T28] audit: type=1326 audit(1700000833.772:62661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2063 comm="syz.4.10809" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221c1a8f19 code=0x7ffc0000 [ 1028.698414][ T2075] team0 (unregistering): Port device team_slave_1 removed [ 1028.731892][ T28] audit: type=1326 audit(1700000833.772:62662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2063 comm="syz.4.10809" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221c1a8f19 code=0x7ffc0000 [ 1028.762806][ T28] audit: type=1326 audit(1700000833.772:62663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2063 comm="syz.4.10809" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221c1a8f19 code=0x7ffc0000 [ 1028.788599][T23784] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1028.802162][ T28] audit: type=1326 audit(1700000833.772:62664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2063 comm="syz.4.10809" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f221c1a8f19 code=0x7ffc0000 [ 1028.844565][ T28] audit: type=1326 audit(1700000833.772:62665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2063 comm="syz.4.10809" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221c1a8f19 code=0x7ffc0000 [ 1028.938730][ T28] audit: type=1326 audit(1700000833.772:62666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2063 comm="syz.4.10809" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221c1a8f19 code=0x7ffc0000 [ 1028.968116][T23784] usb 6-1: device descriptor read/64, error -71 [ 1028.979710][ T28] audit: type=1326 audit(1700000833.772:62667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2063 comm="syz.4.10809" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221c1a8f19 code=0x7ffc0000 [ 1029.200388][T24721] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1029.244649][T23784] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1029.259369][ T2084] xt_hashlimit: max too large, truncated to 1048576 [ 1029.319918][ T2087] 9pnet_virtio: no channels available for device syz [ 1029.396259][T24721] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1029.414581][T23784] usb 6-1: device descriptor read/64, error -71 [ 1029.430799][T24721] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1029.476091][T24721] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1029.526094][T24721] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 1029.568267][T23784] usb usb6-port1: attempt power cycle [ 1029.582462][T24721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.628853][ T2078] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1029.652848][ T2078] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1029.713796][T24721] pl2303 2-1:1.0: pl2303 converter detected [ 1029.752124][T24721] usb 2-1: pl2303 converter now attached to ttyUSB0 [ 1029.829979][ T2098] netlink: 'syz.4.10821': attribute type 10 has an invalid length. [ 1029.868398][ T2098] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.877071][ T2098] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.004653][T23784] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1030.075524][T23784] usb 6-1: device descriptor read/8, error -71 [ 1030.164338][T24721] usb 2-1: USB disconnect, device number 13 [ 1030.212332][T24721] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 1030.266829][T24721] pl2303 2-1:1.0: device disconnected [ 1030.394712][T23784] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1030.448720][T23784] usb 6-1: device descriptor read/8, error -71 [ 1030.490305][ T2115] FAULT_INJECTION: forcing a failure. [ 1030.490305][ T2115] name failslab, interval 1, probability 0, space 0, times 0 [ 1030.544950][ T2115] CPU: 0 PID: 2115 Comm: syz.2.10824 Not tainted syzkaller #0 [ 1030.552818][ T2115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1030.564396][ T2115] Call Trace: [ 1030.568334][ T2115] [ 1030.571280][ T2115] dump_stack_lvl+0x18c/0x250 [ 1030.575965][ T2115] ? show_regs_print_info+0x20/0x20 [ 1030.581285][ T2115] ? load_image+0x420/0x420 [ 1030.585958][ T2115] ? __might_sleep+0xe0/0xe0 [ 1030.590591][ T2115] ? __lock_acquire+0x7eb0/0x7eb0 [ 1030.595718][ T2115] should_fail_ex+0x394/0x4c0 [ 1030.600412][ T2115] should_failslab+0x9/0x20 [ 1030.605563][ T2115] slab_pre_alloc_hook+0x59/0x300 [ 1030.610630][ T2115] ? pkcs1pad_verify+0x10d/0x5e0 [ 1030.615627][ T2115] ? pkcs1pad_verify+0x10d/0x5e0 [ 1030.620590][ T2115] __kmem_cache_alloc_node+0x53/0x260 [ 1030.625992][ T2115] ? pkcs1pad_verify+0x10d/0x5e0 [ 1030.631234][ T2115] __kmalloc+0xa7/0x240 [ 1030.636346][ T2115] pkcs1pad_verify+0x10d/0x5e0 [ 1030.641389][ T2115] crypto_sig_verify+0x1bc/0x250 [ 1030.646624][ T2115] ? crypto_sig_sign+0x240/0x240 [ 1030.653575][ T2115] ? rsa_max_size+0x19/0x70 [ 1030.659431][ T2115] ? pkcs1pad_set_pub_key+0x15d/0x1c0 [ 1030.664833][ T2115] public_key_verify_signature+0x607/0x870 [ 1030.670637][ T2115] ? slab_free_freelist_hook+0x154/0x240 [ 1030.676353][ T2115] ? public_key_free+0x80/0x80 [ 1030.681111][ T2115] ? pkcs7_digest+0x6ce/0x8a0 [ 1030.686049][ T2115] ? asymmetric_key_id_same+0x67/0xe0 [ 1030.692306][ T2115] pkcs7_verify+0x43c/0x1340 [ 1030.697530][ T2115] ? pkcs7_supply_detached_data+0x4d/0xb0 [ 1030.703281][ T2115] verify_pkcs7_message_sig+0xf8/0x2b0 [ 1030.708769][ T2115] ? restrict_link_by_digsig_builtin_and_secondary+0x80/0x80 [ 1030.716318][ T2115] ? pkcs7_parse_message+0x4c6/0x520 [ 1030.721695][ T2115] ? __kmem_cache_free+0xba/0x1f0 [ 1030.726780][ T2115] ? pkcs7_parse_message+0x4c6/0x520 [ 1030.732254][ T2115] verify_pkcs7_signature+0x6a/0x90 [ 1030.737499][ T2115] valid_regdb+0x1eb/0x5d0 [ 1030.743241][ T2115] ? request_firmware+0x50/0x50 [ 1030.748214][ T2115] ? reg_reload_regdb+0x490/0x490 [ 1030.753787][ T2115] ? netdev_refcnt_read+0x60/0x60 [ 1030.758840][ T2115] reg_reload_regdb+0xf3/0x490 [ 1030.763857][ T2115] ? __nla_parse+0x40/0x50 [ 1030.768640][ T2115] ? reg_query_regdb_wmm+0x510/0x510 [ 1030.774029][ T2115] genl_family_rcv_msg_doit+0x21a/0x310 [ 1030.779787][ T2115] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1030.786319][ T2115] ? bpf_lsm_capable+0x9/0x10 [ 1030.791166][ T2115] ? security_capable+0x89/0xb0 [ 1030.796295][ T2115] genl_rcv_msg+0x611/0x7a0 [ 1030.800821][ T2115] ? genl_bind+0x360/0x360 [ 1030.805442][ T2115] ? nl80211_exit+0x30/0x30 [ 1030.810292][ T2115] ? nl80211_req_set_reg+0x210/0x210 [ 1030.815940][ T2115] ? nl80211_pre_doit+0x890/0x890 [ 1030.821203][ T2115] ? ref_tracker_free+0x686/0x830 [ 1030.826441][ T2115] netlink_rcv_skb+0x235/0x4c0 [ 1030.831514][ T2115] ? genl_bind+0x360/0x360 [ 1030.836228][ T2115] ? netlink_ack+0x1160/0x1160 [ 1030.841112][ T2115] ? __lock_acquire+0x7eb0/0x7eb0 [ 1030.846318][ T2115] ? down_read+0x1ac/0x2e0 [ 1030.850930][ T2115] genl_rcv+0x28/0x40 [ 1030.855173][ T2115] netlink_unicast+0x856/0x9e0 [ 1030.862960][ T2115] netlink_sendmsg+0x8d0/0xbf0 [ 1030.869212][ T2115] ? netlink_getsockopt+0x590/0x590 [ 1030.874434][ T2115] ? apparmor_socket_sendmsg+0x170/0x330 [ 1030.880435][ T2115] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1030.885727][ T2115] ? security_socket_sendmsg+0x80/0xa0 [ 1030.891402][ T2115] ? netlink_getsockopt+0x590/0x590 [ 1030.897403][ T2115] ____sys_sendmsg+0x61b/0x980 [ 1030.902768][ T2115] ? __asan_memset+0x22/0x40 [ 1030.908495][ T2115] ? __sys_sendmsg_sock+0x30/0x30 [ 1030.914768][ T2115] ? __import_iovec+0x5f2/0x850 [ 1030.921910][ T2115] ? import_iovec+0x73/0xa0 [ 1030.927300][ T2115] ___sys_sendmsg+0x2a6/0x360 [ 1030.933482][ T2115] ? __sys_sendmsg+0x2b0/0x2b0 [ 1030.938890][ T2115] __se_sys_sendmsg+0x1d0/0x2c0 [ 1030.946022][ T2115] ? __x64_sys_sendmsg+0x80/0x80 [ 1030.951408][ T2115] ? lockdep_hardirqs_on+0x98/0x150 [ 1030.959498][ T2115] do_syscall_64+0x55/0xb0 [ 1030.963946][ T2115] ? clear_bhb_loop+0x40/0x90 [ 1030.969939][ T2115] ? clear_bhb_loop+0x40/0x90 [ 1030.975629][ T2115] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1030.982876][ T2115] RIP: 0033:0x7fc530fa8f19 [ 1030.988459][ T2115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1031.014838][ T2115] RSP: 002b:00007fc531d82028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1031.025876][ T2115] RAX: ffffffffffffffda RBX: 00007fc531225fa0 RCX: 00007fc530fa8f19 [ 1031.037065][ T2115] RDX: 0000000020008004 RSI: 0000200000000c40 RDI: 0000000000000009 [ 1031.047268][ T2115] RBP: 00007fc531037f6d R08: 0000000000000000 R09: 0000000000000000 [ 1031.056961][ T2115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1031.067544][ T2115] R13: 00007fc531226038 R14: 00007fc531225fa0 R15: 00007fff23d27638 [ 1031.076941][ T2115] [ 1031.095938][T23784] usb usb6-port1: unable to enumerate USB device [ 1031.282750][ T2115] syz.2.10824 (2115) used greatest stack depth: 17832 bytes left [ 1031.470929][ T2128] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10831'. [ 1031.493278][ T2130] ip_tables: iptables: counters copy to user failed while replacing table [ 1031.546704][ T2128] netlink: 'syz.1.10831': attribute type 10 has an invalid length. [ 1031.618564][ T2130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10830'. [ 1031.654094][ T2133] device-mapper: ioctl: Unable to rename non-existent device, to syzf1 [ 1031.696390][ T2130] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1032.285711][T23784] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1032.495358][T23784] usb 6-1: Using ep0 maxpacket: 8 [ 1032.513061][ T2165] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10842'. [ 1032.540240][T23784] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1032.569178][ T2165] netlink: 'syz.4.10842': attribute type 10 has an invalid length. [ 1032.587459][T23784] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1032.632018][T23784] usb 6-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 1032.677228][T23784] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.705630][T24721] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1032.746949][T23784] kobil_sct 6-1:1.0: KOBIL USB smart card terminal converter detected [ 1032.806642][T23784] usb 6-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1032.922843][T24721] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1032.934407][T24721] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1033.000901][T24721] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1033.052272][T24721] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.108201][T24721] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1033.172118][T24721] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1033.220091][T24721] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1033.257209][T24721] usb 2-1: Product: syz [ 1033.285728][T24721] usb 2-1: Manufacturer: syz [ 1033.332750][T24721] cdc_wdm 2-1:1.0: skipping garbage [ 1033.372895][ T2180] ip_tables: iptables: counters copy to user failed while replacing table [ 1033.381990][T24721] cdc_wdm 2-1:1.0: skipping garbage [ 1033.403868][T24721] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1033.450461][T24721] cdc_wdm 2-1:1.0: Unknown control protocol [ 1033.462776][ T2180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10846'. [ 1033.509714][ T2180] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1033.523859][T24721] usb 6-1: USB disconnect, device number 19 [ 1033.548561][ T2161] cdc_wdm 2-1:1.0: Error submitting int urb - -90 [ 1033.577673][T24721] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1033.608868][ T5774] usb 2-1: USB disconnect, device number 14 [ 1033.666950][T24721] kobil_sct 6-1:1.0: device disconnected [ 1033.899407][ T2195] overlayfs: failed to resolve './file0': -2 [ 1033.916725][ T28] kauditd_printk_skb: 452 callbacks suppressed [ 1033.916735][ T28] audit: type=1326 audit(1700000839.242:63120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2193 comm="syz.2.10848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1034.029921][ T28] audit: type=1326 audit(1700000839.242:63121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2193 comm="syz.2.10848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1034.155120][ T28] audit: type=1326 audit(1700000839.242:63122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2193 comm="syz.2.10848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1034.248093][ T2204] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10852'. [ 1034.282367][ T2204] netlink: 'syz.4.10852': attribute type 10 has an invalid length. [ 1034.294631][ T28] audit: type=1326 audit(1700000839.252:63123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2193 comm="syz.2.10848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1034.432463][ T28] audit: type=1326 audit(1700000839.252:63124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2193 comm="syz.2.10848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1034.565019][ T28] audit: type=1326 audit(1700000839.252:63125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2193 comm="syz.2.10848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1034.642322][ T2212] ip_tables: iptables: counters copy to user failed while replacing table [ 1034.668823][ T28] audit: type=1326 audit(1700000839.252:63126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2193 comm="syz.2.10848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1034.713527][ T2212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10855'. [ 1034.751875][ T2212] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1034.771675][ T28] audit: type=1326 audit(1700000839.252:63127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2193 comm="syz.2.10848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1034.854190][ T28] audit: type=1326 audit(1700000839.282:63128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2193 comm="syz.2.10848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1034.953111][ T28] audit: type=1326 audit(1700000839.282:63129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2193 comm="syz.2.10848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1035.707158][ T2239] ip_tables: iptables: counters copy to user failed while replacing table [ 1035.822612][ T2239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10865'. [ 1035.874331][ T2239] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1036.135472][ T2242] team0 (unregistering): Port device team_slave_0 removed [ 1036.205225][ T2242] team0 (unregistering): Port device team_slave_1 removed [ 1037.141466][ T2285] ip_tables: iptables: counters copy to user failed while replacing table [ 1037.215393][ T5864] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1037.236690][ T2285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10879'. [ 1037.301558][ T2287] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1037.389006][ T2288] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 1037.461242][ T5864] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1037.530837][ T2288] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1037.554958][ T5864] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1037.620957][ T5864] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1037.659855][ T2288] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 1037.708222][T24721] IPVS: starting estimator thread 0... [ 1037.727094][ T2288] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 1037.755099][ T5864] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1037.799629][ T2288] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 1037.819203][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1037.854780][ T2303] IPVS: using max 35 ests per chain, 84000 per kthread [ 1037.895532][ T2288] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 1037.921041][ T5864] usb 3-1: Product: syz [ 1037.964871][ T2288] kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 1037.979635][ T5864] usb 3-1: Manufacturer: syz [ 1038.013728][ T2276] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1038.055533][ T2288] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1038.100743][ T5864] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 1038.111636][ T2288] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 1038.151632][ T5864] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1038.174720][ T2288] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1038.405518][ T5774] usb 3-1: USB disconnect, device number 10 [ 1038.479378][ T5774] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1038.517373][ T2314] usb usb2: check_ctrlrecip: process 2314 (syz.4.10885) requesting ep 01 but needs 81 [ 1038.550003][ T5774] garmin_gps 3-1:1.0: device disconnected [ 1038.581161][ T2314] usb usb2: usbfs: process 2314 (syz.4.10885) did not claim interface 0 before use [ 1038.925841][ T28] kauditd_printk_skb: 620 callbacks suppressed [ 1038.925854][ T28] audit: type=1326 audit(1700000844.262:63750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2322 comm="syz.5.10889" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855fda8f19 code=0x7ffc0000 [ 1039.125508][ T28] audit: type=1326 audit(1700000844.312:63751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2322 comm="syz.5.10889" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855fda8f19 code=0x7ffc0000 [ 1039.270172][ T28] audit: type=1326 audit(1700000844.312:63752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2322 comm="syz.5.10889" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855fda8f19 code=0x7ffc0000 [ 1039.388237][ T28] audit: type=1326 audit(1700000844.312:63753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2322 comm="syz.5.10889" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855fda8f19 code=0x7ffc0000 [ 1039.544293][ T28] audit: type=1326 audit(1700000844.312:63754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2322 comm="syz.5.10889" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f855fda8f19 code=0x7ffc0000 [ 1039.740418][ T28] audit: type=1326 audit(1700000844.312:63755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2322 comm="syz.5.10889" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855fda8f19 code=0x7ffc0000 [ 1039.914012][ T28] audit: type=1326 audit(1700000844.322:63756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2322 comm="syz.5.10889" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855fda8f19 code=0x7ffc0000 [ 1040.163767][ T28] audit: type=1326 audit(1700000844.322:63757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2322 comm="syz.5.10889" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855fda8f19 code=0x7ffc0000 [ 1040.339294][ T28] audit: type=1326 audit(1700000844.322:63758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2322 comm="syz.5.10889" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f855fda8f19 code=0x7ffc0000 [ 1040.507505][ T28] audit: type=1326 audit(1700000844.322:63759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2322 comm="syz.5.10889" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855fda8f19 code=0x7ffc0000 [ 1040.724542][ T5774] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1040.834956][ T2379] dummy0: left allmulticast mode [ 1040.887791][ T2379] wlan1 speed is unknown, defaulting to 1000 [ 1040.933014][ T2379] wlan1 speed is unknown, defaulting to 1000 [ 1040.946430][ T5774] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1040.981463][ T5774] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1041.012976][ T2379] wlan1 speed is unknown, defaulting to 1000 [ 1041.060707][ T5774] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1041.078415][ T2379] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1041.164105][ T2379] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1041.174897][ T5774] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1041.215241][ T5774] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1041.223360][ T5774] usb 6-1: Product: syz [ 1041.292385][ T5774] usb 6-1: Manufacturer: syz [ 1041.298155][ T2379] wlan1 speed is unknown, defaulting to 1000 [ 1041.338404][ T2365] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1041.389118][ T2379] wlan1 speed is unknown, defaulting to 1000 [ 1041.399445][ T5774] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected [ 1041.420302][ T2379] wlan1 speed is unknown, defaulting to 1000 [ 1041.458561][ T5774] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1041.488390][ T2379] wlan1 speed is unknown, defaulting to 1000 [ 1041.535207][ T2379] wlan1 speed is unknown, defaulting to 1000 [ 1041.682849][T23784] usb 6-1: USB disconnect, device number 20 [ 1041.728014][T23784] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1041.771999][ T2400] overlayfs: failed to resolve './file0': -2 [ 1041.792731][T23784] garmin_gps 6-1:1.0: device disconnected [ 1042.994547][ T5864] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1043.204933][ T5864] usb 3-1: Using ep0 maxpacket: 32 [ 1043.239995][ T5864] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1043.271034][ T2461] input: syz0 as /devices/virtual/input/input14 [ 1043.305188][ T5864] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 1043.359396][ T5864] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 1043.430115][ T5864] usb 3-1: config 14 has no interface number 0 [ 1043.491329][ T5864] usb 3-1: config 14 has no interface number 1 [ 1043.524759][ T5864] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1043.608960][ T5864] usb 3-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 1043.684973][ T5864] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1043.748525][ T5864] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1043.828669][ T5864] usb 3-1: config 14 interface 57 has no altsetting 0 [ 1043.880527][ T5864] usb 3-1: config 14 interface 228 has no altsetting 0 [ 1043.931869][ T5864] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1043.993921][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.044892][ T5864] usb 3-1: Product: syz [ 1044.083793][ T5864] usb 3-1: Manufacturer: syz [ 1044.112982][ T5864] usb 3-1: SerialNumber: syz [ 1044.400422][ T28] kauditd_printk_skb: 552 callbacks suppressed [ 1044.400433][ T28] audit: type=1326 audit(1700000849.732:64312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2495 comm="syz.5.10928" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855fda8f19 code=0x7ffc0000 [ 1044.632297][ T28] audit: type=1326 audit(1700000849.762:64313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2495 comm="syz.5.10928" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855fda8f19 code=0x7ffc0000 [ 1044.678957][ T5864] legousbtower 3-1:14.57: interrupt endpoints not found [ 1044.791249][ T28] audit: type=1326 audit(1700000849.762:64314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2495 comm="syz.5.10928" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855fda8f19 code=0x7ffc0000 [ 1044.820863][ T2506] input: syz0 as /devices/virtual/input/input15 [ 1044.888809][ T5864] legousbtower 3-1:14.228: interrupt endpoints not found [ 1044.983942][ T28] audit: type=1326 audit(1700000849.772:64315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2495 comm="syz.5.10928" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f855fda8f19 code=0x7ffc0000 [ 1045.193745][ T28] audit: type=1326 audit(1700000849.772:64316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2495 comm="syz.5.10928" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855fda8f19 code=0x7ffc0000 [ 1045.285862][ T28] audit: type=1326 audit(1700000849.772:64317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2495 comm="syz.5.10928" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855fda8f19 code=0x7ffc0000 [ 1045.361044][T26629] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 1045.377531][ T28] audit: type=1326 audit(1700000849.772:64318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2495 comm="syz.5.10928" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855fda8f19 code=0x7ffc0000 [ 1045.445974][ T28] audit: type=1326 audit(1700000849.772:64319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2495 comm="syz.5.10928" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855fda8f19 code=0x7ffc0000 [ 1045.508639][ T28] audit: type=1326 audit(1700000849.772:64320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2495 comm="syz.5.10928" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855fda8f19 code=0x7ffc0000 [ 1045.572736][ T28] audit: type=1326 audit(1700000849.782:64321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2495 comm="syz.5.10928" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f855fda8f19 code=0x7ffc0000 [ 1046.548288][T26629] Bluetooth: hci4: command 0x0406 tx timeout [ 1047.043451][ T5774] usb 3-1: USB disconnect, device number 11 [ 1047.212561][ T2575] ip_tables: iptables: counters copy to user failed while replacing table [ 1047.267179][ T2580] overlayfs: failed to resolve './file0': -2 [ 1047.299235][ T2575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10944'. [ 1048.465478][ T2626] overlayfs: failed to resolve './file1': -2 [ 1048.657040][ T2635] ip_tables: iptables: counters copy to user failed while replacing table [ 1048.739091][ T2635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10958'. [ 1049.579421][ T2676] overlayfs: failed to resolve './file1': -2 [ 1049.933127][ T28] kauditd_printk_skb: 498 callbacks suppressed [ 1049.933138][ T28] audit: type=1326 audit(1700000855.262:64820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2689 comm="syz.2.10970" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1050.151126][ T28] audit: type=1326 audit(1700000855.312:64821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2689 comm="syz.2.10970" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1050.305719][ T28] audit: type=1326 audit(1700000855.312:64822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2689 comm="syz.2.10970" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1050.452296][ T28] audit: type=1326 audit(1700000855.312:64823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2689 comm="syz.2.10970" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1050.601675][ T28] audit: type=1326 audit(1700000855.312:64824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2689 comm="syz.2.10970" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1050.773989][ T28] audit: type=1326 audit(1700000855.312:64825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2689 comm="syz.2.10970" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1050.994048][ T28] audit: type=1326 audit(1700000855.312:64826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2689 comm="syz.2.10970" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1051.143555][ T2734] overlayfs: failed to resolve './file1': -2 [ 1051.169058][ T28] audit: type=1326 audit(1700000855.312:64827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2689 comm="syz.2.10970" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1051.306461][ T28] audit: type=1326 audit(1700000855.312:64828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2689 comm="syz.2.10970" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1051.435689][ T28] audit: type=1326 audit(1700000855.312:64829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2689 comm="syz.2.10970" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1053.065353][ T5864] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1053.203703][ T2816] xt_hashlimit: max too large, truncated to 1048576 [ 1053.291530][ T5864] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1053.354618][ T5864] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1053.427433][ T5864] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1053.526434][ T5864] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1053.599931][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1053.656929][ T5864] usb 5-1: Product: syz [ 1053.691797][ T5864] usb 5-1: Manufacturer: syz [ 1053.744942][ T2797] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1053.813550][ T5864] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 1053.891700][ T5864] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1054.098406][T23784] usb 5-1: USB disconnect, device number 5 [ 1054.152847][T23784] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1054.210923][T23784] garmin_gps 5-1:1.0: device disconnected [ 1054.604638][ T5774] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1054.710257][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.719359][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.794781][ T5774] usb 2-1: device descriptor read/64, error -71 [ 1055.067666][ T28] kauditd_printk_skb: 616 callbacks suppressed [ 1055.067676][ T28] audit: type=1326 audit(1700000860.402:65446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2875 comm="syz.4.11013" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221c1a8f19 code=0x7ffc0000 [ 1055.116873][ T5774] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1055.200346][ T2879] xt_hashlimit: max too large, truncated to 1048576 [ 1055.271228][ T28] audit: type=1326 audit(1700000860.432:65447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2875 comm="syz.4.11013" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221c1a8f19 code=0x7ffc0000 [ 1055.320075][ T5774] usb 2-1: device descriptor read/64, error -71 [ 1055.448681][ T28] audit: type=1326 audit(1700000860.432:65448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2875 comm="syz.4.11013" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221c1a8f19 code=0x7ffc0000 [ 1055.496587][ T5774] usb usb2-port1: attempt power cycle [ 1055.577329][ T28] audit: type=1326 audit(1700000860.432:65449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2875 comm="syz.4.11013" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221c1a8f19 code=0x7ffc0000 [ 1055.693620][ T28] audit: type=1326 audit(1700000860.432:65450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2875 comm="syz.4.11013" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f221c1a8f19 code=0x7ffc0000 [ 1055.792457][ T28] audit: type=1326 audit(1700000860.442:65451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2875 comm="syz.4.11013" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221c1a8f19 code=0x7ffc0000 [ 1055.892385][ T28] audit: type=1326 audit(1700000860.442:65452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2875 comm="syz.4.11013" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221c1a8f19 code=0x7ffc0000 [ 1055.944670][ T5774] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1055.996309][ T28] audit: type=1326 audit(1700000860.442:65453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2875 comm="syz.4.11013" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221c1a8f19 code=0x7ffc0000 [ 1056.036725][ T5774] usb 2-1: device descriptor read/8, error -71 [ 1056.098050][ T28] audit: type=1326 audit(1700000860.442:65454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2875 comm="syz.4.11013" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f221c1a8f19 code=0x7ffc0000 [ 1056.152989][ T28] audit: type=1326 audit(1700000860.442:65455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2875 comm="syz.4.11013" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221c1a8f19 code=0x7ffc0000 [ 1056.324538][T23784] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1056.335242][ T5774] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1056.385265][ T5774] usb 2-1: device descriptor read/8, error -71 [ 1056.525344][ T5774] usb usb2-port1: unable to enumerate USB device [ 1056.540755][T23784] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1056.576502][T23784] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1056.635493][T23784] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1056.698477][T23784] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1056.734177][T23784] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1056.787596][T23784] usb 6-1: Product: syz [ 1056.817351][T23784] usb 6-1: Manufacturer: syz [ 1056.837798][ T2904] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1056.879052][T23784] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected [ 1056.932124][T23784] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1057.143138][T23784] usb 6-1: USB disconnect, device number 21 [ 1057.173259][T23784] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1057.224865][ T2932] FAULT_INJECTION: forcing a failure. [ 1057.224865][ T2932] name failslab, interval 1, probability 0, space 0, times 0 [ 1057.243340][T23784] garmin_gps 6-1:1.0: device disconnected [ 1057.300774][ T2932] CPU: 0 PID: 2932 Comm: syz.2.11027 Not tainted syzkaller #0 [ 1057.308363][ T2932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1057.318503][ T2932] Call Trace: [ 1057.321882][ T2932] [ 1057.324804][ T2932] dump_stack_lvl+0x18c/0x250 [ 1057.329517][ T2932] ? show_regs_print_info+0x20/0x20 [ 1057.334720][ T2932] ? load_image+0x420/0x420 [ 1057.339232][ T2932] ? __might_sleep+0xe0/0xe0 [ 1057.344249][ T2932] ? __lock_acquire+0x7eb0/0x7eb0 [ 1057.351301][ T2932] should_fail_ex+0x394/0x4c0 [ 1057.356932][ T2932] should_failslab+0x9/0x20 [ 1057.361460][ T2932] slab_pre_alloc_hook+0x59/0x300 [ 1057.366659][ T2932] ? key_alloc+0x34a/0x1030 [ 1057.371200][ T2932] ? key_alloc+0x34a/0x1030 [ 1057.375783][ T2932] __kmem_cache_alloc_node+0x53/0x260 [ 1057.381161][ T2932] ? slab_post_alloc_hook+0x86/0x4d0 [ 1057.386525][ T2932] ? key_alloc+0x34a/0x1030 [ 1057.391019][ T2932] __kmalloc_node_track_caller+0xa4/0x230 [ 1057.396737][ T2932] kmemdup+0x2b/0x70 [ 1057.400682][ T2932] key_alloc+0x34a/0x1030 [ 1057.405049][ T2932] keyring_alloc+0x45/0xb0 [ 1057.409576][ T2932] install_thread_keyring_to_cred+0x9a/0x120 [ 1057.415761][ T2932] keyctl_set_reqkey_keyring+0x136/0x1c0 [ 1057.421494][ T2932] __se_sys_keyctl+0x6f9/0xb50 [ 1057.426260][ T2932] ? __x64_sys_keyctl+0xc0/0xc0 [ 1057.431185][ T2932] ? do_futex+0x2ff/0x3e0 [ 1057.435531][ T2932] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1057.441721][ T2932] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1057.447903][ T2932] ? lock_chain_count+0x20/0x20 [ 1057.452963][ T2932] ? lockdep_hardirqs_on+0x98/0x150 [ 1057.459478][ T2932] ? __x64_sys_keyctl+0x20/0xc0 [ 1057.464435][ T2932] do_syscall_64+0x55/0xb0 [ 1057.468891][ T2932] ? clear_bhb_loop+0x40/0x90 [ 1057.474489][ T2932] ? clear_bhb_loop+0x40/0x90 [ 1057.479183][ T2932] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1057.486110][ T2932] RIP: 0033:0x7fc530fa8f19 [ 1057.491254][ T2932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1057.511600][ T2932] RSP: 002b:00007fc531d82028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1057.520059][ T2932] RAX: ffffffffffffffda RBX: 00007fc531225fa0 RCX: 00007fc530fa8f19 [ 1057.528821][ T2932] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000e [ 1057.537941][ T2932] RBP: 00007fc531037f6d R08: 0000000000000000 R09: 0000000000000000 [ 1057.546181][ T2932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1057.555856][ T2932] R13: 00007fc531226038 R14: 00007fc531225fa0 R15: 00007fff23d27638 [ 1057.563860][ T2932] [ 1059.065049][T23784] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1059.290391][T23784] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1059.323190][T23784] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1059.386291][T23784] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1059.445897][T23784] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1059.487259][T23784] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1059.533217][T23784] usb 6-1: Product: syz [ 1059.552864][T23784] usb 6-1: Manufacturer: syz [ 1059.558380][ T5774] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1059.604372][ T2971] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1059.640447][T23784] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected [ 1059.698608][T23784] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1059.784947][ T5774] usb 2-1: Using ep0 maxpacket: 32 [ 1059.822601][ T5774] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1059.891437][ T5774] usb 2-1: string descriptor 0 read error: -22 [ 1059.963684][T23784] usb 6-1: USB disconnect, device number 22 [ 1059.980825][ T5774] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 1060.002412][T23784] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1060.033097][ T5774] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.062372][T23784] garmin_gps 6-1:1.0: device disconnected [ 1060.106648][ T5774] dw2102: su3000_identify_state [ 1060.111661][ T5774] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 1060.197584][ T5774] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1060.228829][ T5774] dvb-usb: bulk message failed: -22 (2/0) [ 1060.311748][ T5774] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1060.395439][ T5774] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 1060.435499][ T5774] usb 2-1: media controller created [ 1060.461995][ T5774] dvb-usb: bulk message failed: -22 (6/0) [ 1060.512638][ T5774] dw2102: i2c transfer failed. [ 1060.544815][ T5774] dvb-usb: bulk message failed: -22 (6/0) [ 1060.580008][ T5774] dw2102: i2c transfer failed. [ 1060.607361][ T5774] dvb-usb: bulk message failed: -22 (6/0) [ 1060.647978][ T5774] dw2102: i2c transfer failed. [ 1060.653109][ T5774] dvb-usb: bulk message failed: -22 (6/0) [ 1060.734261][ T5774] dw2102: i2c transfer failed. [ 1060.777766][ T5774] dvb-usb: bulk message failed: -22 (6/0) [ 1060.812924][ T5774] dw2102: i2c transfer failed. [ 1060.857962][ T5774] dvb-usb: bulk message failed: -22 (6/0) [ 1060.917481][ T5774] dw2102: i2c transfer failed. [ 1060.964008][ T5774] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1061.060291][ T5774] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1061.108035][ T28] kauditd_printk_skb: 870 callbacks suppressed [ 1061.108046][ T28] audit: type=1326 audit(1700000866.442:66326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3033 comm="syz.4.11062" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221c1a8f19 code=0x7ffc0000 [ 1061.238721][ T5774] dvb-usb: bulk message failed: -22 (3/0) [ 1061.272946][ T5774] dw2102: command 0x0e transfer failed. [ 1061.311217][ T5774] dvb-usb: bulk message failed: -22 (3/0) [ 1061.334636][ T28] audit: type=1326 audit(1700000866.442:66327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3033 comm="syz.4.11062" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221c1a8f19 code=0x7ffc0000 [ 1061.382890][ T5774] dw2102: command 0x0e transfer failed. [ 1061.444604][ T28] audit: type=1326 audit(1700000866.482:66328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3033 comm="syz.4.11062" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221c1a8f19 code=0x7ffc0000 [ 1061.508447][ T28] audit: type=1326 audit(1700000866.482:66329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3033 comm="syz.4.11062" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f221c1a8f19 code=0x7ffc0000 [ 1061.575399][ T28] audit: type=1326 audit(1700000866.482:66330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3033 comm="syz.4.11062" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221c1a8f19 code=0x7ffc0000 [ 1061.645399][ T5864] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1061.685002][ T28] audit: type=1326 audit(1700000866.482:66331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3033 comm="syz.4.11062" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221c1a8f19 code=0x7ffc0000 [ 1061.724957][ T5774] dvb-usb: bulk message failed: -22 (3/0) [ 1061.743198][ T5774] dw2102: command 0x0e transfer failed. [ 1061.777401][ T5774] dvb-usb: bulk message failed: -22 (3/0) [ 1061.799450][ T5774] dw2102: command 0x0e transfer failed. [ 1061.815884][ T5774] dvb-usb: bulk message failed: -22 (1/0) [ 1061.822767][ T28] audit: type=1326 audit(1700000866.492:66332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3033 comm="syz.4.11062" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221c1a8f19 code=0x7ffc0000 [ 1061.862059][ T5774] dw2102: command 0x51 transfer failed. [ 1061.916432][ T5864] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1061.940116][ T28] audit: type=1326 audit(1700000866.492:66333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3033 comm="syz.4.11062" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221c1a8f19 code=0x7ffc0000 [ 1061.974878][ T5864] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1062.010886][ T5774] DVB: Unable to find symbol ds3000_attach() [ 1062.035142][ T5864] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1062.054615][ T5774] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 1062.078182][ T5864] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1062.100701][ T28] audit: type=1326 audit(1700000866.492:66334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3033 comm="syz.4.11062" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221c1a8f19 code=0x7ffc0000 [ 1062.134580][ T5864] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1062.160306][ T5864] usb 6-1: Product: syz [ 1062.178236][ T5864] usb 6-1: Manufacturer: syz [ 1062.206050][ T3042] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1062.232668][ T5864] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected [ 1062.252154][ T28] audit: type=1326 audit(1700000866.492:66335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3033 comm="syz.4.11062" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f221c1a8f19 code=0x7ffc0000 [ 1062.298345][ T5864] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1062.317321][ T5774] rc_core: IR keymap rc-su3000 not found [ 1062.328374][ T5774] Registered IR keymap rc-empty [ 1062.350963][ T5774] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 1062.453216][ T5774] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input16 [ 1062.525504][ T5864] usb 6-1: USB disconnect, device number 23 [ 1062.573454][ T5864] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1062.640639][ T5774] dvb-usb: schedule remote query interval to 150 msecs. [ 1062.681722][ T5864] garmin_gps 6-1:1.0: device disconnected [ 1062.764992][ T5774] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1062.771282][ T5774] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 1062.915521][ T5774] usb 2-1: USB disconnect, device number 19 [ 1063.118970][ T5774] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 1063.767935][ T3093] comedi comedi0: s526: I/O port conflict (0x3,64) [ 1063.812617][ T3096] overlayfs: missing 'lowerdir' [ 1064.154596][ T790] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1064.400216][ T790] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1064.450890][ T790] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1064.525127][ T790] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1064.591296][ T790] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1064.632807][ T790] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1064.687786][ T790] usb 5-1: Product: syz [ 1064.724869][ T790] usb 5-1: Manufacturer: syz [ 1064.763303][ T3098] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1064.841181][ T790] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 1064.930576][ T790] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1064.941678][ T3132] overlayfs: missing 'lowerdir' [ 1064.963162][ T3129] rxe_eth0 speed is unknown, defaulting to 1000 [ 1065.103953][ T790] usb 5-1: USB disconnect, device number 6 [ 1065.177444][ T790] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1065.240871][ T790] garmin_gps 5-1:1.0: device disconnected [ 1065.414321][ T3143] device-mapper: table: 248:9: striped: Target length not divisible by number of stripes (-EINVAL) [ 1065.487282][ T3143] device-mapper: ioctl: error adding target to table [ 1065.570316][ T3129] wlan1 speed is unknown, defaulting to 1000 [ 1066.058995][ T3161] overlayfs: missing 'lowerdir' [ 1066.114611][T24721] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1066.278989][ T790] IPVS: starting estimator thread 0... [ 1066.305125][T24721] usb 3-1: device descriptor read/64, error -71 [ 1066.353751][ T3169] xt_hashlimit: max too large, truncated to 1048576 [ 1066.404565][ T3167] IPVS: using max 36 ests per chain, 86400 per kthread [ 1066.645160][T24721] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1066.755072][ T5774] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1066.834573][T24721] usb 3-1: device descriptor read/64, error -71 [ 1066.916919][ T3186] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1066.984672][T24721] usb usb3-port1: attempt power cycle [ 1067.002266][ T5774] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1067.068151][ T5774] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1067.134088][ T5774] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1067.212864][ T5774] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1067.275350][ T5774] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1067.323034][ T5774] usb 2-1: Product: syz [ 1067.341683][ T5774] usb 2-1: Manufacturer: syz [ 1067.375823][ T3175] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1067.407346][ T28] kauditd_printk_skb: 397 callbacks suppressed [ 1067.407356][ T28] audit: type=1326 audit(1700000872.742:66733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3198 comm="syz.4.11114" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221c1a8f19 code=0x7ffc0000 [ 1067.439808][T24721] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1067.462012][ T5774] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 1067.516395][T24721] usb 3-1: device descriptor read/8, error -71 [ 1067.544950][ T5774] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1067.626860][ T28] audit: type=1326 audit(1700000872.782:66734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3198 comm="syz.4.11114" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221c1a8f19 code=0x7ffc0000 [ 1067.720573][ T5774] usb 2-1: USB disconnect, device number 20 [ 1067.769238][ T5774] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1067.819279][ T28] audit: type=1326 audit(1700000872.782:66735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3198 comm="syz.4.11114" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221c1a8f19 code=0x7ffc0000 [ 1067.844831][T24721] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1067.864739][ T5774] garmin_gps 2-1:1.0: device disconnected [ 1067.930114][T24721] usb 3-1: device descriptor read/8, error -71 [ 1067.955780][T23784] IPVS: starting estimator thread 0... [ 1068.002799][ T28] audit: type=1326 audit(1700000872.782:66736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3198 comm="syz.4.11114" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f221c1a8f19 code=0x7ffc0000 [ 1068.089426][T24721] usb usb3-port1: unable to enumerate USB device [ 1068.105108][ T3208] IPVS: using max 36 ests per chain, 86400 per kthread [ 1068.160351][ T28] audit: type=1326 audit(1700000872.782:66737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3198 comm="syz.4.11114" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221c1a8f19 code=0x7ffc0000 [ 1068.285939][ T3215] ip_tables: iptables: counters copy to user failed while replacing table [ 1068.308710][ T28] audit: type=1326 audit(1700000872.782:66738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3198 comm="syz.4.11114" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221c1a8f19 code=0x7ffc0000 [ 1068.389080][ T3215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11118'. [ 1068.474245][ T28] audit: type=1326 audit(1700000872.782:66739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3198 comm="syz.4.11114" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221c1a8f19 code=0x7ffc0000 [ 1068.583986][ T3223] TC_ACT_REPEAT abuse ? [ 1068.599931][ T28] audit: type=1326 audit(1700000872.782:66740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3198 comm="syz.4.11114" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f221c1a8f19 code=0x7ffc0000 [ 1068.732010][ T28] audit: type=1326 audit(1700000872.782:66741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3198 comm="syz.4.11114" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221c1a8f19 code=0x7ffc0000 [ 1068.907287][ T28] audit: type=1326 audit(1700000872.782:66742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3198 comm="syz.4.11114" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221c1a8f19 code=0x7ffc0000 [ 1069.522730][ T3249] ip_tables: iptables: counters copy to user failed while replacing table [ 1069.604262][ T3252] FAULT_INJECTION: forcing a failure. [ 1069.604262][ T3252] name failslab, interval 1, probability 0, space 0, times 0 [ 1069.620976][ T3249] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11130'. [ 1069.631027][ T3250] TC_ACT_REPEAT abuse ? [ 1069.678469][ T3252] CPU: 0 PID: 3252 Comm: syz.1.11132 Not tainted syzkaller #0 [ 1069.686431][ T3252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1069.696858][ T3252] Call Trace: [ 1069.701112][ T3252] [ 1069.704078][ T3252] dump_stack_lvl+0x18c/0x250 [ 1069.709125][ T3252] ? show_regs_print_info+0x20/0x20 [ 1069.714728][ T3252] ? load_image+0x420/0x420 [ 1069.719588][ T3252] ? __might_sleep+0xe0/0xe0 [ 1069.724461][ T3252] ? __lock_acquire+0x7eb0/0x7eb0 [ 1069.729829][ T3252] should_fail_ex+0x394/0x4c0 [ 1069.735234][ T3252] should_failslab+0x9/0x20 [ 1069.740069][ T3252] slab_pre_alloc_hook+0x59/0x300 [ 1069.745364][ T3252] kmem_cache_alloc+0x5a/0x2d0 [ 1069.750123][ T3252] ? security_inode_alloc+0x34/0x110 [ 1069.755868][ T3252] security_inode_alloc+0x34/0x110 [ 1069.761162][ T3252] inode_init_always+0x914/0xc90 [ 1069.766289][ T3252] new_inode_pseudo+0x95/0x1d0 [ 1069.771943][ T3252] new_inode+0x22/0x1d0 [ 1069.776227][ T3252] proc_sys_make_inode+0x4f/0x550 [ 1069.781375][ T3252] proc_sys_fill_cache+0x36e/0x510 [ 1069.787648][ T3252] ? proc_sys_link_fill_cache+0x1f0/0x1f0 [ 1069.794628][ T3252] ? __rwlock_init+0x150/0x150 [ 1069.800464][ T3252] ? do_raw_spin_unlock+0x121/0x230 [ 1069.806711][ T3252] proc_sys_readdir+0x49e/0x920 [ 1069.812171][ T3252] iterate_dir+0x1bd/0x590 [ 1069.817202][ T3252] __se_sys_getdents64+0xf6/0x270 [ 1069.822854][ T3252] ? __x64_sys_getdents64+0x80/0x80 [ 1069.831114][ T3252] ? filldir+0x6b0/0x6b0 [ 1069.835875][ T3252] ? lockdep_hardirqs_on+0x98/0x150 [ 1069.843964][ T3252] do_syscall_64+0x55/0xb0 [ 1069.848701][ T3252] ? clear_bhb_loop+0x40/0x90 [ 1069.853769][ T3252] ? clear_bhb_loop+0x40/0x90 [ 1069.858810][ T3252] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1069.865519][ T3252] RIP: 0033:0x7f0bbb3a8f19 [ 1069.870559][ T3252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1069.891789][ T3252] RSP: 002b:00007f0bbc1f3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 1069.901780][ T3252] RAX: ffffffffffffffda RBX: 00007f0bbb625fa0 RCX: 00007f0bbb3a8f19 [ 1069.909862][ T3252] RDX: 0000000000000400 RSI: 0000200000001780 RDI: 0000000000000004 [ 1069.917973][ T3252] RBP: 00007f0bbb437f6d R08: 0000000000000000 R09: 0000000000000000 [ 1069.926911][ T3252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1069.936328][ T3252] R13: 00007f0bbb626038 R14: 00007f0bbb625fa0 R15: 00007ffd1182cca8 [ 1069.944657][ T3252] [ 1070.464649][ T5866] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1070.634671][ T5866] usb 5-1: device descriptor read/64, error -71 [ 1070.904802][ T5866] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1071.051608][ T3282] siw: device registration error -23 [ 1071.074682][ T5866] usb 5-1: device descriptor read/64, error -71 [ 1071.212477][ T5866] usb usb5-port1: attempt power cycle [ 1071.269544][ T3286] overlayfs: missing 'workdir' [ 1071.441960][ T3293] TC_ACT_REPEAT abuse ? [ 1071.644670][ T5866] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1071.695106][ T5774] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1071.715210][ T5866] usb 5-1: device descriptor read/8, error -71 [ 1071.897231][ T5774] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1071.953545][ T5774] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1071.985182][ T5866] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1072.014338][ T5774] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1072.060752][ T5866] usb 5-1: device descriptor read/8, error -71 [ 1072.092390][ T5774] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1072.141749][ T5774] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1072.174072][ T3313] ip_tables: iptables: counters copy to user failed while replacing table [ 1072.184945][ T5866] usb usb5-port1: unable to enumerate USB device [ 1072.200228][ T5774] usb 2-1: Product: syz [ 1072.212811][ T5774] usb 2-1: Manufacturer: syz [ 1072.250880][ T3295] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1072.262863][ T3313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11152'. [ 1072.287169][ T5774] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 1072.320396][ T5774] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1072.524350][ T5866] usb 2-1: USB disconnect, device number 21 [ 1072.553475][ T5866] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1072.597911][ T5866] garmin_gps 2-1:1.0: device disconnected [ 1072.612790][ T28] kauditd_printk_skb: 585 callbacks suppressed [ 1072.612800][ T28] audit: type=1326 audit(1700000877.942:67328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3322 comm="syz.2.11154" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1072.804943][ T28] audit: type=1326 audit(1700000877.982:67329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3322 comm="syz.2.11154" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1072.863188][ T3330] overlayfs: missing 'workdir' [ 1072.905504][ T28] audit: type=1326 audit(1700000877.982:67330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3322 comm="syz.2.11154" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1072.976736][ T3333] TC_ACT_REPEAT abuse ? [ 1073.062191][ T28] audit: type=1326 audit(1700000877.982:67331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3322 comm="syz.2.11154" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1073.204147][ T28] audit: type=1326 audit(1700000877.982:67332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3322 comm="syz.2.11154" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1073.374007][ T28] audit: type=1326 audit(1700000877.982:67333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3322 comm="syz.2.11154" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1073.472455][ T28] audit: type=1326 audit(1700000877.982:67334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3322 comm="syz.2.11154" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1073.594312][ T28] audit: type=1326 audit(1700000877.982:67335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3322 comm="syz.2.11154" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1073.694565][ T28] audit: type=1326 audit(1700000877.982:67336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3322 comm="syz.2.11154" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1073.759452][ T28] audit: type=1326 audit(1700000877.992:67337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3322 comm="syz.2.11154" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1073.945633][ T3353] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1073.979732][ T3353] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1074.273444][ T3363] TC_ACT_REPEAT abuse ? [ 1074.358382][ T790] IPVS: starting estimator thread 0... [ 1074.414862][ T5866] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1074.432366][T23784] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1074.464705][ T3369] IPVS: using max 36 ests per chain, 86400 per kthread [ 1074.597844][T23784] usb 2-1: device descriptor read/64, error -71 [ 1074.628362][ T5866] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1074.668971][ T5866] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1074.728358][ T5866] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1074.807226][ T5866] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1074.869743][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1074.894675][T23784] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1074.924591][ T5866] usb 6-1: Product: syz [ 1074.945954][ T5866] usb 6-1: Manufacturer: syz [ 1074.978178][ T3359] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1075.026084][ T5866] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected [ 1075.075936][ T5866] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1075.084784][T23784] usb 2-1: device descriptor read/64, error -71 [ 1075.226992][T23784] usb usb2-port1: attempt power cycle [ 1075.317156][ T5866] usb 6-1: USB disconnect, device number 24 [ 1075.364359][ T5866] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1075.441943][ T5866] garmin_gps 6-1:1.0: device disconnected [ 1075.684601][T23784] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1075.756901][T23784] usb 2-1: device descriptor read/8, error -71 [ 1075.893656][ T3410] TC_ACT_REPEAT abuse ? [ 1076.045615][T23784] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1076.125984][T23784] usb 2-1: device descriptor read/8, error -71 [ 1076.265570][T23784] usb usb2-port1: unable to enumerate USB device [ 1076.983208][ T3445] TC_ACT_REPEAT abuse ? [ 1077.095523][T23784] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1077.333353][T23784] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1077.383211][T23784] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1077.462867][T23784] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1077.544294][T23784] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1077.587688][T23784] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1077.622910][T23784] usb 5-1: Product: syz [ 1077.650791][T23784] usb 5-1: Manufacturer: syz [ 1077.683288][ T3440] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1077.703857][T23784] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 1077.741247][T23784] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1077.908711][ T28] kauditd_printk_skb: 626 callbacks suppressed [ 1077.908725][ T28] audit: type=1326 audit(1700000883.242:67964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3463 comm="syz.2.11199" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1077.987785][T23784] usb 5-1: USB disconnect, device number 11 [ 1078.026111][T23784] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1078.069024][T23784] garmin_gps 5-1:1.0: device disconnected [ 1078.077686][ T28] audit: type=1326 audit(1700000883.282:67965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3463 comm="syz.2.11199" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1078.160024][ T3468] xt_hashlimit: max too large, truncated to 1048576 [ 1078.179397][ T28] audit: type=1326 audit(1700000883.292:67966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3463 comm="syz.2.11199" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1078.253136][ T28] audit: type=1326 audit(1700000883.292:67967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3463 comm="syz.2.11199" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1078.314720][ T28] audit: type=1326 audit(1700000883.292:67968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3463 comm="syz.2.11199" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1078.378602][ T28] audit: type=1326 audit(1700000883.292:67969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3463 comm="syz.2.11199" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1078.412938][ T28] audit: type=1326 audit(1700000883.292:67970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3463 comm="syz.2.11199" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1078.446112][ T28] audit: type=1326 audit(1700000883.292:67971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3463 comm="syz.2.11199" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1078.487365][ T28] audit: type=1326 audit(1700000883.292:67972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3463 comm="syz.2.11199" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1078.512715][ T790] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1078.554027][ T28] audit: type=1326 audit(1700000883.292:67973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3463 comm="syz.2.11199" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1078.715839][ T790] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1078.736423][ T790] usb 6-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 1078.794827][ T790] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1078.844728][ T790] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1078.919682][ T790] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1078.955366][ T790] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1079.007658][ T790] usb 6-1: Product: syz [ 1079.025210][ T790] usb 6-1: Manufacturer: syz [ 1079.068159][ T790] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 1079.250850][ T3489] xt_hashlimit: max too large, truncated to 1048576 [ 1079.273193][ T790] usb 6-1: USB disconnect, device number 25 [ 1079.745601][T23784] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1079.946241][T23784] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.982012][T23784] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1080.020167][T23784] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1080.088091][T23784] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1080.121277][T23784] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1080.160093][T23784] usb 3-1: Product: syz [ 1080.178574][T23784] usb 3-1: Manufacturer: syz [ 1080.202351][ T3494] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1080.237514][T23784] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 1080.289553][T23784] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1080.507975][T23784] usb 3-1: USB disconnect, device number 16 [ 1080.538137][T23784] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1080.583312][T23784] garmin_gps 3-1:1.0: device disconnected [ 1080.912943][ T3525] 9pnet_virtio: no channels available for device syz [ 1082.975489][ T28] kauditd_printk_skb: 713 callbacks suppressed [ 1082.975503][ T28] audit: type=1326 audit(1700000888.312:68687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3533 comm="syz.2.11231" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fc530f6536c code=0x7ffc0000 [ 1083.244614][ T28] audit: type=1326 audit(1700000888.352:68688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3533 comm="syz.2.11231" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1083.372243][ T28] audit: type=1326 audit(1700000888.352:68689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3533 comm="syz.2.11231" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fc530f653ce code=0x7ffc0000 [ 1083.462284][ T28] audit: type=1326 audit(1700000888.352:68690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3533 comm="syz.2.11231" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1083.556034][ T3566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11240'. [ 1083.606912][ T28] audit: type=1326 audit(1700000888.352:68691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3533 comm="syz.2.11231" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1083.635618][ T790] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1083.722343][ T28] audit: type=1326 audit(1700000888.352:68692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3533 comm="syz.2.11231" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1083.813538][ T28] audit: type=1326 audit(1700000888.352:68693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3533 comm="syz.2.11231" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc530fa8bab code=0x7ffc0000 [ 1083.875209][ T790] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.906990][ T790] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1083.924890][ T28] audit: type=1326 audit(1700000888.352:68694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3533 comm="syz.2.11231" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1083.969544][ T790] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1084.028365][ T790] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1084.057533][ T790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1084.074524][ T28] audit: type=1326 audit(1700000888.352:68695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3533 comm="syz.2.11231" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1084.135676][ T790] usb 2-1: Product: syz [ 1084.151782][ T790] usb 2-1: Manufacturer: syz [ 1084.180441][ T3559] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1084.199419][ T790] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 1084.223366][ T28] audit: type=1326 audit(1700000888.362:68696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3533 comm="syz.2.11231" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1084.266212][ T790] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1084.277741][ T3575] netlink: 'syz.4.11243': attribute type 1 has an invalid length. [ 1084.406514][ T3575] bond7: entered promiscuous mode [ 1084.439990][ T3575] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1084.450040][T23784] usb 2-1: USB disconnect, device number 26 [ 1084.498233][T23784] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1084.559456][T23784] garmin_gps 2-1:1.0: device disconnected [ 1084.618214][ T3578] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1084.651939][ T3578] bond7: (slave gre1): The slave device specified does not support setting the MAC address [ 1084.688871][ T3578] bond7: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 1084.718774][ T3578] bond7: (slave gre1): making interface the new active one [ 1084.738111][ T3578] gre1: entered promiscuous mode [ 1084.754629][ T790] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 1084.776436][ T3578] bond7: (slave gre1): Enslaving as an active interface with an up link [ 1084.947255][ T790] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1085.013277][ T790] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1085.074582][ T790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.109078][ T790] usb 3-1: Product: syz [ 1085.137944][ T790] usb 3-1: Manufacturer: syz [ 1085.143660][ T3594] comedi comedi0: s526: I/O port conflict (0x3,64) [ 1085.161417][ T790] usb 3-1: SerialNumber: syz [ 1085.202786][ T790] usb 3-1: config 0 descriptor?? [ 1085.237795][ T3580] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1085.297636][ T790] streamzap 3-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 1085.522211][ T5866] usb 3-1: USB disconnect, device number 17 [ 1085.940040][ T3610] xt_hashlimit: max too large, truncated to 1048576 [ 1086.901098][ T3633] xt_hashlimit: max too large, truncated to 1048576 [ 1086.978427][ T3637] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1087.664898][ T790] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1087.876294][ T790] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1087.912108][ T790] usb 6-1: config 1 descriptor has 1 excess byte, ignoring [ 1087.948541][ T790] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1087.964635][T23784] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1087.988047][ T790] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1088.008151][ T3668] netlink: 17 bytes leftover after parsing attributes in process `syz.4.11282'. [ 1088.022823][ T28] kauditd_printk_skb: 699 callbacks suppressed [ 1088.022834][ T28] audit: type=1326 audit(1700000893.352:69396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3665 comm="syz.2.11281" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1088.092280][ T790] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1088.131169][ T790] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1088.150271][ T28] audit: type=1326 audit(1700000893.352:69397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3665 comm="syz.2.11281" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1088.180182][T23784] usb 2-1: Using ep0 maxpacket: 32 [ 1088.205165][ T790] usb 6-1: Product: syz [ 1088.219435][T23784] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1088.241021][ T790] usb 6-1: Manufacturer: syz [ 1088.257108][T23784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.272706][ T790] cdc_wdm 6-1:1.0: skipping garbage [ 1088.293320][ T790] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 1088.319311][T23784] usb 2-1: config 0 descriptor?? [ 1088.343569][ T28] audit: type=1326 audit(1700000893.352:69398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3665 comm="syz.2.11281" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1088.399963][T23784] as10x_usb: device has been detected [ 1088.441557][T23784] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1088.482923][ T5774] usb 6-1: USB disconnect, device number 26 [ 1088.540374][ T28] audit: type=1326 audit(1700000893.352:69399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3665 comm="syz.2.11281" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc530fa8f19 code=0x7ffc0000 [ 1088.575858][T23784] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1088.617473][ T3660] ------------[ cut here ]------------ [ 1088.623420][ T3660] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 1088.640852][ T3660] WARNING: CPU: 0 PID: 3660 at kernel/locking/mutex.c:582 __mutex_lock+0xb9d/0xce0 [ 1088.657363][ T3660] Modules linked in: [ 1088.661874][ T3660] CPU: 0 PID: 3660 Comm: syz.1.11278 Not tainted syzkaller #0 [ 1088.670891][ T3660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1088.682241][ T3660] RIP: 0010:__mutex_lock+0xb9d/0xce0 [ 1088.687971][ T3660] Code: 04 08 84 c0 0f 85 2f 01 00 00 83 3d dc 7c ed 04 00 0f 85 7c f5 ff ff 48 c7 c7 e0 bb ea 8a 48 c7 c6 80 bc ea 8a e8 d3 f0 b0 f6 <0f> 0b e9 62 f5 ff ff 0f 0b e9 20 f9 ff ff 0f 0b e9 fa f5 ff ff 48 [ 1088.711460][ T3660] RSP: 0018:ffffc90003317ac0 EFLAGS: 00010246 [ 1088.719615][ T3660] RAX: 14206e2fb6d14b00 RBX: ffff88807c478ce0 RCX: 0000000000080000 [ 1088.728269][ T3660] RDX: ffffc9000f42c000 RSI: 000000000000bbe1 RDI: 000000000000bbe2 [ 1088.737086][ T3660] RBP: ffffc90003317c20 R08: ffff8880b8c28c53 R09: 1ffff1101718518a [ 1088.748653][ T3660] R10: dffffc0000000000 R11: ffffed101718518b R12: 1ffff92000662f68 [ 1088.758223][ T3660] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 1088.767621][ T3660] FS: 00007f0bbc1f36c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 1088.778266][ T3660] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1088.786289][ T3660] CR2: 00007f221cf556c8 CR3: 000000001ff82000 CR4: 00000000003506f0 [ 1088.796023][ T3660] DR0: 0000000000000000 DR1: 0000000000008000 DR2: 0000000000000000 [ 1088.806334][ T3660] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1088.816057][ T3660] Call Trace: [ 1088.820678][ T3660] [ 1088.823928][ T3660] ? trace_contention_end+0x39/0xe0 [ 1088.829521][ T3660] ? __mutex_lock+0x30d/0xce0 [ 1088.835564][ T3660] ? as102_dvb_dmx_start_feed+0x70/0x280 [ 1088.844407][ T3660] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1088.850750][ T3660] ? mutex_lock_nested+0x20/0x20 [ 1088.857553][ T3660] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1088.865677][ T3660] ? dmx_ts_feed_start_filtering+0x52/0x220 [ 1088.874212][ T3660] ? mutex_unlock+0x10/0x10 [ 1088.879423][ T3660] ? mutex_lock_nested+0x20/0x20 [ 1088.885381][ T3660] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1088.891482][ T3660] ? _raw_spin_unlock_irq+0x23/0x50 [ 1088.897709][ T3660] as102_dvb_dmx_start_feed+0x70/0x280 [ 1088.904897][ T3660] dmx_ts_feed_start_filtering+0x120/0x220 [ 1088.912077][ T3660] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 1088.918542][ T3660] dvb_dmxdev_filter_start+0x422/0x10a0 [ 1088.925573][ T3660] dvb_demux_do_ioctl+0x482/0x530 [ 1088.931407][ T3660] dvb_usercopy+0x195/0x2b0 [ 1088.936356][ T3660] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 1088.941912][ T3660] ? dvb_generic_ioctl+0xb0/0xb0 [ 1088.951119][ T3660] ? dvb_demux_poll+0x210/0x210 [ 1088.956596][ T3660] dvb_demux_ioctl+0x29/0x30 [ 1088.962531][ T3660] __se_sys_ioctl+0xfd/0x170 [ 1088.967447][ T3660] do_syscall_64+0x55/0xb0 [ 1088.972395][ T3660] ? clear_bhb_loop+0x40/0x90 [ 1088.977855][ T3660] ? clear_bhb_loop+0x40/0x90 [ 1088.982541][ T3660] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1088.988503][ T3660] RIP: 0033:0x7f0bbb3a8f19 [ 1088.993529][ T3660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1089.013413][ T3660] RSP: 002b:00007f0bbc1f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1089.022715][ T3660] RAX: ffffffffffffffda RBX: 00007f0bbb625fa0 RCX: 00007f0bbb3a8f19 [ 1089.031336][ T3660] RDX: 00002000000002c0 RSI: 0000000040146f2c RDI: 0000000000000004 [ 1089.039804][ T3660] RBP: 00007f0bbb437f6d R08: 0000000000000000 R09: 0000000000000000 [ 1089.048548][ T3660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1089.058737][ T3660] R13: 00007f0bbb626038 R14: 00007f0bbb625fa0 R15: 00007ffd1182cca8 [ 1089.068728][ T3660] [ 1089.071955][ T3660] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1089.079595][ T3660] CPU: 0 PID: 3660 Comm: syz.1.11278 Not tainted syzkaller #0 [ 1089.087520][ T3660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1089.098090][ T3660] Call Trace: [ 1089.101847][ T3660] [ 1089.105988][ T3660] dump_stack_lvl+0x18c/0x250 [ 1089.111483][ T3660] ? show_regs_print_info+0x20/0x20 [ 1089.116907][ T3660] ? load_image+0x420/0x420 [ 1089.122028][ T3660] panic+0x2ca/0x720 [ 1089.125937][ T3660] ? bpf_jit_dump+0xd0/0xd0 [ 1089.130550][ T3660] __warn+0x2e0/0x470 [ 1089.134546][ T3660] ? __mutex_lock+0xb9d/0xce0 [ 1089.139240][ T3660] ? __mutex_lock+0xb9d/0xce0 [ 1089.143933][ T3660] report_bug+0x2be/0x4f0 [ 1089.148446][ T3660] ? __mutex_lock+0xb9d/0xce0 [ 1089.153209][ T3660] ? __mutex_lock+0xb9d/0xce0 [ 1089.159074][ T3660] ? __mutex_lock+0xb9f/0xce0 [ 1089.164794][ T3660] handle_bug+0xcf/0x120 [ 1089.169736][ T3660] exc_invalid_op+0x1a/0x50 [ 1089.174948][ T3660] asm_exc_invalid_op+0x1a/0x20 [ 1089.180610][ T3660] RIP: 0010:__mutex_lock+0xb9d/0xce0 [ 1089.186461][ T3660] Code: 04 08 84 c0 0f 85 2f 01 00 00 83 3d dc 7c ed 04 00 0f 85 7c f5 ff ff 48 c7 c7 e0 bb ea 8a 48 c7 c6 80 bc ea 8a e8 d3 f0 b0 f6 <0f> 0b e9 62 f5 ff ff 0f 0b e9 20 f9 ff ff 0f 0b e9 fa f5 ff ff 48 [ 1089.206333][ T3660] RSP: 0018:ffffc90003317ac0 EFLAGS: 00010246 [ 1089.212764][ T3660] RAX: 14206e2fb6d14b00 RBX: ffff88807c478ce0 RCX: 0000000000080000 [ 1089.221029][ T3660] RDX: ffffc9000f42c000 RSI: 000000000000bbe1 RDI: 000000000000bbe2 [ 1089.230400][ T3660] RBP: ffffc90003317c20 R08: ffff8880b8c28c53 R09: 1ffff1101718518a [ 1089.238387][ T3660] R10: dffffc0000000000 R11: ffffed101718518b R12: 1ffff92000662f68 [ 1089.247117][ T3660] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 1089.255718][ T3660] ? trace_contention_end+0x39/0xe0 [ 1089.260948][ T3660] ? __mutex_lock+0x30d/0xce0 [ 1089.266105][ T3660] ? as102_dvb_dmx_start_feed+0x70/0x280 [ 1089.272162][ T3660] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1089.277786][ T3660] ? mutex_lock_nested+0x20/0x20 [ 1089.282742][ T3660] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1089.288807][ T3660] ? dmx_ts_feed_start_filtering+0x52/0x220 [ 1089.294690][ T3660] ? mutex_unlock+0x10/0x10 [ 1089.299184][ T3660] ? mutex_lock_nested+0x20/0x20 [ 1089.304198][ T3660] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1089.309223][ T3660] ? _raw_spin_unlock_irq+0x23/0x50 [ 1089.314443][ T3660] as102_dvb_dmx_start_feed+0x70/0x280 [ 1089.319936][ T3660] dmx_ts_feed_start_filtering+0x120/0x220 [ 1089.326186][ T3660] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 1089.332086][ T3660] dvb_dmxdev_filter_start+0x422/0x10a0 [ 1089.337733][ T3660] dvb_demux_do_ioctl+0x482/0x530 [ 1089.342770][ T3660] dvb_usercopy+0x195/0x2b0 [ 1089.347729][ T3660] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 1089.353288][ T3660] ? dvb_generic_ioctl+0xb0/0xb0 [ 1089.358420][ T3660] ? dvb_demux_poll+0x210/0x210 [ 1089.363376][ T3660] dvb_demux_ioctl+0x29/0x30 [ 1089.367996][ T3660] __se_sys_ioctl+0xfd/0x170 [ 1089.372611][ T3660] do_syscall_64+0x55/0xb0 [ 1089.377631][ T3660] ? clear_bhb_loop+0x40/0x90 [ 1089.382611][ T3660] ? clear_bhb_loop+0x40/0x90 [ 1089.387369][ T3660] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1089.394133][ T3660] RIP: 0033:0x7f0bbb3a8f19 [ 1089.398913][ T3660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1089.419487][ T3660] RSP: 002b:00007f0bbc1f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1089.428087][ T3660] RAX: ffffffffffffffda RBX: 00007f0bbb625fa0 RCX: 00007f0bbb3a8f19 [ 1089.436104][ T3660] RDX: 00002000000002c0 RSI: 0000000040146f2c RDI: 0000000000000004 [ 1089.444266][ T3660] RBP: 00007f0bbb437f6d R08: 0000000000000000 R09: 0000000000000000 [ 1089.452511][ T3660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1089.460773][ T3660] R13: 00007f0bbb626038 R14: 00007f0bbb625fa0 R15: 00007ffd1182cca8 [ 1089.469450][ T3660] [ 1089.472512][ T3660] Kernel Offset: disabled [ 1089.479026][ T3660] Rebooting in 86400 seconds..