last executing test programs: 16m55.672490352s ago: executing program 2 (id=1902): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x8100, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_LINKMODE={0x5, 0x11, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 16m55.209338282s ago: executing program 2 (id=1905): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r2 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x86) fchdir(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x4}}) readv(r6, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/53, 0x35}], 0x1) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000000)={0x11, @empty, 0x8000, 0x8000, 'none\x00', 0x10, 0x2}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r7, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) read(r6, &(0x7f00000002c0)=""/200, 0x39) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) setrlimit(0x1, &(0x7f0000000000)={0x2, 0x3}) sendfile(r5, r5, 0x0, 0xffffffff) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x9) r8 = syz_open_dev$radio(&(0x7f0000003040), 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000003080)={0x0, "c3904a7167fbd71029d59003b8bb21b37e3d5d9a0da31a8dfe99e96462d3a4c7", 0x400, 0x86, 0xe, 0x2, 0x6}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @broadcast}, {0x0, @link_local}, 0x4a, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'veth0_to_team\x00'}) r10 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPKT(r10, 0x80045438, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x2}, 0x8) 16m54.148324523s ago: executing program 2 (id=1910): prctl$PR_SET_IO_FLUSHER(0x34, 0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x80100) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_emit_ethernet(0x87a2f, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r1, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) 16m53.227896988s ago: executing program 2 (id=1913): pipe2(&(0x7f0000000000), 0x0) unshare(0x22020400) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) 16m51.908341376s ago: executing program 2 (id=1919): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x560, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x490, 0x2e8, 0x2e8, 0x490, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00', {0xff}}, 0x0, 0x2c0, 0x2f0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x3, 0x2}}, @common=@inet=@policy={{0x158}, {[{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xffffffff, 0xff000000, 0xffffff00], @ipv4=@rand_addr=0x64010102, [0x0, 0xffffffff, 0xffffffff, 0xff000000], 0x4d4, 0x3503, 0x3c, 0x0, 0x1, 0x4}, {@ipv4=@dev={0xac, 0x14, 0x14, 0x38}, [0x0, 0xffffff00, 0xffffff00, 0xff000000], @ipv6=@loopback, [0xffffff00, 0xff, 0xff000000, 0xff000000], 0x4d5, 0x0, 0x0, 0x0, 0x2, 0x2}, {@ipv6=@private1, [0x0, 0xff, 0xff, 0xff], @ipv6=@mcast2, [0xff, 0x0, 0xffffff00, 0xffffff00], 0x4d4, 0x3504, 0x2, 0x0, 0x14, 0x9}, {@ipv6=@local, [0xff, 0xffffffff, 0xffffffff], @ipv4=@empty, [0xffffff00, 0xff], 0x4d3, 0x3505, 0x62, 0x0, 0x7, 0x8}], 0xd9884bcd73343275, 0x1}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@mcast1, @loopback, [0xff, 0xffffff00, 0xffffff00, 0xffffff00], [0x0, 0x0, 0xff000000, 0xff], 'sit0\x00', 'caif0\x00', {}, {}, 0x67, 0x3, 0x0, 0x20}, 0x0, 0x138, 0x1a0, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'bond0\x00', 'veth1_virt_wifi\x00', 0x0, 0x1}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r4, 0x4018aee2, &(0x7f0000000080)=@attr_pmu_filter={0x0, 0x1, 0x1, &(0x7f0000000000)={0x85fe, 0x80, 0x1}}) ioctl$KVM_GET_TSC_KHZ_vm(r3, 0xaea3) 16m51.499184416s ago: executing program 2 (id=1921): unshare(0x6020400) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x686000, 0x0) write$nci(r0, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00'}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x2, @meta={0x53353543, 0x4bcfd7a3, 0x610d, 0x9ad7, 0x5b839802}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) writev(r6, &(0x7f00000006c0)=[{&(0x7f00000005c0)="f3", 0x1}], 0x1) ioctl$int_in(r6, 0x5421, &(0x7f0000000040)=0x1) write$char_usb(r6, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @remote, 0xba}, 0x1c) 16m36.340812936s ago: executing program 32 (id=1921): unshare(0x6020400) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x686000, 0x0) write$nci(r0, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00'}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x2, @meta={0x53353543, 0x4bcfd7a3, 0x610d, 0x9ad7, 0x5b839802}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) writev(r6, &(0x7f00000006c0)=[{&(0x7f00000005c0)="f3", 0x1}], 0x1) ioctl$int_in(r6, 0x5421, &(0x7f0000000040)=0x1) write$char_usb(r6, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @remote, 0xba}, 0x1c) 8.310004526s ago: executing program 1 (id=7254): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000000200)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) pread64(0xffffffffffffffff, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 7.20788411s ago: executing program 1 (id=7267): socket(0x80000000000000a, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x200006, 0x8, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(0x3) 7.152982748s ago: executing program 1 (id=7269): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'veth0_to_hsr\x00', &(0x7f0000000000)=@ethtool_cmd={0xa, 0x9, 0xffffffff, 0x2001, 0x7, 0x7, 0x4a, 0x5, 0xff, 0x5, 0x1001, 0x7, 0x9c, 0xa2, 0xfd, 0x6, [0x5, 0x8]}}) 6.936091483s ago: executing program 1 (id=7272): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000001c0)="82ab", 0x2}], 0x1}}], 0x1, 0x4404c880) sendto$inet6(r0, 0x0, 0x0, 0x3b00, 0x0, 0x0) 6.778511986s ago: executing program 1 (id=7275): r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x1, 0x0) 5.847998669s ago: executing program 1 (id=7294): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket(0xa, 0x1, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 3.98760682s ago: executing program 4 (id=7318): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x1, 0x6, 0x10}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x14, 0x3, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8040) 3.861978454s ago: executing program 5 (id=7319): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, 0x0, 0x0, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.748731086s ago: executing program 4 (id=7321): socket(0x80000000000000a, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(0x3) 3.663582722s ago: executing program 5 (id=7322): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket(0xa, 0x1, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, 0x0, 0x0) 3.388097018s ago: executing program 5 (id=7324): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x20044040) unshare(0x22020400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x42, &(0x7f0000000040), 0x3b) 3.272628639s ago: executing program 5 (id=7325): r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r1, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x4000001, @mcast2}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x40000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x1, 0x0) 3.148613563s ago: executing program 0 (id=7326): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x420, 0x3f4, 0x100, 0x70bd29, 0x25dfdbff, {0x6, 0x2, 0x3d, [0x80, 0x5, 0x5, 0x200000, 0x2, 0x680, 0x7, 0x7, 0x7, 0x7f, 0x1e9, 0xffff, 0x10001, 0x2, 0xc0, 0xfffffff8, 0x6, 0x3, 0x6, 0x5, 0x2, 0x1, 0x6, 0x8, 0x8, 0x7, 0x4, 0x7fffffff, 0x3, 0x6, 0x8, 0xb, 0x7, 0x7, 0x400, 0x6, 0x3, 0x7fff, 0xa60, 0x0, 0x0, 0x2, 0x6, 0x5, 0x7, 0x7fffffff, 0x8, 0x9, 0x10000, 0x2, 0x7, 0x6, 0x5, 0x5, 0x7, 0x6f0, 0x1acd, 0x6, 0x1, 0x3, 0x1, 0x56, 0xe, 0xfffffffa], [0x3, 0x9, 0xfd24, 0x8, 0x3f, 0x0, 0x3ff, 0x3, 0x8, 0x8, 0x3, 0x0, 0x0, 0x2, 0x5, 0x1, 0xa8, 0xb, 0x401, 0x8, 0x0, 0x9, 0x9, 0x7, 0x0, 0x80000001, 0x5, 0x6, 0x9, 0x2, 0xb003, 0x8001, 0x8, 0x91, 0x9, 0x3, 0x7, 0x58af, 0x3, 0x400, 0x8, 0x8, 0x1000, 0x7, 0x10001, 0x9cd2, 0x2, 0x8, 0xfffffffa, 0x9, 0x5, 0x6, 0x3, 0x6839, 0x6, 0x3, 0x8, 0xac0, 0x8001, 0x6, 0x0, 0xb, 0x7fffffff, 0xd6], [0x3, 0x2, 0x1, 0x7, 0x0, 0xeca, 0xfffffff8, 0x2, 0x1, 0x1, 0x401, 0x4, 0xfffffff7, 0x700e, 0x4, 0x3, 0x4, 0xfffffffe, 0xfffffff8, 0x1af, 0x2, 0x2, 0x7, 0xfffffffb, 0x1, 0x8, 0x0, 0x9, 0x5, 0x3, 0x835b, 0xfffffffc, 0xba8, 0x2, 0x0, 0xfff, 0x86, 0xffffffff, 0x0, 0x0, 0x4, 0x9, 0x8, 0x5, 0x7, 0x7, 0x80000000, 0x0, 0x34ab, 0x8, 0x75, 0x8ec, 0x1, 0x0, 0x10001, 0x956, 0x101, 0xdf14, 0xbb43, 0x2, 0x0, 0x9, 0x8, 0x64c88], [0x6, 0x3, 0x6, 0xd, 0x2, 0x5, 0x0, 0x3a3, 0xcef, 0x0, 0x6, 0x4, 0x10001, 0x9, 0x494b, 0xe, 0x3, 0xffffffff, 0x8, 0x6, 0x1, 0x858, 0x62, 0x0, 0x9, 0x6, 0x0, 0x3, 0x0, 0xc8f, 0x8, 0xb74e, 0x67d4, 0x80000000, 0x5, 0xa, 0x9, 0xbe, 0x3, 0x4, 0xc47, 0x7f, 0x7, 0xffff89b2, 0x0, 0x2, 0x7, 0x1, 0x9, 0x1, 0xfffffffe, 0x7ff, 0xff, 0x5, 0x4, 0x0, 0x1, 0x8, 0x4, 0x1, 0xfffffffd, 0x1, 0x2, 0x6]}}, 0x420}, 0x1, 0x0, 0x0, 0x40011}, 0x10) 3.070889308s ago: executing program 5 (id=7327): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000080)={0x2, 0x7, 0x1, 0x0, 0x0, [{{r0}, 0xa}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a03", 0x2c}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f00000ce000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000200)="66450fc7746e0a0fb51ef2ab400f79ac680080000066bba100ed0fc77310c4427d988c170500000074495470fb70190c190c75a854ff048fa800b6c3f9", 0x3d}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000003680)=@vmx={0x8, 0x0, 0xffffffffffffffbc, {0x60000, 0x0, {}, 0x0, 0x2}, {"00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001ada237e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000938c00"}}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 2.866327983s ago: executing program 5 (id=7329): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) read$FUSE(r1, &(0x7f0000003b80)={0x2020}, 0x2020) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) 2.74477694s ago: executing program 0 (id=7330): socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_netfilter(r0, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={0x0, 0x21e8}, 0x1, 0x0, 0x0, 0x4000004}, 0x20048041) 2.675528085s ago: executing program 4 (id=7331): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000380)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='b +'], 0xa) 2.658662299s ago: executing program 3 (id=7332): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4620, 0x2, @mcast2, 0xa}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000055000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000056000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x2c92, 0xc000, 0x7, 0x20002f7}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0xb8, 0xffffffffffffffff, 0x0, 0x4, 0x2, 0x8}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.531835263s ago: executing program 0 (id=7333): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2.49342621s ago: executing program 3 (id=7334): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x102, 0x0) sendto$inet(r0, 0x0, 0x0, 0x800, 0x0, 0x0) 2.468492381s ago: executing program 4 (id=7335): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000083c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0xfffffffffffffffe, 0xf9, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0xc000, 0xfffffffc, r2, r3, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) 2.300098274s ago: executing program 0 (id=7336): r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r1, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x4000001, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x1, 0x0) 1.433702502s ago: executing program 4 (id=7337): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000540)=[@text32={0x20, 0x0}], 0x1, 0x10, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x75, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.415702571s ago: executing program 3 (id=7338): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x6d}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, &(0x7f0000000000)=""/163, 0x0, 0xa3, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000040)={'veth0_vlan\x00', @random='\x00\x00\x00\x00\x00 '}) 1.339804863s ago: executing program 0 (id=7339): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.174622189s ago: executing program 3 (id=7340): ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000240)={0x0, [{0x0, 0x4d88, 0x6, &(0x7f0000000640)="7a650e526bd0998268bb5847d9beacc47a22df873eab4b8b91133675482eaa56ace8db59bed9aa07d4e390c7c9f98c462b55612196911e3c4e510ede3efde35eec990f22a76cf752e507c1e2de2920a9fc0790cc176bd2b901e4127b09835ae6d0d196048bb19a64d26f20a05b95c69f371882ef2e20c5606ed1b2ebcf09a4a333f6e1c3c4fb64d8182df4ab09d0a381d966977fc041cea9bdf0aa31fe51efe9211b9b8e6e4551b6438f8efcc41265574ff6504435eb22a678a99768f0327ded8fdcb41f27c2024d2b923f7dc5df5bf62af447b121dd9f94d766d6cebdeb02f611ab10e57af4b3268fb3f9777373bd5fd6b82f730e67c4eab113d8e65d7405be3e5d92dc5e7e85d34bb8b7c894cbed629ecc25c288b3d4556a85a1e2150cac5b686a8de29ab7c35040b77875bfa0e451dc0869cfe105bd115e7cf48f44dfdf26be65f3b727fd88d6395d051e49c060998e84b19377fcb20fe2eb392335e5a9d84555ef037aab37169ce761aa8a8ec08ea87e3a3b896f3d1b2380bc8256e0f7ea7dc488382e6112b53a7bb269d6261f87e0e0e0cef9152f8a67f412148f34880c970101fbd7b0e8fc49d6a5c87e487b7b175b15be26b6b8e1ed8527614dcefcfd80f8392560c8b706418b7de8fbb7a666a7e7f322dc70373606bf39efa04616cb99d662dfc591061bde5ed27a66aa7edbfec1eb0b1e843c372b84c3ed514a0aadf523b8669e526765d429824aeaa0a6f4c185754d437d977a1f586431dc256ce5aa7c25be259de3a0ae6e5bcdf56b4c7e8199fe6b461e78467cfac19de6956056ef57e93d3a7df8f646f4a9002b100edb0a6caa72b3f6eb29dc54de58120d27daff9cd61c64107e1bcb3b3212e1e2aa24fb24dc2dafc636c82ad25da9d934e46c7783d8f915337612feb348857ce2262240dfe51ec94d9d61074959f167b9840b20f003883bf167149228d7f03eafde851427cd1966a96aeae05b51ae4cd82f4b4dad60a070c01a8b500e2683f7136e331602e76845262825d7f3764cf1a05ad95d88aab71d41484f63fa6a43c044c7f03130552321933bc40b888fd0cc55939ff79a5059516f3b80c7ba8188ffb6a259a34567ee52c1f9df0f6c91737d688e36d076a49d1045cac30d5ed52a10381c96d9f22e469cc531bb06853d18b8f8625d2a917e795ffa4407fa75713510a3f5370e1ecbf7a5ff68a90a1eda077531cf4d399d4908f138c936e1931c72240070c6a6255f5fd03966e9a06c1d481e8e3d128e880776e572177780a3481c49bd86c174e152bafed245d58ef3428c645b08e48833960d1b5223d7be0c67a2b2c7531390d1837a84ed004a00cb4b0cd6e78824da032b48c49ec006d14206dc3d0c67d7ca87e9ea0faddc3e0b0c917c64eefeebf79e3a16c958db63a08a5d4d7210273aba3e56a4cd4cccb044750ff97749505ff1332b2dd30990849ab1500e1947d0abfb0c59760f0a502806ee1bce56fbb42251dd6ac8b709c73a6b8c548c2b23cf351dc498810e477bd082464e76702703b56d3cd2f3d8a2e00f19d8ffa3c236d3601f169c9dfe9c316f8cbe63c3801a51ea5ac785694a0c653cd28d68c5a81c2590d2aeea8c8688b2e88f46c4f99890e51b42cce485fcb4d91557fb3912b36b0dbeac8df44e945eb9937141402fb2aa1476185e1f8c37f6c98bc937f36d9c7237135132a54a03067b002b9c657ab0daa253af66eee78b0309cb8532dd2dee800c8349b731da0efa66ead82eebe0102279df5aa281fe1d86c0dbf154910d5e8a113ecbddbd046367b9e2acfa7cc406f61b472bbec6919534615ed81b664da956ce6586bf4c92d63ef371dfec5f9ce748931d585cadc9372a95a1372c7213e2c52fca253945afeee02e9f2de2d9452c85fd2dbdc87cb6c25697dfcbed8a0eba381835e6c360f3861367ec98a9a9ccf956d6cbfb706fee0d391cf82a0d4662792274f52fc2b5d72a43ec74a86400e62d3652f607774cfad1504bc0476570d532b527bf0d7012804b2e6fdf9a9414f10b16c9374f2b065348d865b309e37750d3a7e12394e356c48c9fa0d4a9a43f689f6cbf70b09a3b9782cc3d5d93480f8a7a21a049780fc6bf21f1eca938a37afcbb2b929a0c502e164d2571e78d214b359d97e3edc0ad5c7fd1625b4ece33e1f569676e9a7262ead857873f77ef149d2f8c5a09ab19ae384a7f957f612a24283c35327aa969b20711309644c5b3e6c89da94e1f5da54246bd771468a1adc8a8d601e0b12769604f0f07ca43ce2a8a2f4b5654c0b76b146c49038e07db54dae702580b97096911f034fc1797029de8b7c213c902d1d754e77ff85e6222e745db9d5d2d45c5d29a8b6de0f27e5701fdf12b09fd6c70baa0f85a424c21ce0796dbe1fd366b94fcdf64ea232b3e88b89a38d728de77e84decc804f07a48f2716ca6f76b24923cea1a4da0d1f1dc73611269e784c4fd921f9b26c11f35b5cda45842a81b603ce2155d95c273fa0743a571b52e68c9ea3f28009fc37406b9e329ce50fedfb20dfb4cdf3a94769aee2586c2a17e68a07abfcd18aceddfd3876b14558e4d092eadb9120796c44e89610494085117bc41b5c4619a8c160b97811df49fc7d9bf222d7a002640644337ef5af53ed50661131f7c042665b276c0adf0c9a74f3542729beb7632a6027e65eddff7bb27915826701ec9b6a4c672f08877eefd859e0aa6e75a2e841e1ea98dff994e5a58be628df86bff17497a4d0f92ab39db421eb1062a2a393656bbb1d92becbb91a59619156b51585cd2eafd8a18d6326166312efeaa7258bddad63e0c7372ffb7ce1f1adf1ac2ffa0f278e4be6684d762f8971ed7bb04096b96f8126bf5fd32142e745d421f495327dde0f1e2d9a1d8ba63c1453101396a2e54e89cdabac2c6a01f23a5c1d5a2dfa2a3c634176e97c9c62b41ea28102b5a08af2fba1d311bb323df086ea97726c9d8c7b7b53a3399a80f040d434fdcc2148fb1da3b7d7f0f3e3fd56471a310ee275da611c79f86be8ed6343f6ed0ad91dfeffeb40e00009d0566d6db904c1db499ae7d2698fdc7170320f85cc3d3d0d9d0d0c7d45db7b53c5eb79a2fed2a048d9d74419532122fac62f6315a9e13b461cb4e26514491debd366927987271be963ea5805a49b8b480c6a393fda1b11fd5634890cf02948cb5bfea237afb30d081c7403cd334a02e5bb8db542c4d5fa5ec5c8a0dd36b62156881c98e01948b4775a502c5d8453439fd930df52caac9d71c28b712000b306b913c10918ca0bc194f2533334462e5cd2b2e6c978a4838febfbc2d4375b8108bd0aa32aeaf05e7ba30c781cace6470ead574f5cbfa68aa8c8d835e9b3ab2bd7dd90b5e3e6cd62d8e04c3b45326e1f560a8dd8f3db4177e9e5ccd61f21dacb5c40c8030559cdfe88f7aa98bdcde90c1214cf293b3df093d0630bc3073cbaffa025b1f5537b49d799731745de7d36cded4a9db25915a511ba505b4ddd885cd226c24ea37fd926dbd90b887"}, {0x1, 0x0, 0x41ff7484, 0x0}, {0x2, 0x0, 0x100d5b6, 0x0}, {0x2, 0x0, 0xfffffff8, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x1, 0x0, 0x400, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x1, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 945.924164ms ago: executing program 0 (id=7341): socket(0x80000000000000a, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(0x3) 767.494923ms ago: executing program 4 (id=7342): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) write$cgroup_int(r1, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000004) 721.171111ms ago: executing program 3 (id=7343): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4620, 0x2, @mcast2, 0xa}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000055000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000056000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x2c92, 0xc000, 0x7, 0x20002f7}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0xb8, 0xffffffffffffffff, 0x0, 0x4, 0x2, 0x8}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 3 (id=7344): r0 = syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5042) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_wakeup_irq', 0x20940, 0x1e2) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000140)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x5, 0xc, "c44ef9682a689185ff07ec0f9eddd770e010a8b62022fd106fa715e63fee8ab07f3c19ed0c04afcaba06f6d9584488da0162d4cc7030ec4f7b9ab89b3e192e4a", "8bc975aabbbbe9e4cbb0e98d43a12e12538b330e6fe3bce73919393417abdc6c58f0abd4f0c29b3c71757f74bc429c808f46e9cda4584203143a0b9705fb16b6", "666f1d5f5c43005b310134ce9a6d0369862b72c1f9f4980a2346c4dd62ad8050", [0x6, 0x61fe]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) kernel console output (not intermixed with test programs): Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1854.387478][T23330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1854.601482][T12886] IPVS: fo: UDP 127.0.0.1:20003 - no destination available [ 1854.687495][T15123] IPVS: stop unused estimator thread 0... [ 1854.840858][T23330] veth0_vlan: entered promiscuous mode [ 1854.858995][T23507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1854.924276][T23330] veth1_vlan: entered promiscuous mode [ 1855.014079][T23507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1855.167474][T23330] veth0_macvtap: entered promiscuous mode [ 1855.644241][T23330] veth1_macvtap: entered promiscuous mode [ 1855.647365][ T9] usb 4-1: 0:2 : does not exist [ 1855.743884][ T9] usb 4-1: 1:0: cannot get min/max values for control 2 (id 1) [ 1855.864734][ T5907] IPVS: fo: UDP 127.0.0.1:20003 - no destination available [ 1855.878957][T23330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1855.911658][ T9] usb 4-1: USB disconnect, device number 59 [ 1856.009293][T23330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1856.064512][T23325] udevd[23325]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1856.116671][ T1041] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1856.204603][ T1041] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1856.287602][ T1041] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1856.329764][ T1041] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1856.549730][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1856.557608][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1856.752740][T22805] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1856.785847][T22805] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1858.302021][T14671] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1858.315882][T14671] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1858.324891][T14671] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1858.332814][T14671] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1858.341526][T14671] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1858.424343][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.430919][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1859.922682][T23547] chnl_net:caif_netlink_parms(): no params data found [ 1860.181556][T23547] bridge0: port 1(bridge_slave_0) entered blocking state [ 1860.188967][T23547] bridge0: port 1(bridge_slave_0) entered disabled state [ 1860.196788][T23547] bridge_slave_0: entered allmulticast mode [ 1860.211935][T23547] bridge_slave_0: entered promiscuous mode [ 1860.222447][T23547] bridge0: port 2(bridge_slave_1) entered blocking state [ 1860.239960][T23547] bridge0: port 2(bridge_slave_1) entered disabled state [ 1860.247439][T23547] bridge_slave_1: entered allmulticast mode [ 1860.256436][T23547] bridge_slave_1: entered promiscuous mode [ 1860.353063][ T36] IPVS: fo: UDP 127.0.0.1:20003 - no destination available [ 1860.420035][T23171] Bluetooth: hci0: command tx timeout [ 1860.430345][T23547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1860.487809][T23547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1860.583641][T23575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1860.871057][T23547] team0: Port device team_slave_0 added [ 1861.190395][T23547] team0: Port device team_slave_1 added [ 1861.260216][T23579] geneve2: entered promiscuous mode [ 1861.267844][T23579] geneve2: entered allmulticast mode [ 1861.625255][ T9] IPVS: fo: UDP 127.0.0.1:20003 - no destination available [ 1861.679828][ T24] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1861.849671][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 1861.861182][T23547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1861.874295][ T24] usb 2-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 8 [ 1861.884229][T23547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1861.918671][ T24] usb 2-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1861.949687][ T24] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1861.949841][T23547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1861.988423][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1862.007911][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1862.012496][T23547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1862.038747][T23547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1862.096764][ T24] usb 2-1: Product: Ͼ㨞梺鑪䷣äºê‰æ´Ÿá€¦é¾®ç­§ê½¿á°§íˆ¢è¤ë®ï¼½î·â€‰á§¡ä®ƒã†˜å§°âš¦ã‚¸ä¹¸æ´¬ã™€îŒ§ä’Šá«”笔摃ï çº”ⵌ [ 1862.100393][T23547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1862.129790][ T24] usb 2-1: Manufacturer: ៷䠔怜뙵㮌퇗⭢඙椻녅鑮혰羖å…ࣉ㌗è¹æ‡ºå§œë¨€ç¯»âŒžæ¯­æ£¶ì¬¦í„ޠ묻ì¨é¹¶íœ¸ë‰‘è°‡ê›â––彇餫죳ë¸ãŒ…ç™‰ìˆŸê†¦ï¾»æ© [ 1862.178458][ T24] usb 2-1: SerialNumber: 嬬饒æ¹î¾§è’¨î„¥à¦žä…–ë‘濗뗒曵香ѭﳒ謤턦ⵈç‡æ‹¨å»¤ì˜•ç”Žâ²Œî‰íƒ•â ‡ [ 1862.226782][T23590] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1862.234478][T23590] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1862.433739][T23547] hsr_slave_0: entered promiscuous mode [ 1862.456778][T23547] hsr_slave_1: entered promiscuous mode [ 1862.464457][T23589] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4405'. [ 1862.488443][T23547] debugfs: 'hsr0' already exists in 'hsr' [ 1862.500872][T23171] Bluetooth: hci0: command tx timeout [ 1862.515307][T23547] Cannot create hsr debugfs directory [ 1862.626145][T23596] block device autoloading is deprecated and will be removed. [ 1862.750832][T23597] netlink: 'syz.5.4406': attribute type 4 has an invalid length. [ 1862.899195][T23600] netlink: 'syz.5.4406': attribute type 4 has an invalid length. [ 1862.951123][T23596] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1864.499433][T23547] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1864.589747][T23171] Bluetooth: hci0: command tx timeout [ 1864.774365][T23547] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1865.050516][ T24] usb 2-1: USB disconnect, device number 50 [ 1865.211188][T23547] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1865.455313][T23547] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1865.888312][T23547] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1865.944877][T23547] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1865.981267][T23547] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1866.016944][T23547] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1866.040459][T23629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4416'. [ 1866.161811][T23630] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4415'. [ 1866.190752][T22805] IPVS: fo: UDP 127.0.0.1:20003 - no destination available [ 1866.659865][T23171] Bluetooth: hci0: command tx timeout [ 1866.745456][T22925] IPVS: fo: UDP 127.0.0.1:20003 - no destination available [ 1866.837694][T23647] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4419'. [ 1867.065789][T23547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1867.145856][T23547] 8021q: adding VLAN 0 to HW filter on device team0 [ 1867.194218][T12886] bridge0: port 1(bridge_slave_0) entered blocking state [ 1867.201598][T12886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1867.263040][T12886] bridge0: port 2(bridge_slave_1) entered blocking state [ 1867.270470][T12886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1867.391529][T22925] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1867.532714][T23547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1867.552303][T22925] usb 2-1: Using ep0 maxpacket: 8 [ 1867.563014][T22925] usb 2-1: config 0 has too many interfaces: 34, using maximum allowed: 32 [ 1867.575089][T22925] usb 2-1: config 0 has an invalid interface number: 244 but max is 33 [ 1867.665439][T22925] usb 2-1: config 0 has an invalid descriptor of length 164, skipping remainder of the config [ 1867.704229][T22925] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 34 [ 1867.736715][T22925] usb 2-1: config 0 has no interface number 0 [ 1867.752543][T22925] usb 2-1: config 0 interface 244 has no altsetting 0 [ 1867.765772][T22925] usb 2-1: New USB device found, idVendor=01f6, idProduct=0000, bcdDevice= 0.00 [ 1867.795174][T22925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1867.849966][T23547] veth0_vlan: entered promiscuous mode [ 1867.863443][T22925] usb 2-1: config 0 descriptor?? [ 1867.889989][T23547] veth1_vlan: entered promiscuous mode [ 1867.998821][T23547] veth0_macvtap: entered promiscuous mode [ 1868.124459][T23547] veth1_macvtap: entered promiscuous mode [ 1868.258281][T23651] bond1: option lacp_rate: invalid value (223) [ 1868.302459][T23651] bond1 (unregistering): Released all slaves [ 1868.418902][T23547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1868.444604][T23547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1868.488316][T22925] usb 2-1: string descriptor 0 read error: -71 [ 1868.522170][T22925] usb 2-1: USB disconnect, device number 51 [ 1868.650295][T12886] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1868.661525][T12886] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1868.706087][T12886] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1868.716263][T12886] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1868.834599][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1868.843052][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1869.111186][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1869.119162][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1869.582712][T23671] netlink: 'syz.5.4425': attribute type 10 has an invalid length. [ 1869.719993][T23671] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 1869.764308][T23671] team0: Port device netdevsim0 added [ 1869.798634][T23675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4427'. [ 1869.814507][T23676] netlink: 'syz.5.4425': attribute type 10 has an invalid length. [ 1870.229344][T23682] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1870.630679][T23676] team0: Port device netdevsim0 removed [ 1870.644676][T23676] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1871.020992][T14671] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1871.049805][T14671] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1871.229870][T14671] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1871.251403][T14671] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1871.264611][T14671] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1871.516856][T23693] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1872.435652][T22805] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1872.478390][T22805] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1872.772508][T22805] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1872.813749][T22805] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1873.164924][T22805] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1873.186024][T22805] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1873.390871][T14671] Bluetooth: hci1: command tx timeout [ 1873.457504][T22805] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1873.509937][T22805] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1873.576016][T23689] chnl_net:caif_netlink_parms(): no params data found [ 1874.099216][T22805] bridge_slave_1: left allmulticast mode [ 1874.121543][T22805] bridge_slave_1: left promiscuous mode [ 1874.127394][T22805] bridge0: port 2(bridge_slave_1) entered disabled state [ 1874.197491][T22805] bridge_slave_0: left allmulticast mode [ 1874.255506][T22805] bridge_slave_0: left promiscuous mode [ 1874.303850][T22805] bridge0: port 1(bridge_slave_0) entered disabled state [ 1874.363560][T22805] veth5: left allmulticast mode [ 1874.368819][T22805] veth5: left promiscuous mode [ 1874.440132][T22805] bridge1: port 3(veth5) entered disabled state [ 1874.482826][T22805] veth3: left allmulticast mode [ 1874.489849][ T5914] usb 5-1: new low-speed USB device number 60 using dummy_hcd [ 1874.511526][T22805] veth3: left promiscuous mode [ 1874.516656][T22805] bridge1: port 1(veth3) entered disabled state [ 1874.583601][T22805] veth9: left allmulticast mode [ 1874.595500][T22805] veth9: left promiscuous mode [ 1874.618022][T22805] bridge2: port 3(veth9) entered disabled state [ 1874.643476][T22805] veth7: left allmulticast mode [ 1874.658541][T22805] veth7: left promiscuous mode [ 1874.672897][T22805] bridge2: port 1(veth7) entered disabled state [ 1874.680401][ T5914] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1874.695062][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1874.716979][T22805] veth13: left allmulticast mode [ 1874.724928][ T5914] usb 5-1: config 0 descriptor?? [ 1874.744791][T22805] veth13: left promiscuous mode [ 1874.753875][ T5914] asix 5-1:0.0: probe with driver asix failed with error -22 [ 1874.768547][T22805] bridge3: port 3(veth13) entered disabled state [ 1874.796916][T22805] veth0_to_bond: left allmulticast mode [ 1874.802922][T22805] veth0_to_bond: left promiscuous mode [ 1874.808646][T22805] bridge3: port 2(veth0_to_bond) entered disabled state [ 1874.847491][T22805] veth11: left allmulticast mode [ 1874.864363][T22805] veth11: left promiscuous mode [ 1874.884459][T22805] bridge3: port 1(veth11) entered disabled state [ 1875.464283][T14671] Bluetooth: hci1: command tx timeout [ 1875.527881][T22805] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1875.593696][T22805] bond3 (unregistering): (slave geneve3): Releasing active interface [ 1875.711916][T15123] IPVS: fo: UDP 127.0.0.1:20003 - no destination available [ 1876.037558][T22805] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1876.056923][T22805] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1876.084129][T22805] bond0 (unregistering): Released all slaves [ 1876.344005][T22805] bond1 (unregistering): Released all slaves [ 1876.366896][T22805] bond2 (unregistering): Released all slaves [ 1876.500702][T13360] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1876.549268][T22805] bond3 (unregistering): Released all slaves [ 1876.563712][T22805] bond4 (unregistering): Released all slaves [ 1876.578534][T22805] bond5 (unregistering): Released all slaves [ 1876.595394][T22805] bond6 (unregistering): Released all slaves [ 1876.614465][T22805] bond7 (unregistering): Released all slaves [ 1876.669746][T13360] usb 2-1: Using ep0 maxpacket: 8 [ 1876.672903][ T5907] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1876.695859][T13360] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1876.748334][T13360] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1876.787378][T23689] bridge0: port 1(bridge_slave_0) entered blocking state [ 1876.801596][T13360] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1876.829045][T23689] bridge0: port 1(bridge_slave_0) entered disabled state [ 1876.830355][ T5907] usb 1-1: Using ep0 maxpacket: 16 [ 1876.836558][T13360] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1876.848792][ T5907] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1876.853949][T23689] bridge_slave_0: entered allmulticast mode [ 1876.870665][ T5907] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1876.884437][ T5907] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1876.895072][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1876.908771][T13360] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1876.921963][T23689] bridge_slave_0: entered promiscuous mode [ 1876.928697][ T5907] usb 1-1: Product: syz [ 1876.933448][ T5907] usb 1-1: Manufacturer: syz [ 1876.937368][T13360] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1876.941648][ T5907] usb 1-1: SerialNumber: syz [ 1876.952583][T22805] tipc: Left network mode [ 1876.971279][T23689] bridge0: port 2(bridge_slave_1) entered blocking state [ 1876.978565][T23689] bridge0: port 2(bridge_slave_1) entered disabled state [ 1876.991427][T13360] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1877.013417][T13360] usb 2-1: config 0 descriptor?? [ 1877.031318][T23689] bridge_slave_1: entered allmulticast mode [ 1877.042128][T23689] bridge_slave_1: entered promiscuous mode [ 1877.050583][T23767] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1877.311972][T23689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1877.329227][T14306] usb 5-1: USB disconnect, device number 60 [ 1877.358170][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.366860][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.374044][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.381494][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.388991][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.395970][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.403078][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.404693][ T5907] usb 1-1: 0:2 : does not exist [ 1877.410649][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.422323][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.430524][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.437459][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.444419][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.451954][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.459043][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.466113][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.473256][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.481559][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.488514][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.495603][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.502626][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.509641][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.516669][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.524449][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.532091][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.539020][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.546324][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.553303][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.560302][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.567277][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.574245][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.581277][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.588222][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.595390][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.602395][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.609845][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.616760][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.623969][ T5836] Bluetooth: hci1: command tx timeout [ 1877.630968][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.638089][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.645141][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.652336][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.659246][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.666306][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.673290][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.680310][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.687206][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.694172][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.701639][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.708725][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.715711][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.722684][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.729636][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.737142][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.744227][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.751267][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.758201][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.765425][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.772555][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.779833][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.788143][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.795170][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.802153][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.809318][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.809483][T14306] usb 2-1: USB disconnect, device number 52 [ 1877.817045][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.829308][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.836967][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.843937][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.850973][T23171] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1877.860724][T14671] Bluetooth: hci3: Opcode 0x0c03 failed: -71 [ 1877.880563][ T5907] usb 1-1: USB disconnect, device number 39 [ 1878.002379][T23689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1878.034291][T23325] udevd[23325]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1878.165229][T22805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1878.186688][T22805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1878.224533][T22805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1878.242634][T22805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1878.291940][T22805] veth0_macvtap: left promiscuous mode [ 1878.302692][T22805] veth1_vlan: left promiscuous mode [ 1878.322286][T22805] veth0_vlan: left promiscuous mode [ 1879.699884][T23171] Bluetooth: hci1: command tx timeout [ 1879.925830][T22805] team0 (unregistering): Port device team_slave_1 removed [ 1880.040440][T22805] team0 (unregistering): Port device team_slave_0 removed [ 1880.852410][T23689] team0: Port device team_slave_0 added [ 1880.875978][T23689] team0: Port device team_slave_1 added [ 1880.976041][T23689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1881.005079][T23689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1881.049671][T23689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1881.093666][T23689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1881.129658][T23689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1881.206443][T23689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1881.264713][T23864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4483'. [ 1881.471457][ T36] IPVS: fo: UDP 127.0.0.1:20003 - no destination available [ 1881.520166][T14306] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1881.549395][T23689] hsr_slave_0: entered promiscuous mode [ 1881.604357][T23689] hsr_slave_1: entered promiscuous mode [ 1881.628512][T23689] debugfs: 'hsr0' already exists in 'hsr' [ 1881.634900][T23689] Cannot create hsr debugfs directory [ 1881.711988][T14306] usb 2-1: Using ep0 maxpacket: 8 [ 1881.731951][T14306] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1881.759840][T14306] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 200 [ 1881.808141][T14306] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1881.818237][ T5907] usb 6-1: new full-speed USB device number 104 using dummy_hcd [ 1881.858479][T14306] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1881.889027][T14306] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1881.929203][T14306] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1881.949652][T14306] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1881.979404][T14306] usb 2-1: config 0 descriptor?? [ 1881.991270][T23855] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1881.999742][ T5907] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1882.028111][ T5907] usb 6-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 1882.067692][T22805] IPVS: stop unused estimator thread 0... [ 1882.079643][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1882.119156][ T5907] usb 6-1: config 0 descriptor?? [ 1882.235710][T13360] usb 2-1: USB disconnect, device number 53 [ 1882.621376][ T5907] cherry 0003:046A:0023.006A: hidraw0: USB HID v10.00 Device [HID 046a:0023] on usb-dummy_hcd.5-1/input0 [ 1883.071043][T23902] netlink: 'syz.0.4488': attribute type 8 has an invalid length. [ 1883.130115][T23689] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1883.226753][T23689] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1883.354388][T23689] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1883.408592][T23689] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1883.787882][T23689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1883.831252][T23689] 8021q: adding VLAN 0 to HW filter on device team0 [ 1883.862298][T15123] bridge0: port 1(bridge_slave_0) entered blocking state [ 1883.869658][T15123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1883.910736][T15123] bridge0: port 2(bridge_slave_1) entered blocking state [ 1883.918095][T15123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1884.123873][T23689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1884.191911][ T56] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1884.253029][T23689] veth0_vlan: entered promiscuous mode [ 1884.288282][T23689] veth1_vlan: entered promiscuous mode [ 1884.359117][ T56] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1884.372406][T23689] veth0_macvtap: entered promiscuous mode [ 1884.387295][ T56] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1884.411039][T23689] veth1_macvtap: entered promiscuous mode [ 1884.416983][ T56] usb 2-1: Product: syz [ 1884.429634][ T56] usb 2-1: Manufacturer: syz [ 1884.434393][ T56] usb 2-1: SerialNumber: syz [ 1884.480751][ T56] usb 2-1: config 0 descriptor?? [ 1884.495193][T23689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1884.507267][ T56] ch341 2-1:0.0: ch341-uart converter detected [ 1884.571891][ T10] usb 6-1: USB disconnect, device number 104 [ 1884.646013][T23689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1884.697773][ T1041] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1884.725463][ T1041] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1884.752546][ T1041] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1884.764238][ T1041] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1885.087614][T15123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1885.098887][T23940] loop7: detected capacity change from 0 to 8 [ 1885.119376][T15123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1885.154925][ T123] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1885.165496][ T123] buffer_io_error: 28 callbacks suppressed [ 1885.165516][ T123] Buffer I/O error on dev loop7, logical block 0, async page read [ 1885.181853][T23940] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1885.209742][T23940] Buffer I/O error on dev loop7, logical block 0, async page read [ 1885.226596][T23940] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1885.246031][T14443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1885.255181][T14443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1885.279755][T23940] Buffer I/O error on dev loop7, logical block 0, async page read [ 1885.288023][T23940] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1885.308559][T23940] Buffer I/O error on dev loop7, logical block 0, async page read [ 1885.323208][T23940] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1885.337940][T23940] Buffer I/O error on dev loop7, logical block 0, async page read [ 1885.346142][T23940] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1885.383431][T23940] Buffer I/O error on dev loop7, logical block 0, async page read [ 1885.401715][T23940] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1885.437568][T23940] Buffer I/O error on dev loop7, logical block 0, async page read [ 1885.454851][T23940] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1885.499697][T23940] Buffer I/O error on dev loop7, logical block 0, async page read [ 1885.518009][T23940] ldm_validate_partition_table(): Disk read failed. [ 1885.531638][ T56] ch341-uart ttyUSB0: failed to read break control: -71 [ 1885.538968][ T56] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1885.574015][T23940] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1885.608988][T23940] Buffer I/O error on dev loop7, logical block 0, async page read [ 1885.645459][T23940] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1885.658805][T23957] fuse: Bad value for 'fd' [ 1885.734177][T23940] Buffer I/O error on dev loop7, logical block 0, async page read [ 1885.761795][ T56] usb 2-1: USB disconnect, device number 54 [ 1885.788247][ T56] ch341 2-1:0.0: device disconnected [ 1885.797973][T23940] Dev loop7: unable to read RDB block 0 [ 1885.864731][T23940] loop7: unable to read partition table [ 1886.032035][T23940] loop7: partition table beyond EOD, truncated [ 1886.038320][T23940] loop_reread_partitions: partition scan of loop7 (úùƒå´ ‰ü¾CêjÌ–ã¢P=ý?ø}Xÿ) failed (rc=-5) [ 1886.477258][T23966] bridge0: port 2(bridge_slave_1) entered disabled state [ 1886.485178][T23966] bridge0: port 1(bridge_slave_0) entered disabled state [ 1886.508488][T22805] IPVS: fo: UDP 127.0.0.1:20003 - no destination available [ 1886.728402][T23966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1886.742829][T23966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1886.988593][T14443] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1887.012398][T14443] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1887.039703][T14443] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1887.079700][T14443] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1887.852157][T24021] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1888.949682][ T9] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1889.119991][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1889.142105][ T9] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1889.157648][ T9] usb 5-1: config 0 has no interface number 0 [ 1889.186640][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1889.207596][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1889.228625][ T9] usb 5-1: Product: syz [ 1889.246527][ T9] usb 5-1: Manufacturer: syz [ 1889.272162][ T9] usb 5-1: SerialNumber: syz [ 1889.290074][ T10] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1889.310834][ T9] usb 5-1: config 0 descriptor?? [ 1889.327153][ T9] smsc95xx v2.0.0 [ 1889.478477][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 1889.487339][ T10] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1889.500831][ T10] usb 1-1: config 0 has no interface number 0 [ 1889.529371][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1889.539372][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1889.549920][ T10] usb 1-1: Product: syz [ 1889.556535][ T10] usb 1-1: Manufacturer: syz [ 1889.563365][ T10] usb 1-1: SerialNumber: syz [ 1889.582812][T14306] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1889.660557][ T10] usb 1-1: config 0 descriptor?? [ 1889.676452][ T10] smsc95xx v2.0.0 [ 1889.749614][T14306] usb 4-1: Using ep0 maxpacket: 32 [ 1889.761691][T14306] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1889.782533][T14306] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1889.810389][T14306] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 26 [ 1889.839097][T14306] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1889.850083][T14306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1889.866210][T14306] usb 4-1: SerialNumber: syz [ 1889.891983][T14306] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 1889.901285][T14306] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 1889.907946][T14306] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 1890.105382][ T5914] usb 4-1: USB disconnect, device number 60 [ 1890.113572][ T56] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1890.129703][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 1890.141255][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1890.156936][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1890.179808][ T9] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 1890.225370][ T9] usb 5-1: USB disconnect, device number 61 [ 1890.283537][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 1890.299916][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 1890.319847][ T56] usb 2-1: Using ep0 maxpacket: 32 [ 1890.326410][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1890.343674][ T56] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 1890.352831][ T10] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 1890.361160][ T56] usb 2-1: config 0 has no interface number 0 [ 1890.367591][ T56] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1890.384757][ T10] usb 1-1: USB disconnect, device number 40 [ 1890.395953][ T56] usb 2-1: config 0 interface 196 has no altsetting 0 [ 1890.427352][ T56] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1890.445833][ T56] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1890.456398][ T56] usb 2-1: Product: syz [ 1890.461193][ T56] usb 2-1: Manufacturer: syz [ 1890.465934][ T56] usb 2-1: SerialNumber: syz [ 1890.480204][ T56] usb 2-1: config 0 descriptor?? [ 1890.491437][T24077] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1890.917925][ T56] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 1890.947985][ T56] ipheth 2-1:0.196: probe with driver ipheth failed with error -22 [ 1891.000372][T14306] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1891.122405][ T56] usb 2-1: USB disconnect, device number 55 [ 1891.160027][T14306] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1891.191283][T14306] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1891.211631][T14306] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1891.231804][T14306] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1891.242436][T14306] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1891.256963][T14306] usb 5-1: config 0 descriptor?? [ 1891.683678][T14306] plantronics 0003:047F:FFFF.006B: ignoring exceeding usage max [ 1891.703177][T14306] plantronics 0003:047F:FFFF.006B: ignoring exceeding usage max [ 1891.720620][T14306] plantronics 0003:047F:FFFF.006B: usage index exceeded [ 1891.737947][T14306] plantronics 0003:047F:FFFF.006B: item 0 0 2 2 parsing failed [ 1891.748800][T14306] plantronics 0003:047F:FFFF.006B: parse failed [ 1891.767672][T14306] plantronics 0003:047F:FFFF.006B: probe with driver plantronics failed with error -22 [ 1891.779901][T24112] syzkaller0: entered promiscuous mode [ 1891.787932][T24112] syzkaller0: entered allmulticast mode [ 1891.804733][T24113] netlink: 176 bytes leftover after parsing attributes in process `syz.5.4548'. [ 1891.897285][T14306] usb 5-1: USB disconnect, device number 62 [ 1892.258626][T24117] kvm: kvm [24115]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xe962 [ 1892.534373][T15123] IPVS: fo: UDP 127.0.0.1:20003 - no destination available [ 1893.369967][T24135] input: syz0 as /devices/virtual/input/input149 [ 1895.287828][T24137] bridge0: port 2(bridge_slave_1) entered disabled state [ 1895.295733][T24137] bridge0: port 1(bridge_slave_0) entered disabled state [ 1895.331262][T24137] bridge0: entered allmulticast mode [ 1895.342707][T24138] bridge_slave_1: left allmulticast mode [ 1895.364255][T24138] bridge_slave_1: left promiscuous mode [ 1895.380059][T24138] bridge0: port 2(bridge_slave_1) entered disabled state [ 1895.406402][T24138] bridge_slave_0: left allmulticast mode [ 1895.406432][T24138] bridge_slave_0: left promiscuous mode [ 1895.406577][T24138] bridge0: port 1(bridge_slave_0) entered disabled state [ 1895.887542][ T56] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 1896.069925][ T56] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 1896.080449][ T56] usb 1-1: config 0 has no interface number 0 [ 1896.086700][ T56] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1896.160423][ T56] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1896.172437][ T56] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1896.183622][ T56] usb 1-1: Manufacturer: syz [ 1896.188957][ T56] usb 1-1: SerialNumber: syz [ 1896.197193][ T56] usb 1-1: config 0 descriptor?? [ 1896.373925][ T9] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1896.540076][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1896.562892][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1896.593191][ T9] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 1896.612912][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1896.631648][ T9] usb 5-1: Product: syz [ 1896.646499][ T9] usb 5-1: Manufacturer: syz [ 1896.656647][ T9] usb 5-1: SerialNumber: syz [ 1896.671382][ T9] usb 5-1: config 0 descriptor?? [ 1896.688104][T24169] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1896.731601][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1896.830120][ T56] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1896.931338][ T56] usb 1-1: USB disconnect, device number 41 [ 1896.953250][ T9] usb 5-1: USB disconnect, device number 63 [ 1897.143094][T24194] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1897.620064][ T3495] IPVS: fo: UDP 127.0.0.1:20003 - no destination available [ 1897.879295][T24212] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1898.676918][T24237] netlink: 'syz.4.4598': attribute type 4 has an invalid length. [ 1898.737637][T24241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4598'. [ 1899.339940][ T56] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1899.513631][ T56] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1899.529621][ T56] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1899.551161][ T56] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1899.787935][ T56] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1899.801736][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1899.840667][ T56] usb 5-1: config 0 descriptor?? [ 1900.278927][ T56] plantronics 0003:047F:FFFF.006C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1900.392181][ T9] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1900.468921][ T56] usb 5-1: USB disconnect, device number 64 [ 1900.571369][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=00dd, bcdDevice= 0.00 [ 1900.599596][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1900.632132][ T9] usb 1-1: config 0 descriptor?? [ 1900.789318][T24268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4606'. [ 1900.803013][T24268] netlink: 71 bytes leftover after parsing attributes in process `syz.1.4606'. [ 1901.010068][ T56] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1901.149654][T23942] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1901.179711][ T56] usb 6-1: Using ep0 maxpacket: 8 [ 1901.187281][ T56] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1901.207314][ T56] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1901.233369][ T56] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1901.243312][ T56] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1901.253386][ T56] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1901.270178][ T5914] usb 1-1: USB disconnect, device number 42 [ 1901.292090][ T56] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1901.308719][ T56] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1901.316993][T23942] usb 4-1: Using ep0 maxpacket: 32 [ 1901.331182][T23942] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1901.359579][T23942] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1901.368417][T23942] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1901.399678][T23942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1901.419373][T23942] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1901.439163][T23942] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1901.462374][T23942] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1901.471873][T23942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1901.483279][T23942] usb 4-1: config 0 descriptor?? [ 1901.581575][ T56] usb 6-1: usb_control_msg returned -32 [ 1901.587438][ T56] usbtmc 6-1:16.0: can't read capabilities [ 1901.748365][T23942] usblp 4-1:0.0: usblp1: USB Bidirectional printer dev 61 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1901.787281][T23942] usb 4-1: USB disconnect, device number 61 [ 1901.812391][T23942] usblp1: removed [ 1902.138752][T24311] usbtmc 6-1:16.0: usbtmc_ioctl_request failed -71 [ 1902.145914][T14306] usb 6-1: USB disconnect, device number 105 [ 1902.229673][T22925] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1902.289671][T23942] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1902.363804][T24329] vlan2: entered promiscuous mode [ 1902.368922][T24329] bond0: entered promiscuous mode [ 1902.374358][T24329] bond_slave_0: entered promiscuous mode [ 1902.381731][T24329] bond_slave_1: entered promiscuous mode [ 1902.402694][T22925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1902.412905][T22925] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1902.422164][T22925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1902.435031][T22925] usb 5-1: config 0 descriptor?? [ 1902.440221][T23942] usb 4-1: Using ep0 maxpacket: 32 [ 1902.445489][T23942] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1902.459756][T14306] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1902.473059][T23942] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1902.482379][T23942] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1902.499837][T23942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1902.516575][T23942] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1902.541872][T23942] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1902.562805][T23942] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1902.573546][T23942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1902.585714][T23942] usb 4-1: config 0 descriptor?? [ 1902.639873][T14306] usb 6-1: Using ep0 maxpacket: 32 [ 1902.651685][T14306] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1902.675786][T14306] usb 6-1: config 0 has no interfaces? [ 1902.690739][T14306] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1902.709611][T14306] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1902.741004][T14306] usb 6-1: config 0 descriptor?? [ 1902.802167][T23942] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 62 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1902.815940][T24272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1902.834852][T24272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1902.861989][ C0] usblp0: nonzero read bulk status received: -71 [ 1902.870616][T23942] usb 4-1: USB disconnect, device number 62 [ 1903.035694][T22925] usbhid 5-1:0.0: can't add hid device: -71 [ 1903.056376][T22925] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1903.067863][T22925] usb 5-1: USB disconnect, device number 65 [ 1903.090873][T24271] usblp0: removed [ 1903.152347][T23942] usb 6-1: USB disconnect, device number 106 [ 1903.221572][T22805] IPVS: fo: UDP 127.0.0.1:20003 - no destination available [ 1904.210956][T24365] ip6gre1: entered allmulticast mode [ 1904.320309][T24370] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1905.478112][T24419] ip6erspan1: entered allmulticast mode [ 1905.789463][T24425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4677'. [ 1906.456089][T24438] xt_hashlimit: size too large, truncated to 1048576 [ 1907.415343][T24466] netlink: 75 bytes leftover after parsing attributes in process `syz.1.4689'. [ 1908.099142][T24494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4700'. [ 1908.503189][T24503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4703'. [ 1908.990143][ T36] IPVS: fo: UDP 127.0.0.1:20003 - no destination available [ 1909.558589][T24531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4713'. [ 1910.680542][T24571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4729'. [ 1911.658633][T24599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4743'. [ 1911.687640][T24599] bridge_slave_1: left allmulticast mode [ 1911.707583][T24599] bridge_slave_1: left promiscuous mode [ 1911.725540][T24604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4744'. [ 1911.760661][T24599] bridge0: port 2(bridge_slave_1) entered disabled state [ 1911.778319][T24599] bridge_slave_0: left allmulticast mode [ 1911.792084][T24599] bridge_slave_0: left promiscuous mode [ 1911.813116][T24599] bridge0: port 1(bridge_slave_0) entered disabled state [ 1913.524143][T24662] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1913.544161][T24662] bond1: (slave ip6gretap1): making interface the new active one [ 1913.554198][T24662] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1914.740891][ T3495] IPVS: fo: UDP 127.0.0.1:20003 - no destination available [ 1915.391293][T24737] Dead loop on virtual device ipvlan1, fix it urgently! [ 1916.067298][T24759] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1917.943565][T24813] netlink: 75 bytes leftover after parsing attributes in process `syz.5.4832'. [ 1918.197863][T24827] netlink: 'syz.5.4839': attribute type 4 has an invalid length. [ 1918.744316][T24848] ªªªªª»: renamed from bridge_slave_0 (while UP) [ 1919.295581][T24864] kvm: user requested TSC rate below hardware speed [ 1919.382972][T24869] netlink: 'syz.5.4857': attribute type 6 has an invalid length. [ 1919.400708][T24869] netlink: 'syz.5.4857': attribute type 7 has an invalid length. [ 1919.408504][T24869] netlink: 'syz.5.4857': attribute type 8 has an invalid length. [ 1919.864191][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1919.872815][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1919.885744][T24895] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4869'. [ 1919.989441][T24895] veth3: entered promiscuous mode [ 1919.997022][T24895] veth3: entered allmulticast mode [ 1920.003479][T24895] bridge1: port 1(veth3) entered blocking state [ 1920.020866][T24895] bridge1: port 1(veth3) entered disabled state [ 1920.042978][T24895] bridge1: port 1(veth3) entered blocking state [ 1920.049910][T24895] bridge1: port 1(veth3) entered forwarding state [ 1920.076963][T24905] erspan1: entered allmulticast mode [ 1920.117824][T24907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4873'. [ 1920.289751][ T5914] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1920.450775][ T5914] usb 1-1: Using ep0 maxpacket: 8 [ 1920.464375][ T5914] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1920.474065][ T5914] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1920.493279][ T5914] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1920.504231][T22805] IPVS: fo: UDP 127.0.0.1:20003 - no destination available [ 1920.522925][ T5914] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1920.562673][ T5914] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1920.576267][ T5914] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1920.585666][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1920.805918][ T5914] usb 1-1: usb_control_msg returned -32 [ 1920.829789][ T5914] usbtmc 1-1:16.0: can't read capabilities [ 1920.982206][T22805] bridge1: port 1(veth3) entered disabled state [ 1921.034100][ T30] audit: type=1326 audit(1770781799.200:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24948 comm="syz.5.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2037d9bf79 code=0x7ffc0000 [ 1921.087721][ T30] audit: type=1326 audit(1770781799.200:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24948 comm="syz.5.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2037d9bf79 code=0x7ffc0000 [ 1921.125514][ T30] audit: type=1326 audit(1770781799.200:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24948 comm="syz.5.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2037d9bf79 code=0x7ffc0000 [ 1921.185272][ T30] audit: type=1326 audit(1770781799.200:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24948 comm="syz.5.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2037d9bf79 code=0x7ffc0000 [ 1921.208111][T24954] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4895'. [ 1921.213641][ T30] audit: type=1326 audit(1770781799.200:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24948 comm="syz.5.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2037d9bf79 code=0x7ffc0000 [ 1921.224974][T24954] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1921.241135][ T30] audit: type=1326 audit(1770781799.200:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24948 comm="syz.5.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2037d9bf79 code=0x7ffc0000 [ 1923.096437][ T56] usb 1-1: USB disconnect, device number 43 [ 1923.102747][T25006] usbtmc 1-1:16.0: usbtmc_ioctl_request failed -71 [ 1923.253206][ T30] audit: type=1326 audit(1770781801.420:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25008 comm="syz.0.4918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a9f9bf79 code=0x7ffc0000 [ 1923.356824][ T30] audit: type=1326 audit(1770781801.450:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25008 comm="syz.0.4918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a9f9bf79 code=0x7ffc0000 [ 1923.440604][ T30] audit: type=1326 audit(1770781801.460:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25008 comm="syz.0.4918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a9f9bf79 code=0x7ffc0000 [ 1923.548518][ T30] audit: type=1326 audit(1770781801.460:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25008 comm="syz.0.4918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a9f9bf79 code=0x7ffc0000 [ 1923.550789][T25019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4920'. [ 1923.854470][T25021] veth3: entered promiscuous mode [ 1923.870379][T25021] veth3: entered allmulticast mode [ 1924.124113][T25029] ip6gre1: entered allmulticast mode [ 1924.277025][T25037] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4930'. [ 1924.326233][T25037] erspan1: entered allmulticast mode [ 1924.387681][T25042] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4930'. [ 1924.474850][T25044] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4933'. [ 1924.525633][T25044] ip6gre1: entered promiscuous mode [ 1924.559705][T25044] ip6gre1: entered allmulticast mode [ 1924.674357][T25052] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4936'. [ 1924.900576][T15123] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1924.923716][T15123] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1924.932448][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1924.999361][T25061] veth5: entered promiscuous mode [ 1925.005910][T25061] veth5: entered allmulticast mode [ 1925.119814][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1925.353697][T25080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4946'. [ 1925.476123][T25091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4946'. [ 1925.515821][T25080] bond1: entered promiscuous mode [ 1925.539635][T25080] bond1: entered allmulticast mode [ 1925.568788][T25080] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1925.705354][T25089] erspan1: entered allmulticast mode [ 1925.783412][T25102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4951'. [ 1925.949708][T22925] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1926.104101][T25120] veth3: entered promiscuous mode [ 1926.113056][T25120] veth3: entered allmulticast mode [ 1926.260142][ T3495] IPVS: fo: UDP 127.0.0.1:20003 - no destination available [ 1926.983898][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1926.983919][ T30] audit: type=1326 audit(1770781805.150:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25143 comm="syz.4.4967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4d59bf79 code=0x7ffc0000 [ 1927.081650][ T30] audit: type=1326 audit(1770781805.150:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25143 comm="syz.4.4967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4d59bf79 code=0x7ffc0000 [ 1927.135718][ T30] audit: type=1326 audit(1770781805.150:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25143 comm="syz.4.4967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4d59bf79 code=0x7ffc0000 [ 1927.230734][ T30] audit: type=1326 audit(1770781805.150:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25143 comm="syz.4.4967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4d59bf79 code=0x7ffc0000 [ 1927.300960][ T30] audit: type=1326 audit(1770781805.150:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25143 comm="syz.4.4967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2b4d59bf79 code=0x7ffc0000 [ 1927.386517][ T30] audit: type=1326 audit(1770781805.150:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25143 comm="syz.4.4967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4d59bf79 code=0x7ffc0000 [ 1927.496857][ T30] audit: type=1326 audit(1770781805.150:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25143 comm="syz.4.4967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4d59bf79 code=0x7ffc0000 [ 1927.577811][ T30] audit: type=1326 audit(1770781805.150:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25143 comm="syz.4.4967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4d59bf79 code=0x7ffc0000 [ 1927.662308][ T30] audit: type=1326 audit(1770781805.150:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25143 comm="syz.4.4967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f2b4d59bf79 code=0x7ffc0000 [ 1927.696283][ T30] audit: type=1326 audit(1770781805.150:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25143 comm="syz.4.4967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2b4d595d97 code=0x7ffc0000 [ 1928.579765][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1929.718382][T25196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4987'. [ 1929.919162][T25200] veth3: entered promiscuous mode [ 1929.956891][T25200] veth3: entered allmulticast mode [ 1931.841644][T25241] kvm: kvm [25240]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x689c [ 1932.011496][T25241] kvm: kvm [25240]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x10000e94d [ 1932.021681][ T1041] IPVS: fo: UDP 127.0.0.1:20003 - no destination available [ 1932.065014][T25241] kvm: kvm [25240]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x89c7 [ 1932.121164][T25254] ip6gre2: entered allmulticast mode [ 1932.130843][T25241] kvm: kvm [25240]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x6012 [ 1932.149777][T25241] kvm: kvm [25240]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1932.170156][T25241] kvm: kvm [25240]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xe147 [ 1932.214198][T25241] kvm: kvm [25240]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x89b9 [ 1932.242459][T25241] kvm: kvm [25240]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x90bb [ 1932.271398][T25241] kvm: kvm [25240]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x69da [ 1932.295457][T25241] kvm: kvm [25240]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xb25b [ 1934.159675][T25320] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5037'. [ 1934.522931][T25333] fuse: Bad value for 'fd' [ 1934.746447][T25342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5046'. [ 1935.380471][T14671] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1935.390895][T14671] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1935.402039][T14671] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1935.415347][T14671] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1935.423986][T14671] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1935.755739][T25361] chnl_net:caif_netlink_parms(): no params data found [ 1935.859825][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1935.872460][T25361] bridge0: port 1(bridge_slave_0) entered blocking state [ 1935.879910][T25361] bridge0: port 1(bridge_slave_0) entered disabled state [ 1935.887226][T25361] bridge_slave_0: entered allmulticast mode [ 1935.895322][T25361] bridge_slave_0: entered promiscuous mode [ 1935.904402][T25361] bridge0: port 2(bridge_slave_1) entered blocking state [ 1935.911781][T25361] bridge0: port 2(bridge_slave_1) entered disabled state [ 1935.919095][T25361] bridge_slave_1: entered allmulticast mode [ 1935.927379][T25361] bridge_slave_1: entered promiscuous mode [ 1936.017726][T25361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1936.047595][T25361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1936.084796][T25376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5058'. [ 1936.259135][T25361] team0: Port device team_slave_0 added [ 1936.295205][T25361] team0: Port device team_slave_1 added [ 1936.439760][T25361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1936.447160][T25361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1936.473979][T25361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1936.503083][T25361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1936.536816][T25361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1936.572849][T25387] fuse: Bad value for 'fd' [ 1936.649433][T25361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1936.891207][T25361] hsr_slave_0: entered promiscuous mode [ 1936.905708][T25361] hsr_slave_1: entered promiscuous mode [ 1936.921967][T25361] debugfs: 'hsr0' already exists in 'hsr' [ 1936.934502][T25361] Cannot create hsr debugfs directory [ 1937.140920][ T3495] IPVS: fo: UDP 127.0.0.1:20003 - no destination available [ 1937.404023][T25361] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1937.460480][T23171] Bluetooth: hci3: command tx timeout [ 1937.531261][T25361] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1937.658465][T25361] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1937.859128][T25361] bond0: (slave netdevsim0): Releasing backup interface [ 1937.877697][T25361] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1938.096802][T25428] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5083'. [ 1938.168896][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1938.200079][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1938.208033][T22925] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1938.319833][T22925] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1938.360348][T25361] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1938.387172][T25361] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1938.442404][T25361] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1938.470013][T25361] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1938.509935][T23942] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1938.545052][T25449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5090'. [ 1938.604080][T22925] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1938.621892][T25449] veth3: entered promiscuous mode [ 1938.631747][T25449] veth3: entered allmulticast mode [ 1938.669884][T23942] usb 4-1: Using ep0 maxpacket: 8 [ 1938.688095][T23942] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1938.703806][T23942] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1938.730893][T23942] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1938.758453][T23942] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1938.769985][T23942] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1938.799738][T23942] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1938.830724][T23942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1938.977108][T25361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1938.989973][T25463] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5095'. [ 1939.032057][T25361] 8021q: adding VLAN 0 to HW filter on device team0 [ 1939.052279][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1939.059422][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1939.094353][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1939.101650][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1939.119152][T23942] usb 4-1: usb_control_msg returned -32 [ 1939.125535][T23942] usbtmc 4-1:16.0: can't read capabilities [ 1939.327890][T25361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1939.476607][T25361] veth0_vlan: entered promiscuous mode [ 1939.525945][T25361] veth1_vlan: entered promiscuous mode [ 1939.540233][T23171] Bluetooth: hci3: command tx timeout [ 1939.655641][T25361] veth0_macvtap: entered promiscuous mode [ 1939.687713][T25361] veth1_macvtap: entered promiscuous mode [ 1939.761457][T25361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1939.811692][T25361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1939.842741][T15123] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1939.876482][T15123] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1939.933077][T15123] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1939.942947][T15123] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1939.973304][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1939.973326][ T30] audit: type=1326 audit(1770781818.130:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25479 comm="syz.0.5103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a9f9bf79 code=0x7ffc0000 [ 1940.082944][ T30] audit: type=1326 audit(1770781818.130:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25479 comm="syz.0.5103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a9f9bf79 code=0x7ffc0000 [ 1940.153549][ T30] audit: type=1326 audit(1770781818.130:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25479 comm="syz.0.5103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a9f9bf79 code=0x7ffc0000 [ 1940.231457][ T3495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1940.239925][ T30] audit: type=1326 audit(1770781818.130:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25479 comm="syz.0.5103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a9f9bf79 code=0x7ffc0000 [ 1940.273044][ T3495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1940.285179][ T30] audit: type=1326 audit(1770781818.130:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25479 comm="syz.0.5103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f77a9f9bf79 code=0x7ffc0000 [ 1940.313149][ T30] audit: type=1326 audit(1770781818.140:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25479 comm="syz.0.5103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a9f9bf79 code=0x7ffc0000 [ 1940.337592][T25483] lo: Caught tx_queue_len zero misconfig [ 1940.342363][ T30] audit: type=1326 audit(1770781818.170:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25479 comm="syz.0.5103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a9f9bf79 code=0x7ffc0000 [ 1940.401304][ T30] audit: type=1326 audit(1770781818.170:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25479 comm="syz.0.5103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a9f9bf79 code=0x7ffc0000 [ 1940.411813][ T3495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1940.428992][ T30] audit: type=1326 audit(1770781818.170:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25479 comm="syz.0.5103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a9f9bf79 code=0x7ffc0000 [ 1940.458313][ T30] audit: type=1326 audit(1770781818.200:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25481 comm="syz.0.5103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f77a9f5c84e code=0x7ffc0000 [ 1940.481628][ T3495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1940.588803][T25488] veth3: entered promiscuous mode [ 1940.596850][T25488] veth3: entered allmulticast mode [ 1940.849849][T25502] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5110'. [ 1941.270801][T14306] usb 4-1: USB disconnect, device number 63 [ 1941.626811][T14671] Bluetooth: hci3: command tx timeout [ 1941.843944][T25530] sit1: entered allmulticast mode [ 1942.249666][ T10] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1942.421584][T14671] Bluetooth: hci4: command 0x0406 tx timeout [ 1942.437908][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1942.452257][ T10] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1942.479686][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1942.499749][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1942.516598][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1942.720802][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1942.779815][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1942.829737][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1942.859249][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1942.900908][T14443] IPVS: fo: UDP 127.0.0.1:20003 - no destination available [ 1942.934012][T25553] fuse: Bad value for 'fd' [ 1943.084826][T25555] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5134'. [ 1943.104993][ T10] usb 4-1: usb_control_msg returned -32 [ 1943.119690][ T10] usbtmc 4-1:16.0: can't read capabilities [ 1943.182711][ T3495] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1943.209769][ T3495] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1943.222622][T22925] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1943.660765][T25567] usbtmc 4-1:16.0: usbtmc_ioctl_request failed -71 [ 1943.681245][ T5914] usb 4-1: USB disconnect, device number 64 [ 1943.701292][T23171] Bluetooth: hci3: command tx timeout [ 1944.039685][ T5914] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1944.100337][T22925] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1944.182187][T22925] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1944.210855][ T5914] usb 4-1: Using ep0 maxpacket: 32 [ 1944.221648][ T5914] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1944.248864][ T5914] usb 4-1: config 0 has no interfaces? [ 1944.269579][ T5914] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1944.278816][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1944.307413][ T5914] usb 4-1: config 0 descriptor?? [ 1944.355442][T25589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5149'. [ 1944.548543][ T10] usb 4-1: USB disconnect, device number 65 [ 1944.936461][T25605] fuse: Bad value for 'fd' [ 1945.791725][T25633] fuse: Bad value for 'fd' [ 1945.808913][T25631] sit2: entered allmulticast mode [ 1946.740201][T25642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1946.783962][T25642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1947.037926][T25665] fuse: Bad value for 'fd' [ 1947.093459][T25642] ip6gre1: left allmulticast mode [ 1947.112344][T25642] ip6gre2: left allmulticast mode [ 1947.237879][T25656] netlink: 92 bytes leftover after parsing attributes in process `syz.5.5176'. [ 1947.269125][T15123] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1947.300137][T15123] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1947.329963][T15123] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1947.357141][T15123] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1947.576565][T25683] erspan1: entered allmulticast mode [ 1947.619754][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1947.913020][T25705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5199'. [ 1948.021100][T15123] IPVS: fo: UDP 127.0.0.1:20003 - no destination available [ 1948.804725][T25737] sit2: entered allmulticast mode [ 1948.895836][T25739] erspan2: entered allmulticast mode [ 1948.912467][T25741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5216'. [ 1948.993812][T25741] veth5: entered promiscuous mode [ 1949.004606][T25741] veth5: entered allmulticast mode [ 1949.829618][ T5914] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1949.989635][ T5914] usb 5-1: Using ep0 maxpacket: 8 [ 1950.000747][ T5914] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1950.009295][ T5914] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1950.027308][ T5914] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1950.040755][ T5914] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1950.060961][ T5914] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1950.081998][ T5914] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1950.091635][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1950.360638][ T5914] usb 5-1: usb_control_msg returned -32 [ 1950.366398][ T5914] usbtmc 5-1:16.0: can't read capabilities [ 1950.599358][T25783] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5234'. [ 1950.914803][T25787] usbtmc 5-1:16.0: usbtmc_ioctl_request failed -71 [ 1950.925812][ T5914] usb 5-1: USB disconnect, device number 66 [ 1951.220361][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1951.269633][ T5914] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1951.430002][ T5914] usb 5-1: Using ep0 maxpacket: 32 [ 1951.437449][ T5914] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1951.448404][ T5914] usb 5-1: config 0 has no interfaces? [ 1951.460652][ T5914] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1951.482157][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1951.527209][ T5914] usb 5-1: config 0 descriptor?? [ 1951.708445][T25827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5252'. [ 1951.720110][T25827] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5252'. [ 1951.757485][ T24] usb 5-1: USB disconnect, device number 67 [ 1952.359407][T25850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5262'. [ 1952.564390][T25856] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5265'. [ 1952.604036][T25856] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5265'. [ 1953.105128][T25871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5271'. [ 1953.250618][T25871] veth3: entered promiscuous mode [ 1953.255739][T25871] veth3: entered allmulticast mode [ 1953.730982][T25899] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5285'. [ 1953.781302][ T1041] IPVS: fo: UDP 127.0.0.1:20003 - no destination available [ 1953.975648][T25913] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5288'. [ 1954.008215][T14443] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1954.027340][T14443] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1954.037202][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1954.253721][T25927] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5296'. [ 1954.302069][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1954.487670][T25938] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5301'. [ 1954.577950][T25940] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5302'. [ 1954.822832][T22925] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1955.001925][T25957] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5309'. [ 1956.339794][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1957.736227][T26085] __nla_validate_parse: 5 callbacks suppressed [ 1957.736250][T26085] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5365'. [ 1958.260059][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1958.355667][T26113] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5380'. [ 1958.560716][T26126] netlink: 'syz.3.5384': attribute type 21 has an invalid length. [ 1959.045294][T26158] netlink: 'syz.3.5399': attribute type 21 has an invalid length. [ 1959.374212][T26172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5404'. [ 1959.540664][ T36] IPVS: fo: UDP 127.0.0.1:20003 - no destination available [ 1959.846475][T26187] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5411'. [ 1960.481752][ T24] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1960.585802][T26216] ip6gre4: entered allmulticast mode [ 1960.607116][ T1041] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1960.619969][ T1041] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1960.629799][T22925] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1960.689671][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 1960.700630][ T24] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1960.708921][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1960.746043][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1960.766346][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1960.785137][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1960.808881][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1960.818299][T22925] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1960.832673][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1961.083604][ T24] usb 1-1: usb_control_msg returned -32 [ 1961.094974][ T24] usbtmc 1-1:16.0: can't read capabilities [ 1961.381624][ T24] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1961.528433][T26243] ip6gre2: entered allmulticast mode [ 1961.547944][T15123] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1961.589363][T15123] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1961.597429][ T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1961.710670][ T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1962.502206][ T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1962.904309][T23171] Bluetooth: hci2: command 0x0406 tx timeout [ 1963.219752][T14306] usb 1-1: USB disconnect, device number 44 [ 1963.469901][T26299] fuse: Bad value for 'fd' [ 1965.303951][T15123] IPVS: fo: UDP 127.0.0.1:20003 - no destination available [ 1965.571761][T26399] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5500'. [ 1965.592366][T26399] erspan1: entered allmulticast mode [ 1965.634587][T26400] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5500'. [ 1965.688486][T26402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5502'. [ 1966.341254][T26433] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5515'. [ 1966.366005][T26433] erspan1: entered allmulticast mode [ 1966.406563][T26436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5515'. [ 1966.579729][ C1] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 1966.579750][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1966.685711][T26456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5524'. [ 1967.672038][T26487] ip6gre3: entered allmulticast mode [ 1967.679333][ T1041] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1967.693776][ T1041] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1967.704488][ T5914] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1968.029805][ T5914] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1968.254505][T26507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5548'. [ 1968.269848][ T5914] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1968.781066][T26520] ip6gre3: entered allmulticast mode [ 1968.801491][ T1041] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1968.836820][ T1041] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1968.844764][T14306] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1968.939797][T14306] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1969.533036][T26536] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5561'. [ 1969.891307][T26546] ip6gre2: entered allmulticast mode [ 1970.430043][T15123] IPVS: fo: UDP 127.0.0.1:20003 - no destination available [ 1970.734703][T26577] ip6gre5: entered allmulticast mode [ 1971.861290][ T5914] ip6_tnl_xmit_ctl: 12 callbacks suppressed [ 1971.861311][ T5914] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 1972.098428][T26648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5607'. [ 1972.108858][T26648] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5607'. [ 1972.131520][ T1041] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1972.139328][ T1041] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1972.159827][ T56] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1972.168519][T26650] fuse: Bad value for 'fd' [ 1972.339790][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1972.358935][T26659] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 1972.413651][T26664] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5615'. [ 1972.451823][T26664] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5615'. [ 1972.491295][ T56] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1972.575372][ T56] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1972.589710][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1972.732180][T26681] fuse: Bad value for 'fd' [ 1972.853119][T26688] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 1972.979797][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1972.987735][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1973.229819][T26698] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5630'. [ 1973.241459][T26698] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5630'. [ 1973.442813][T26709] fuse: Bad value for 'fd' [ 1973.935926][T26736] fuse: Bad value for 'fd' [ 1973.944005][T26737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5646'. [ 1973.965161][T26737] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5646'. [ 1975.543559][ T36] IPVS: fo: UDP 127.0.0.1:20003 - no destination available [ 1976.753889][T26888] fuse: Bad value for 'fd' [ 1977.208266][T26914] erspan1: entered allmulticast mode [ 1977.547839][T26939] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5735'. [ 1978.332768][T26969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5749'. [ 1978.394601][T26969] bond2: entered promiscuous mode [ 1978.401492][T26972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5750'. [ 1978.411611][T26969] bond2: entered allmulticast mode [ 1978.417323][T26969] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1978.439703][T26973] erspan1: entered allmulticast mode [ 1978.453567][T26973] erspan1: entered promiscuous mode [ 1978.460620][T26973] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 1978.474840][T26969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5749'. [ 1978.497936][T26969] bond2: left promiscuous mode [ 1978.520259][T26969] erspan1: left promiscuous mode [ 1978.530656][T26969] bond2: left allmulticast mode [ 1978.739779][ C0] ip6_tnl_xmit_ctl: 3 callbacks suppressed [ 1978.739804][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1979.107195][T27006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5763'. [ 1979.132705][T27004] erspan2: entered allmulticast mode [ 1980.029899][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1980.330511][T27043] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5776'. [ 1981.298735][T27091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5798'. [ 1981.313712][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1981.313775][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1981.332144][T22805] IPVS: fo: UDP 127.0.0.1:20003 - no destination available [ 1981.418701][T27095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5800'. [ 1981.816031][T27118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5810'. [ 1982.761149][T27145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5822'. [ 1983.229675][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1983.293521][T27166] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5830'. [ 1983.303693][T27166] netlink: 'syz.3.5830': attribute type 6 has an invalid length. [ 1983.319628][T27166] netlink: 112 bytes leftover after parsing attributes in process `syz.3.5830'. [ 1983.407078][T14671] Bluetooth: hci0: command 0x0406 tx timeout [ 1983.645538][T27177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5835'. [ 1983.859757][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1983.859800][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1983.868052][ C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 1984.936356][T27214] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5849'. [ 1984.966811][T27214] veth3: entered promiscuous mode [ 1984.972020][T27214] veth3: entered allmulticast mode [ 1987.496432][T27292] kvm: pic: non byte write [ 1987.699719][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1987.918303][T27312] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5887'. [ 1987.958270][T27312] netlink: 'syz.4.5887': attribute type 6 has an invalid length. [ 1987.975191][T27312] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5887'. [ 1988.339701][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1988.674862][T27341] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1989.158457][T27362] kvm: emulating exchange as write [ 1989.679961][T27378] sit2: entered allmulticast mode [ 1990.900690][T22805] IPVS: fo: UDP 127.0.0.1:20003 - no destination available [ 1990.968006][T27450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5939'. [ 1992.819705][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1993.105507][T27508] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5962'. [ 1993.179659][T27508] netlink: 'syz.4.5962': attribute type 6 has an invalid length. [ 1993.197462][T27508] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5962'. [ 1993.624287][T23171] Bluetooth: hci1: command 0x0406 tx timeout [ 1993.870945][T27527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5970'. [ 1993.895202][T27527] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5970'. [ 1993.914016][T27527] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5970'. [ 1994.405726][T27537] trusted_key: encrypted_key: keyword 'nelt' not recognized [ 1995.379671][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1996.021351][T22805] IPVS: fo: UDP 127.0.0.1:20003 - no destination available [ 1996.169717][T27588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5993'. [ 1996.206026][T27588] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5993'. [ 1996.229785][T27588] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5993'. [ 1996.603523][T27602] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5999'. [ 1997.846491][T27633] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6009'. [ 1998.528487][T27658] fuse: Bad value for 'fd' [ 1998.921813][T27665] kvm_pr_unimpl_wrmsr: 20 callbacks suppressed [ 1998.921845][T27665] kvm: kvm [27663]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 1998.969010][T27665] kvm: kvm [27663]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 1999.219713][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 2000.321965][T27718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6042'. [ 2000.499849][ C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 2001.139791][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2001.450565][T27757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6058'. [ 2001.790129][ T36] IPVS: fo: UDP 127.0.0.1:20003 - no destination available [ 2002.306487][T27788] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6070'. [ 2002.420558][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2002.807126][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 2002.807148][ T30] audit: type=1326 audit(1770781880.970:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27800 comm="syz.3.6076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcac19bf79 code=0x7ffc0000 [ 2002.887001][ T30] audit: type=1326 audit(1770781880.970:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27800 comm="syz.3.6076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcac19bf79 code=0x7ffc0000 [ 2002.957572][ T30] audit: type=1326 audit(1770781881.010:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27800 comm="syz.3.6076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcac19bf79 code=0x7ffc0000 [ 2003.073610][ T30] audit: type=1326 audit(1770781881.010:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27800 comm="syz.3.6076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcac19bf79 code=0x7ffc0000 [ 2003.156488][ T30] audit: type=1326 audit(1770781881.010:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27800 comm="syz.3.6076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fbcac19bf79 code=0x7ffc0000 [ 2003.198936][T27811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6081'. [ 2003.228708][ T30] audit: type=1326 audit(1770781881.010:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27800 comm="syz.3.6076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcac19bf79 code=0x7ffc0000 [ 2003.292330][ T30] audit: type=1326 audit(1770781881.020:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27800 comm="syz.3.6076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcac19bf79 code=0x7ffc0000 [ 2003.363913][ T30] audit: type=1326 audit(1770781881.020:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27800 comm="syz.3.6076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbcac19bf79 code=0x7ffc0000 [ 2003.397371][ T30] audit: type=1326 audit(1770781881.020:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27800 comm="syz.3.6076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbcac19bf79 code=0x7ffc0000 [ 2003.615816][T27826] netlink: 208 bytes leftover after parsing attributes in process `syz.5.6086'. [ 2004.080215][T27837] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6093'. [ 2004.417163][T27850] veth5: entered promiscuous mode [ 2004.434305][T27850] veth5: entered allmulticast mode [ 2004.450552][T27853] netlink: 208 bytes leftover after parsing attributes in process `syz.4.6099'. [ 2004.979713][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2005.279593][T27888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6111'. [ 2005.332483][T27888] bond1: entered promiscuous mode [ 2005.332819][T27894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6111'. [ 2005.337671][T27888] bond1: entered allmulticast mode [ 2005.359835][T27888] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2005.376298][T27894] bond1: left promiscuous mode [ 2005.381749][T27894] bond1: left allmulticast mode [ 2006.488332][T27933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6128'. [ 2006.498592][T27933] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6128'. [ 2006.507946][T27933] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6128'. [ 2006.926599][ T30] audit: type=1326 audit(1770781885.090:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27955 comm="syz.0.6138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a9f9bf79 code=0x7ffc0000 [ 2007.214301][T27970] veth1: entered promiscuous mode [ 2007.219409][T27970] veth1: entered allmulticast mode [ 2007.233675][T27961] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2007.291818][T27973] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2007.353274][T27978] netlink: 208 bytes leftover after parsing attributes in process `syz.0.6146'. [ 2007.541367][ T36] IPVS: fo: UDP 127.0.0.1:20003 - no destination available [ 2007.734508][T27991] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6152'. [ 2008.041025][T27999] fuse: Bad value for 'user_id' [ 2008.059296][T27999] fuse: Bad value for 'user_id' [ 2008.436881][T28017] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6164'. [ 2008.690871][T28029] fuse: Bad value for 'fd' [ 2008.845576][T28036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6171'. [ 2008.873199][T28036] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6171'. [ 2009.056100][T28044] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6175'. [ 2009.540829][T28063] fuse: Bad value for 'fd' [ 2012.266493][T28149] __nla_validate_parse: 1 callbacks suppressed [ 2012.266511][T28149] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6218'. [ 2012.317511][T28154] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6218'. [ 2012.516624][T28149] bond2: entered promiscuous mode [ 2012.542532][T28159] ucma_write: process 832 (syz.0.6219) changed security contexts after opening file descriptor, this is not allowed. [ 2012.560122][T28149] bond2: entered allmulticast mode [ 2012.575116][T28149] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2012.668568][T15123] IPVS: fo: UDP 127.0.0.1:20003 - no destination available [ 2015.146945][T28265] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6265'. [ 2015.213913][T28265] veth3: entered promiscuous mode [ 2015.219020][T28265] veth3: entered allmulticast mode [ 2015.366301][T28276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6270'. [ 2016.026269][T28311] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6283'. [ 2017.779680][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2018.420674][T14443] IPVS: fo: UDP 127.0.0.1:20003 - no destination available [ 2018.990060][T28439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6341'. [ 2019.054558][T28439] bond3: entered promiscuous mode [ 2019.059994][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2019.060300][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 2019.080291][T28439] bond3: entered allmulticast mode [ 2019.086119][T28439] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2019.086853][T28445] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6341'. [ 2019.159746][T28439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6341'. [ 2019.206239][T28439] bond3: left promiscuous mode [ 2019.239795][T28439] bond3: left allmulticast mode [ 2019.245652][T28447] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6344'. [ 2020.113944][T28478] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6357'. [ 2020.217052][T28480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6358'. [ 2020.253899][T28480] bond4: entered promiscuous mode [ 2020.259162][T28480] bond4: entered allmulticast mode [ 2020.265557][T28480] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2020.279552][T28480] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6358'. [ 2020.292829][T28480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6358'. [ 2020.304536][T28480] bond4: left promiscuous mode [ 2020.309567][T28480] bond4: left allmulticast mode [ 2020.339752][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 2020.781846][T28499] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6365'. [ 2020.807951][T28499] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6365'. [ 2021.612975][T28529] loop6: detected capacity change from 0 to 8 [ 2022.260525][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 2022.479203][T28554] vlan2: entered allmulticast mode [ 2022.485634][T28554] macvlan0: entered allmulticast mode [ 2022.505921][T28554] veth1_vlan: entered allmulticast mode [ 2022.558821][T28554] bridge2: port 1(vlan2) entered blocking state [ 2022.570862][T28554] bridge2: port 1(vlan2) entered disabled state [ 2022.582432][T28554] vlan2: entered promiscuous mode [ 2022.587729][T28554] macvlan0: entered promiscuous mode [ 2022.943041][T28577] fuse: Unknown parameter 'user_id00000000000000000000' [ 2023.191269][T28591] team0: Port device syz_tun added [ 2023.230953][T28591] team0: Port device syz_tun removed [ 2023.264698][T28591] bridge_slave_0: left allmulticast mode [ 2023.303088][T28591] bridge_slave_0: left promiscuous mode [ 2023.338217][T28591] bridge0: port 1(bridge_slave_0) entered disabled state [ 2023.387607][T28591] bridge_slave_1: left allmulticast mode [ 2023.448403][T28591] bridge_slave_1: left promiscuous mode [ 2023.468032][T28591] bridge0: port 2(bridge_slave_1) entered disabled state [ 2023.513029][T28591] bond0: (slave bond_slave_0): Releasing backup interface [ 2023.552401][T28591] bond0: (slave bond_slave_1): Releasing backup interface [ 2023.584092][T28591] team0: Port device team_slave_0 removed [ 2023.612794][T28591] team0: Port device team_slave_1 removed [ 2023.621329][T28591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2023.645936][T28591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2023.665945][T28591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2023.676479][T28591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2023.705238][T28591] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2023.810759][T28613] fuse: Unknown parameter 'user_id00000000000000000000' [ 2024.179855][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 2024.180301][ T1041] IPVS: fo: UDP 127.0.0.1:20003 - no destination available [ 2024.293038][T28629] __nla_validate_parse: 6 callbacks suppressed [ 2024.293064][T28629] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6418'. [ 2024.483016][T28632] veth5: entered promiscuous mode [ 2024.488118][T28632] veth5: entered allmulticast mode [ 2025.707034][T28674] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6438'. [ 2026.016507][T28693] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6447'. [ 2026.213288][T28698] kvm: user requested TSC rate below hardware speed [ 2026.225685][T28698] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer. [ 2027.242601][T28724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6458'. [ 2027.380437][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 2027.714087][T28740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6465'. [ 2027.736414][T28740] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6465'. [ 2027.746433][T28740] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6465'. [ 2028.661089][T28767] fuse: Unknown parameter '0x0000000000000003' [ 2028.734737][T28769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6478'. [ 2028.747262][T28769] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6478'. [ 2028.756934][T28769] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6478'. [ 2029.356146][T28795] fuse: Unknown parameter '0x0000000000000003' [ 2029.940568][T22805] IPVS: fo: UDP 127.0.0.1:20003 - no destination available [ 2030.066905][T28826] fuse: Unknown parameter '0x0000000000000003' [ 2030.981524][T28846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6511'. [ 2031.251423][T28852] fuse: Unknown parameter '0x0000000000000003' [ 2032.368800][T28878] dummy0: entered allmulticast mode [ 2032.390952][T28877] dummy0: left allmulticast mode [ 2033.139630][ C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 2033.833400][T14443] bond0 (unregistering): Released all slaves [ 2033.861099][T14443] bond1 (unregistering): Released all slaves [ 2033.903813][T14443] bond2 (unregistering): Released all slaves [ 2033.926683][T14443] bond3 (unregistering): Released all slaves [ 2033.949361][T14443] bond4 (unregistering): Released all slaves [ 2033.979388][T14443] bond5 (unregistering): Released all slaves [ 2034.002347][T14443] bond6 (unregistering): Released all slaves [ 2034.029231][T14443] bond7 (unregistering): Released all slaves [ 2034.050800][T14443] bond8 (unregistering): Released all slaves [ 2035.060842][ T36] IPVS: fo: UDP 127.0.0.1:20003 - no destination available [ 2035.199160][T14443] hsr_slave_0: left promiscuous mode [ 2035.222815][T14443] hsr_slave_1: left promiscuous mode [ 2035.312831][T14443] veth1_macvtap: left promiscuous mode [ 2035.337288][T14443] veth0_macvtap: left promiscuous mode [ 2035.360100][T14443] veth1_vlan: left promiscuous mode [ 2035.381019][T14443] veth0_vlan: left promiscuous mode [ 2036.107716][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 2036.107736][ T30] audit: type=1326 audit(1770781914.270:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28992 comm="syz.4.6568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4d59bf79 code=0x7ffc0000 [ 2036.151814][ T30] audit: type=1326 audit(1770781914.270:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28992 comm="syz.4.6568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4d59bf79 code=0x7ffc0000 [ 2036.191164][ T30] audit: type=1326 audit(1770781914.280:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28992 comm="syz.4.6568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4d59bf79 code=0x7ffc0000 [ 2036.230349][ T30] audit: type=1326 audit(1770781914.290:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28992 comm="syz.4.6568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b4d59bf79 code=0x7ffc0000 [ 2036.264805][ T30] audit: type=1326 audit(1770781914.290:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28992 comm="syz.4.6568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4d59bf79 code=0x7ffc0000 [ 2036.306387][ T30] audit: type=1326 audit(1770781914.290:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28992 comm="syz.4.6568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4d59bf79 code=0x7ffc0000 [ 2036.370271][ T30] audit: type=1326 audit(1770781914.290:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28992 comm="syz.4.6568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4d59bf79 code=0x7ffc0000 [ 2036.411773][ T30] audit: type=1326 audit(1770781914.290:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28992 comm="syz.4.6568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4d59bf79 code=0x7ffc0000 [ 2036.450917][ T30] audit: type=1326 audit(1770781914.290:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28992 comm="syz.4.6568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b4d59bf79 code=0x7ffc0000 [ 2036.549003][ T30] audit: type=1326 audit(1770781914.290:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28992 comm="syz.4.6568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4d59bf79 code=0x7ffc0000 [ 2036.757337][T29008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6574'. [ 2036.988608][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2037.859579][T29011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6575'. [ 2038.384978][T14443] IPVS: stop unused estimator thread 0... [ 2038.701422][T29060] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6593'. [ 2038.702643][T29059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6594'. [ 2039.550386][T29084] kvm: kvm [29083]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 2039.559633][T29084] kvm: kvm [29083]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 2040.148034][T29107] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6614'. [ 2040.195075][T29107] bond1: entered promiscuous mode [ 2040.200463][T29107] bond1: entered allmulticast mode [ 2040.206268][T29107] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2040.216714][T29109] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6614'. [ 2040.231569][T29107] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6614'. [ 2040.242094][T29107] bond1: left promiscuous mode [ 2040.246971][T29107] bond1: left allmulticast mode [ 2040.820192][ T1041] IPVS: fo: UDP 127.0.0.1:20003 - no destination available [ 2040.869570][T22925] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 2041.029901][T22925] usb 6-1: Using ep0 maxpacket: 8 [ 2041.037878][T22925] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 2041.050763][T22925] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2041.073090][T22925] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2041.094243][T22925] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2041.104793][T22925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2041.124726][T22925] usbtmc 6-1:16.0: bulk endpoints not found [ 2041.678601][T29152] kvm: kvm [29151]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 2041.873051][T29148] veth1_vlan: left allmulticast mode [ 2042.115336][ T3495] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2042.125119][ T3495] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2042.135173][ T3495] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2042.163236][ T3495] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2042.245365][T29175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6637'. [ 2042.302831][T29179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6637'. [ 2042.326162][T29175] bond5: entered promiscuous mode [ 2042.332684][T29175] bond5: entered allmulticast mode [ 2042.338299][T29175] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2042.350051][T29179] bond5: left promiscuous mode [ 2042.354953][T29179] bond5: left allmulticast mode [ 2042.747536][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2042.755602][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2043.642497][T23942] usb 6-1: USB disconnect, device number 107 [ 2044.027846][T29223] kvm: kvm [29222]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 2044.070921][T29223] kvm: kvm [29222]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 2044.127019][T29231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6659'. [ 2044.170227][T29231] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6659'. [ 2044.709867][ T5907] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 2044.899800][ T5907] usb 2-1: Using ep0 maxpacket: 8 [ 2044.908524][ T5907] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2044.918125][ T5907] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2044.942348][ T5907] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2044.958679][ T5907] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2044.969901][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2045.017779][ T5907] usbtmc 2-1:16.0: bulk endpoints not found [ 2046.581327][ T3495] IPVS: fo: UDP 127.0.0.1:20003 - no destination available [ 2047.455061][T22925] usb 2-1: USB disconnect, device number 56 [ 2049.430943][T29396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6722'. [ 2049.486175][T29402] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6722'. [ 2049.493953][T29396] bond3: entered promiscuous mode [ 2049.500792][T29396] bond3: entered allmulticast mode [ 2049.506613][T29396] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2049.538295][T29396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6722'. [ 2049.548983][T29396] bond3: left promiscuous mode [ 2049.554330][T29396] bond3: left allmulticast mode [ 2051.619964][T15123] IPVS: fo: UDP 127.0.0.1:20003 - no destination available [ 2054.606207][T29607] netlink: 'syz.5.6811': attribute type 2 has an invalid length. [ 2057.460029][ T36] IPVS: fo: UDP 127.0.0.1:20003 - no destination available [ 2057.616347][T29740] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6866'. [ 2057.746970][T29744] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6868'. [ 2057.765296][T29744] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6868'. [ 2058.344556][T29762] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6877'. [ 2058.782762][T29778] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 2059.317616][T29793] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6890'. [ 2060.108806][T29820] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6899'. [ 2060.178665][T29820] veth3: entered promiscuous mode [ 2060.184099][T14671] Bluetooth: hci3: command 0x0406 tx timeout [ 2060.198570][T29820] veth3: entered allmulticast mode [ 2060.434450][T29831] bond1: option mode: unable to set because the bond device has slaves [ 2060.996047][T29857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6914'. [ 2061.200668][T29869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6920'. [ 2061.214762][T29869] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6920'. [ 2062.087921][T29890] kvm: pic: non byte write [ 2062.092906][T29890] kvm: pic: non byte write [ 2062.099738][T29890] kvm: pic: non byte write [ 2062.104468][T29890] kvm: pic: non byte write [ 2062.227546][T29901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6931'. [ 2062.553400][T29917] bond2: entered promiscuous mode [ 2062.558697][T29917] bond2: entered allmulticast mode [ 2062.565448][T29917] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2062.591572][T29917] bond2: left promiscuous mode [ 2062.596668][T29917] bond2: left allmulticast mode [ 2062.699342][T29921] program syz.3.6939 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2063.224697][ T3495] IPVS: fo: UDP 127.0.0.1:20003 - no destination available [ 2063.510805][T29939] __nla_validate_parse: 4 callbacks suppressed [ 2063.510830][T29939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6945'. [ 2063.546905][T29939] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6945'. [ 2063.764412][T29949] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 2065.405755][T29998] program syz.3.6967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2067.664672][T30053] bridge0: port 1(syz_tun) entered blocking state [ 2067.672585][T30053] bridge0: port 1(syz_tun) entered disabled state [ 2067.679602][T30053] syz_tun: entered allmulticast mode [ 2067.687546][T30053] syz_tun: entered promiscuous mode [ 2068.340377][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2068.980774][ T1041] IPVS: fo: UDP 127.0.0.1:20003 - no destination available [ 2069.739731][T30124] kvm: kvm [30123]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0xc80e [ 2069.750733][T30124] kvm: kvm [30123]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x24a7 [ 2070.847485][T30175] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2072.467052][T30231] bond2: entered promiscuous mode [ 2073.878990][T30275] sock: sock_set_timeout: `syz.0.7078' (pid 30275) tries to set negative timeout [ 2074.430985][T30292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7084'. [ 2074.504945][T30292] bond6: entered promiscuous mode [ 2074.527909][T30292] bond6: entered allmulticast mode [ 2074.554693][T30292] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2074.743380][ T3495] IPVS: fo: UDP 127.0.0.1:20003 - no destination available [ 2077.553413][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 2077.553435][ T30] audit: type=1326 audit(1770781955.720:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30403 comm="syz.3.7128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcac19bf79 code=0x7ffc0000 [ 2077.589827][ T30] audit: type=1326 audit(1770781955.720:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30403 comm="syz.3.7128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcac19bf79 code=0x7ffc0000 [ 2077.623320][ T30] audit: type=1326 audit(1770781955.730:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30403 comm="syz.3.7128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fbcac19bf79 code=0x7ffc0000 [ 2077.648934][ T30] audit: type=1326 audit(1770781955.730:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30403 comm="syz.3.7128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcac19bf79 code=0x7ffc0000 [ 2077.679653][ T30] audit: type=1326 audit(1770781955.730:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30403 comm="syz.3.7128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcac19bf79 code=0x7ffc0000 [ 2078.171064][T30432] program syz.0.7138 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2078.579767][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 2078.589839][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2079.380006][ T30] audit: type=1326 audit(1770781957.540:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30466 comm="syz.0.7153" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f77a9f9bf79 code=0x0 [ 2079.780696][ T36] IPVS: fo: UDP 127.0.0.1:20003 - no destination available [ 2079.908172][T30496] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7164'. [ 2084.004815][T30595] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7206'. [ 2084.602881][T30614] fuse: Unknown parameter 'use00000000000000000000' [ 2084.980135][ T1041] IPVS: fo: UDP 127.0.0.1:20003 - no destination available [ 2085.211218][T30643] fuse: Unknown parameter 'use00000000000000000000' [ 2086.514045][T30680] kvm: kvm [30679]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 2086.950401][T30697] xt_SECMARK: invalid mode: 2 [ 2087.394392][T30717] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2087.884480][T30731] kvm: kvm [30730]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 2088.819709][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2090.146166][T14671] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2090.158015][T14671] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2090.167928][T14671] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2090.180420][T14671] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2090.188307][T14671] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2090.740596][ T1041] IPVS: fo: UDP 127.0.0.1:20003 - no destination available [ 2090.907850][T30819] chnl_net:caif_netlink_parms(): no params data found [ 2091.235426][T30819] bridge0: port 1(bridge_slave_0) entered blocking state [ 2091.259708][T30819] bridge0: port 1(bridge_slave_0) entered disabled state [ 2091.300462][T30819] bridge_slave_0: entered allmulticast mode [ 2091.308565][T30819] bridge_slave_0: entered promiscuous mode [ 2091.367052][T30819] bridge0: port 2(bridge_slave_1) entered blocking state [ 2091.406129][T30819] bridge0: port 2(bridge_slave_1) entered disabled state [ 2091.432009][T30819] bridge_slave_1: entered allmulticast mode [ 2091.450695][T30819] bridge_slave_1: entered promiscuous mode [ 2091.553541][T30819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2091.592964][T30819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2091.735709][T30819] team0: Port device team_slave_0 added [ 2091.768043][T30819] team0: Port device team_slave_1 added [ 2091.897822][T30819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2091.941418][T30819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2092.039789][T30819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2092.077596][T30819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2092.097087][T30819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2092.184110][T30819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2092.259776][T23171] Bluetooth: hci5: command tx timeout [ 2092.310254][T30819] hsr_slave_0: entered promiscuous mode [ 2092.317140][T30819] hsr_slave_1: entered promiscuous mode [ 2092.324061][T30819] debugfs: 'hsr0' already exists in 'hsr' [ 2092.329945][T30819] Cannot create hsr debugfs directory [ 2092.555161][T30884] gretap0: entered promiscuous mode [ 2092.584691][T30884] vlan2: entered promiscuous mode [ 2093.597001][T30819] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2093.621017][T30819] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2093.643586][T30819] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2093.665183][T30819] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2093.845639][T30819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2093.890622][T30819] 8021q: adding VLAN 0 to HW filter on device team0 [ 2093.928423][T15123] bridge0: port 1(bridge_slave_0) entered blocking state [ 2093.935685][T15123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2093.954539][T15123] bridge0: port 2(bridge_slave_1) entered blocking state [ 2093.961860][T15123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2094.260829][T30819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2094.350248][T23171] Bluetooth: hci5: command tx timeout [ 2094.489841][T30819] veth0_vlan: entered promiscuous mode [ 2094.538327][T30819] veth1_vlan: entered promiscuous mode [ 2094.636045][T30819] veth0_macvtap: entered promiscuous mode [ 2094.708192][T30819] veth1_macvtap: entered promiscuous mode [ 2094.818446][T30819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2094.885166][T30819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2095.383701][ T3495] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2095.396070][ T3495] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2095.422748][ T3495] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2095.433003][ T3495] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2095.596311][ T1041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2095.618977][ T1041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2095.650226][T30939] [ 2095.652630][T30939] ====================================================== [ 2095.659759][T30939] WARNING: possible circular locking dependency detected [ 2095.666908][T30939] syzkaller #0 Tainted: G L [ 2095.673073][T30939] ------------------------------------------------------ [ 2095.680111][T30939] syz.3.7344/30939 is trying to acquire lock: [ 2095.686280][T30939] ffff888140460220 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9e/0x450 [ 2095.696671][T30939] [ 2095.696671][T30939] but task is already holding lock: [ 2095.704056][T30939] ffff888024ba5628 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: lo_ioctl+0x1a51/0x1fb0 [ 2095.713866][T30939] [ 2095.713866][T30939] which lock already depends on the new lock. [ 2095.713866][T30939] [ 2095.724288][T30939] [ 2095.724288][T30939] the existing dependency chain (in reverse order) is: [ 2095.733325][T30939] [ 2095.733325][T30939] -> #2 (&q->q_usage_counter(io)#23){++++}-{0:0}: [ 2095.741977][T30939] blk_alloc_queue+0x546/0x680 [ 2095.747466][T30939] __blk_mq_alloc_disk+0x197/0x390 [ 2095.753132][T30939] loop_add+0x482/0xb40 [ 2095.758106][T30939] loop_init+0xd9/0x170 [ 2095.762898][T30939] do_one_initcall+0x250/0x840 [ 2095.768210][T30939] do_initcall_level+0x104/0x190 [ 2095.773704][T30939] do_initcalls+0x59/0xa0 [ 2095.778577][T30939] kernel_init_freeable+0x2a6/0x3d0 [ 2095.784327][T30939] kernel_init+0x1d/0x1d0 [ 2095.789214][T30939] ret_from_fork+0x51e/0xb90 [ 2095.794447][T30939] ret_from_fork_asm+0x1a/0x30 [ 2095.799941][T30939] [ 2095.799941][T30939] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 2095.807179][T30939] fs_reclaim_acquire+0x71/0x100 [ 2095.812690][T30939] kmem_cache_alloc_noprof+0x45/0x6e0 [ 2095.818783][T30939] __kernfs_iattrs+0xdf/0x340 [ 2095.824010][T30939] kernfs_iop_setattr+0xea/0x3f0 [ 2095.829501][T30939] notify_change+0xc1a/0xf40 [ 2095.834650][T30939] do_truncate+0x1c2/0x250 [ 2095.839617][T30939] path_openat+0x2f89/0x3860 [ 2095.844840][T30939] do_file_open+0x23e/0x4a0 [ 2095.849892][T30939] do_sys_openat2+0x113/0x200 [ 2095.855119][T30939] __x64_sys_openat+0x138/0x170 [ 2095.860532][T30939] do_syscall_64+0x14d/0xf80 [ 2095.865773][T30939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2095.872297][T30939] [ 2095.872297][T30939] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 2095.880837][T30939] __lock_acquire+0x15a5/0x2cf0 [ 2095.886284][T30939] lock_acquire+0x106/0x330 [ 2095.891463][T30939] down_read+0x47/0x2e0 [ 2095.896176][T30939] kernfs_iop_getattr+0x9e/0x450 [ 2095.901780][T30939] vfs_getattr_nosec+0x2e1/0x430 [ 2095.907275][T30939] loop_assign_backing_file+0x27a/0x4b0 [ 2095.913738][T30939] lo_ioctl+0x1acb/0x1fb0 [ 2095.918622][T30939] blkdev_ioctl+0x5e3/0x740 [ 2095.923758][T30939] __se_sys_ioctl+0xfc/0x170 [ 2095.928905][T30939] do_syscall_64+0x14d/0xf80 [ 2095.934045][T30939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2095.940483][T30939] [ 2095.940483][T30939] other info that might help us debug this: [ 2095.940483][T30939] [ 2095.950740][T30939] Chain exists of: [ 2095.950740][T30939] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#23 [ 2095.950740][T30939] [ 2095.965297][T30939] Possible unsafe locking scenario: [ 2095.965297][T30939] [ 2095.972778][T30939] CPU0 CPU1 [ 2095.978160][T30939] ---- ---- [ 2095.983558][T30939] lock(&q->q_usage_counter(io)#23); [ 2095.988964][T30939] lock(fs_reclaim); [ 2095.995489][T30939] lock(&q->q_usage_counter(io)#23); [ 2096.003845][T30939] rlock(&root->kernfs_iattr_rwsem); [ 2096.009242][T30939] [ 2096.009242][T30939] *** DEADLOCK *** [ 2096.009242][T30939] [ 2096.017662][T30939] 3 locks held by syz.3.7344/30939: [ 2096.022879][T30939] #0: ffff888140fbf448 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x14c7/0x1fb0 [ 2096.032255][T30939] #1: ffff888024ba5628 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: lo_ioctl+0x1a51/0x1fb0 [ 2096.042477][T30939] #2: ffff888024ba5660 (&q->q_usage_counter(queue)#7){+.+.}-{0:0}, at: lo_ioctl+0x1a51/0x1fb0 [ 2096.052880][T30939] [ 2096.052880][T30939] stack backtrace: [ 2096.058805][T30939] CPU: 1 UID: 0 PID: 30939 Comm: syz.3.7344 Tainted: G L syzkaller #0 PREEMPT(full) [ 2096.058831][T30939] Tainted: [L]=SOFTLOCKUP [ 2096.058838][T30939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2096.058851][T30939] Call Trace: [ 2096.058858][T30939] [ 2096.058867][T30939] dump_stack_lvl+0xe8/0x150 [ 2096.058895][T30939] print_circular_bug+0x2e1/0x300 [ 2096.058921][T30939] check_noncircular+0x12e/0x150 [ 2096.058946][T30939] __lock_acquire+0x15a5/0x2cf0 [ 2096.058973][T30939] ? kernfs_iop_getattr+0x9e/0x450 [ 2096.058996][T30939] lock_acquire+0x106/0x330 [ 2096.059012][T30939] ? kernfs_iop_getattr+0x9e/0x450 [ 2096.059039][T30939] down_read+0x47/0x2e0 [ 2096.059065][T30939] ? kernfs_iop_getattr+0x9e/0x450 [ 2096.059088][T30939] kernfs_iop_getattr+0x9e/0x450 [ 2096.059112][T30939] vfs_getattr_nosec+0x2e1/0x430 [ 2096.059140][T30939] loop_assign_backing_file+0x27a/0x4b0 [ 2096.059170][T30939] ? __pfx_loop_assign_backing_file+0x10/0x10 [ 2096.059209][T30939] lo_ioctl+0x1acb/0x1fb0 [ 2096.059237][T30939] ? __pfx_lo_ioctl+0x10/0x10 [ 2096.059264][T30939] ? finish_task_switch+0x161/0x920 [ 2096.059292][T30939] ? lock_acquire+0x106/0x330 [ 2096.059313][T30939] ? finish_task_switch+0x240/0x920 [ 2096.059339][T30939] ? lockdep_hardirqs_on+0x7a/0x110 [ 2096.059362][T30939] ? finish_task_switch+0x240/0x920 [ 2096.059390][T30939] ? rcu_is_watching+0x15/0xb0 [ 2096.059414][T30939] ? trace_sched_exit_tp+0x36/0xf0 [ 2096.059444][T30939] ? __schedule+0x157e/0x5260 [ 2096.059472][T30939] ? __lock_acquire+0x6b5/0x2cf0 [ 2096.059494][T30939] ? __lock_acquire+0x6b5/0x2cf0 [ 2096.059515][T30939] ? __pfx___schedule+0x10/0x10 [ 2096.059539][T30939] ? unwind_next_frame+0xa5/0x23c0 [ 2096.059564][T30939] ? is_bpf_text_address+0x26/0x2b0 [ 2096.059591][T30939] ? is_bpf_text_address+0x26/0x2b0 [ 2096.059616][T30939] ? is_bpf_text_address+0x292/0x2b0 [ 2096.059638][T30939] ? is_bpf_text_address+0x26/0x2b0 [ 2096.059661][T30939] ? kernel_text_address+0xa5/0xe0 [ 2096.059687][T30939] ? __kernel_text_address+0xd/0x30 [ 2096.059713][T30939] ? unwind_get_return_address+0x4d/0x90 [ 2096.059736][T30939] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2096.059761][T30939] ? arch_stack_walk+0xfb/0x150 [ 2096.059788][T30939] ? stack_trace_save+0xa9/0x100 [ 2096.059811][T30939] ? __pfx_stack_trace_save+0x10/0x10 [ 2096.059836][T30939] ? stack_depot_save_flags+0x33/0x810 [ 2096.059863][T30939] ? kasan_save_track+0x4f/0x80 [ 2096.059883][T30939] ? kasan_save_track+0x3e/0x80 [ 2096.059903][T30939] ? kasan_save_free_info+0x46/0x50 [ 2096.059919][T30939] ? __kasan_slab_free+0x5c/0x80 [ 2096.059940][T30939] ? kfree+0x1be/0x650 [ 2096.059957][T30939] ? tomoyo_path_number_perm+0x501/0x630 [ 2096.059979][T30939] ? security_file_ioctl+0xc3/0x2a0 [ 2096.059997][T30939] ? __se_sys_ioctl+0x47/0x170 [ 2096.060019][T30939] ? do_syscall_64+0x14d/0xf80 [ 2096.060041][T30939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2096.060060][T30939] ? __asan_memset+0x22/0x50 [ 2096.060078][T30939] ? blk_get_meta_cap+0x16d/0x7a0 [ 2096.060098][T30939] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 2096.060120][T30939] ? blkdev_common_ioctl+0x14b7/0x3250 [ 2096.060144][T30939] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 2096.060168][T30939] ? kasan_quarantine_put+0xbb/0x1f0 [ 2096.060192][T30939] ? tomoyo_path_number_perm+0x219/0x630 [ 2096.060214][T30939] ? tomoyo_path_number_perm+0x219/0x630 [ 2096.060236][T30939] ? do_vfs_ioctl+0x1166/0x1530 [ 2096.060259][T30939] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2096.060285][T30939] ? do_futex+0x333/0x420 [ 2096.060307][T30939] ? __pfx_lo_ioctl+0x10/0x10 [ 2096.060331][T30939] blkdev_ioctl+0x5e3/0x740 [ 2096.060353][T30939] ? __pfx_blkdev_ioctl+0x10/0x10 [ 2096.060373][T30939] ? __fget_files+0x2a/0x420 [ 2096.060390][T30939] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2096.060424][T30939] ? __pfx_blkdev_ioctl+0x10/0x10 [ 2096.060444][T30939] __se_sys_ioctl+0xfc/0x170 [ 2096.060466][T30939] do_syscall_64+0x14d/0xf80 [ 2096.060490][T30939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2096.060508][T30939] ? trace_irq_disable+0x37/0x100 [ 2096.060529][T30939] ? clear_bhb_loop+0x40/0x90 [ 2096.060549][T30939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2096.060567][T30939] RIP: 0033:0x7fbcac19bf79 [ 2096.060584][T30939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2096.060600][T30939] RSP: 002b:00007fbcacfc0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2096.060620][T30939] RAX: ffffffffffffffda RBX: 00007fbcac415fa0 RCX: 00007fbcac19bf79 [ 2096.060634][T30939] RDX: 0000000000000004 RSI: 0000000000004c06 RDI: 0000000000000003 [ 2096.060646][T30939] RBP: 00007fbcac2327e0 R08: 0000000000000000 R09: 0000000000000000 [ 2096.060657][T30939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2096.060668][T30939] R13: 00007fbcac416038 R14: 00007fbcac415fa0 R15: 00007fbcac53fa48 [ 2096.060689][T30939] [ 2096.577124][T23171] Bluetooth: hci5: command tx timeout [ 2096.601289][ T3495] IPVS: fo: UDP 127.0.0.1:20003 - no destination available [ 2096.609682][T12886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2096.617860][T12886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2096.670595][ C0] blk_print_req_error: 6 callbacks suppressed [ 2096.670636][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 2096.702960][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2096.713986][ C0] buffer_io_error: 6 callbacks suppressed [ 2096.714010][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 2096.739026][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2096.750231][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 2096.769861][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2096.780666][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 2096.789731][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2096.801151][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 2096.810392][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2096.821164][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 2096.838658][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 2096.858731][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2096.869484][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 2096.879257][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2096.890066][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 2096.901937][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2096.912743][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 2096.925142][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 2096.933796][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 2098.659773][T23171] Bluetooth: hci5: command tx timeout [ 2104.182273][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2104.188782][ T1301] ieee802154 phy1 wpan1: encryption failed: -22