last executing test programs: 11.790334743s ago: executing program 2 (id=2977): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x49}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) 11.588291307s ago: executing program 2 (id=2980): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) sendmsg$can_raw(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000380)={&(0x7f000000a000)=@canfd={{0x5}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000094e2f9663a918fa1efd9b0b"}, 0x38}, 0x2}, 0x24000895) 11.397907694s ago: executing program 2 (id=2983): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x1, 0x4) vmsplice(r2, &(0x7f0000000880)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) write(r0, 0x0, 0x0) 11.051991852s ago: executing program 2 (id=2987): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) setitimer(0x2, 0x0, 0x0) 10.844367759s ago: executing program 2 (id=2989): socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x17e5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 10.655650683s ago: executing program 2 (id=2992): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) syz_io_uring_complete(0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) connect$inet6(r1, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 7.440032288s ago: executing program 1 (id=3016): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) link(&(0x7f0000000280)='./file0/../file0/file0\x00', 0x0) 7.196162885s ago: executing program 1 (id=3019): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={0x0}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 6.267808881s ago: executing program 1 (id=3021): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r4}, 0x18) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) 5.920676483s ago: executing program 1 (id=3024): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) 5.808512935s ago: executing program 1 (id=3026): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x41120080, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) 5.640681824s ago: executing program 4 (id=3027): r0 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a010203010902"], 0x0) 5.301899645s ago: executing program 0 (id=3028): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2}, 0x18) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10) 5.153936049s ago: executing program 0 (id=3029): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) close_range(r1, 0xffffffffffffffff, 0x0) 4.956529122s ago: executing program 0 (id=3030): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = syz_io_uring_setup(0x28d2, &(0x7f00000000c0)={0x0, 0x951a, 0x3010, 0x0, 0xfffffffe}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0xe8}, 0x0, 0x24040092}) io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='0\x00\x00'], 0x30}], 0x1, 0x0) 4.24469294s ago: executing program 4 (id=3031): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r3, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) 3.82418683s ago: executing program 0 (id=3035): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000c205081723e4c21c00000000000000001299000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="e3ffffffffffffff0002000008000000850000"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0xffeb, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r7, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r8}, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x1b, &(0x7f00000002c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0xe, 0x0, 0x6}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r11}, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r12}, 0x10) syz_io_uring_setup(0x10f, &(0x7f0000000300)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) 3.524541052s ago: executing program 3 (id=3036): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000001d00)={0x0, 0x2710}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f00000004c0)="b9cd14c222ee3c0cb001829a0d812235a634e084e8944cc43b686236af751d09fe593f830ba141b567b561ebbf5333ccc7d9de19", 0x34}], 0x1}}], 0x1, 0x20008000) 3.383881357s ago: executing program 3 (id=3037): sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r1, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xf34) recvfrom(r1, &(0x7f0000000200)=""/82, 0x52, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, 0x0, 0x4000054) bpf$PROG_LOAD(0x5, 0x0, 0x0) exit(0x7fffffff) 3.333727167s ago: executing program 4 (id=3038): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r1}, 0x20) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvfrom$inet6(r1, &(0x7f0000000240)=""/117, 0x75, 0x20040, 0x0, 0x0) 3.124645957s ago: executing program 4 (id=3039): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) 2.389567675s ago: executing program 3 (id=3040): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getpid() kcmp(r3, r4, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x25, 0x7, @val=@iter={&(0x7f0000000280)=@cgroup={0x2, r6, 0xe}, 0x10}}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x3, 0xcee6, 0x0, 0x40a82, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1, 0xf}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000080), 0x12) 1.433393935s ago: executing program 3 (id=3041): r0 = socket(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 388.614154ms ago: executing program 4 (id=3042): connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = socket(0xa, 0x3, 0x3a) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x0, r4}, 0xc) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0xfc, r4}, 0xc) 387.983381ms ago: executing program 3 (id=3043): pipe2$9p(&(0x7f00000001c0), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000004c0)) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x7ffffffe, 0x7, 0x4, 0x1000000, 0x800, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x8, 0x5, 0x0, 0x208000000010001, 0x3}, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 375.283703ms ago: executing program 0 (id=3044): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) timer_create(0x0, 0x0, &(0x7f00000001c0)=0x0) timer_delete(r1) 168.613662ms ago: executing program 0 (id=3045): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 99.182625ms ago: executing program 3 (id=3046): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000180001000000005955ee0e662d576c00080000000400000008"], 0x24}}, 0x0) 98.973377ms ago: executing program 4 (id=3047): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0x20000000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}], 0x1c) 0s ago: executing program 1 (id=3048): prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') openat$rtc(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) unshare(0x28020480) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x2, 0x80000000000004, 0x6}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000040000000000000005000000b10000000000dc5c0b5fc962183315320ed6fe860b3f4dc7e6df294d5c470d3625a26bd448da744e01e2f39e8e21f4eb55f991ba0ec9d3a77d88898340f8d9f6f964c7e143a8751b2409ae87b4606a41713f12b685fdb864d47a110ec4a061ca20c547844c71ef353f794b0ca38272206f186d0811d264dd4973562dfa9b7562f73bec53b48f0087a5610e07bccc", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000200), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x204600) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unlink(&(0x7f00000002c0)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}, {&(0x7f00000009c0)=ANY=[@ANYBLOB="cc0200003100000425bd7000fddbdf25d2004b8090e985c10e41bc16c3afdfa48f5504b1be674defb8e523ca931fc47fca0761f089f12dee7390f97c1afc9919b1fe48e849ff8dfba904c78d93262ae3d33f0064ebf13671c70daa79cc0fe13e298fd364e11960d535c26097d135265e7942c4c5db720b1846c07b77ed5d954b166fd8b48c9e0f6ca471ddfcbb5f163f777786f7a3fbfa7733802ee8c4a951358fe78e1ef7f4dbe179e9502c3354b1cebef86cef6a5c32967a223845ba9396fced3f604240981e8f247067e1349e286bc6c8269ebede928867184559936b04001380000072f367e932248bbb5f84927c213d001b02bcf2d2bd5b90abb49e35b671d5cc9e8646e4ecaf6db0c14b26d2c061e2895d84e85ee2272e330857cf5816d5761dcdb9cbd0815823a9e2e08d59f3a8cac38f824e82d6a380359c14f0b327fd5004cfcb9ba79164d762baff997f2fd16507defa04591b820f92c60d5c85e8eab1cc5c87f6a6027e19ea6adec8a708b47f58365690e1f34b33cc001933f43099cbdb9dc2e741283e1400b300fc0000000000000000000000000000008b004180040037800c001496532832", @ANYRES32, @ANYBLOB="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"], 0x2cc}], 0x2, 0x0, 0x0, 0x20000001}, 0x0) kernel console output (not intermixed with test programs): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15112 comm="syz.2.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96cb8ebe9 code=0x7ffc0000 [ 1051.325859][T15116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2332'. [ 1051.334875][T15116] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2332'. [ 1051.414663][T15121] batadv0: entered promiscuous mode [ 1051.451145][T15121] bond0: entered promiscuous mode [ 1051.456193][T15121] bond_slave_0: entered promiscuous mode [ 1051.515629][T15121] bond_slave_1: entered promiscuous mode [ 1051.530116][T15121] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1051.568043][T15121] hsr1: entered allmulticast mode [ 1051.583938][T15121] batadv0: entered allmulticast mode [ 1051.591801][T15121] bond0: entered allmulticast mode [ 1051.597051][T15121] bond_slave_0: entered allmulticast mode [ 1051.607238][T15121] bond_slave_1: entered allmulticast mode [ 1051.667670][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1051.727913][T15121] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1051.735850][T15121] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1052.707654][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1053.747714][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1054.787643][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1055.768350][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.781186][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.827678][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1055.956776][T15164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2344'. [ 1056.867625][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1057.350811][T15180] netlink: 'syz.3.2347': attribute type 27 has an invalid length. [ 1057.907681][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1058.797913][T14541] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1058.947629][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1058.947700][T14541] usb 1-1: Using ep0 maxpacket: 16 [ 1058.999169][T14541] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1059.047658][T14541] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1059.080687][T14541] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1059.251108][T14541] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.842618][T14541] usb 1-1: config 0 descriptor?? [ 1059.987661][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1060.531886][T15211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1060.556596][T15211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.014500][T14541] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8241.000B/input/input60 [ 1061.027746][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1061.221675][T15221] loop6: detected capacity change from 0 to 63 [ 1061.284944][T15221] buffer_io_error: 6 callbacks suppressed [ 1061.285020][T15221] Buffer I/O error on dev loop6, logical block 0, async page read [ 1061.303154][T15221] Buffer I/O error on dev loop6, logical block 1, async page read [ 1061.315237][T15221] Buffer I/O error on dev loop6, logical block 2, async page read [ 1061.324429][T15221] Buffer I/O error on dev loop6, logical block 3, async page read [ 1061.334889][T15221] Buffer I/O error on dev loop6, logical block 0, async page read [ 1061.345100][T15221] Buffer I/O error on dev loop6, logical block 1, async page read [ 1061.356384][T15221] Buffer I/O error on dev loop6, logical block 2, async page read [ 1061.365302][T15221] Buffer I/O error on dev loop6, logical block 3, async page read [ 1061.374305][T15221] Buffer I/O error on dev loop6, logical block 0, async page read [ 1061.384411][T15221] Buffer I/O error on dev loop6, logical block 1, async page read [ 1061.706144][T14541] appleir 0003:05AC:8241.000B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 1061.732183][T14541] usb 1-1: USB disconnect, device number 63 [ 1062.067842][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1063.107628][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1063.447666][T14541] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1064.147677][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1064.233186][T15253] netlink: 'syz.4.2365': attribute type 27 has an invalid length. [ 1064.237639][T14541] usb 1-1: Using ep0 maxpacket: 8 [ 1064.251978][T14541] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1064.261161][T14541] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.458355][T14541] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1064.468649][T14541] pvrusb2: ********** [ 1064.472673][T14541] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1064.484183][T14541] pvrusb2: Important functionality might not be entirely working. [ 1064.512281][T14541] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1064.668163][T15243] netlink: 'syz.2.2364': attribute type 27 has an invalid length. [ 1064.715442][T14541] pvrusb2: ********** [ 1064.789984][ T2342] pvrusb2: Invalid write control endpoint [ 1064.975964][ T2342] pvrusb2: Invalid write control endpoint [ 1065.080742][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1065.169422][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1065.187658][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1065.222661][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1065.266930][ T2342] pvrusb2: Device being rendered inoperable [ 1065.334718][ T2342] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1065.378061][ T2342] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1065.525285][T15268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2371'. [ 1065.605263][ T2342] pvrusb2: Attached sub-driver cx25840 [ 1065.732566][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1065.887966][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1066.124198][ T55] usb 1-1: USB disconnect, device number 64 [ 1066.227667][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1067.267685][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1067.579369][T15289] netlink: 'syz.4.2378': attribute type 20 has an invalid length. [ 1068.317749][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1069.357615][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1069.443800][T15285] Set syz0 is full, maxelem 0 reached [ 1069.556313][T15310] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2382'. [ 1070.336741][T15319] netlink: 'syz.0.2384': attribute type 27 has an invalid length. [ 1070.387642][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1071.427695][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1072.467718][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1072.538240][ T9] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 1072.691953][ T9] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1072.713971][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.781036][ T9] usb 3-1: Product: syz [ 1072.785229][ T9] usb 3-1: Manufacturer: syz [ 1072.837291][ T9] usb 3-1: SerialNumber: syz [ 1072.921303][ T9] usb 3-1: config 0 descriptor?? [ 1073.010992][ T9] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1073.149648][T15349] loop6: detected capacity change from 0 to 7 [ 1073.168988][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1073.244964][T15349] Dev loop6: unable to read RDB block 7 [ 1073.296169][T15349] loop6: unable to read partition table [ 1073.315680][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 1073.364707][T15349] loop6: partition table beyond EOD, truncated [ 1073.410266][T15349] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1073.507656][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1074.201431][ T5897] usb 3-1: USB disconnect, device number 37 [ 1074.435622][T15356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2394'. [ 1074.547653][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1074.901557][T15361] loop2: detected capacity change from 0 to 7 [ 1074.948800][T15361] loop2: [ 1074.976402][T15361] loop2: partition table partially beyond EOD, truncated [ 1075.587618][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1076.627645][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1077.078081][T15386] netlink: 'syz.4.2400': attribute type 27 has an invalid length. [ 1077.411272][T15390] loop6: detected capacity change from 0 to 7 [ 1077.443958][T15390] Dev loop6: unable to read RDB block 7 [ 1077.487872][T15390] loop6: unable to read partition table [ 1077.508408][T15390] loop6: partition table beyond EOD, truncated [ 1077.547981][T15390] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1077.667621][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1078.707710][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1078.766160][T15416] netlink: 'syz.1.2410': attribute type 1 has an invalid length. [ 1078.774095][T15416] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2410'. [ 1078.834466][T15414] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2410'. [ 1079.757608][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1080.787626][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1081.827650][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1082.237403][ T5951] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1082.350080][T15449] loop6: detected capacity change from 0 to 7 [ 1082.390107][T15449] Dev loop6: unable to read RDB block 7 [ 1082.401126][T15449] loop6: unable to read partition table [ 1082.407659][ T5951] usb 1-1: Using ep0 maxpacket: 8 [ 1082.419071][T15449] loop6: partition table beyond EOD, truncated [ 1082.425654][T15449] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1082.429909][ T5951] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1082.500619][ T5951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.537656][ T5951] usb 1-1: Product: syz [ 1082.542593][ T5951] usb 1-1: Manufacturer: syz [ 1082.557058][ T5951] usb 1-1: SerialNumber: syz [ 1082.628668][ T5951] usb 1-1: config 0 descriptor?? [ 1082.677674][ T5951] gspca_main: se401-2.14.0 probing 047d:5003 [ 1082.867654][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1083.086830][ T5951] gspca_se401: Frame size: 0x0 1/16th janggu [ 1083.094451][ T5951] gspca_se401: Frame size: 0x0 1/16th janggu [ 1083.100650][ T5951] gspca_se401: Frame size: 0x0 1/16th janggu [ 1083.106827][ T5951] gspca_se401: Frame size: 1x0 bayer [ 1083.112444][ T5951] gspca_se401: Frame size: 0x0 1/16th janggu [ 1083.120047][ T5951] gspca_se401: Frame size: 0x0 1/16th janggu [ 1083.907629][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1084.045138][T15468] netlink: 'syz.3.2423': attribute type 27 has an invalid length. [ 1084.060994][ T5951] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input61 [ 1084.286761][ T5951] usb 1-1: USB disconnect, device number 65 [ 1084.947635][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1085.399229][T15484] loop2: detected capacity change from 0 to 7 [ 1085.836036][T15484] loop2: [ 1085.843849][T15484] loop2: partition table partially beyond EOD, truncated [ 1085.997610][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1087.037652][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1088.067693][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1088.623977][T15500] loop6: detected capacity change from 0 to 7 [ 1088.672245][T15500] Dev loop6: unable to read RDB block 7 [ 1088.698708][T15500] loop6: unable to read partition table [ 1088.704902][T15500] loop6: partition table beyond EOD, truncated [ 1088.711466][T15500] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1088.976704][T15511] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2435'. [ 1088.995575][T15511] openvswitch: netlink: Flow key attr not present in new flow. [ 1089.107631][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1090.147628][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1090.625177][T15526] loop2: detected capacity change from 0 to 7 [ 1090.635501][T15526] loop2: [ 1090.638701][T15526] loop2: partition table partially beyond EOD, truncated [ 1090.957661][ T5897] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1091.187721][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1091.799786][ T5897] usb 5-1: Using ep0 maxpacket: 32 [ 1091.813748][ T5897] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1091.835543][ T5897] usb 5-1: config 0 has no interface number 0 [ 1091.843488][ T5897] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1091.863361][ T5897] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1091.897743][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.919185][T15548] netlink: 'syz.2.2446': attribute type 27 has an invalid length. [ 1091.937814][ T5897] usb 5-1: Product: syz [ 1091.957624][ T5897] usb 5-1: Manufacturer: syz [ 1091.962247][ T5897] usb 5-1: SerialNumber: syz [ 1091.972161][ T5897] usb 5-1: config 0 descriptor?? [ 1092.094271][ T5897] smsc75xx v1.0.0 [ 1092.227630][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1092.624159][ T5897] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1092.825804][ T5897] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1093.267630][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1093.727932][ T5897] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 1093.892464][ T5897] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 1093.902233][ T5897] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1093.917951][ T5897] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 1093.929681][ T5897] usb 5-1: USB disconnect, device number 57 [ 1094.307611][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1094.758218][T15572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2453'. [ 1095.247625][ T5951] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1095.357780][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1095.407804][ T5951] usb 4-1: Using ep0 maxpacket: 32 [ 1095.525424][ T5951] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1095.597065][ T5951] usb 4-1: config 0 has no interface number 0 [ 1095.758547][ T5951] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1095.859558][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.963164][ T5951] usb 4-1: Product: syz [ 1096.006702][ T5951] usb 4-1: Manufacturer: syz [ 1096.054778][ T5951] usb 4-1: SerialNumber: syz [ 1096.221856][ T5951] usb 4-1: config 0 descriptor?? [ 1096.279084][ T5951] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1096.298654][T15599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2462'. [ 1096.387622][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1096.520718][ T5951] usb 4-1: qt2_attach - failed to power on unit: -71 [ 1096.528123][ T5951] quatech2 4-1:0.51: probe with driver quatech2 failed with error -71 [ 1097.344881][ T5951] usb 4-1: USB disconnect, device number 47 [ 1097.352867][T15603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2465'. [ 1097.427629][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1097.821166][T15618] netlink: 'syz.0.2467': attribute type 2 has an invalid length. [ 1098.467603][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1099.507620][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1099.927770][ T5897] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1100.118131][ T5897] usb 4-1: Using ep0 maxpacket: 8 [ 1100.218121][ T5897] usb 4-1: config index 0 descriptor too short (expected 30482, got 18) [ 1100.226954][ T5897] usb 4-1: config 0 has too many interfaces: 101, using maximum allowed: 32 [ 1100.547598][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1100.891460][ T5897] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 101 [ 1100.996016][ T5897] usb 4-1: string descriptor 0 read error: -71 [ 1101.021651][ T5897] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 5.00 [ 1101.053109][ T5897] usb 4-1: New USB device strings: Mfr=253, Product=255, SerialNumber=0 [ 1101.153870][T15656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1101.163414][T15656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1101.234317][T15663] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2478'. [ 1101.252917][T15660] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2478'. [ 1101.264223][ T5897] usb 4-1: config 0 descriptor?? [ 1101.273048][ T5897] usb 4-1: can't set config #0, error -71 [ 1101.281172][ T5897] usb 4-1: USB disconnect, device number 48 [ 1101.587642][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1101.974393][ T5951] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1102.107635][T15668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2479'. [ 1102.161638][ T5951] usb 3-1: Using ep0 maxpacket: 8 [ 1102.402505][ T5951] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1102.436350][ T5951] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1102.468237][ T5951] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1102.476150][T15672] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1102.507644][ T5897] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1102.507694][ T5951] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1102.525649][T15672] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1102.539752][T15672] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1102.546283][T15672] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1102.549523][ T5951] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1102.562682][T15672] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1102.575498][T15672] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1102.626888][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.637600][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1102.646675][T15675] netlink: 'syz.1.2481': attribute type 39 has an invalid length. [ 1102.661691][T15672] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1102.697830][ T5897] usb 4-1: Using ep0 maxpacket: 32 [ 1102.716297][ T5897] usb 4-1: config 80 has an invalid interface number: 207 but max is 0 [ 1102.737271][ T5897] usb 4-1: config 80 has no interface number 0 [ 1102.753951][ T5897] usb 4-1: config 80 interface 207 altsetting 3 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 1102.766128][ T5897] usb 4-1: config 80 interface 207 altsetting 3 endpoint 0x8B has an invalid bInterval 201, changing to 11 [ 1102.811144][ T5897] usb 4-1: config 80 interface 207 altsetting 3 endpoint 0x8B has invalid maxpacket 42693, setting to 1024 [ 1102.850343][ T5897] usb 4-1: config 80 interface 207 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 1102.885920][ T5897] usb 4-1: config 80 interface 207 altsetting 3 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1102.939513][ T5951] usb 3-1: GET_CAPABILITIES returned 0 [ 1102.945690][ T5951] usbtmc 3-1:16.0: can't read capabilities [ 1102.955699][ T5897] usb 4-1: config 80 interface 207 has no altsetting 0 [ 1102.980475][ T5897] usb 4-1: New USB device found, idVendor=0f11, idProduct=2060, bcdDevice=90.59 [ 1103.000254][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.571649][ T5897] usb 4-1: Product: syz [ 1103.575873][ T5897] usb 4-1: Manufacturer: syz [ 1103.580522][ T5897] usb 4-1: SerialNumber: syz [ 1103.667624][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1103.680096][T14541] usb 3-1: USB disconnect, device number 38 [ 1103.727099][T15663] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1103.973953][ T5897] ldusb 4-1:80.207: LD USB Device #0 now attached to major 180 minor 0 [ 1103.989611][ T5897] usb 4-1: USB disconnect, device number 49 [ 1103.998425][ T5951] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1104.247697][ T5951] usb 2-1: Using ep0 maxpacket: 32 [ 1104.717593][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1104.971607][ T5897] ldusb 4-1:80.207: LD USB Device #0 now disconnected [ 1105.028625][ T5951] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1105.117974][ T5951] usb 2-1: config 0 has no interface number 0 [ 1105.757614][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1105.857723][ T5951] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1105.871859][ T5951] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1105.887882][ T5951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.906305][ T5951] usb 2-1: Product: syz [ 1105.911089][ T5951] usb 2-1: Manufacturer: syz [ 1105.916014][ T5951] usb 2-1: SerialNumber: syz [ 1105.923818][ T5951] usb 2-1: config 0 descriptor?? [ 1105.931718][ T5951] smsc75xx v1.0.0 [ 1106.787608][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1106.807646][ T24] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1107.528903][ T5951] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1107.539844][ T5951] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 1107.552937][ T5951] usb 2-1: USB disconnect, device number 43 [ 1107.697968][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 1107.713752][ T24] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1107.789927][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1107.799249][T15716] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2491'. [ 1107.807453][ T24] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1107.827851][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1107.828462][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.138275][T15720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2493'. [ 1108.141404][ T24] usb 5-1: config 0 descriptor?? [ 1108.179704][T15722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2493'. [ 1108.262570][T15725] loop2: detected capacity change from 0 to 7 [ 1108.278386][T15725] loop2: [ 1108.283917][T15725] loop2: partition table partially beyond EOD, truncated [ 1108.867604][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1109.623373][ T24] nzxt-smart2 0003:1E71:2009.000C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 1109.907630][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1109.921918][T15751] syz.0.2497 (15751): /proc/15743/oom_adj is deprecated, please use /proc/15743/oom_score_adj instead. [ 1110.947603][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1111.125719][ T5897] usb 5-1: USB disconnect, device number 58 [ 1111.987620][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1113.037638][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1113.678380][T15774] kvm: pic: non byte read [ 1113.693631][T15774] kvm: pic: non byte read [ 1113.703927][T15774] kvm: pic: non byte read [ 1113.721079][T15774] kvm: pic: non byte read [ 1113.740824][T15774] kvm: pic: non byte read [ 1113.745605][T15774] kvm: pic: single mode not supported [ 1113.745705][T15774] kvm: pic: non byte read [ 1113.771042][T15784] tipc: Enabling of bearer rejected, failed to enable media [ 1113.868053][T15783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2505'. [ 1113.887629][ T5897] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1114.067714][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1114.091492][ T5897] usb 4-1: Using ep0 maxpacket: 16 [ 1114.104206][ T5897] usb 4-1: New USB device found, idVendor=061d, idProduct=c160, bcdDevice=a8.f7 [ 1114.116078][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.124440][ T5897] usb 4-1: Product: syz [ 1114.128648][ T5897] usb 4-1: Manufacturer: syz [ 1114.133251][ T5897] usb 4-1: SerialNumber: syz [ 1114.305382][ T9] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1114.327576][ T5897] usb 4-1: config 0 descriptor?? [ 1115.107610][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1115.118056][ T5897] quatech2 4-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 1115.127370][ T5897] usb 4-1: qt2_attach - failed to power on unit: -71 [ 1115.134418][ T5897] quatech2 4-1:0.0: probe with driver quatech2 failed with error -71 [ 1115.145264][ T5897] usb 4-1: USB disconnect, device number 50 [ 1115.191963][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1115.806292][ T9] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 1115.826393][ T9] usb 2-1: config 0 has no interface number 0 [ 1115.837117][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.850736][ T9] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1115.862553][ T9] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 1115.905340][ T9] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x2 has an invalid bInterval 175, changing to 11 [ 1115.925600][ T9] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1115.943390][ T9] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 95, changing to 10 [ 1115.954815][ T9] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 8911, setting to 1024 [ 1115.971521][ T9] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1115.988760][ T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1116.005858][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.017822][ T9] usb 2-1: Product: syz [ 1116.030584][ T9] usb 2-1: Manufacturer: syz [ 1116.038642][ T9] usb 2-1: SerialNumber: syz [ 1116.104205][ T9] usb 2-1: config 0 descriptor?? [ 1116.147631][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1117.187608][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1118.237617][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1119.267602][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1119.517860][ T9] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 1119.536049][ T9] usb 2-1: USB disconnect, device number 44 [ 1119.643211][T15831] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2516'. [ 1119.667777][T15831] openvswitch: netlink: Flow key attr not present in new flow. [ 1119.869919][T15834] kvm: pic: non byte write [ 1119.905745][T15840] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2520'. [ 1119.957679][ T5897] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 1120.222339][ T5897] usb 3-1: config index 0 descriptor too short (expected 61256, got 72) [ 1120.231906][ T5897] usb 3-1: config 1 has an invalid interface number: 0 but max is -1 [ 1120.240188][ T5897] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1120.255159][ T5897] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 0 [ 1120.265083][ T5897] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 1120.307628][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1120.331130][ T5897] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1120.331159][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1120.331177][ T5897] usb 3-1: SerialNumber: syz [ 1121.274553][ T5897] cdc_acm 3-1:1.0: skipping garbage [ 1121.274576][ T5897] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 1121.274591][ T5897] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 1121.274615][ T5897] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 1121.287198][T15850] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR [ 1121.347691][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1121.683391][T14144] usb 3-1: USB disconnect, device number 39 [ 1122.387612][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1123.437657][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1124.467657][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1125.517598][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1125.528416][T15896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2531'. [ 1126.490618][T15902] netlink: 'syz.0.2536': attribute type 29 has an invalid length. [ 1126.499506][T15902] netlink: 'syz.0.2536': attribute type 29 has an invalid length. [ 1126.547623][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1127.597596][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1128.637722][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1129.667594][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1130.717715][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1131.747588][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1132.086251][T15939] Bluetooth: hci4: command 0x0406 tx timeout [ 1132.715936][T15957] bpf: Bad value for 'uid' [ 1132.787612][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1133.827624][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1134.134017][T15964] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 1134.359458][T15974] loop2: detected capacity change from 0 to 7 [ 1134.470541][T15974] loop2: [ 1134.483863][T15974] loop2: partition table partially beyond EOD, truncated [ 1134.734975][T15988] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1134.867609][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1135.917660][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1136.947706][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1137.987590][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1138.401451][T16025] binder: 16024:16025 ioctl c0306201 200000000080 returned -14 [ 1138.458504][T16025] binder: 16024:16025 ioctl c0306201 200000000600 returned -11 [ 1138.487093][T16027] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2564'. [ 1138.537056][T16027] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2564'. [ 1138.568887][T16031] loop2: detected capacity change from 0 to 7 [ 1138.588289][T16031] loop2: [ 1138.591315][T16031] loop2: partition table partially beyond EOD, truncated [ 1139.037665][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1140.068033][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1140.759206][T16058] input input62: cannot allocate more than FF_MAX_EFFECTS effects [ 1141.107632][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1141.276402][T16047] input: syz0 as /devices/virtual/input/input63 [ 1141.363378][ T24] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1141.628275][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 1141.767596][ T5951] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1141.835778][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1142.147611][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1143.197597][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1143.314672][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1143.360844][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1143.379231][ T5951] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1143.398072][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.411376][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1143.421572][ T5951] usb 4-1: Product: syz [ 1143.425764][ T5951] usb 4-1: Manufacturer: syz [ 1143.433858][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.443975][ T5951] usb 4-1: SerialNumber: syz [ 1143.456136][ T24] usb 5-1: config 0 descriptor?? [ 1143.461445][ T5951] usb 4-1: config 0 descriptor?? [ 1143.694417][ T24] HID 045e:07da: Invalid code 65791 type 1 [ 1144.227624][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1144.657722][ T24] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000D/input/input64 [ 1145.267648][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1145.908029][ T5951] usb 4-1: f81604_read: reg: 105 failed: -ETIMEDOUT [ 1145.914645][ T5951] f81604 4-1:0.0: Setting termination of CH#0 failed: -ETIMEDOUT [ 1145.933522][ T24] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1145.945545][ T5951] f81604 4-1:0.0: probe with driver f81604 failed with error -110 [ 1145.988358][ T24] usb 5-1: USB disconnect, device number 59 [ 1145.999903][ T5951] usb 4-1: USB disconnect, device number 51 [ 1146.103439][T16089] loop2: detected capacity change from 0 to 7 [ 1146.156883][T16089] loop2: [ 1146.190267][T16089] loop2: partition table partially beyond EOD, truncated [ 1146.307581][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1146.709324][ T5951] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1146.890177][ T5951] usb 4-1: Using ep0 maxpacket: 16 [ 1146.919191][ T5951] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 1146.948827][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.965314][ T5951] usb 4-1: Product: syz [ 1146.978127][ T5951] usb 4-1: Manufacturer: syz [ 1146.982755][ T5951] usb 4-1: SerialNumber: syz [ 1147.004890][ T5951] usb 4-1: config 0 descriptor?? [ 1147.024372][T16114] program syz.0.2587 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1147.347684][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1148.387588][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1148.687376][ T5951] usb 4-1: USB disconnect, device number 52 [ 1148.709106][T16140] x_tables: duplicate underflow at hook 4 [ 1148.720849][T16138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1149.085060][T14541] usb 2-1: new low-speed USB device number 45 using dummy_hcd [ 1149.427672][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1149.837586][T14541] usb 2-1: Invalid ep0 maxpacket: 64 [ 1149.987645][T14541] usb 2-1: new low-speed USB device number 46 using dummy_hcd [ 1150.158924][T14541] usb 2-1: Invalid ep0 maxpacket: 64 [ 1150.166954][T14541] usb usb2-port1: attempt power cycle [ 1150.449489][T16173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2603'. [ 1150.467591][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1150.527942][T14541] usb 2-1: new low-speed USB device number 47 using dummy_hcd [ 1150.572420][T14541] usb 2-1: Invalid ep0 maxpacket: 64 [ 1150.693528][T16180] Bluetooth: MGMT ver 1.23 [ 1150.728320][T14541] usb 2-1: new low-speed USB device number 48 using dummy_hcd [ 1150.780895][T14541] usb 2-1: Invalid ep0 maxpacket: 64 [ 1150.809181][T14541] usb usb2-port1: unable to enumerate USB device [ 1151.507605][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1151.902035][T14144] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1152.073574][T14144] usb 3-1: Using ep0 maxpacket: 32 [ 1152.229628][T14144] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1152.496944][T14144] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1152.514882][T14144] usb 3-1: New USB device found, idVendor=05ac, idProduct=021a, bcdDevice= 0.40 [ 1152.542933][T14144] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.551028][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1152.587607][T14144] usb 3-1: Product: è»ê¼©ï˜¡ï¹ºé­¼é‘™çœ½ç½ç·ï•ªß”⸇园欋ꄃꢶç¯éŒ¨ë‘䭌陳䯶毟찷㰠ã‚éµá »â„žé¿²ë²œå¦åº¹ç‹ªâ‹áªŸã³·çƒšäº¯ï¨Ÿæ©¦ê©·é¢¸ç¹¥îœ£èš«í‹½ã›£ìª¿æ·¡Ú·è”€î”´êž˜æ¶„Ëµà¥´ä™‰ï¯©ï½ [ 1152.643841][T14144] usb 3-1: Manufacturer: 푵ﺃï‰âŠîŸ‡è´ªášºä€‰çŸ†ã£¶ì¸ë£ç³â¦ ì‚ƒä¢ˆìˆã»ï¼ë©ê–¶çµ›ã¤Ÿç™¤å¿¦é¥¸îƒéŽ¡Ò„襈ᗓ꩕៚䰬ﵺ헖쉴鎬ꑲ鞲á½í…™åŽé­œä£žâ¾‘亟手蕢鴎汩è›çš¾ë‚Šî» â¿èŒ©â›¸î¦‡ë©‰Ë«íƒ‰ã¹©ï©²á“›åŠ®ã²¥é¹á•µá³£ï²ï©¤ç†¦â¦¦ë¬– [ 1152.765280][T14144] usb 3-1: SerialNumber: 晨ã…섢⮧䉢䗉⾷ᙂ鋩蠠箈쉀今 [ 1153.488596][T16189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1153.597897][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1154.462784][T16189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1154.627598][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1155.509724][T14144] appletouch 3-1:1.0: Failed to read mode from device. [ 1155.517356][T14144] appletouch 3-1:1.0: probe with driver appletouch failed with error -5 [ 1155.531726][T14144] usb 3-1: USB disconnect, device number 40 [ 1155.667634][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1156.164827][T16218] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2618'. [ 1156.242757][T16221] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2621'. [ 1156.717684][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1157.069947][T16238] xt_hashlimit: size too large, truncated to 1048576 [ 1157.197467][T16243] : renamed from bridge_slave_0 (while UP) [ 1157.747613][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1158.171535][T16241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1158.425460][T16258] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2629'. [ 1158.434522][T16258] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2629'. [ 1158.443733][T16258] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2629'. [ 1158.787525][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1159.837450][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1160.877363][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1161.909996][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1162.057374][ T5897] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1162.227144][ T5897] usb 5-1: Using ep0 maxpacket: 16 [ 1162.255585][ T5897] usb 5-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1162.293988][ T5897] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1162.426611][ T5897] usb 5-1: New USB device found, idVendor=25b5, idProduct=0002, bcdDevice= 0.40 [ 1162.435924][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.455718][ T5897] usb 5-1: Product: syz [ 1162.461444][ T5897] usb 5-1: Manufacturer: syz [ 1162.466287][ T5897] usb 5-1: SerialNumber: syz [ 1162.896013][ T5897] usbhid 5-1:1.0: can't add hid device: -71 [ 1162.924903][ T5897] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1162.947078][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1163.016859][ T5897] usb 5-1: USB disconnect, device number 60 [ 1163.987030][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1165.026750][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1165.798774][T16322] binder: BINDER_SET_CONTEXT_MGR already set [ 1165.804966][T16322] binder: 16318:16322 ioctl 4018620d 2000000002c0 returned -16 [ 1166.066638][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1166.089664][T16325] netlink: 'syz.4.2646': attribute type 1 has an invalid length. [ 1166.217903][T16325] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2646'. [ 1166.250174][T16333] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1166.303893][T16333] bond1: (slave bond2): making interface the new active one [ 1166.327704][T16333] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1166.554228][T16325] bond1: entered promiscuous mode [ 1166.560129][T16325] bond2: entered promiscuous mode [ 1166.572859][T16325] bond1: entered allmulticast mode [ 1166.581916][T16325] bond2: entered allmulticast mode [ 1166.593243][T16325] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1166.762710][T16352] loop9: detected capacity change from 0 to 7 [ 1166.770750][T16352] buffer_io_error: 362 callbacks suppressed [ 1166.770768][T16352] Buffer I/O error on dev loop9, logical block 0, async page read [ 1166.785787][T16352] Buffer I/O error on dev loop9, logical block 0, async page read [ 1166.794703][T16352] Buffer I/O error on dev loop9, logical block 0, async page read [ 1166.803406][T16352] Buffer I/O error on dev loop9, logical block 0, async page read [ 1166.811795][T16352] Buffer I/O error on dev loop9, logical block 0, async page read [ 1166.821189][T16352] Buffer I/O error on dev loop9, logical block 0, async page read [ 1166.829701][T16352] Buffer I/O error on dev loop9, logical block 0, async page read [ 1166.838021][T16352] ldm_validate_partition_table(): Disk read failed. [ 1166.844838][T16352] Buffer I/O error on dev loop9, logical block 0, async page read [ 1166.853208][T16352] Buffer I/O error on dev loop9, logical block 0, async page read [ 1166.878954][T16352] Buffer I/O error on dev loop9, logical block 0, async page read [ 1166.888685][T16352] Dev loop9: unable to read RDB block 0 [ 1166.895141][T16352] loop9: unable to read partition table [ 1166.901922][T16352] loop9: partition table beyond EOD, truncated [ 1166.908438][T16352] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 1166.908438][T16352] ) failed (rc=-5) [ 1167.106535][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1168.146386][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1168.636412][ T5951] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1168.719949][T14541] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1168.808364][ T5951] usb 5-1: Using ep0 maxpacket: 32 [ 1168.814651][ T5951] usb 5-1: too many configurations: 193, using maximum allowed: 8 [ 1169.186256][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1169.425392][ T5951] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1169.453492][ T5951] usb 5-1: can't read configurations, error -61 [ 1169.509173][T16382] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x30314752, 8, 0, 0, 0) [ 1169.542486][T14541] usb 4-1: config 0 interface 0 altsetting 238 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1170.016410][T14541] usb 4-1: config 0 interface 0 altsetting 238 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1170.032784][T14541] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1170.039500][T14541] usb 4-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 1170.053094][T14541] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.066971][ T5951] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1170.091972][T14541] usb 4-1: config 0 descriptor?? [ 1170.226179][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1170.246261][ T5951] usb 5-1: Using ep0 maxpacket: 32 [ 1170.256666][ T5951] usb 5-1: too many configurations: 193, using maximum allowed: 8 [ 1170.277090][ T5951] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1170.295795][ T5951] usb 5-1: can't read configurations, error -61 [ 1170.303084][ T5951] usb usb5-port1: attempt power cycle [ 1170.309854][T16366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1170.336588][T16366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1170.345492][T16366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1170.384823][T16366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1170.415916][T16366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1170.439539][T16366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1170.459482][T16366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1170.479238][T16366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1170.488540][T16366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1170.497454][T16366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1170.745844][T16361] netlink: 'syz.3.2654': attribute type 10 has an invalid length. [ 1171.266139][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1171.516873][ T5951] usb usb5-port1: Cannot enable. Maybe the USB cable is bad? [ 1171.989176][ T5951] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1172.046645][ T5951] usb 5-1: device descriptor read/8, error -71 [ 1172.294126][ T5951] usb usb5-port1: unable to enumerate USB device [ 1172.305949][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1173.138383][T14541] usbhid 4-1:0.0: can't add hid device: -71 [ 1173.155153][T14541] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1173.172637][T14541] usb 4-1: USB disconnect, device number 53 [ 1173.345721][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1173.414431][T16427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2670'. [ 1174.385773][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1174.805618][T16442] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2673'. [ 1175.425488][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1175.757034][T16454] QAT: failed to copy from user cfg_data. [ 1176.465360][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1177.279862][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.402302][T16470] loop2: detected capacity change from 0 to 7 [ 1177.435954][T16470] loop2: [ 1177.438961][T16470] loop2: partition table partially beyond EOD, truncated [ 1177.505213][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1177.714685][T16473] netlink: 'syz.3.2682': attribute type 21 has an invalid length. [ 1177.722862][T16473] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2682'. [ 1177.732517][T16473] netlink: 'syz.3.2682': attribute type 4 has an invalid length. [ 1177.740967][T16473] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2682'. [ 1177.751766][T16473] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2682'. [ 1178.063082][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805721b000: rx timeout, send abort [ 1178.545265][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1178.564154][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058d48c00: rx timeout, send abort [ 1178.572840][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805721b000: abort rx timeout. Force session deactivation [ 1179.072461][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058d48c00: abort rx timeout. Force session deactivation [ 1179.096062][T16502] QAT: failed to copy from user cfg_data. [ 1179.584959][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1180.065189][ T5951] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1180.266906][ T5951] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1180.321718][T16513] program syz.1.2691 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1180.324885][ T5951] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1180.356642][T16513] program syz.1.2691 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1180.367313][T16513] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1180.592451][ T5951] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1180.624859][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1180.647198][ T5951] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1180.678053][ T5951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.694510][ T5951] usb 1-1: Product: syz [ 1180.704258][ T5951] usb 1-1: Manufacturer: syz [ 1180.711310][ T5951] usb 1-1: SerialNumber: syz [ 1181.664704][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1182.704608][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1183.744527][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1183.848805][T16532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2696'. [ 1184.265035][ T9] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1184.784351][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1185.067368][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1185.824233][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1185.832109][ T9] usb 4-1: config 1 has an invalid descriptor of length 152, skipping remainder of the config [ 1185.844242][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1185.899910][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1185.970987][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.002559][T16551] QAT: failed to copy from user cfg_data. [ 1186.008622][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 1186.008637][ T30] audit: type=1326 audit(1755645935.788:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16550 comm="syz.1.2702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2bd8ebe9 code=0x7ffc0000 [ 1186.054341][ T9] usb 4-1: Product: Ñ— [ 1186.058461][ T9] usb 4-1: Manufacturer: æ§Ô©æŒç¿ŒëŽ¬í‘·é—²èŠŒï­ç¾‰â·²îª¡â¥å¸‘䞆為✌畣₵㯇í [ 1186.312074][T16556] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2702'. [ 1186.864208][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1186.874171][ T9] usb 4-1: SerialNumber: syz [ 1186.880923][ T30] audit: type=1326 audit(1755645935.788:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16550 comm="syz.1.2702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2bd8ebe9 code=0x7ffc0000 [ 1186.980020][ T5951] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 1186.991627][ T5951] cdc_ncm 1-1:1.0: bind() failure [ 1187.355706][ T30] audit: type=1326 audit(1755645935.798:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16550 comm="syz.1.2702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6e2bd8ebe9 code=0x7ffc0000 [ 1187.392540][ T5951] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1187.448590][ T5951] cdc_ncm 1-1:1.1: bind() failure [ 1187.482800][ T30] audit: type=1326 audit(1755645935.798:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16550 comm="syz.1.2702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2bd8ebe9 code=0x7ffc0000 [ 1187.903992][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1187.915028][ T9] usb 4-1: 0:2 : does not exist [ 1187.926195][ T5951] usb 1-1: USB disconnect, device number 66 [ 1187.984095][ T30] audit: type=1326 audit(1755645935.798:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16550 comm="syz.1.2702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2bd8ebe9 code=0x7ffc0000 [ 1188.025765][ T9] usb 4-1: USB disconnect, device number 54 [ 1188.854145][ T30] audit: type=1326 audit(1755645935.798:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16550 comm="syz.1.2702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6e2bd8ebe9 code=0x7ffc0000 [ 1188.891350][T16572] loop2: detected capacity change from 0 to 7 [ 1188.934818][T16568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2704'. [ 1188.944309][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1189.021062][T16572] loop2: [ 1189.029149][T16572] loop2: partition table partially beyond EOD, truncated [ 1189.064646][ T30] audit: type=1326 audit(1755645935.798:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16550 comm="syz.1.2702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2bd8ebe9 code=0x7ffc0000 [ 1189.483775][ T30] audit: type=1326 audit(1755645935.798:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16550 comm="syz.1.2702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2bd8ebe9 code=0x7ffc0000 [ 1189.593718][ T30] audit: type=1326 audit(1755645935.798:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16550 comm="syz.1.2702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e2bd8ebe9 code=0x7ffc0000 [ 1189.664298][ T30] audit: type=1326 audit(1755645935.798:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16550 comm="syz.1.2702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2bd8ebe9 code=0x7ffc0000 [ 1189.981538][T16587] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2710'. [ 1189.990840][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1190.748433][T16595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2714'. [ 1191.033582][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1192.063419][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1192.371388][T16607] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 1192.942266][T16614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1192.983713][T16614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1193.103330][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1193.308018][T14144] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1193.667770][T14144] usb 4-1: Using ep0 maxpacket: 16 [ 1194.143193][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1194.636320][T14144] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 1194.646445][T14144] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1194.658780][T14144] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1194.667930][T14144] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.676047][T14144] usb 4-1: Product: Ж [ 1194.680125][T14144] usb 4-1: Manufacturer: ㈷ᩪî¼æº½íƒ…ç¡ [ 1194.884186][T16627] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 1195.181686][T14144] usb 4-1: SerialNumber: ᗮ霋鵕暡솜ԫ숿란鎭턣äŸáºâ«…⭇熒襔矸痚럛ë„ç·­í‡æ©¿ê† â¯¹åµ¿é¥‹â·€î«™ì©¸î—¯è‘ƒæœ äœ¾ì†œì˜žé¤·ç¼©éµ»å‹–䌙ì¦î€¢î£®å›Œã”†ê›³ã”›ëšŠá£ºä›¿ë²„﮳痪ﵥⴷ봳᧛鼶ìŒà¼±å›Œã¦í†·ì”„ㆉ쫮ï½äŒ•ìº¹Ï†ä“ªè‡™î°œæœŠãŠ€â¶—େ마ì£Ü©ã¯²ä§ã‰•ìƒá´žæ±ç§ï•ä˜¹êš£ì©§ì„“魥듥ࢎ﷬䞬êœâ’¿âž€ï³¨ [ 1195.190956][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1195.478127][T14144] cdc_ncm 4-1:1.0: bind() failure [ 1195.501842][T14144] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1196.062252][T14144] cdc_ncm 4-1:1.1: bind() failure [ 1196.111298][T14144] usb 4-1: USB disconnect, device number 55 [ 1196.222979][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1197.272833][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1198.302663][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1199.342555][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1200.382429][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1200.530130][T16682] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2734'. [ 1201.422361][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1201.859847][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 1201.859864][ T30] audit: type=1326 audit(1755645951.650:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16679 comm="syz.0.2734" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f76fed8ebe9 code=0x0 [ 1202.462152][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1202.538307][T16701] 9pnet_fd: Insufficient options for proto=fd [ 1203.502119][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1204.541937][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1205.581791][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1205.982004][ T5897] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 1206.631668][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1206.892270][T16750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2750'. [ 1207.013039][T16756] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2752'. [ 1207.595585][T14144] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1207.661577][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1207.807467][T14144] usb 3-1: Using ep0 maxpacket: 8 [ 1207.871499][T14144] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 1207.961507][T14144] usb 3-1: config 0 has no interface number 0 [ 1207.990093][T14144] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1208.265076][ T5897] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 1208.291576][T16775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2754'. [ 1208.352348][T14144] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 1208.365583][ T5897] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 1208.378106][ T5897] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 1208.446200][T14144] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x2 has an invalid bInterval 175, changing to 11 [ 1208.475544][T14144] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1208.491302][ T5897] hid-generic 0003:0004:0000.000E: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1208.570803][T14144] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1208.584007][T14144] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 8911, setting to 1024 [ 1208.596680][T14144] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1208.617452][T14144] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1208.641527][T14144] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.649971][T14144] usb 3-1: Product: syz [ 1208.654605][T14144] usb 3-1: Manufacturer: syz [ 1208.659788][T14144] usb 3-1: SerialNumber: syz [ 1208.667504][T14144] usb 3-1: config 0 descriptor?? [ 1208.711401][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1208.801798][ T9] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1208.902000][T14144] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 1208.953566][ T9] usb 5-1: device descriptor read/64, error -71 [ 1208.971908][T14144] usb 3-1: USB disconnect, device number 41 [ 1209.741300][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1210.301243][ T9] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1210.531743][ T9] usb 5-1: device descriptor read/64, error -71 [ 1210.621238][T14144] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1210.697776][ T9] usb usb5-port1: attempt power cycle [ 1210.781146][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1210.871600][T14144] usb 3-1: Using ep0 maxpacket: 16 [ 1210.887473][T14144] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1210.898227][T16807] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2764'. [ 1210.898824][T14144] usb 3-1: config 0 has no interface number 0 [ 1210.919173][T16807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2764'. [ 1211.011660][T14144] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1211.035037][T14144] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.091772][T14144] usb 3-1: Product: syz [ 1211.112877][ T9] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1211.126825][T14144] usb 3-1: Manufacturer: syz [ 1211.161394][T14144] usb 3-1: SerialNumber: syz [ 1211.732126][ T9] usb 5-1: device not accepting address 68, error -71 [ 1211.744163][T14144] usb 3-1: config 0 descriptor?? [ 1211.752528][T14144] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1211.837644][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1212.326354][T14144] gspca_spca1528: reg_w err -110 [ 1212.359302][T14144] spca1528 3-1:0.1: probe with driver spca1528 failed with error -110 [ 1212.468933][T16826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2767'. [ 1212.860899][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1213.074847][T16830] loop6: detected capacity change from 0 to 7 [ 1213.082955][T16830] Dev loop6: unable to read RDB block 7 [ 1213.088573][T16830] loop6: unable to read partition table [ 1213.127349][T16830] loop6: partition table beyond EOD, truncated [ 1213.134793][T16830] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1213.146455][T14144] usb 3-1: USB disconnect, device number 42 [ 1213.379064][ T30] audit: type=1326 audit(1755645963.162:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16845 comm="syz.1.2773" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e2bd8ebe9 code=0x0 [ 1213.641193][T14144] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1213.816642][T14144] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1213.849877][T14144] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1213.878654][T14144] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1213.900782][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1213.912841][T16867] FAULT_INJECTION: forcing a failure. [ 1213.912841][T16867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1213.926827][T14144] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1213.937322][T16867] CPU: 0 UID: 0 PID: 16867 Comm: syz.0.2776 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1213.937349][T16867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1213.937362][T16867] Call Trace: [ 1213.937369][T16867] [ 1213.937377][T16867] dump_stack_lvl+0x189/0x250 [ 1213.937405][T16867] ? __pfx____ratelimit+0x10/0x10 [ 1213.937426][T16867] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1213.937447][T16867] ? __pfx__printk+0x10/0x10 [ 1213.937472][T16867] ? __might_fault+0xb0/0x130 [ 1213.937503][T16867] should_fail_ex+0x414/0x560 [ 1213.937529][T16867] _copy_from_user+0x2d/0xb0 [ 1213.937564][T16867] ___sys_sendmsg+0x158/0x2a0 [ 1213.937595][T16867] ? __pfx____sys_sendmsg+0x10/0x10 [ 1213.937658][T16867] ? __fget_files+0x2a/0x420 [ 1213.937677][T16867] ? __fget_files+0x3a0/0x420 [ 1213.937707][T16867] __x64_sys_sendmsg+0x19b/0x260 [ 1213.937739][T16867] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1213.937776][T16867] ? __pfx_ksys_write+0x10/0x10 [ 1213.937791][T16867] ? rcu_is_watching+0x15/0xb0 [ 1213.937818][T16867] ? do_syscall_64+0xbe/0x3b0 [ 1213.937844][T16867] do_syscall_64+0xfa/0x3b0 [ 1213.937863][T16867] ? lockdep_hardirqs_on+0x9c/0x150 [ 1213.937883][T16867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.937903][T16867] ? clear_bhb_loop+0x60/0xb0 [ 1213.937927][T16867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.937945][T16867] RIP: 0033:0x7f76fed8ebe9 [ 1213.937963][T16867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1213.937981][T16867] RSP: 002b:00007f76ffc7b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1213.938002][T16867] RAX: ffffffffffffffda RBX: 00007f76fefb5fa0 RCX: 00007f76fed8ebe9 [ 1213.938016][T16867] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 1213.938029][T16867] RBP: 00007f76ffc7b090 R08: 0000000000000000 R09: 0000000000000000 [ 1213.938042][T16867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1213.938054][T16867] R13: 00007f76fefb6038 R14: 00007f76fefb5fa0 R15: 00007fff2b0b37a8 [ 1213.938085][T16867] [ 1214.220934][T14144] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1214.230054][T14144] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.238242][T14144] usb 3-1: Product: syz [ 1214.242557][T14144] usb 3-1: Manufacturer: syz [ 1214.247171][T14144] usb 3-1: SerialNumber: syz [ 1214.260182][T14144] usb 3-1: config 0 descriptor?? [ 1214.314159][T14144] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 1214.441879][T16880] vlan0: entered allmulticast mode [ 1214.636725][T16871] netlink: 'syz.1.2777': attribute type 27 has an invalid length. [ 1214.691170][T14144] scsi host1: usb-storage 3-1:0.0 [ 1214.738044][T16885] vlan0: entered allmulticast mode [ 1214.940972][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1215.399546][T16902] loop6: detected capacity change from 0 to 7 [ 1215.437864][T16902] Dev loop6: unable to read RDB block 7 [ 1215.470595][T16902] loop6: unable to read partition table [ 1215.476574][T16902] loop6: partition table beyond EOD, truncated [ 1215.489521][T16902] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1215.534945][T16906] tipc: Started in network mode [ 1215.539891][T16906] tipc: Node identity 5e740075a95b, cluster identity 4711 [ 1215.559714][T16906] tipc: Enabled bearer , priority 0 [ 1215.567991][T16906] syzkaller0: entered promiscuous mode [ 1215.573726][T16906] syzkaller0: entered allmulticast mode [ 1215.604475][T16905] tipc: Resetting bearer [ 1215.660724][T16905] tipc: Disabling bearer [ 1215.811245][T14144] usb 2-1: new low-speed USB device number 49 using dummy_hcd [ 1215.980775][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1216.116087][T16887] usb 3-1: reset high-speed USB device number 43 using dummy_hcd [ 1216.208389][T14144] usb 2-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 1216.218618][T14144] usb 2-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0x98, changing to 0x88 [ 1216.247460][T14144] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x88 is Bulk; changing to Interrupt [ 1216.261621][T14144] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1216.273511][T14144] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.286825][T16904] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1216.532856][T14144] usb 2-1: string descriptor 0 read error: -71 [ 1217.020531][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1217.461222][T14144] usb 2-1: USB disconnect, device number 49 [ 1218.060289][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1218.371476][T15939] Bluetooth: hci4: command 0x0406 tx timeout [ 1218.623980][ T5951] usb 3-1: USB disconnect, device number 43 [ 1218.933572][T16952] xt_ecn: cannot match TCP bits for non-tcp packets [ 1219.100184][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1219.264210][T14144] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1219.552125][T14144] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1219.748353][T14144] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.750190][ T5951] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1219.769917][T14144] usb 2-1: config 0 descriptor?? [ 1219.789229][T14144] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1219.885939][T16969] loop2: detected capacity change from 0 to 7 [ 1219.893441][T16969] loop2: [ 1219.896492][T16969] loop2: partition table partially beyond EOD, truncated [ 1220.003877][T14144] cpia1 2-1:0.0: unexpected state after lo power cmd: 2f [ 1220.140049][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1220.206011][T14144] gspca_cpia1: usb_control_msg 01, error -71 [ 1220.213969][T14144] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 1220.237824][T14144] usb 2-1: USB disconnect, device number 50 [ 1220.410510][T15939] Bluetooth: hci4: command 0x0406 tx timeout [ 1220.996842][T16992] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2807'. [ 1221.039872][T16990] infiniband syz1: set active [ 1221.044810][T16990] infiniband syz1: added bond_slave_0 [ 1221.098091][T16990] RDS/IB: syz1: added [ 1221.102881][T16990] smc: adding ib device syz1 with port count 1 [ 1221.109183][T16990] smc: ib device syz1 port 1 has pnetid [ 1221.179889][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1221.839918][ T5951] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1221.874543][T16996] wireguard0: entered promiscuous mode [ 1221.888075][T16996] tmpfs: Unknown parameter 'roo' [ 1222.108902][ T5951] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1222.176080][ T5951] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1222.219768][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1222.672298][ T5951] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1222.685769][ T5951] usb 3-1: config 220 has no interface number 2 [ 1222.693704][ T5951] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1222.699824][T14144] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1222.710690][ T5951] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1222.723963][ T5951] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1222.735520][ T5951] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1222.868716][ T5951] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1222.888983][T17005] syz.4.2811: attempt to access beyond end of device [ 1222.888983][T17005] loop4: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 1222.922064][T14144] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1222.932001][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.949771][T14144] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1222.959060][ T5951] usb 3-1: Product: syz [ 1222.969031][ T5951] usb 3-1: Manufacturer: syz [ 1222.971299][T14144] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.974764][T17003] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2810'. [ 1223.030565][ T5951] usb 3-1: SerialNumber: syz [ 1223.039652][T17005] gfs2: error -5 reading superblock [ 1223.066573][T14144] usb 2-1: config 0 descriptor?? [ 1223.119702][ T24] usb 5-1: new low-speed USB device number 71 using dummy_hcd [ 1223.259781][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1223.260889][T16994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1223.306343][ T24] usb 5-1: Invalid ep0 maxpacket: 16 [ 1223.318100][T16994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1223.342556][T16994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1223.352177][T16994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1223.510810][ T5951] usb 3-1: selecting invalid altsetting 0 [ 1223.536826][ T5951] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 1223.543758][ T5951] usb 3-1: No valid video chain found. [ 1223.559658][ T24] usb 5-1: new low-speed USB device number 72 using dummy_hcd [ 1223.769100][T16996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2808'. [ 1223.778706][ T24] usb 5-1: Invalid ep0 maxpacket: 16 [ 1224.297407][ T5951] usb 3-1: selecting invalid altsetting 0 [ 1224.309541][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1224.324725][T17021] SET target dimension over the limit! [ 1224.335117][T14144] usbhid 2-1:0.0: can't add hid device: -71 [ 1224.355463][ T24] usb usb5-port1: attempt power cycle [ 1224.361772][T14144] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1224.363720][ T5951] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 1224.382468][ T5951] usb 3-1: USB disconnect, device number 44 [ 1224.442641][T14144] usb 2-1: USB disconnect, device number 51 [ 1224.759620][ T24] usb 5-1: new low-speed USB device number 73 using dummy_hcd [ 1225.339367][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1225.750323][ T24] usb 5-1: Invalid ep0 maxpacket: 16 [ 1225.889388][ T24] usb 5-1: new low-speed USB device number 74 using dummy_hcd [ 1226.379441][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1227.109954][ T24] usb 5-1: Invalid ep0 maxpacket: 16 [ 1227.115848][ T24] usb usb5-port1: unable to enumerate USB device [ 1227.429109][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1228.459279][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1228.741132][T17044] 9pnet_fd: Insufficient options for proto=fd [ 1229.508883][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1230.538764][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1231.419286][T17056] syz.4.2822 (17056) used greatest stack depth: 19800 bytes left [ 1231.469209][ T5897] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1231.578614][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1231.649030][ T5897] usb 4-1: Using ep0 maxpacket: 32 [ 1231.794670][ T5897] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 1231.905271][ T5897] usb 4-1: config 0 has no interface number 0 [ 1232.518682][ T5897] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1232.547254][ T5897] usb 4-1: config 0 interface 85 has no altsetting 0 [ 1232.564775][ T5897] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1232.569125][ T5951] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1232.582651][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.618568][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1232.741893][ T5897] usb 4-1: Product: syz [ 1232.746636][ T5897] usb 4-1: Manufacturer: syz [ 1232.777969][ T5897] usb 4-1: SerialNumber: syz [ 1232.806255][ T5897] usb 4-1: config 0 descriptor?? [ 1232.849168][ T5951] usb 1-1: Using ep0 maxpacket: 32 [ 1232.875964][ T5951] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1233.075138][ T5951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.309978][ T5951] usb 1-1: config 0 descriptor?? [ 1233.549568][T17088] loop8: detected capacity change from 0 to 7 [ 1233.608200][T17088] Dev loop8: unable to read RDB block 7 [ 1233.619229][T17088] loop8: unable to read partition table [ 1233.648746][T17088] loop8: partition table beyond EOD, truncated [ 1233.657320][ T30] audit: type=1326 audit(1755645983.424:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17082 comm="syz.4.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2fb8ebe9 code=0x7ffc0000 [ 1233.660280][T17088] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 1233.680053][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1233.724275][ T5897] appletouch 4-1:0.85: Geyser mode initialized. [ 1233.735123][ T5897] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input69 [ 1233.766740][ T30] audit: type=1326 audit(1755645983.424:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17082 comm="syz.4.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2fb8ebe9 code=0x7ffc0000 [ 1233.845978][ T30] audit: type=1326 audit(1755645983.424:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17082 comm="syz.4.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fcc2fb8ebe9 code=0x7ffc0000 [ 1233.893977][ T5951] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1234.107277][ T5951] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1234.222026][ T30] audit: type=1326 audit(1755645983.424:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17082 comm="syz.4.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2fb8ebe9 code=0x7ffc0000 [ 1234.375172][ T5951] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1234.665125][ T5951] usb 1-1: media controller created [ 1234.698253][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1234.818338][T17063] netlink: 'syz.3.2826': attribute type 6 has an invalid length. [ 1234.838285][ T30] audit: type=1326 audit(1755645983.424:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17082 comm="syz.4.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2fb8ebe9 code=0x7ffc0000 [ 1234.921304][ T5951] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1234.949784][ T5951] az6027: usb out operation failed. (-71) [ 1234.958271][ T5951] az6027: usb out operation failed. (-71) [ 1234.964047][ T5951] stb0899_attach: Driver disabled by Kconfig [ 1234.980953][ T5951] az6027: no front-end attached [ 1234.980953][ T5951] [ 1234.986831][ T30] audit: type=1326 audit(1755645983.424:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17082 comm="syz.4.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fcc2fb8ebe9 code=0x7ffc0000 [ 1235.013379][ T5951] az6027: usb out operation failed. (-71) [ 1235.038200][ T5951] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1235.047293][T17085] loop2: detected capacity change from 0 to 7 [ 1235.057829][ T5951] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input70 [ 1235.077173][T17085] Dev loop2: unable to read RDB block 7 [ 1235.082969][T17085] loop2: unable to read partition table [ 1235.098730][ T5951] dvb-usb: schedule remote query interval to 400 msecs. [ 1235.112763][T17085] loop2: partition table beyond EOD, truncated [ 1235.115000][ T30] audit: type=1326 audit(1755645983.424:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17082 comm="syz.4.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2fb8ebe9 code=0x7ffc0000 [ 1235.144415][ T5951] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1235.152786][T17085] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1235.187730][ T5951] usb 1-1: USB disconnect, device number 67 [ 1235.199087][ T5897] usb 4-1: USB disconnect, device number 56 [ 1235.216705][ T30] audit: type=1326 audit(1755645983.424:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17082 comm="syz.4.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2fb8ebe9 code=0x7ffc0000 [ 1235.337407][ T5897] appletouch 4-1:0.85: input: appletouch disconnected [ 1235.373164][ T30] audit: type=1326 audit(1755645983.424:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17082 comm="syz.4.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcc2fb8ebe9 code=0x7ffc0000 [ 1235.420710][ T30] audit: type=1326 audit(1755645983.424:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17082 comm="syz.4.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2fb8ebe9 code=0x7ffc0000 [ 1235.605050][T17107] FAULT_INJECTION: forcing a failure. [ 1235.605050][T17107] name failslab, interval 1, probability 0, space 0, times 0 [ 1235.660085][ T5951] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1235.662107][T17107] CPU: 0 UID: 0 PID: 17107 Comm: syz.1.2836 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1235.662132][T17107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1235.662144][T17107] Call Trace: [ 1235.662152][T17107] [ 1235.662161][T17107] dump_stack_lvl+0x189/0x250 [ 1235.662186][T17107] ? __pfx____ratelimit+0x10/0x10 [ 1235.662207][T17107] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1235.662228][T17107] ? __pfx__printk+0x10/0x10 [ 1235.662258][T17107] ? ref_tracker_alloc+0x318/0x460 [ 1235.662283][T17107] should_fail_ex+0x414/0x560 [ 1235.662306][T17107] should_failslab+0xa8/0x100 [ 1235.662329][T17107] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1235.662346][T17107] ? skb_clone+0x212/0x3a0 [ 1235.662370][T17107] skb_clone+0x212/0x3a0 [ 1235.662392][T17107] __netlink_deliver_tap+0x404/0x850 [ 1235.662430][T17107] ? netlink_deliver_tap+0x2e/0x1b0 [ 1235.662457][T17107] netlink_deliver_tap+0x19c/0x1b0 [ 1235.662484][T17107] netlink_unicast+0x730/0x8e0 [ 1235.662518][T17107] netlink_sendmsg+0x805/0xb30 [ 1235.662554][T17107] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1235.662588][T17107] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1235.662606][T17107] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1235.662633][T17107] __sock_sendmsg+0x21c/0x270 [ 1235.662659][T17107] ____sys_sendmsg+0x505/0x830 [ 1235.662698][T17107] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1235.662736][T17107] ? import_iovec+0x74/0xa0 [ 1235.662765][T17107] ___sys_sendmsg+0x21f/0x2a0 [ 1235.662795][T17107] ? __pfx____sys_sendmsg+0x10/0x10 [ 1235.662860][T17107] ? __fget_files+0x2a/0x420 [ 1235.662880][T17107] ? __fget_files+0x3a0/0x420 [ 1235.662911][T17107] __x64_sys_sendmsg+0x19b/0x260 [ 1235.662941][T17107] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1235.662979][T17107] ? __pfx_ksys_write+0x10/0x10 [ 1235.663002][T17107] ? do_syscall_64+0xbe/0x3b0 [ 1235.663027][T17107] do_syscall_64+0xfa/0x3b0 [ 1235.663046][T17107] ? lockdep_hardirqs_on+0x9c/0x150 [ 1235.663066][T17107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1235.663083][T17107] ? clear_bhb_loop+0x60/0xb0 [ 1235.663106][T17107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1235.663125][T17107] RIP: 0033:0x7f6e2bd8ebe9 [ 1235.663142][T17107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1235.663158][T17107] RSP: 002b:00007f6e2ccc4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1235.663178][T17107] RAX: ffffffffffffffda RBX: 00007f6e2bfb5fa0 RCX: 00007f6e2bd8ebe9 [ 1235.663192][T17107] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 1235.663204][T17107] RBP: 00007f6e2ccc4090 R08: 0000000000000000 R09: 0000000000000000 [ 1235.663216][T17107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1235.663227][T17107] R13: 00007f6e2bfb6038 R14: 00007f6e2bfb5fa0 R15: 00007ffe749205b8 [ 1235.663257][T17107] [ 1235.748140][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1236.788115][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1237.100832][ T5897] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1237.547914][ T5897] usb 2-1: device descriptor read/64, error -71 [ 1237.817887][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1237.853158][ T5897] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1238.390776][ T5897] usb 2-1: device descriptor read/64, error -71 [ 1238.508790][ T5897] usb usb2-port1: attempt power cycle [ 1238.702500][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.857775][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1239.008217][ T5897] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1239.391624][ T5897] usb 2-1: device descriptor read/8, error -71 [ 1239.418040][T17151] FAULT_INJECTION: forcing a failure. [ 1239.418040][T17151] name failslab, interval 1, probability 0, space 0, times 0 [ 1239.458225][T17155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2848'. [ 1239.493159][T17151] CPU: 1 UID: 0 PID: 17151 Comm: syz.4.2849 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1239.493187][T17151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1239.493201][T17151] Call Trace: [ 1239.493209][T17151] [ 1239.493218][T17151] dump_stack_lvl+0x189/0x250 [ 1239.493246][T17151] ? __pfx____ratelimit+0x10/0x10 [ 1239.493268][T17151] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1239.493291][T17151] ? __pfx__printk+0x10/0x10 [ 1239.493330][T17151] ? __pfx___might_resched+0x10/0x10 [ 1239.493357][T17151] should_fail_ex+0x414/0x560 [ 1239.493384][T17151] should_failslab+0xa8/0x100 [ 1239.493408][T17151] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1239.493430][T17151] ? __alloc_skb+0x112/0x2d0 [ 1239.493462][T17151] __alloc_skb+0x112/0x2d0 [ 1239.493494][T17151] netlink_dump+0x1b1/0xe60 [ 1239.493523][T17151] ? __nla_parse+0x40/0x60 [ 1239.493551][T17151] ? ip_set_dump_start+0x158/0x410 [ 1239.493574][T17151] ? __pfx_netlink_dump+0x10/0x10 [ 1239.493614][T17151] ? netlink_lookup+0x30/0x200 [ 1239.493639][T17151] ? netlink_lookup+0x30/0x200 [ 1239.493662][T17151] ? netlink_lookup+0x30/0x200 [ 1239.493694][T17151] __netlink_dump_start+0x5cb/0x7e0 [ 1239.493731][T17151] ip_set_dump+0x13e/0x1c0 [ 1239.493753][T17151] ? __pfx_ip_set_dump+0x10/0x10 [ 1239.493773][T17151] ? __pfx_ip_set_dump_start+0x10/0x10 [ 1239.493794][T17151] ? __pfx_ip_set_dump_do+0x10/0x10 [ 1239.493815][T17151] ? __pfx_ip_set_dump_done+0x10/0x10 [ 1239.493854][T17151] nfnetlink_rcv_msg+0xb4d/0x1130 [ 1239.493878][T17151] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 1239.493919][T17151] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1239.493940][T17151] ? kasan_save_free_info+0x46/0x50 [ 1239.494022][T17151] netlink_rcv_skb+0x205/0x470 [ 1239.494050][T17151] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1239.494075][T17151] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1239.494115][T17151] ? bpf_lsm_capable+0x9/0x20 [ 1239.494139][T17151] ? security_capable+0x7e/0x2e0 [ 1239.494174][T17151] nfnetlink_rcv+0x26a/0x2520 [ 1239.494200][T17151] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 1239.494226][T17151] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1239.494249][T17151] ? __dev_queue_xmit+0x27e/0x3a70 [ 1239.494270][T17151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.494310][T17151] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1239.494332][T17151] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1239.494368][T17151] ? ref_tracker_free+0x63a/0x7d0 [ 1239.494388][T17151] ? __copy_skb_header+0xa7/0x550 [ 1239.494410][T17151] ? __pfx_ref_tracker_free+0x10/0x10 [ 1239.494431][T17151] ? __skb_clone+0x63/0x7a0 [ 1239.494455][T17151] ? __skb_clone+0x483/0x7a0 [ 1239.494481][T17151] ? skb_clone+0x246/0x3a0 [ 1239.494505][T17151] ? __netlink_deliver_tap+0x807/0x850 [ 1239.494532][T17151] ? netlink_deliver_tap+0x2e/0x1b0 [ 1239.494566][T17151] ? netlink_deliver_tap+0x2e/0x1b0 [ 1239.494592][T17151] ? netlink_deliver_tap+0x2e/0x1b0 [ 1239.494626][T17151] netlink_unicast+0x75c/0x8e0 [ 1239.494663][T17151] netlink_sendmsg+0x805/0xb30 [ 1239.494702][T17151] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1239.494739][T17151] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1239.494758][T17151] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1239.494787][T17151] __sock_sendmsg+0x21c/0x270 [ 1239.494815][T17151] ____sys_sendmsg+0x505/0x830 [ 1239.494851][T17151] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1239.494891][T17151] ? import_iovec+0x74/0xa0 [ 1239.494922][T17151] ___sys_sendmsg+0x21f/0x2a0 [ 1239.494954][T17151] ? __pfx____sys_sendmsg+0x10/0x10 [ 1239.495023][T17151] ? __fget_files+0x2a/0x420 [ 1239.495045][T17151] ? __fget_files+0x3a0/0x420 [ 1239.495079][T17151] __x64_sys_sendmsg+0x19b/0x260 [ 1239.495112][T17151] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1239.495152][T17151] ? __pfx_ksys_write+0x10/0x10 [ 1239.495169][T17151] ? rcu_is_watching+0x15/0xb0 [ 1239.495196][T17151] ? do_syscall_64+0xbe/0x3b0 [ 1239.495222][T17151] do_syscall_64+0xfa/0x3b0 [ 1239.495243][T17151] ? lockdep_hardirqs_on+0x9c/0x150 [ 1239.495264][T17151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.495284][T17151] ? clear_bhb_loop+0x60/0xb0 [ 1239.495314][T17151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.495333][T17151] RIP: 0033:0x7fcc2fb8ebe9 [ 1239.495350][T17151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1239.495369][T17151] RSP: 002b:00007fcc30a17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1239.495390][T17151] RAX: ffffffffffffffda RBX: 00007fcc2fdb5fa0 RCX: 00007fcc2fb8ebe9 [ 1239.495405][T17151] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 1239.495418][T17151] RBP: 00007fcc30a17090 R08: 0000000000000000 R09: 0000000000000000 [ 1239.495432][T17151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1239.495444][T17151] R13: 00007fcc2fdb6038 R14: 00007fcc2fdb5fa0 R15: 00007ffe6927b318 [ 1239.495476][T17151] [ 1239.897609][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1240.937605][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1241.977362][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1242.506006][T17167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2852'. [ 1242.564268][T17167] netlink: 'syz.4.2852': attribute type 10 has an invalid length. [ 1242.621694][T17167] team0: Device ipvlan1 failed to register rx_handler [ 1242.641761][T17177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2856'. [ 1242.688671][T17177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2856'. [ 1242.707340][T17177] bridge_slave_1: default FDB implementation only supports local addresses [ 1243.017524][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1243.070771][T17183] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2858'. [ 1243.336657][T17185] comedi comedi4: bad chanlist[0]=0x0000057f chan=1407 range length=2 [ 1243.457849][T17185] xt_NFQUEUE: number of total queues is 0 [ 1244.057442][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1244.256213][T17198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2862'. [ 1244.266304][T17198] batadv_slave_1: Caught tx_queue_len zero misconfig [ 1244.614098][T17195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2862'. [ 1244.749104][T17204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2863'. [ 1245.097757][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1245.930156][T17200] delete_channel: no stack [ 1246.137494][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1247.177461][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1247.843750][T17220] netlink: 'syz.3.2867': attribute type 21 has an invalid length. [ 1248.217558][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1248.401260][T17241] netlink: 'syz.0.2873': attribute type 1 has an invalid length. [ 1248.558883][ T9] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1249.157600][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1249.167164][ T9] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 1249.183302][ T9] usb 2-1: config 0 has no interface number 0 [ 1249.257509][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1249.926772][ T9] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1250.297297][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1251.126606][ T9] usb 2-1: config 0 interface 85 has no altsetting 0 [ 1251.337308][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1251.701584][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1251.727997][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.838926][ T9] usb 2-1: Product: syz [ 1251.909869][ T9] usb 2-1: Manufacturer: syz [ 1252.007367][ T9] usb 2-1: SerialNumber: syz [ 1252.287596][ T9] usb 2-1: config 0 descriptor?? [ 1252.348011][ T9] usb 2-1: can't set config #0, error -71 [ 1252.377307][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1252.402065][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 1252.402094][ T30] audit: type=1804 audit(1755646460.155:265): pid=17258 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.2877" name="/newroot/572/file0" dev="tmpfs" ino=3120 res=1 errno=0 [ 1252.449776][ T9] usb 2-1: USB disconnect, device number 56 [ 1252.697316][T14144] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1252.876421][T14144] usb 3-1: Using ep0 maxpacket: 16 [ 1252.884234][T14144] usb 3-1: config 254 has an invalid interface number: 235 but max is 0 [ 1252.917182][T14144] usb 3-1: config 254 has no interface number 0 [ 1252.943842][T14144] usb 3-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 1253.193367][T14144] usb 3-1: config 254 interface 235 has no altsetting 0 [ 1253.417403][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1253.792143][T14144] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1253.927453][T14144] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.935502][T14144] usb 3-1: Product: syz [ 1253.957283][T14144] usb 3-1: Manufacturer: syz [ 1253.961926][T14144] usb 3-1: SerialNumber: syz [ 1253.984606][T17260] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1254.112229][T17288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2887'. [ 1254.358164][T17260] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1254.457288][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1254.484593][T14144] usbtest 3-1:254.235: Linux gadget zero [ 1254.503438][T14144] usbtest 3-1:254.235: high-speed {control in/out bulk-in bulk-out} tests (+alt) [ 1254.703754][ T24] usb 3-1: USB disconnect, device number 45 [ 1254.854858][ T5951] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1255.047726][ T5951] usb 2-1: Using ep0 maxpacket: 16 [ 1255.065348][ T5951] usb 2-1: config 0 has an invalid interface number: 104 but max is 1 [ 1255.444440][ T5951] usb 2-1: config 0 has an invalid interface number: 104 but max is 1 [ 1255.497334][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1255.891181][ T5951] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1255.900665][ T5951] usb 2-1: config 0 has no interface number 0 [ 1255.906874][ T5951] usb 2-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1255.922565][ T5951] usb 2-1: config 0 interface 104 has no altsetting 1 [ 1255.932861][ T5951] usb 2-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 1255.947286][ T5951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.955734][ T5951] usb 2-1: Product: syz [ 1255.960047][ T5951] usb 2-1: Manufacturer: syz [ 1255.965273][ T5951] usb 2-1: SerialNumber: syz [ 1255.973298][ T5951] usb 2-1: config 0 descriptor?? [ 1256.182900][ T5951] asix 2-1:0.104 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1256.209482][ T5951] asix 2-1:0.104: probe with driver asix failed with error -71 [ 1256.288026][ T5951] usb 2-1: USB disconnect, device number 57 [ 1256.401462][T10540] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1256.411853][T10540] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1256.419866][T10540] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1256.428009][T10540] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1256.435638][T10540] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1256.537285][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1257.058353][ T30] audit: type=1326 audit(1755646464.835:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17317 comm="syz.1.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2bd8ebe9 code=0x7ffc0000 [ 1257.141384][ T30] audit: type=1326 audit(1755646464.835:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17317 comm="syz.1.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2bd8ebe9 code=0x7ffc0000 [ 1257.206524][ T30] audit: type=1326 audit(1755646464.835:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17317 comm="syz.1.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e2bd8ebe9 code=0x7ffc0000 [ 1257.247530][ T30] audit: type=1326 audit(1755646464.835:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17317 comm="syz.1.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2bd8ebe9 code=0x7ffc0000 [ 1257.294248][ T30] audit: type=1326 audit(1755646464.835:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17317 comm="syz.1.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2bd8ebe9 code=0x7ffc0000 [ 1257.378351][ T30] audit: type=1326 audit(1755646464.835:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17317 comm="syz.1.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e2bd8ebe9 code=0x7ffc0000 [ 1257.577375][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1258.166491][ T30] audit: type=1326 audit(1755646464.855:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17317 comm="syz.1.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2bd8ebe9 code=0x7ffc0000 [ 1258.188669][ T30] audit: type=1326 audit(1755646464.855:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17317 comm="syz.1.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2bd8ebe9 code=0x7ffc0000 [ 1258.221544][ T30] audit: type=1326 audit(1755646464.875:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17317 comm="syz.1.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e2bd8ebe9 code=0x7ffc0000 [ 1258.275514][ T30] audit: type=1326 audit(1755646464.875:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17317 comm="syz.1.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2bd8ebe9 code=0x7ffc0000 [ 1258.304054][ T30] audit: type=1326 audit(1755646464.875:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17317 comm="syz.1.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e2bd8ebe9 code=0x7ffc0000 [ 1258.410153][ T30] audit: type=1326 audit(1755646464.875:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17317 comm="syz.1.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2bd8ebe9 code=0x7ffc0000 [ 1258.507457][ T30] audit: type=1326 audit(1755646464.875:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17317 comm="syz.1.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e2bd8ebe9 code=0x7ffc0000 [ 1258.574916][ T30] audit: type=1326 audit(1755646464.875:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17317 comm="syz.1.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2bd8ebe9 code=0x7ffc0000 [ 1258.597892][ T30] audit: type=1326 audit(1755646464.875:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17317 comm="syz.1.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6e2bd8d550 code=0x7ffc0000 [ 1258.619560][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1258.629163][ T30] audit: type=1326 audit(1755646464.875:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17317 comm="syz.1.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6e2bd8d550 code=0x7ffc0000 [ 1258.765299][T17352] netlink: 'syz.4.2907': attribute type 13 has an invalid length. [ 1259.027906][T10540] Bluetooth: hci3: command tx timeout [ 1259.251001][T17352] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1259.407890][ T5897] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1259.434365][T17371] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2917'. [ 1259.526880][T17371] bond2: entered promiscuous mode [ 1259.556167][T17311] chnl_net:caif_netlink_parms(): no params data found [ 1259.567559][ T5897] usb 2-1: Using ep0 maxpacket: 8 [ 1259.575656][ T5897] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 1259.587278][ T5897] usb 2-1: config 0 has no interface number 0 [ 1259.593421][ T5897] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 1259.603905][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.618187][ T5897] usb 2-1: config 0 descriptor?? [ 1259.657295][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1259.739188][ T5897] viperboard 2-1:0.143: version 0.00 found at bus 002 address 058 [ 1259.775693][ T5897] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1259.897552][ T5897] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1259.919592][T17311] bridge0: port 1(bridge_slave_0) entered blocking state [ 1259.932070][T17311] bridge0: port 1(bridge_slave_0) entered disabled state [ 1259.939681][T17311] bridge_slave_0: entered allmulticast mode [ 1259.957158][T17311] bridge_slave_0: entered promiscuous mode [ 1259.967832][ T5897] usb 2-1: USB disconnect, device number 58 [ 1259.975465][T17311] bridge0: port 2(bridge_slave_1) entered blocking state [ 1260.022182][T17311] bridge0: port 2(bridge_slave_1) entered disabled state [ 1260.039694][T17311] bridge_slave_1: entered allmulticast mode [ 1260.051625][T17311] bridge_slave_1: entered promiscuous mode [ 1260.162872][T17311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1260.189039][T17311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1260.697318][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1260.772878][T17311] team0: Port device team_slave_0 added [ 1260.818464][T17422] can0: slcan on ttyS3. [ 1260.824716][T17311] team0: Port device team_slave_1 added [ 1260.907782][T17429] can0 (unregistered): slcan off ttyS3. [ 1260.918586][T17429] Falling back ldisc for ttyS3. [ 1260.929607][T17432] random: crng reseeded on system resumption [ 1260.972180][T17311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1260.987586][T17311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1261.021788][T17311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1261.036493][T17311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1261.048909][T17311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1261.101656][T10540] Bluetooth: hci3: command tx timeout [ 1261.113107][T17311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1261.132262][T17440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2928'. [ 1261.142129][T17440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1261.149742][T17440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1261.161103][T17440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1261.171124][T17440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1261.196011][T17440] batadv0 (unregistering): left allmulticast mode [ 1261.272775][T17311] hsr_slave_0: entered promiscuous mode [ 1261.306378][T17311] hsr_slave_1: entered promiscuous mode [ 1261.318823][T17311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1261.332870][T17311] Cannot create hsr debugfs directory [ 1261.737580][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1261.784124][T17455] loop9: detected capacity change from 0 to 7 [ 1261.792383][T17455] buffer_io_error: 4 callbacks suppressed [ 1261.792398][T17455] Buffer I/O error on dev loop9, logical block 0, async page read [ 1261.807881][T17455] Buffer I/O error on dev loop9, logical block 0, async page read [ 1261.816386][T17455] Buffer I/O error on dev loop9, logical block 0, async page read [ 1261.824911][T17455] Buffer I/O error on dev loop9, logical block 0, async page read [ 1261.833610][T17455] Buffer I/O error on dev loop9, logical block 0, async page read [ 1261.842225][T17455] Buffer I/O error on dev loop9, logical block 0, async page read [ 1261.850692][T17455] Buffer I/O error on dev loop9, logical block 0, async page read [ 1261.858909][T17455] ldm_validate_partition_table(): Disk read failed. [ 1261.865807][T17455] Buffer I/O error on dev loop9, logical block 0, async page read [ 1261.874266][T17455] Buffer I/O error on dev loop9, logical block 0, async page read [ 1261.882889][T17455] Buffer I/O error on dev loop9, logical block 0, async page read [ 1261.891636][T17455] Dev loop9: unable to read RDB block 0 [ 1261.898968][T17455] loop9: unable to read partition table [ 1261.906297][T17455] loop9: partition table beyond EOD, truncated [ 1261.912741][T17455] loop_reread_partitions: partition scan of loop9 (þ被x½d|¤´à–‘) failed (rc=-5) [ 1262.365031][T17466] dummy0: entered promiscuous mode [ 1262.375232][T17466] vlan0: entered promiscuous mode [ 1262.495130][T17311] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1262.510199][T17311] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.540451][T17468] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 1262.641308][T17476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2943'. [ 1262.667127][T17311] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1262.695744][T17311] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.777385][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1263.166211][T17311] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1263.187527][T10540] Bluetooth: hci3: command tx timeout [ 1263.193709][T17311] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.405690][T17311] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1263.626469][T17311] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.817414][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1264.397953][T17311] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1264.455754][T17311] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1264.531374][T17523] netlink: 'syz.3.2962': attribute type 1 has an invalid length. [ 1264.531564][ T30] kauditd_printk_skb: 113 callbacks suppressed [ 1264.531579][ T30] audit: type=1326 audit(1755646472.325:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17519 comm="syz.1.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2bd8ebe9 code=0x7ffc0000 [ 1264.571679][ T30] audit: type=1326 audit(1755646472.365:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17519 comm="syz.1.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e2bd8ebe9 code=0x7ffc0000 [ 1264.599986][T17311] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1264.615410][T17311] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1264.625700][T17522] syz.1.2963 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1264.639926][ T30] audit: type=1326 audit(1755646472.385:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17519 comm="syz.1.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2bd8ebe9 code=0x7ffc0000 [ 1264.663821][ T30] audit: type=1326 audit(1755646472.385:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17519 comm="syz.1.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2bd8ebe9 code=0x7ffc0000 [ 1264.739060][T17523] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1264.748591][ T30] audit: type=1326 audit(1755646472.405:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17519 comm="syz.1.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e2bd8ebe9 code=0x7ffc0000 [ 1264.805675][T17527] bond3: (slave geneve2): making interface the new active one [ 1264.824254][ T30] audit: type=1326 audit(1755646472.405:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17519 comm="syz.1.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2bd8ebe9 code=0x7ffc0000 [ 1264.848201][T17527] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1264.857405][T17528] tipc: New replicast peer: 255.255.255.255 [ 1264.857409][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1264.864727][ T30] audit: type=1326 audit(1755646472.415:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17519 comm="syz.1.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e2bd8ebe9 code=0x7ffc0000 [ 1264.875179][T17528] tipc: Enabled bearer , priority 10 [ 1264.898999][T17525] pim6reg1: entered promiscuous mode [ 1264.904403][T17525] pim6reg1: entered allmulticast mode [ 1264.955206][T17527] syz.3.2962 (17527) used greatest stack depth: 18904 bytes left [ 1264.982549][ T30] audit: type=1326 audit(1755646472.415:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17519 comm="syz.1.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2bd8ebe9 code=0x7ffc0000 [ 1265.013757][ T30] audit: type=1326 audit(1755646472.415:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17519 comm="syz.1.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2bd8ebe9 code=0x7ffc0000 [ 1265.052425][ T30] audit: type=1326 audit(1755646472.415:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17519 comm="syz.1.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e2bd8ebe9 code=0x7ffc0000 [ 1265.091824][T17542] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2966'. [ 1265.140982][T17542] bridge0: entered promiscuous mode [ 1265.149814][T17542] bridge0: port 3(macvlan0) entered blocking state [ 1265.173789][T17542] bridge0: port 3(macvlan0) entered disabled state [ 1265.185743][T17542] macvlan0: entered allmulticast mode [ 1265.195356][T17542] bridge0: entered allmulticast mode [ 1265.222310][T17542] macvlan0: left allmulticast mode [ 1265.230542][T17542] bridge0: left allmulticast mode [ 1265.236880][T17542] bridge0: left promiscuous mode [ 1265.267427][T10540] Bluetooth: hci3: command tx timeout [ 1265.427091][T17311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1265.461833][T17311] 8021q: adding VLAN 0 to HW filter on device team0 [ 1265.477184][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 1265.485697][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1265.513320][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1265.520564][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1265.719812][T17570] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1265.897373][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1265.936020][T17311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1265.988221][ T2149] tipc: Node number set to 4147052661 [ 1266.040914][T17311] veth0_vlan: entered promiscuous mode [ 1266.063859][T17311] veth1_vlan: entered promiscuous mode [ 1266.129867][T17311] veth0_macvtap: entered promiscuous mode [ 1266.145575][T17311] veth1_macvtap: entered promiscuous mode [ 1266.189562][T17590] binfmt_misc: register: failed to install interpreter file ./file0 [ 1266.199383][T17311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1266.233371][T17311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1266.275612][T17311] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.286006][T17311] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.315670][T17311] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.330633][T17311] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.543709][T17410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1266.580106][T17410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1266.650157][ T8624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1266.674354][ T8624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1266.743671][T17604] binfmt_misc: register: failed to install interpreter file ./file0 [ 1266.937281][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1267.977311][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1268.238406][T17625] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.349970][T15939] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1268.368358][T15939] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1268.382273][T15939] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1268.396522][T15939] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1268.413969][T15939] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1268.547928][T17625] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.568171][T17640] sd 0:0:1:0: device reset [ 1268.585290][T17639] tipc: Enabled bearer , priority 0 [ 1268.603724][T17636] tipc: Resetting bearer [ 1268.627952][T17633] tipc: Disabling bearer [ 1268.715308][T17625] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.899243][T17645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3005'. [ 1268.935230][T17625] bond0: (slave netdevsim0): Releasing backup interface [ 1269.017591][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1269.018005][T17316] Bluetooth: hci3: command 0x0405 tx timeout [ 1269.058423][T17625] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 1269.068401][T17625] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 1269.079982][T17625] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.359692][T17625] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.420659][T17625] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.475498][T17625] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.531930][T17625] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.824095][T17661] macvtap0: refused to change device tx_queue_len [ 1270.057483][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1270.078494][T17629] chnl_net:caif_netlink_parms(): no params data found [ 1270.538913][T17316] Bluetooth: hci5: command tx timeout [ 1270.862134][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 1270.862155][ T30] audit: type=1326 audit(1755646478.025:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17672 comm="syz.4.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2fb8ebe9 code=0x7ffc0000 [ 1270.890008][ T30] audit: type=1326 audit(1755646478.025:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17672 comm="syz.4.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2fb8ebe9 code=0x7ffc0000 [ 1270.917512][ T30] audit: type=1326 audit(1755646478.035:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17672 comm="syz.4.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fcc2fb8ebe9 code=0x7ffc0000 [ 1270.963304][ T30] audit: type=1326 audit(1755646478.045:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17672 comm="syz.4.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2fb8ebe9 code=0x7ffc0000 [ 1271.035050][ T30] audit: type=1326 audit(1755646478.055:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17672 comm="syz.4.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2fb8ebe9 code=0x7ffc0000 [ 1271.059036][ T30] audit: type=1326 audit(1755646478.055:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17678 comm="syz.4.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcc2fbc14a5 code=0x7ffc0000 [ 1271.081066][ T30] audit: type=1326 audit(1755646478.135:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17672 comm="syz.4.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcc2fb8ebe9 code=0x7ffc0000 [ 1271.102785][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1271.199395][ T30] audit: type=1326 audit(1755646478.135:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17672 comm="syz.4.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2fb8ebe9 code=0x7ffc0000 [ 1271.246518][ T30] audit: type=1326 audit(1755646478.135:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17672 comm="syz.4.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2fb8ebe9 code=0x7ffc0000 [ 1271.269697][ T30] audit: type=1326 audit(1755646478.145:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17672 comm="syz.4.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fcc2fb8ebe9 code=0x7ffc0000 [ 1271.332044][T17629] bridge0: port 1(bridge_slave_0) entered blocking state [ 1271.340175][T17629] bridge0: port 1(bridge_slave_0) entered disabled state [ 1271.347666][T17629] bridge_slave_0: entered allmulticast mode [ 1271.362626][T17629] bridge_slave_0: entered promiscuous mode [ 1271.403008][T17629] bridge0: port 2(bridge_slave_1) entered blocking state [ 1271.434735][T17629] bridge0: port 2(bridge_slave_1) entered disabled state [ 1271.477637][T17629] bridge_slave_1: entered allmulticast mode [ 1271.485224][T17629] bridge_slave_1: entered promiscuous mode [ 1271.555240][T17698] lo speed is unknown, defaulting to 1000 [ 1271.641902][T17629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1271.658858][T17698] lo speed is unknown, defaulting to 1000 [ 1271.667019][T17629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1271.720314][T17698] lo speed is unknown, defaulting to 1000 [ 1271.775439][T17698] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1271.804667][T17629] team0: Port device team_slave_0 added [ 1271.846227][T17629] team0: Port device team_slave_1 added [ 1271.918603][T17698] lo speed is unknown, defaulting to 1000 [ 1271.959737][T17629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1271.967069][T17629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1272.028989][T17629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1272.045239][T17698] lo speed is unknown, defaulting to 1000 [ 1272.087287][ T5951] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1272.100781][T17629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1272.118353][T17629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1272.147588][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1272.173604][T17629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1272.192662][T17698] lo speed is unknown, defaulting to 1000 [ 1272.237655][ T5951] usb 5-1: Using ep0 maxpacket: 16 [ 1272.246945][ T5951] usb 5-1: config 0 has no interfaces? [ 1272.255192][ T5951] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1272.277097][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.307393][T17698] lo speed is unknown, defaulting to 1000 [ 1272.319215][ T5951] usb 5-1: Product: syz [ 1272.323430][ T5951] usb 5-1: Manufacturer: syz [ 1272.349163][ T5951] usb 5-1: SerialNumber: syz [ 1272.369216][ T5951] usb 5-1: config 0 descriptor?? [ 1272.386097][T17629] hsr_slave_0: entered promiscuous mode [ 1272.403177][T17629] hsr_slave_1: entered promiscuous mode [ 1272.418219][T17629] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1272.434678][T17629] Cannot create hsr debugfs directory [ 1272.447539][T17698] lo speed is unknown, defaulting to 1000 [ 1272.567968][T17698] lo speed is unknown, defaulting to 1000 [ 1272.575716][T17698] lo speed is unknown, defaulting to 1000 [ 1272.587618][T14144] usb 5-1: USB disconnect, device number 75 [ 1272.626890][T17316] Bluetooth: hci5: command tx timeout [ 1272.955042][T17629] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.989975][T17698] lo speed is unknown, defaulting to 1000 [ 1273.096767][T17629] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.187365][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1273.232938][T17629] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.271516][T17722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3031'. [ 1273.382694][T17629] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.431995][T17722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3031'. [ 1273.747360][T17729] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3034'. [ 1273.903645][T17731] syzkaller0: entered promiscuous mode [ 1273.955379][T17731] syzkaller0: entered allmulticast mode [ 1274.176928][T17739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3037'. [ 1274.216557][T17739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3037'. [ 1274.227379][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1274.699190][T17316] Bluetooth: hci5: command tx timeout [ 1275.257383][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1276.297435][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1276.791097][T17316] Bluetooth: hci5: command tx timeout [ 1276.931776][T17749] bond0: (slave bond_slave_1): Releasing backup interface [ 1277.051818][T17629] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1277.083063][T17751] bridge0: entered allmulticast mode [ 1277.094528][ T30] kauditd_printk_skb: 123 callbacks suppressed [ 1277.094545][ T30] audit: type=1326 audit(1755646484.885:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17754 comm="syz.0.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63e318ebe9 code=0x7ffc0000 [ 1277.130434][T17751] pim6reg: entered allmulticast mode [ 1277.136028][T17629] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1277.150562][ T30] audit: type=1326 audit(1755646484.885:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17754 comm="syz.0.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63e318ebe9 code=0x7ffc0000 [ 1277.173135][ T30] audit: type=1326 audit(1755646484.925:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17754 comm="syz.0.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63e318ebe9 code=0x7ffc0000 [ 1277.258889][T17629] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1277.274867][ T30] audit: type=1326 audit(1755646484.925:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17754 comm="syz.0.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63e318ebe9 code=0x7ffc0000 [ 1277.303378][T17629] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1277.337472][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1277.341604][ T30] audit: type=1326 audit(1755646484.925:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17754 comm="syz.0.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63e318ebe9 code=0x7ffc0000 [ 1277.373586][ T30] audit: type=1326 audit(1755646484.925:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17754 comm="syz.0.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63e318ebe9 code=0x7ffc0000 [ 1277.396514][ T30] audit: type=1326 audit(1755646484.945:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17754 comm="syz.0.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63e318ebe9 code=0x7ffc0000 [ 1277.433106][T17760] [ 1277.435467][T17760] ====================================================== [ 1277.442489][T17760] WARNING: possible circular locking dependency detected [ 1277.447246][ T30] audit: type=1326 audit(1755646484.945:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17754 comm="syz.0.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f63e318ebe9 code=0x7ffc0000 [ 1277.449508][T17760] 6.16.0-syzkaller #0 Not tainted [ 1277.449521][T17760] ------------------------------------------------------ [ 1277.449529][T17760] syz.0.3045/17760 is trying to acquire lock: [ 1277.449541][T17760] ffff8881427e6358 (&disk->open_mutex){+.+.}-{4:4}, at: __del_gendisk+0x129/0x9e0 [ 1277.498391][T17760] [ 1277.498391][T17760] but task is already holding lock: [ 1277.505752][T17760] ffff8881427e5368 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160 [ 1277.515352][T17760] [ 1277.515352][T17760] which lock already depends on the new lock. [ 1277.515352][T17760] [ 1277.525740][T17760] [ 1277.525740][T17760] the existing dependency chain (in reverse order) is: [ 1277.534739][T17760] [ 1277.534739][T17760] -> #2 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 1277.543164][T17760] lock_acquire+0x120/0x360 [ 1277.548182][T17760] down_write+0x96/0x1f0 [ 1277.552939][T17760] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1277.559173][T17760] nbd_start_device+0x16c/0xac0 [ 1277.564540][T17760] nbd_ioctl+0x636/0xeb0 [ 1277.569300][T17760] blkdev_ioctl+0x5a8/0x6d0 [ 1277.574319][T17760] __se_sys_ioctl+0xfc/0x170 [ 1277.579425][T17760] do_syscall_64+0xfa/0x3b0 [ 1277.584440][T17760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1277.590846][T17760] [ 1277.590846][T17760] -> #1 (&nbd->config_lock){+.+.}-{4:4}: [ 1277.598663][T17760] lock_acquire+0x120/0x360 [ 1277.603680][T17760] __mutex_lock+0x182/0xe80 [ 1277.608699][T17760] refcount_dec_and_mutex_lock+0x30/0xa0 [ 1277.614855][T17760] nbd_config_put+0x2c/0x790 [ 1277.619970][T17760] nbd_release+0xfe/0x140 [ 1277.624829][T17760] bdev_release+0x533/0x650 [ 1277.629846][T17760] blkdev_release+0x15/0x20 [ 1277.634865][T17760] __fput+0x449/0xa70 [ 1277.639362][T17760] fput_close_sync+0x119/0x200 [ 1277.644642][T17760] __x64_sys_close+0x7f/0x110 [ 1277.649855][T17760] do_syscall_64+0xfa/0x3b0 [ 1277.654875][T17760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1277.661280][T17760] [ 1277.661280][T17760] -> #0 (&disk->open_mutex){+.+.}-{4:4}: [ 1277.669096][T17760] validate_chain+0xb9b/0x2140 [ 1277.674377][T17760] __lock_acquire+0xab9/0xd20 [ 1277.679563][T17760] lock_acquire+0x120/0x360 [ 1277.684572][T17760] __mutex_lock+0x182/0xe80 [ 1277.689591][T17760] __del_gendisk+0x129/0x9e0 [ 1277.694700][T17760] del_gendisk+0xe8/0x160 [ 1277.699544][T17760] loop_remove+0x42/0xc0 [ 1277.704308][T17760] loop_control_ioctl+0x4ac/0x5a0 [ 1277.709845][T17760] __se_sys_ioctl+0xfc/0x170 [ 1277.714953][T17760] do_syscall_64+0xfa/0x3b0 [ 1277.719968][T17760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1277.726368][T17760] [ 1277.726368][T17760] other info that might help us debug this: [ 1277.726368][T17760] [ 1277.736580][T17760] Chain exists of: [ 1277.736580][T17760] &disk->open_mutex --> &nbd->config_lock --> &set->update_nr_hwq_lock [ 1277.736580][T17760] [ 1277.750751][T17760] Possible unsafe locking scenario: [ 1277.750751][T17760] [ 1277.758195][T17760] CPU0 CPU1 [ 1277.763549][T17760] ---- ---- [ 1277.768899][T17760] rlock(&set->update_nr_hwq_lock); [ 1277.774182][T17760] lock(&nbd->config_lock); [ 1277.781288][T17760] lock(&set->update_nr_hwq_lock); [ 1277.788999][T17760] lock(&disk->open_mutex); [ 1277.793587][T17760] [ 1277.793587][T17760] *** DEADLOCK *** [ 1277.793587][T17760] [ 1277.801720][T17760] 1 lock held by syz.0.3045/17760: [ 1277.806907][T17760] #0: ffff8881427e5368 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160 [ 1277.816922][T17760] [ 1277.816922][T17760] stack backtrace: [ 1277.822798][T17760] CPU: 1 UID: 0 PID: 17760 Comm: syz.0.3045 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1277.822819][T17760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1277.822830][T17760] Call Trace: [ 1277.822837][T17760] [ 1277.822845][T17760] dump_stack_lvl+0x189/0x250 [ 1277.822868][T17760] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1277.822886][T17760] ? __pfx__printk+0x10/0x10 [ 1277.822907][T17760] ? print_lock_name+0xde/0x100 [ 1277.822929][T17760] print_circular_bug+0x2ee/0x310 [ 1277.822951][T17760] check_noncircular+0x134/0x160 [ 1277.822972][T17760] validate_chain+0xb9b/0x2140 [ 1277.822992][T17760] ? stack_depot_save_flags+0x40/0x900 [ 1277.823017][T17760] __lock_acquire+0xab9/0xd20 [ 1277.823040][T17760] ? __del_gendisk+0x129/0x9e0 [ 1277.823060][T17760] lock_acquire+0x120/0x360 [ 1277.823074][T17760] ? __del_gendisk+0x129/0x9e0 [ 1277.823097][T17760] ? lockdep_unlock+0x89/0x120 [ 1277.823123][T17760] __mutex_lock+0x182/0xe80 [ 1277.823141][T17760] ? __del_gendisk+0x129/0x9e0 [ 1277.823165][T17760] ? __del_gendisk+0x129/0x9e0 [ 1277.823185][T17760] ? __pfx___mutex_lock+0x10/0x10 [ 1277.823203][T17760] ? __pfx___might_resched+0x10/0x10 [ 1277.823224][T17760] ? __lock_acquire+0xab9/0xd20 [ 1277.823239][T17760] ? disk_del_events+0xb5/0x210 [ 1277.823261][T17760] ? __del_gendisk+0xc1/0x9e0 [ 1277.823282][T17760] __del_gendisk+0x129/0x9e0 [ 1277.823303][T17760] ? del_gendisk+0xe0/0x160 [ 1277.823325][T17760] ? __pfx___del_gendisk+0x10/0x10 [ 1277.823347][T17760] ? down_read+0x1ad/0x2e0 [ 1277.823367][T17760] del_gendisk+0xe8/0x160 [ 1277.823388][T17760] loop_remove+0x42/0xc0 [ 1277.823413][T17760] loop_control_ioctl+0x4ac/0x5a0 [ 1277.823431][T17760] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1277.823445][T17760] ? __fget_files+0x2a/0x420 [ 1277.823465][T17760] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1277.823483][T17760] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1277.823498][T17760] __se_sys_ioctl+0xfc/0x170 [ 1277.823523][T17760] do_syscall_64+0xfa/0x3b0 [ 1277.823541][T17760] ? lockdep_hardirqs_on+0x9c/0x150 [ 1277.823558][T17760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1277.823575][T17760] ? clear_bhb_loop+0x60/0xb0 [ 1277.823593][T17760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1277.823609][T17760] RIP: 0033:0x7f63e318ebe9 [ 1277.823624][T17760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1277.823641][T17760] RSP: 002b:00007f63e3fef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1277.823657][T17760] RAX: ffffffffffffffda RBX: 00007f63e33b5fa0 RCX: 00007f63e318ebe9 [ 1277.823671][T17760] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000003 [ 1277.823682][T17760] RBP: 00007f63e3211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1277.823693][T17760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1277.823703][T17760] R13: 00007f63e33b6038 R14: 00007f63e33b5fa0 R15: 00007fff3fcf3058 [ 1277.823723][T17760] [ 1278.110150][ T30] audit: type=1326 audit(1755646484.945:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17754 comm="syz.0.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63e318ebe9 code=0x7ffc0000 [ 1278.133327][ T30] audit: type=1326 audit(1755646484.945:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17754 comm="syz.0.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f63e318ebe9 code=0x7ffc0000 [ 1278.196772][T17629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1278.213241][T17629] 8021q: adding VLAN 0 to HW filter on device team0 [ 1278.225343][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 1278.232533][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1278.251316][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 1278.258455][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1278.282098][T17771] netlink: 224 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 1278.291588][T17771] ksmbd: Unknown IPC event: 4, ignore. [ 1278.388110][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1278.423026][T17629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1278.452499][T17629] veth0_vlan: entered promiscuous mode [ 1278.461243][T17629] veth1_vlan: entered promiscuous mode [ 1278.475716][T17629] veth0_macvtap: entered promiscuous mode [ 1278.489270][T17629] veth1_macvtap: entered promiscuous mode [ 1278.502624][T17629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1278.513957][T17629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1278.525694][T17629] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.534611][T17629] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.543345][T17629] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.552127][T17629] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.574748][T17629] ieee80211 phy19: Selected rate control algorithm 'minstrel_ht' [ 1278.593870][T17410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1278.595601][T17629] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht' [ 1278.617356][T17410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1278.634073][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1278.642406][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1279.427360][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1280.457393][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1281.507371][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1282.537330][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1283.577321][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1284.617350][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1285.667311][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1286.697331][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available