last executing test programs: 10.780862991s ago: executing program 3 (id=878): getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000100)={'syz_tun\x00', 0x40}) socket$inet_mptcp(0x2, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r2, &(0x7f00000002c0)=ANY=[], 0x78) sendfile(r1, r2, 0x0, 0x8) fcntl$addseals(r2, 0x409, 0x8) 9.851699076s ago: executing program 3 (id=879): openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) 8.179511362s ago: executing program 4 (id=890): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x0, &(0x7f000063c000/0x3000)=nil) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000100)={0x6}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x224e, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) 7.883413597s ago: executing program 2 (id=892): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x3) io_uring_enter(0xffffffffffffffff, 0x2def, 0x2e0e, 0x0, 0x0, 0xffffffffffffffa2) mkdirat(r1, 0x0, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000751000/0x2000)=nil}) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r5, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000080)='disBard', &(0x7f0000000200)='\x00', 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000000140)={0x4, [0x0, 0x0, 0x0, 0x0]}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 7.430235494s ago: executing program 1 (id=893): syz_io_uring_setup(0x10d, &(0x7f00000004c0)={0x0, 0x2ad76, 0x0, 0x7, 0x168}, &(0x7f0000000940)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socket$xdp(0x2c, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8003, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xff7fff01, 0x6, 0x3, 0x7, 0x7, 0x4, 0x0, 0x7, 0x1, 0x1, 0x24, 0x10, 0x1, 0x0, 0xffffffff, 0xe661, 0xffffebf2, 0x7, 0x3, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xb, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8e, 0x2, 0x106, 0x0, 0x5, 0x2, 0x8, 0x3ff, 0x9, 0x0, 0x8, 0x2006, 0x8, 0x4000074, 0x0, 0xe], [0x10000007, 0x9, 0x8000012f, 0x100, 0x5, 0xfffffff6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6, 0x9, 0x384, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4007, 0x7fff, 0x6, 0x400, 0x401, 0x4, 0x1, 0xff, 0x5, 0x7, 0x5f31, 0xd, 0x4e0, 0x80000002, 0x4, 0xb, 0x4, 0x5662, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x80, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x80b, 0x4, 0x5, 0x800, 0x0, 0x4d4, 0x5, 0x8, 0x86, 0x3, 0xcc, 0x3e7, 0xb, 0x485, 0x2, 0x6, 0x3, 0x2000000b, 0x4, 0x106d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0x10000ac8, 0xbf, 0x2, 0xffffffff, 0x3, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x7, 0x120000, 0x3, 0x6, 0x712, 0x400000c, 0x25], [0x9, 0xbb35, 0x7b304120, 0x3ff, 0x5, 0x938, 0x6, 0x6, 0x0, 0x8, 0x82, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x3f51, 0x4, 0x1, 0xffff, 0xa620, 0x1, 0x5, 0x2000001, 0x2000001, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x8, 0x4, 0xc8, 0x1, 0xfffff000, 0x9, 0x3, 0x7e, 0x100, 0xa, 0x7, 0xaf, 0x8, 0xa, 0x226, 0x5, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x6, 0x1, 0x5, 0x0, 0x4, 0x5, 0xb1e, 0x1000d5, 0x200, 0x9, 0xfff]}, 0x45c) r2 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)=ANY=[]) unshare(0x22020600) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 7.161755428s ago: executing program 1 (id=894): r0 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffc}, {&(0x7f00000011c0)="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", 0x129}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x34}}, @ip_tos_u8={{0x11, 0x29, 0x2}}, @ip_tos_u8={{0x11}}], 0x48}, 0xff00) 6.935486871s ago: executing program 1 (id=895): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 6.470180969s ago: executing program 2 (id=896): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup=0xffffffffffffffff, 0x8, 0x1, 0x2, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5}, 0x50) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200), 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map=r2, 0xffffffffffffffff, 0x4, 0x2000, 0x0, @value=r3, @void, @void, @void, r1}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], 0x0, 0x89, &(0x7f00000003c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xe0, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x30, 0xa, &(0x7f0000000240)=@raw=[@ldst={0x2, 0x1, 0x2, 0x8, 0x5, 0x6, 0x1}, @alu={0x4, 0x1, 0xc, 0x4, 0x3, 0xc, 0xfffffffffffffff0}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x2}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3}], &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x4, '\x00', r5, 0x0, r7, 0x8, &(0x7f0000000640)={0x80, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x7, 0x1ff, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[r2], 0x0, 0x10, 0x4}, 0x94) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000940)=r6, 0x4) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x2, &(0x7f00000007c0)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x7}], &(0x7f0000000800)='syzkaller\x00', 0x4, 0xf2, &(0x7f0000000840)=""/242, 0x41000, 0xa, '\x00', r5, 0x0, r8, 0x8, &(0x7f0000000980)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000009c0)=[r2, r2, r2, r2], &(0x7f0000000a00)=[{0x4, 0x2, 0xe, 0x4}, {0x0, 0x5, 0x6, 0xa}, {0x2, 0x2, 0xf, 0x8}], 0x10, 0x7fff}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r10, &(0x7f0000001140)={&(0x7f0000000b40)=@can={0x1d, 0x0}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000bc0)=""/195, 0xc3}, {&(0x7f0000000cc0)=""/206, 0xce}, {&(0x7f0000000dc0)=""/241, 0xf1}, {&(0x7f0000000ec0)=""/91, 0x5b}, {&(0x7f0000000f40)=""/74, 0x4a}, {&(0x7f0000000fc0)=""/185, 0xb9}], 0x6, &(0x7f0000001100)=""/45, 0x2d}, 0x40) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000001180)={'ip6gre0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}) r12 = openat$cgroup_ro(r0, &(0x7f00000011c0)='cpuacct.usage_user\x00', 0x0, 0x0) r13 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001200)={r4}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001580)={r13, 0x0, 0x3a, 0xeb, &(0x7f0000001240)="31540593e170f1bc7de5fd816aa9d167a12463513f2126061a939ad27302225f803f7b83f761a1298310ebf4acf44947a9fc236c8d362217f8fa", &(0x7f0000001280)=""/235, 0xf3, 0x0, 0xe5, 0xee, &(0x7f0000001380)="80a958211184a49e6656961700a77fb04e54cad6e94de4463e307a281794b0f642e70695206cea7b246a586c064de2e1046ea836b360347c06875738aa288393191317304678ffece5004f2f0c29f959ab7f21c54c6c0e7ae5e671d1d34006e59e0567be7387b200ad67af872d9e0ee570724044d6230b1ad87c7712c7fdbb73a2bf3312888a4975654cd092fd398b6b6191050f3f7c60f7db7274004be97622e64d32c4a9859cafd4cbe3540a36725db956ba4b68e989a043eea3ec6ed477aa48393fbe3ba555f56750372f25406d8380f9ea068301635cf0187ccdd0f007e5543487adb0", &(0x7f0000001480)="2ce46316de859488f843e666138905974e5fc7e669c9899ac2716408bb9ed3814e1c50e6c1c3832e1e06a07f9fe5dd1cafefa2f777ec7cb619c5219ad3061731e47b74474c3a9035d3b07c5d1553b14313d06420f846cfafba09044568daaf8a4e4aa4c2b2634255dac80079aca24b1f9e747fbce79313a0ee38ebe45aee5439494bb1f5671f6c154aa2362758b0385c894ef1a75651f98e8f3eea49f8b1e1214e5e9376cfc68968b9681a47a91800df4644eb68f57674d44edbabc61921ae3927b7a2c17fdd25fcf30ca889a12cbc766097017922de2964de65b2321bb372ce592d84f51a79e25ffe5b177ff502", 0x6, 0x0, 0xb}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001600)) openat$cgroup_int(r0, &(0x7f0000001640)='cgroup.max.depth\x00', 0x2, 0x0) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000001680), 0x151001, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000016c0)={r12}, 0xc) r15 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000027c0)={&(0x7f0000001700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x81, 0x81, 0x6, [@var={0x8, 0x0, 0x0, 0xe, 0x2}, @datasec={0xb, 0x6, 0x0, 0xf, 0x1, [{0x3, 0xee, 0x2}, {0x2, 0x2cbd28c0, 0xfffffff3}, {0x1, 0x2, 0x4}, {0x3, 0x5, 0x6}, {0x3, 0x1, 0xfff}, {0x2, 0x7, 0x3}], "86"}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xe}, {0x6, 0x5}]}]}, {0x0, [0x5f, 0x30, 0x61, 0x30]}}, &(0x7f00000017c0)=""/4096, 0xa2, 0x1000, 0x0, 0xffffffff, 0x10000, @value=r12}, 0x28) ioctl$TUNSETOFFLOAD(r12, 0x400454d0, 0x12) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002a80)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x4, '\x00', 0x0, r8, 0x0, 0x0, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002bc0)={0x6, 0x25, &(0x7f0000002800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8c9f, 0x0, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x5}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x3}, @ldst={0x0, 0x3, 0x3, 0x6, 0x5, 0x10, 0x1}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}}]}, &(0x7f0000002940)='syzkaller\x00', 0x40, 0x66, &(0x7f0000002980)=""/102, 0x41100, 0x8, '\x00', r11, 0x25, r7, 0x8, &(0x7f0000002a00)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000002a40)={0x3, 0x6, 0x4, 0x1ff}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000002b00)=[r2, r16, r12, r12, r12, r12], &(0x7f0000002b40)=[{0x2, 0x3, 0x5, 0xf}, {0x1, 0x2, 0x4, 0x2}, {0x2, 0x3, 0x1, 0x4}, {0x1, 0x3, 0x1, 0xa}, {0x3, 0x5, 0x0, 0xc}, {0x3, 0x1, 0x5, 0x6}, {0x3, 0x3, 0xe, 0x7}, {0x0, 0x1, 0xa, 0xb}], 0x10, 0x7fff}, 0x94) openat$cgroup(r0, &(0x7f0000002c80)='syz0\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002cc0)=@bloom_filter={0x1e, 0x8, 0x76e, 0x10, 0xa4c4, r16, 0x1, '\x00', r5, 0xffffffffffffffff, 0x0, 0x2, 0x4, 0x9, @value=r15}, 0x50) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000002d40)={'dvmrp1\x00', 0x100}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002d80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xed9f}, 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002e00)='./cgroup/syz0\x00', 0x200002, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002e40)={0xffffffffffffffff}) sendmsg$tipc(r17, &(0x7f00000030c0)={&(0x7f0000002e80)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x2}}, 0x10, &(0x7f0000002fc0)=[{&(0x7f0000002ec0)="a24bb6d14f542484cd710daef57716717ca4c719bcbeb0718b73d752acb3f0778d163a80ffd69ef50efa2c9bfb33d0582a61c62546412375d45d20da8856d5c68c15a86daf06dfc50a63e203c43a333c5ea9e3856ad51ea3b67f037a4fed25723da50d6226dc5046a36d92ff9634847a7a2eb98938821ca2ea7ea917e42a7034ce539ff95339df46479b050a", 0x8c}, {&(0x7f0000002f80)="3cb900f3e4b7a3b81a6d7f891187ba7479c1b138b3a6ed29955d13e26945bba0b7b9fba275c1", 0x26}], 0x2, &(0x7f0000003000)="4973a8a08a2001655b9fcedd48221204605748488fea2a5104dc5200cacf9bf72e97b41816c6b749354d5ae7857f5933a427b3218718d208df2dafa49afc43fccaba931d341a9162d57410ebb0492fb68e7cc30e1f4e7514de279d317efa4964e76b13fee6d9b28442f9a574dc303a1f4ad2f2f3a1ad52bac4e76b42efd493c96765b5365ed2035ecfbbc43e219def83c566867724a46b4a6b0bf9dcf51fbd4b2f67186419411d88f58b10", 0xab, 0x4008000}, 0x20000000) 6.273093392s ago: executing program 2 (id=897): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486"], 0xfdef) 6.009312496s ago: executing program 3 (id=898): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b40)={0x2c, &(0x7f0000000980)={0x20, 0x17}, 0x0, 0x0, 0x0, 0x0}) 5.037655291s ago: executing program 4 (id=899): timer_create(0x1, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000002480)=[{&(0x7f0000001540)="3983", 0x2}], 0x1, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r5 = add_key$user(&(0x7f0000000200), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0xb, r5, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) getrlimit(0xf, &(0x7f0000000080)) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000004, 0x82000) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000c0000000c000000005000000000000000000000300000000030000000400000007000000050000000000000a05000000070000000800000502000000050000002867934d983c3471885a7fb701000000000100000600000002000000f1ffffff0300000002000000ff0000000200000003000000030000000b00000005000000ff7f000006000000010000000f0000000800000004000000090000000000000002000000ffffffff080000000000000a0400000002000a00030000060400000007000000070000000d000000010000000f"], &(0x7f0000000440)=""/70, 0xdd, 0x46, 0x0, 0x8a10, 0x10000}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) syz_emit_ethernet(0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r7, 0x0, 0x4004040) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r8, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x8, 0x11, 0x3, 0x10001, r3, 0x3, '\x00', 0x0, r6, 0x7, 0x3, 0x0, 0x6, @void, @value, @value=r1}, 0x50) 4.851266634s ago: executing program 4 (id=900): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x5d8ceabbeb611ade, 0x0, 0xffffffffffffffff, 0x54}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="61df718305a35997984d4763fcac", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.573802238s ago: executing program 4 (id=902): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) 4.407621431s ago: executing program 4 (id=903): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000640)=@ethtool_per_queue_op={0x4b, 0xf, [0x4, 0x8, 0xfffffff1, 0x8, 0x0, 0x1, 0x3e9, 0x5, 0x9, 0x6, 0x5, 0x6, 0x7ff, 0x4, 0x4, 0x3ff, 0x4, 0x8, 0x2, 0x4, 0x6, 0x4, 0x8, 0x1, 0xfffffa0c, 0x7, 0x8, 0x9be, 0x3, 0x3ff, 0x6, 0x14dc, 0x147, 0x400009, 0x1, 0x3, 0x4, 0x0, 0x9, 0x6, 0x7, 0x5, 0x0, 0xfffffffb, 0x8, 0x80000000, 0x9, 0x100, 0x5, 0x19dd, 0x7, 0x5, 0x0, 0x6, 0xf667, 0xfffffffc, 0x4007, 0x80000008, 0x7f, 0x6, 0xc8, 0x6, 0x0, 0xc3, 0x4, 0x10, 0xffffffa8, 0x1, 0x40000009, 0x9, 0x1, 0x83, 0x0, 0xcf, 0x10, 0x401, 0x7, 0x7, 0x2a, 0x71c9, 0x1, 0x321, 0xfffffeff, 0x7f, 0x66, 0x1c24, 0xff, 0x9, 0x4, 0x2, 0x3, 0xff, 0x100, 0x126, 0x1, 0x8, 0x40000000, 0xc, 0x4, 0x8, 0xffffffc0, 0x4, 0x10001, 0x5, 0x74a000, 0x44e27, 0x3ff, 0x0, 0x8356, 0x0, 0x6, 0x9b7, 0x1, 0x80000001, 0x82, 0xea, 0x6, 0x80000000, 0xff, 0x7, 0x0, 0x5, 0x10001, 0x8, 0x69e4, 0x80000001, 0xfffffff4, 0x100]}}) landlock_create_ruleset(&(0x7f0000000140)={0x9300, 0x0, 0x1}, 0x18, 0x3) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r6, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1}, {}, @ext={0x3a, &(0x7f00000001c0)="8237b9da361c06876a29f2876ff5573365c19a4df00c1d31151f959d3604ae5d24b7eb19b67e253f597773950d87a65bc2a55b7c4d73994fcccf"}}], 0x38) readv(r6, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f00000002c0)=0xfffffffffffffd77) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000000)={0x5, 0xfff, 0x8, 0x2, 0x5, 0x80000000, 0x5, 0x48a5, r8}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000e80)={'filter\x00', 0xb001, 0x4, 0x3b0, 0x0, 0x10c, 0x1f0, 0x2d0, 0x2d0, 0x2d0, 0x7fffffe, 0x0, {[{{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x2, 0x1}}}, {{@uncond, 0xbc, 0xe4, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xbc, 0xe0}, @unspec=@CLASSIFY={0x24, 'CLASSIFY\x00', 0x0, {0x31caf518}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x3fc) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) writev(r5, &(0x7f0000000540)=[{&(0x7f00000000c0)='$T{', 0x3}, {&(0x7f0000000140)}, {&(0x7f00000003c0)}, {0x0}, {&(0x7f00000001c0)}], 0x5) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000000940)={0x2020}, 0x2020) 3.629187403s ago: executing program 1 (id=904): syz_io_uring_setup(0x10d, &(0x7f00000004c0)={0x0, 0x2ad76, 0x0, 0x7, 0x168}, &(0x7f0000000940)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)=ANY=[]) unshare(0x22020600) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 3.146458581s ago: executing program 0 (id=906): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05000000030000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r1}, 0x10) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.066699272s ago: executing program 1 (id=907): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', r3}, 0x18) 2.959512184s ago: executing program 2 (id=908): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486"], 0xfdef) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x66) 2.824371766s ago: executing program 1 (id=909): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x0, &(0x7f000063c000/0x3000)=nil) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000100)={0x6}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x224e, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) 2.696622448s ago: executing program 0 (id=910): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 2.54237528s ago: executing program 0 (id=911): openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x1c) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$kcm(0xa, 0x1, 0x106) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0x7, 0x100000000], 0x3000, 0x280384}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, 0x0, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) timer_create(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x4e, 0x0, 0x4) 2.405005792s ago: executing program 3 (id=912): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r3) 2.035459798s ago: executing program 3 (id=913): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f00000004c0)=[{0x2d, 0x0, 0x3}, {0xfffc, 0xfc}]}) 1.870446421s ago: executing program 0 (id=914): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) close(0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000318110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) close(r0) 270.387166ms ago: executing program 2 (id=915): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x600, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff99, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 219.493577ms ago: executing program 3 (id=916): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x3) io_uring_enter(0xffffffffffffffff, 0x2def, 0x2e0e, 0x0, 0x0, 0xffffffffffffffa2) mkdirat(r1, 0x0, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000751000/0x2000)=nil}) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r5, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000080)='disBard', &(0x7f0000000200)='\x00', 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000000140)={0x4, [0x0, 0x0, 0x0, 0x0]}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 202.118287ms ago: executing program 0 (id=917): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) socketpair$unix(0x1, 0x3, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) 141.023498ms ago: executing program 2 (id=918): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000000340)=""/21) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x4000040) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r6}) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xd) mkdir(&(0x7f0000000080)='./file0\x00', 0x118) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f00000063c0)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000002c0)="598847167aa3eeecd678a4be219c9f7ac36dd422be5e395f6579a0878eb84f76bdd866c510f785691711178ee5cb9450f77f56bbaf73c14c1ebd44", 0x3b}, {&(0x7f00000005c0)="b786bc4294b02f59a1cb691b04822a3154b2b17f39", 0x15}], 0x2, &(0x7f00000003c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x14}], 0x1, 0x800) recvmsg(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000380)=""/4, 0x4}, {&(0x7f0000000540)=""/113, 0x71}], 0x2}, 0x40000000) bind$unix(r8, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) r9 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0xa0082, 0x0) read$usbmon(r9, &(0x7f0000000200)=""/228, 0xe4) read(r5, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x1) 78.922009ms ago: executing program 4 (id=919): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 0s ago: executing program 0 (id=920): timer_create(0x1, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000002480)=[{&(0x7f0000001540)="3983", 0x2}], 0x1, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r5 = add_key$user(&(0x7f0000000200), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0xb, r5, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) getrlimit(0xf, &(0x7f0000000080)) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000004, 0x82000) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000c0000000c000000005000000000000000000000300000000030000000400000007000000050000000000000a05000000070000000800000502000000050000002867934d983c3471885a7fb701000000000100000600000002000000f1ffffff0300000002000000ff0000000200000003000000030000000b00000005000000ff7f000006000000010000000f0000000800000004000000090000000000000002000000ffffffff080000000000000a0400000002000a00030000060400000007000000070000000d000000010000000f"], &(0x7f0000000440)=""/70, 0xdd, 0x46, 0x0, 0x8a10, 0x10000}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) syz_emit_ethernet(0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40042}, 0x4004040) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r8, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x8, 0x11, 0x3, 0x10001, r3, 0x3, '\x00', 0x0, r6, 0x7, 0x3, 0x0, 0x6, @void, @value, @value=r1}, 0x50) kernel console output (not intermixed with test programs): .979194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.990934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.006502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.018893][ T4266] device veth1_vlan entered promiscuous mode [ 77.037819][ T4267] device veth0_macvtap entered promiscuous mode [ 77.091941][ T4267] device veth1_macvtap entered promiscuous mode [ 77.169305][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.182960][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.223734][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.239516][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.263064][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.293368][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.319139][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.363711][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.372193][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.394471][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.404795][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.413565][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.427196][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.442525][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.453251][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.462091][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.491234][ T4266] device veth0_macvtap entered promiscuous mode [ 77.508266][ T4266] device veth1_macvtap entered promiscuous mode [ 77.530165][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.541670][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.551924][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.563722][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.575921][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.591051][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.607640][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.621706][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.638132][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.656285][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.667396][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.673532][ T4323] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 77.683876][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.701585][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.712298][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.724255][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.733399][ T4378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.747282][ T4267] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.753103][ T4378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.760211][ T4267] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.773079][ T4267] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.782667][ T4267] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.794488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.802451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.811419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.827746][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.839482][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.849686][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.860403][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.870513][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.882238][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.893383][ T4323] usb 3-1: Using ep0 maxpacket: 8 [ 77.899697][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.905586][ T4323] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 77.916451][ T4323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.936287][ T4323] usb 3-1: Product: syz [ 77.940610][ T4323] usb 3-1: Manufacturer: syz [ 77.943507][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.945467][ T4323] usb 3-1: SerialNumber: syz [ 77.961018][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.975579][ T4323] usb 3-1: config 0 descriptor?? [ 77.979589][ T4266] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.994582][ T4266] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.009430][ T4266] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.018455][ T4266] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.058527][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.068743][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.175006][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.211070][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.228514][ T4323] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 78.235486][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.246978][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.258999][ T4283] device veth0_vlan entered promiscuous mode [ 78.336468][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.341936][ T4283] device veth1_vlan entered promiscuous mode [ 78.355757][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.387282][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.396720][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.406337][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.419801][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.436800][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.469024][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.480470][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.498612][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.516917][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.525572][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.535665][ T4283] device veth0_macvtap entered promiscuous mode [ 78.548502][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.558349][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.567676][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.577357][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.589008][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.614099][ T4283] device veth1_macvtap entered promiscuous mode [ 78.668716][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.680718][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.691073][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.702564][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.712772][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.725048][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.735275][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.746001][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.757800][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.770915][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.781805][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.792180][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.794015][ T4285] Bluetooth: hci3: command 0x0419 tx timeout [ 78.805918][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.808697][ T4282] Bluetooth: hci4: command 0x0419 tx timeout [ 78.818835][ T4274] Bluetooth: hci0: command 0x0419 tx timeout [ 78.825495][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.841284][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.851624][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.862161][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.874047][ T4272] Bluetooth: hci2: command 0x0419 tx timeout [ 78.880155][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 78.887404][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.898679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.909206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.919632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.929354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.938960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.964478][ T4283] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.975799][ T4283] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.987214][ T4283] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.996796][ T4283] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.210579][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.249779][ T4323] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 79.293642][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.336838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.351698][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.373266][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.382771][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.385052][ T4400] Zero length message leads to an empty skb [ 79.399220][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.433714][ T22] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 79.442202][ T4400] device vlan2 entered promiscuous mode [ 79.522268][ T4400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6'. [ 79.656462][ T22] usb 2-1: config 0 has no interfaces? [ 79.668683][ T22] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 79.686870][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.695608][ T22] usb 2-1: Product: syz [ 79.699931][ T22] usb 2-1: Manufacturer: syz [ 79.704849][ T22] usb 2-1: SerialNumber: syz [ 79.737337][ T22] usb 2-1: config 0 descriptor?? [ 79.754068][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 79.922881][ T4407] netlink: 548 bytes leftover after parsing attributes in process `syz.4.5'. [ 80.047131][ T4407] (unnamed net_device) (uninitialized): (slave batadv0): Device is not bonding slave [ 80.096191][ T4407] (unnamed net_device) (uninitialized): option active_slave: invalid value (batadv0) [ 80.127454][ T4412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 80.143178][ T4412] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'. [ 80.293346][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.359697][ T4331] usb 3-1: USB disconnect, device number 2 [ 80.805010][ T4420] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.873301][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 80.954833][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 81.054565][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.143171][ T22] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 81.271913][ T4420] usb usb8: usbfs: process 4420 (syz.2.7) did not claim interface 0 before use [ 81.347531][ T22] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 81.384456][ T22] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 81.474123][ T22] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 81.532291][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.600226][ T22] usb 4-1: config 0 descriptor?? [ 81.629589][ T22] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 82.311461][ T4323] usb 2-1: USB disconnect, device number 2 [ 83.062460][ T4434] device geneve2 entered promiscuous mode [ 83.966845][ T22] usb 4-1: USB disconnect, device number 2 [ 84.323978][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 84.332296][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 84.340631][ T0] NOHZ tick-stop error: local softirq work is pending, handler #308!!! [ 84.350125][ T0] NOHZ tick-stop error: local softirq work is pending, handler #308!!! [ 84.431705][ T27] audit: type=1326 audit(1752907846.131:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4453 comm="syz.1.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02aaf8e9a9 code=0x7ffc0000 [ 84.522368][ T27] audit: type=1326 audit(1752907846.191:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4453 comm="syz.1.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02aaf8e9a9 code=0x7ffc0000 [ 84.675936][ T27] audit: type=1326 audit(1752907846.271:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4452 comm="syz.3.13" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a4b58e9a9 code=0x0 [ 85.373133][ T4450] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.518978][ T4465] nvme_fabrics: missing parameter 'transport=%s' [ 85.582375][ T4465] nvme_fabrics: missing parameter 'nqn=%s' [ 85.589152][ T4450] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.637713][ T4450] usb 1-1: config 0 interface 0 has no altsetting 0 [ 85.666639][ T4475] kvm [4474]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x8dd [ 85.682313][ T4450] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 85.712069][ T4450] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.772849][ T4450] usb 1-1: config 0 descriptor?? [ 85.780539][ T4475] kvm [4474]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x1a8 [ 85.875514][ T4475] kvm [4474]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x234 [ 85.985192][ T4475] kvm [4474]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x274 [ 86.037898][ T4450] usbhid 1-1:0.0: can't add hid device: -71 [ 86.055322][ T4450] usbhid: probe of 1-1:0.0 failed with error -71 [ 86.114350][ T4450] usb 1-1: USB disconnect, device number 2 [ 86.222695][ T4486] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16'. [ 86.636546][ T128] cfg80211: failed to load regulatory.db [ 86.885766][ T4501] netlink: 'syz.4.18': attribute type 3 has an invalid length. [ 86.920643][ T4501] netlink: 188 bytes leftover after parsing attributes in process `syz.4.18'. [ 86.972885][ T4503] netlink: 32 bytes leftover after parsing attributes in process `syz.1.17'. [ 87.171291][ T4507] netlink: 60 bytes leftover after parsing attributes in process `syz.4.18'. [ 87.244354][ T4507] unsupported nlmsg_type 40 [ 90.334175][ T4545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23'. [ 90.415650][ T4545] loop1: detected capacity change from 0 to 256 [ 90.499479][ T4545] FAT-fs (loop1): Unrecognized mount option "shor†name=mixed" or missing value [ 91.766137][ T4561] binder: 4560:4561 unknown command 0 [ 91.801137][ T4561] binder: 4560:4561 ioctl c0306201 2000000003c0 returned -22 [ 92.793264][ T14] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 92.975242][ T4578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.31'. [ 93.013360][ T4578] 8021q: VLANs not supported on caif0 [ 93.021264][ T14] usb 2-1: unable to get BOS descriptor or descriptor too short [ 93.086734][ T14] usb 2-1: no configurations [ 93.102654][ T14] usb 2-1: can't read configurations, error -22 [ 93.317341][ T4592] netlink: 'syz.2.33': attribute type 1 has an invalid length. [ 93.413108][ T4280] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 93.699256][ T4592] device veth3 entered promiscuous mode [ 93.792956][ T4594] netlink: 28 bytes leftover after parsing attributes in process `syz.2.33'. [ 93.803371][ T4280] usb 5-1: config 0 has no interfaces? [ 93.889087][ T4280] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 94.107761][ T4605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.36'. [ 94.897215][ T4280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.954937][ T4280] usb 5-1: Product: syz [ 94.969533][ T4280] usb 5-1: Manufacturer: syz [ 94.974945][ T4618] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 94.995000][ T4280] usb 5-1: SerialNumber: syz [ 95.000458][ T4618] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 95.032397][ T4280] usb 5-1: config 0 descriptor?? [ 95.109421][ T4618] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 95.167615][ T4618] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 95.206792][ T4618] device geneve2 entered promiscuous mode [ 99.325409][ T4682] device geneve2 entered promiscuous mode [ 100.586339][ T26] usb 5-1: USB disconnect, device number 2 [ 100.835922][ T4696] process 'syz.3.56' launched '/dev/fd/-1/./file0' with NULL argv: empty string added [ 101.447450][ T4707] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 103.553177][ T128] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 103.745391][ T128] usb 5-1: config 0 has no interfaces? [ 103.760818][ T128] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 103.787545][ T128] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.829207][ T128] usb 5-1: Product: syz [ 103.845570][ T128] usb 5-1: Manufacturer: syz [ 103.862692][ T128] usb 5-1: SerialNumber: syz [ 103.898094][ T128] usb 5-1: config 0 descriptor?? [ 104.472308][ T27] audit: type=1326 audit(1752907866.171:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4731 comm="syz.1.65" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f02aaf8e9a9 code=0x0 [ 105.729652][ T4748] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 107.074556][ T4757] loop2: detected capacity change from 0 to 32768 [ 107.097236][ T4757] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.72 (4757) [ 107.135782][ T4757] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 107.146471][ T4757] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 107.156005][ T4757] BTRFS info (device loop2): allowing degraded mounts [ 107.162900][ T4757] BTRFS info (device loop2): metadata ratio 1 [ 107.169024][ T4757] BTRFS info (device loop2): ignoring bad roots [ 107.175301][ T4757] BTRFS info (device loop2): force zlib compression, level 3 [ 107.182701][ T4757] BTRFS info (device loop2): allowing degraded mounts [ 107.189510][ T4757] BTRFS info (device loop2): using free space tree [ 107.276999][ T7] usb 5-1: USB disconnect, device number 3 [ 107.659878][ T4376] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0xf8bb6bdef03b64ff3b11a2a87ba7a2aeacfdb41cc49a87adad5cc1644d216b29 level 0 [ 107.767484][ T4757] BTRFS error (device loop2): failed to load root extent [ 107.775857][ T4376] BTRFS warning (device loop2): checksum verify failed on logical 5341184 mirror 1 wanted 0xc53d3c5bb04ba5dfc01f4c277f0b81815915cb99da5074f609a3f7f617cf284a found 0xd34891a64d32c06b063fbbf3d26e09cb4d5acf5ade8dc51c4cd532bb53f895d0 level 0 [ 107.858570][ T4757] BTRFS error (device loop2): failed to load root free space [ 107.869690][ T9] BTRFS warning (device loop2): checksum verify failed on logical 5287936 mirror 1 wanted 0x31987782e3a542b4b1826f4a60605b79838e23bf27075900db4b92202c72b2fd found 0xcc73edc8ee24564a8c6ce1ce085684ad2f9862e56f948f195b5cd36555a6be2f level 0 [ 107.971381][ T4376] BTRFS warning (device loop2): checksum verify failed on logical 5292032 mirror 1 wanted 0xcbbb23d5b53a3b4892a5068ee5011732ffcd94742b434497e3f11d7ca86a6d23 found 0x6ab87e71a537053373402d980abd70276b583e303a68e0dd0a46bb41cfc306c8 level 0 [ 108.085937][ T4757] BTRFS info (device loop2): enabling ssd optimizations [ 108.292561][ T4268] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 108.463127][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 108.693107][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 108.742754][ T7] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 108.870029][ T7] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 109.048933][ T7] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 109.078429][ T7] usb 4-1: Product: syz [ 109.110233][ T7] usb 4-1: Manufacturer: syz [ 109.142186][ T7] usb 4-1: SerialNumber: syz [ 109.194541][ T7] usb 4-1: config 0 descriptor?? [ 109.214733][ T4789] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 109.776938][ T4812] Failed to get privilege flags for destination (handle=0x2:0x8) [ 109.947575][ T7] usb 4-1: USB disconnect, device number 3 [ 111.561433][ T4836] sg_write: data in/out 3146765/1 bytes for SCSI command 0x22-- guessing data in; [ 111.561433][ T4836] program syz.4.85 not setting count and/or reply_len properly [ 111.956620][ T4838] kernel profiling enabled (shift: 17) [ 112.704931][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 112.766567][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 112.808695][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 112.844103][ T4858] device bridge_slave_0 left promiscuous mode [ 112.863939][ T4858] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.883170][ T4280] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 112.918020][ T4858] device bridge_slave_1 left promiscuous mode [ 112.932567][ T4858] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.959994][ T4858] bond0: (slave bond_slave_0): Releasing backup interface [ 113.037263][ T4858] bond0: (slave bond_slave_1): Releasing backup interface [ 113.094718][ T4280] usb 5-1: config 0 has no interfaces? [ 113.109687][ T4280] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 113.138195][ T4280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.181281][ T4280] usb 5-1: Product: syz [ 113.237780][ T4280] usb 5-1: Manufacturer: syz [ 113.255636][ T4858] team0: Port device team_slave_0 removed [ 113.275110][ T4280] usb 5-1: SerialNumber: syz [ 113.324159][ T4280] usb 5-1: config 0 descriptor?? [ 113.334622][ T4858] team0: Port device team_slave_1 removed [ 113.365249][ T4858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.396402][ T4858] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.460047][ T4858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.485187][ T4858] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.108144][ T4845] netlink: 40 bytes leftover after parsing attributes in process `syz.4.87'. [ 114.721026][ T4877] device vlan2 entered promiscuous mode [ 114.777092][ T4877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.95'. [ 115.648253][ T4885] device lo entered promiscuous mode [ 115.654231][ T4885] device tunl0 entered promiscuous mode [ 115.661317][ T4885] device gre0 entered promiscuous mode [ 115.672726][ T4885] device gretap0 entered promiscuous mode [ 115.712351][ T4885] device erspan0 entered promiscuous mode [ 115.733611][ T4885] device ip_vti0 entered promiscuous mode [ 115.749962][ T4885] device ip6_vti0 entered promiscuous mode [ 115.761503][ T4885] device sit0 entered promiscuous mode [ 115.785513][ T4885] device ip6tnl0 entered promiscuous mode [ 115.804097][ T4885] device ip6gre0 entered promiscuous mode [ 115.841325][ T4885] device syz_tun entered promiscuous mode [ 115.903799][ T4885] device ip6gretap0 entered promiscuous mode [ 115.951129][ T4800] usb 5-1: USB disconnect, device number 4 [ 115.957991][ T4885] device bridge0 entered promiscuous mode [ 116.010649][ T4885] device vcan0 entered promiscuous mode [ 116.039446][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 116.061000][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 116.077270][ T4885] device bond0 entered promiscuous mode [ 116.086970][ T4885] device bond_slave_0 entered promiscuous mode [ 116.094266][ T4885] device bond_slave_1 entered promiscuous mode [ 116.119107][ T4885] device team0 entered promiscuous mode [ 116.127292][ T4885] device team_slave_0 entered promiscuous mode [ 116.134469][ T4885] device team_slave_1 entered promiscuous mode [ 116.141832][ T4885] device dummy0 entered promiscuous mode [ 116.149490][ T4885] device nlmon0 entered promiscuous mode [ 116.174765][ T4885] device caif0 entered promiscuous mode [ 116.180742][ T4885] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 118.084702][ T4910] fuse: Bad value for 'user_id' [ 118.323317][ T26] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 118.515668][ T26] usb 1-1: config 6 has an invalid interface number: 102 but max is 0 [ 118.534263][ T26] usb 1-1: config 6 has no interface number 0 [ 118.582191][ T26] usb 1-1: config 6 interface 102 has no altsetting 0 [ 118.624405][ T26] usb 1-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=59.64 [ 118.644320][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.659782][ T26] usb 1-1: Product: syz [ 118.668559][ T26] usb 1-1: Manufacturer: syz [ 118.683229][ T26] usb 1-1: SerialNumber: syz [ 118.909508][ T26] qmi_wwan: probe of 1-1:6.102 failed with error -22 [ 118.960817][ T26] usb 1-1: USB disconnect, device number 3 [ 119.947266][ T4935] netlink: 28 bytes leftover after parsing attributes in process `syz.1.112'. [ 120.163382][ T4800] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 120.238626][ T4941] program syz.1.114 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.454422][ T4947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.114'. [ 120.473162][ T4800] usb 1-1: Using ep0 maxpacket: 8 [ 120.481929][ T4800] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 120.500423][ T4800] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.380258][ T4950] loop4: detected capacity change from 0 to 32768 [ 121.420881][ T4800] usb 1-1: Product: syz [ 121.431701][ T4800] usb 1-1: Manufacturer: syz [ 121.439215][ T4950] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.115 (4950) [ 121.456327][ T4950] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 121.466524][ T4950] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 121.475951][ T4950] BTRFS info (device loop4): allowing degraded mounts [ 121.482758][ T4950] BTRFS info (device loop4): metadata ratio 1 [ 121.488894][ T4950] BTRFS info (device loop4): ignoring bad roots [ 121.495217][ T4950] BTRFS info (device loop4): force zlib compression, level 3 [ 121.502616][ T4950] BTRFS info (device loop4): allowing degraded mounts [ 121.509422][ T4950] BTRFS info (device loop4): using free space tree [ 121.611143][ T4800] usb 1-1: SerialNumber: syz [ 121.668829][ T4800] usb 1-1: config 0 descriptor?? [ 121.693550][ T56] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0xf8bb6bdef03b64ff3b11a2a87ba7a2aeacfdb41cc49a87adad5cc1644d216b29 level 0 [ 121.875190][ T4950] BTRFS error (device loop4): failed to load root extent [ 121.884752][ T4378] BTRFS warning (device loop4): checksum verify failed on logical 5341184 mirror 1 wanted 0xc53d3c5bb04ba5dfc01f4c277f0b81815915cb99da5074f609a3f7f617cf284a found 0xd34891a64d32c06b063fbbf3d26e09cb4d5acf5ade8dc51c4cd532bb53f895d0 level 0 [ 121.950370][ T4800] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 122.048566][ T4950] BTRFS error (device loop4): failed to load root free space [ 122.057859][ T11] BTRFS warning (device loop4): checksum verify failed on logical 5287936 mirror 1 wanted 0x31987782e3a542b4b1826f4a60605b79838e23bf27075900db4b92202c72b2fd found 0xcc73edc8ee24564a8c6ce1ce085684ad2f9862e56f948f195b5cd36555a6be2f level 0 [ 122.106621][ T9] BTRFS warning (device loop4): checksum verify failed on logical 5292032 mirror 1 wanted 0xcbbb23d5b53a3b4892a5068ee5011732ffcd94742b434497e3f11d7ca86a6d23 found 0x6ab87e71a537053373402d980abd70276b583e303a68e0dd0a46bb41cfc306c8 level 0 [ 122.130204][ T4952] xt_CT: No such helper "pptp" [ 122.213267][ T4950] BTRFS info (device loop4): enabling ssd optimizations [ 122.553675][ T4283] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 122.967344][ T4800] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 123.413118][ T4800] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 123.595406][ T4800] usb 5-1: Using ep0 maxpacket: 16 [ 123.604104][ T4800] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.629214][ T4800] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.648590][ T4800] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 123.680653][ T4800] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.707346][ T4800] usb 5-1: config 0 descriptor?? [ 124.054960][ T128] usb 1-1: USB disconnect, device number 4 [ 124.172340][ T4800] hid-multitouch 0003:1FD2:6007.0001: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 124.381992][ T4800] usb 5-1: USB disconnect, device number 5 [ 124.592979][ T4996] fido_id[4996]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 124.964389][ T5001] kvm [4997]: vcpu0, guest rIP: 0x25e disabled perfctr wrmsr: 0xc2 data 0x3 [ 125.353116][ T26] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 125.553182][ T26] usb 5-1: Using ep0 maxpacket: 8 [ 125.562604][ T26] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 125.582446][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.590689][ T26] usb 5-1: Product: syz [ 125.595806][ T26] usb 5-1: Manufacturer: syz [ 125.600452][ T26] usb 5-1: SerialNumber: syz [ 125.630567][ T26] usb 5-1: config 0 descriptor?? [ 125.852332][ T26] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 126.878342][ T5030] netlink: 14 bytes leftover after parsing attributes in process `syz.0.131'. [ 127.307533][ T5030] device hsr_slave_0 left promiscuous mode [ 127.317464][ T5030] device hsr_slave_1 left promiscuous mode [ 127.977560][ T26] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 128.019539][ T26] usb 5-1: USB disconnect, device number 6 [ 128.879437][ T5049] netlink: 'syz.2.136': attribute type 1 has an invalid length. [ 129.048155][ T5049] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 129.057174][ T4800] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 129.108542][ T5049] device veth3 entered promiscuous mode [ 129.150479][ T5049] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 129.229587][ T5051] netlink: 28 bytes leftover after parsing attributes in process `syz.2.136'. [ 129.248624][ T4800] usb 4-1: config 0 has no interfaces? [ 129.288777][ T4800] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 129.301177][ T4800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.313971][ T4800] usb 4-1: Product: syz [ 129.318301][ T4800] usb 4-1: Manufacturer: syz [ 129.323559][ T4800] usb 4-1: SerialNumber: syz [ 129.344417][ T4800] usb 4-1: config 0 descriptor?? [ 130.292659][ T5062] netlink: 12 bytes leftover after parsing attributes in process `syz.3.134'. [ 131.466576][ T5077] netlink: 14 bytes leftover after parsing attributes in process `syz.0.142'. [ 132.803815][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.810215][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.811361][ T5091] loop1: detected capacity change from 0 to 32768 [ 132.826951][ T5091] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.146 (5091) [ 132.857234][ T5091] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 132.867425][ T5091] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 132.876913][ T5091] BTRFS info (device loop1): allowing degraded mounts [ 132.883778][ T5091] BTRFS info (device loop1): metadata ratio 1 [ 132.889871][ T5091] BTRFS info (device loop1): ignoring bad roots [ 132.896212][ T5091] BTRFS info (device loop1): force zlib compression, level 3 [ 132.903682][ T5091] BTRFS info (device loop1): allowing degraded mounts [ 132.910454][ T5091] BTRFS info (device loop1): using free space tree [ 133.073204][ T5096] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 133.082160][ T5096] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 133.434500][ T5096] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 133.478870][ T38] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0xf8bb6bdef03b64ff3b11a2a87ba7a2aeacfdb41cc49a87adad5cc1644d216b29 level 0 [ 133.508053][ T5096] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 133.537414][ T5096] device geneve2 entered promiscuous mode [ 133.622542][ T5091] BTRFS error (device loop1): failed to load root extent [ 133.630590][ T4376] BTRFS warning (device loop1): checksum verify failed on logical 5341184 mirror 1 wanted 0xc53d3c5bb04ba5dfc01f4c277f0b81815915cb99da5074f609a3f7f617cf284a found 0xd34891a64d32c06b063fbbf3d26e09cb4d5acf5ade8dc51c4cd532bb53f895d0 level 0 [ 133.721214][ T5091] BTRFS error (device loop1): failed to load root free space [ 133.731938][ T56] BTRFS warning (device loop1): checksum verify failed on logical 5287936 mirror 1 wanted 0x31987782e3a542b4b1826f4a60605b79838e23bf27075900db4b92202c72b2fd found 0xcc73edc8ee24564a8c6ce1ce085684ad2f9862e56f948f195b5cd36555a6be2f level 0 [ 133.816362][ T9] BTRFS warning (device loop1): checksum verify failed on logical 5292032 mirror 1 wanted 0xcbbb23d5b53a3b4892a5068ee5011732ffcd94742b434497e3f11d7ca86a6d23 found 0x6ab87e71a537053373402d980abd70276b583e303a68e0dd0a46bb41cfc306c8 level 0 [ 133.839182][ C1] vkms_vblank_simulate: vblank timer overrun [ 133.942327][ T5091] BTRFS info (device loop1): enabling ssd optimizations [ 134.141073][ T5118] netlink: 80 bytes leftover after parsing attributes in process `syz.0.150'. [ 134.150844][ T4267] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 134.548878][ T5125] netlink: 'syz.4.153': attribute type 1 has an invalid length. [ 134.711460][ T7] usb 4-1: USB disconnect, device number 4 [ 134.949760][ T5128] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 135.096222][ T5138] loop3: detected capacity change from 0 to 2048 [ 135.172684][ T5138] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 135.693154][ T4280] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 135.788035][ T5131] device veth3 entered promiscuous mode [ 135.904628][ T5139] netlink: 14 bytes leftover after parsing attributes in process `syz.3.155'. [ 135.923705][ T4280] usb 1-1: Using ep0 maxpacket: 8 [ 135.925868][ T5139] device hsr_slave_0 left promiscuous mode [ 135.939654][ T4280] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 136.023199][ T4280] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.048159][ T4280] usb 1-1: Product: syz [ 136.098373][ T4280] usb 1-1: Manufacturer: syz [ 136.108234][ T4280] usb 1-1: SerialNumber: syz [ 136.267281][ T27] audit: type=1326 audit(1752907897.971:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5141 comm="syz.3.157" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a4b58e9a9 code=0x0 [ 136.280547][ T4280] usb 1-1: config 0 descriptor?? [ 136.593610][ T4280] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 137.681216][ T4280] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 138.597671][ T5164] loop4: detected capacity change from 0 to 32768 [ 138.617130][ T5164] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.161 (5164) [ 138.671684][ T5164] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 138.675816][ T5165] netlink: 'syz.2.163': attribute type 1 has an invalid length. [ 138.682013][ T5164] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 138.699420][ T5164] BTRFS info (device loop4): allowing degraded mounts [ 138.706346][ T5164] BTRFS info (device loop4): metadata ratio 1 [ 138.712450][ T5164] BTRFS info (device loop4): ignoring bad roots [ 138.719012][ T5164] BTRFS info (device loop4): force zlib compression, level 3 [ 138.726545][ T5164] BTRFS info (device loop4): allowing degraded mounts [ 138.733382][ T5164] BTRFS info (device loop4): using free space tree [ 138.890283][ T4280] usb 1-1: USB disconnect, device number 5 [ 139.004303][ T5165] device veth5 entered promiscuous mode [ 139.074182][ T5165] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 139.134199][ T5169] netlink: 28 bytes leftover after parsing attributes in process `syz.2.163'. [ 139.153895][ T2969] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0xf8bb6bdef03b64ff3b11a2a87ba7a2aeacfdb41cc49a87adad5cc1644d216b29 level 0 [ 139.193159][ T5164] BTRFS error (device loop4): failed to load root extent [ 139.201353][ T2969] BTRFS warning (device loop4): checksum verify failed on logical 5341184 mirror 1 wanted 0xc53d3c5bb04ba5dfc01f4c277f0b81815915cb99da5074f609a3f7f617cf284a found 0xd34891a64d32c06b063fbbf3d26e09cb4d5acf5ade8dc51c4cd532bb53f895d0 level 0 [ 139.253165][ T5164] BTRFS error (device loop4): failed to load root free space [ 139.261421][ T4376] BTRFS warning (device loop4): checksum verify failed on logical 5287936 mirror 1 wanted 0x31987782e3a542b4b1826f4a60605b79838e23bf27075900db4b92202c72b2fd found 0xcc73edc8ee24564a8c6ce1ce085684ad2f9862e56f948f195b5cd36555a6be2f level 0 [ 139.339693][ T56] BTRFS warning (device loop4): checksum verify failed on logical 5292032 mirror 1 wanted 0xcbbb23d5b53a3b4892a5068ee5011732ffcd94742b434497e3f11d7ca86a6d23 found 0x6ab87e71a537053373402d980abd70276b583e303a68e0dd0a46bb41cfc306c8 level 0 [ 139.558265][ T5164] BTRFS info (device loop4): enabling ssd optimizations [ 139.778557][ T5203] netlink: 40 bytes leftover after parsing attributes in process `syz.0.166'. [ 139.793499][ T4283] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 139.823485][ T4800] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 140.053347][ T4800] usb 3-1: Using ep0 maxpacket: 8 [ 140.065949][ T4800] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 140.129336][ T5206] device lo entered promiscuous mode [ 140.164095][ T5206] device tunl0 entered promiscuous mode [ 140.166737][ T4800] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.181477][ T4800] usb 3-1: Product: syz [ 140.188188][ T4800] usb 3-1: Manufacturer: syz [ 140.192909][ T4800] usb 3-1: SerialNumber: syz [ 140.197319][ T5206] device gre0 entered promiscuous mode [ 140.237594][ T4800] usb 3-1: config 0 descriptor?? [ 140.244197][ T5206] device gretap0 entered promiscuous mode [ 140.272829][ T4291] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by udevd (4291) [ 140.291440][ T5206] device erspan0 entered promiscuous mode [ 140.320475][ T5206] device ip_vti0 entered promiscuous mode [ 140.330530][ T5206] device ip6_vti0 entered promiscuous mode [ 140.360461][ T5206] device sit0 entered promiscuous mode [ 140.378752][ T5206] device ip6tnl0 entered promiscuous mode [ 140.438859][ T5206] device ip6gre0 entered promiscuous mode [ 140.464243][ T4800] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 140.494435][ T5206] device syz_tun entered promiscuous mode [ 140.534617][ T5206] device ip6gretap0 entered promiscuous mode [ 140.566017][ T5206] device bridge0 entered promiscuous mode [ 140.591166][ T5206] device vcan0 entered promiscuous mode [ 140.612215][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 140.642718][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 140.685531][ T5206] device bond0 entered promiscuous mode [ 140.794313][ T5206] device team0 entered promiscuous mode [ 140.820911][ T5206] device dummy0 entered promiscuous mode [ 140.851046][ T5206] device nlmon0 entered promiscuous mode [ 140.908874][ T5206] device caif0 entered promiscuous mode [ 140.915887][ T5206] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 141.207461][ T5216] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 141.236480][ T5216] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 141.260349][ T5216] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 141.294990][ T5216] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 141.312577][ T5216] device geneve2 entered promiscuous mode [ 141.624807][ T5226] netlink: 40 bytes leftover after parsing attributes in process `syz.3.173'. [ 142.087768][ T4800] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 142.122018][ T4800] usb 3-1: USB disconnect, device number 3 [ 143.196734][ T27] audit: type=1326 audit(1752907904.901:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5245 comm="syz.2.179" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f516b18e9a9 code=0x0 [ 144.843469][ T5259] netlink: 'syz.3.181': attribute type 1 has an invalid length. [ 145.003195][ T5266] device veth3 entered promiscuous mode [ 145.079807][ T5266] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 145.152227][ T5271] device vlan2 entered promiscuous mode [ 145.230153][ T5271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.184'. [ 145.363176][ T22] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 145.584344][ T22] usb 3-1: config 0 has no interfaces? [ 145.683657][ T22] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 145.692776][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.715549][ T22] usb 3-1: Product: syz [ 145.719744][ T22] usb 3-1: Manufacturer: syz [ 145.734697][ T22] usb 3-1: SerialNumber: syz [ 145.751176][ T22] usb 3-1: config 0 descriptor?? [ 146.238489][ T5289] netlink: 40 bytes leftover after parsing attributes in process `syz.3.186'. [ 147.193133][ T22] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 147.393076][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 147.402370][ T22] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 147.459234][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.500617][ T22] usb 1-1: Product: syz [ 147.522058][ T22] usb 1-1: Manufacturer: syz [ 147.581378][ T22] usb 1-1: SerialNumber: syz [ 147.631132][ T22] usb 1-1: config 0 descriptor?? [ 147.686146][ T27] audit: type=1326 audit(1752907909.391:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5317 comm="syz.4.193" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1b7d38e9a9 code=0x0 [ 147.856144][ T22] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 148.883183][ T5209] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 148.941886][ T4280] usb 3-1: USB disconnect, device number 4 [ 149.255711][ T5340] loop4: detected capacity change from 0 to 2048 [ 149.286116][ T5340] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.316567][ T5340] netlink: 14 bytes leftover after parsing attributes in process `syz.4.198'. [ 149.326835][ T5340] device hsr_slave_0 left promiscuous mode [ 149.338173][ T5340] device hsr_slave_1 left promiscuous mode [ 149.854148][ T5209] usb 2-1: config 0 has no interfaces? [ 149.872340][ T5209] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 149.927065][ T5209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.955538][ T5209] usb 2-1: Product: syz [ 149.981895][ T5209] usb 2-1: Manufacturer: syz [ 150.014773][ T5209] usb 2-1: SerialNumber: syz [ 150.020012][ T22] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 150.057771][ T22] usb 1-1: USB disconnect, device number 6 [ 150.090304][ T5209] usb 2-1: config 0 descriptor?? [ 150.392822][ T5352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.195'. [ 150.473571][ T5352] netlink: 24 bytes leftover after parsing attributes in process `syz.1.195'. [ 150.563132][ T5209] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 150.574353][ T5357] device vlan2 entered promiscuous mode [ 150.604147][ T5357] device hsr_slave_1 entered promiscuous mode [ 150.629872][ T5358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.202'. [ 150.733280][ T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 150.766721][ T5209] usb 4-1: too many configurations: 253, using maximum allowed: 8 [ 150.926853][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 150.940814][ T7] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 150.996352][ T7] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 151.016747][ T7] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 151.029128][ T7] usb 3-1: Product: syz [ 151.035885][ T7] usb 3-1: Manufacturer: syz [ 151.057719][ T7] usb 3-1: SerialNumber: syz [ 151.101156][ T7] usb 3-1: config 0 descriptor?? [ 151.110622][ T5353] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 152.401462][ T5363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.204'. [ 152.549016][ T4800] usb 2-1: USB disconnect, device number 5 [ 153.521456][ T5381] netlink: 40 bytes leftover after parsing attributes in process `syz.4.207'. [ 153.611729][ T5209] usb 4-1: string descriptor 0 read error: -71 [ 153.619884][ T5209] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 153.720330][ T5209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.759962][ T5209] usb 4-1: can't set config #1, error -71 [ 153.852562][ T5209] usb 4-1: USB disconnect, device number 5 [ 154.242151][ T5396] loop3: detected capacity change from 0 to 2048 [ 154.717431][ T5396] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 154.746032][ T5396] netlink: 14 bytes leftover after parsing attributes in process `syz.3.211'. [ 156.023331][ T4800] usb 3-1: USB disconnect, device number 5 [ 156.411895][ T5417] loop2: detected capacity change from 0 to 2048 [ 157.041630][ T5417] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 157.061895][ T5416] netlink: 14 bytes leftover after parsing attributes in process `syz.2.214'. [ 157.117711][ T5416] device hsr_slave_0 left promiscuous mode [ 157.473714][ T5426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.216'. [ 158.839726][ T5444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.219'. [ 160.578614][ T5466] netlink: 'syz.1.222': attribute type 1 has an invalid length. [ 160.793181][ T26] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 160.841602][ T5470] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 160.921075][ T5471] device veth3 entered promiscuous mode [ 160.948485][ T5471] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 160.978736][ T5474] netlink: 28 bytes leftover after parsing attributes in process `syz.1.222'. [ 160.990418][ T26] usb 5-1: config 0 has no interfaces? [ 161.020758][ T26] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 161.074308][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.200084][ T26] usb 5-1: Product: syz [ 161.223394][ T26] usb 5-1: Manufacturer: syz [ 161.279118][ T26] usb 5-1: SerialNumber: syz [ 161.347988][ T26] usb 5-1: config 0 descriptor?? [ 161.650558][ T5491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.228'. [ 162.930052][ T5503] fuse: Bad value for 'fd' [ 163.983322][ T4799] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 164.019297][ T5532] netlink: 'syz.0.237': attribute type 1 has an invalid length. [ 164.152164][ T5534] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 164.167307][ T5532] netlink: 28 bytes leftover after parsing attributes in process `syz.0.237'. [ 164.178579][ T56] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 164.179099][ T5532] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.199611][ T5397] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 164.207237][ T4799] usb 4-1: Using ep0 maxpacket: 8 [ 164.224569][ T4799] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 164.278900][ T4799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.303614][ T4799] usb 4-1: Product: syz [ 164.318493][ T4799] usb 4-1: Manufacturer: syz [ 164.327585][ T4799] usb 4-1: SerialNumber: syz [ 164.362604][ T4799] usb 4-1: config 0 descriptor?? [ 164.394352][ T5397] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 164.613243][ T4799] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 165.566422][ T4800] usb 5-1: USB disconnect, device number 7 [ 165.635227][ T4799] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 165.968424][ T4799] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 166.213096][ T4799] usb 3-1: Using ep0 maxpacket: 8 [ 166.226912][ T4799] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 166.277078][ T4799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.338277][ T4799] usb 3-1: Product: syz [ 166.352708][ T4799] usb 3-1: Manufacturer: syz [ 166.367362][ T4799] usb 3-1: SerialNumber: syz [ 166.399549][ T4799] usb 3-1: config 0 descriptor?? [ 166.638426][ T4799] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 166.717992][ T4800] usb 4-1: USB disconnect, device number 6 [ 167.812598][ T5597] netlink: 'syz.0.249': attribute type 1 has an invalid length. [ 167.936010][ T5597] netlink: 28 bytes leftover after parsing attributes in process `syz.0.249'. [ 167.947882][ T5597] 8021q: adding VLAN 0 to HW filter on device bond2 [ 168.262639][ T4799] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 168.295429][ T4799] usb 3-1: USB disconnect, device number 6 [ 169.363123][ T5207] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 169.370939][ T4331] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 169.390210][ T5643] netlink: 'syz.4.260': attribute type 1 has an invalid length. [ 169.677983][ T4331] usb 3-1: config 0 has no interfaces? [ 169.698226][ T5207] usb 4-1: config 0 has no interfaces? [ 169.847005][ T5654] loop1: detected capacity change from 0 to 2048 [ 170.262016][ T5654] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.346137][ T4331] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 170.379007][ T4331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.387496][ T5207] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 170.406353][ T5207] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.423721][ T4331] usb 3-1: Product: syz [ 170.429231][ T5207] usb 4-1: Product: syz [ 170.433729][ T4331] usb 3-1: Manufacturer: syz [ 170.439075][ T5207] usb 4-1: Manufacturer: syz [ 170.443982][ T4331] usb 3-1: SerialNumber: syz [ 170.450964][ T5207] usb 4-1: SerialNumber: syz [ 170.464721][ T4331] usb 3-1: config 0 descriptor?? [ 170.483812][ T5207] usb 4-1: config 0 descriptor?? [ 170.512097][ T5653] device veth3 entered promiscuous mode [ 170.565879][ T5653] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 170.597419][ T5651] netlink: 14 bytes leftover after parsing attributes in process `syz.1.261'. [ 170.618280][ T5651] device hsr_slave_0 left promiscuous mode [ 172.555128][ T4331] usb 3-1: USB disconnect, device number 7 [ 173.526443][ T4361] usb 4-1: USB disconnect, device number 7 [ 174.029909][ T5718] loop3: detected capacity change from 0 to 2048 [ 174.429425][ T5718] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 174.455453][ T5718] netlink: 14 bytes leftover after parsing attributes in process `syz.3.272'. [ 175.056295][ T5734] netlink: 'syz.4.276': attribute type 1 has an invalid length. [ 175.249106][ T5741] device veth5 entered promiscuous mode [ 175.316261][ T5734] netlink: 28 bytes leftover after parsing attributes in process `syz.4.276'. [ 175.345464][ T5734] 8021q: adding VLAN 0 to HW filter on device bond3 [ 176.523655][ T4799] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 176.716139][ T5769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.282'. [ 176.721693][ T4799] usb 4-1: config 0 has no interfaces? [ 176.764754][ T4799] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 176.825999][ T4799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.850990][ T4799] usb 4-1: Product: syz [ 176.869563][ T4799] usb 4-1: Manufacturer: syz [ 176.888996][ T4799] usb 4-1: SerialNumber: syz [ 176.965230][ T4799] usb 4-1: config 0 descriptor?? [ 177.240840][ T5776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 177.267638][ T5776] netlink: 24 bytes leftover after parsing attributes in process `syz.3.280'. [ 177.900567][ T5787] netlink: 14 bytes leftover after parsing attributes in process `syz.0.286'. [ 179.198781][ T4331] usb 4-1: USB disconnect, device number 8 [ 179.894539][ T5826] netlink: 40 bytes leftover after parsing attributes in process `syz.0.295'. [ 180.972580][ T5839] netlink: 'syz.2.298': attribute type 1 has an invalid length. [ 181.353868][ T5848] loop4: detected capacity change from 0 to 2048 [ 182.050448][ T5848] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 182.140791][ T5844] device veth7 entered promiscuous mode [ 182.206359][ T5844] bond3: (slave veth7): Enslaving as a backup interface with a down link [ 182.361119][ T5848] netlink: 14 bytes leftover after parsing attributes in process `syz.4.299'. [ 182.662842][ T5858] netlink: 'syz.2.302': attribute type 1 has an invalid length. [ 182.865262][ T5864] device veth9 entered promiscuous mode [ 182.932167][ T5855] netlink: 28 bytes leftover after parsing attributes in process `syz.2.302'. [ 182.996097][ T5855] 8021q: adding VLAN 0 to HW filter on device bond4 [ 184.642623][ T5905] loop2: detected capacity change from 0 to 2048 [ 185.322001][ T5905] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.346476][ T5904] netlink: 14 bytes leftover after parsing attributes in process `syz.2.311'. [ 186.541219][ T5922] netlink: 40 bytes leftover after parsing attributes in process `syz.3.315'. [ 187.173093][ T4331] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 187.363493][ T4280] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 187.375437][ T4331] usb 5-1: config 6 has an invalid interface number: 102 but max is 0 [ 187.388508][ T4331] usb 5-1: config 6 has no interface number 0 [ 187.405229][ T4331] usb 5-1: config 6 interface 102 has no altsetting 0 [ 187.425862][ T4331] usb 5-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=59.64 [ 187.451062][ T4331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.474105][ T4331] usb 5-1: Product: syz [ 187.484308][ T4331] usb 5-1: Manufacturer: syz [ 187.498977][ T4331] usb 5-1: SerialNumber: syz [ 187.583080][ T4280] usb 3-1: Using ep0 maxpacket: 8 [ 187.592744][ T4280] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 187.628990][ T4280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.659795][ T4280] usb 3-1: Product: syz [ 187.679794][ T4280] usb 3-1: Manufacturer: syz [ 187.717022][ T4280] usb 3-1: SerialNumber: syz [ 187.737187][ T4331] qmi_wwan: probe of 5-1:6.102 failed with error -22 [ 187.770511][ T4331] usb 5-1: USB disconnect, device number 8 [ 187.779468][ T4280] usb 3-1: config 0 descriptor?? [ 188.115635][ T4280] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 188.269149][ T5962] loop1: detected capacity change from 0 to 2048 [ 188.916236][ T5962] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 188.943404][ T5962] netlink: 14 bytes leftover after parsing attributes in process `syz.1.324'. [ 189.291455][ T5968] netlink: 'syz.1.326': attribute type 1 has an invalid length. [ 189.437224][ T5972] device veth5 entered promiscuous mode [ 189.521058][ T5972] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 189.933890][ T4331] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 190.124985][ T4331] usb 4-1: config 0 has no interfaces? [ 190.136146][ T4331] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 190.163262][ T4331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.192270][ T4331] usb 4-1: Product: syz [ 190.217834][ T4331] usb 4-1: Manufacturer: syz [ 190.232937][ T4331] usb 4-1: SerialNumber: syz [ 190.265885][ T4331] usb 4-1: config 0 descriptor?? [ 190.409271][ T4280] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 190.435323][ T4280] usb 3-1: USB disconnect, device number 8 [ 191.172074][ T6013] netlink: 'syz.4.336': attribute type 1 has an invalid length. [ 191.252722][ T6013] device veth5 entered promiscuous mode [ 191.266238][ T6013] bond4: (slave veth5): Enslaving as a backup interface with a down link [ 191.285379][ T6013] netlink: 28 bytes leftover after parsing attributes in process `syz.4.336'. [ 191.295548][ T6013] 8021q: adding VLAN 0 to HW filter on device bond4 [ 191.723725][ T6018] loop4: detected capacity change from 0 to 2048 [ 191.755839][ T6018] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 191.781423][ T6018] netlink: 14 bytes leftover after parsing attributes in process `syz.4.337'. [ 192.615706][ T4280] usb 4-1: USB disconnect, device number 9 [ 192.716783][ T6029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.340'. [ 192.973281][ T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 193.164273][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 193.176641][ T7] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 193.199277][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.226504][ T7] usb 2-1: Product: syz [ 193.245024][ T7] usb 2-1: Manufacturer: syz [ 193.259514][ T7] usb 2-1: SerialNumber: syz [ 193.304486][ T7] usb 2-1: config 0 descriptor?? [ 193.531662][ T7] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 193.713792][ T6054] fuse: Bad value for 'group_id' [ 193.979774][ T6062] netlink: 'syz.4.347': attribute type 1 has an invalid length. [ 194.103541][ T6062] device veth7 entered promiscuous mode [ 194.116970][ T6062] bond5: (slave veth7): Enslaving as a backup interface with a down link [ 194.142011][ T6068] netlink: 28 bytes leftover after parsing attributes in process `syz.4.347'. [ 194.161209][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.171059][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.217222][ T6068] 8021q: adding VLAN 0 to HW filter on device bond5 [ 194.537690][ T7] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 194.849123][ T6075] netlink: 14 bytes leftover after parsing attributes in process `syz.0.348'. [ 195.622631][ T7] usb 2-1: USB disconnect, device number 6 [ 196.243230][ T4272] Bluetooth: hci3: command 0x0406 tx timeout [ 196.249551][ T4285] Bluetooth: hci2: command 0x0406 tx timeout [ 196.256403][ T4274] Bluetooth: hci0: command 0x0406 tx timeout [ 196.256470][ T4282] Bluetooth: hci4: command 0x0406 tx timeout [ 196.268652][ T4288] Bluetooth: hci1: command 0x0406 tx timeout [ 196.353091][ T4331] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 196.654120][ T4331] usb 2-1: config 0 has no interfaces? [ 196.665965][ T4331] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 196.713196][ T4331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.721506][ T4331] usb 2-1: Product: syz [ 196.728076][ T4331] usb 2-1: Manufacturer: syz [ 196.733903][ T4331] usb 2-1: SerialNumber: syz [ 196.856293][ T6099] netlink: 14 bytes leftover after parsing attributes in process `syz.0.353'. [ 196.975478][ T4331] usb 2-1: config 0 descriptor?? [ 197.711972][ T6110] 8021q: VLANs not supported on gre1 [ 197.760757][ T6110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.356'. [ 198.043455][ T6120] fuse: Bad value for 'group_id' [ 199.077110][ T6134] netlink: 14 bytes leftover after parsing attributes in process `syz.0.360'. [ 200.019733][ T7] usb 2-1: USB disconnect, device number 7 [ 200.273408][ T26] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 200.375856][ T5207] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 200.493250][ T26] usb 1-1: Using ep0 maxpacket: 8 [ 200.502848][ T26] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 200.522703][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.541360][ T26] usb 1-1: Product: syz [ 200.552946][ T26] usb 1-1: Manufacturer: syz [ 200.563075][ T5207] usb 4-1: Using ep0 maxpacket: 32 [ 200.578031][ T5207] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 200.593886][ T26] usb 1-1: SerialNumber: syz [ 200.600896][ T26] usb 1-1: config 0 descriptor?? [ 200.613076][ T5207] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 200.625631][ T5207] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 200.634583][ T5207] usb 4-1: Product: syz [ 200.639014][ T5207] usb 4-1: Manufacturer: syz [ 200.645340][ T5207] usb 4-1: SerialNumber: syz [ 200.668783][ T5207] usb 4-1: config 0 descriptor?? [ 200.677080][ T6144] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 200.815242][ T26] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 201.058251][ T4280] usb 4-1: USB disconnect, device number 10 [ 201.268379][ T6158] netlink: 40 bytes leftover after parsing attributes in process `syz.4.365'. [ 201.830282][ T26] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 202.200934][ T6165] netlink: 'syz.2.367': attribute type 1 has an invalid length. [ 202.349816][ T6165] device veth9 entered promiscuous mode [ 202.409194][ T6165] bond5: (slave veth9): Enslaving as a backup interface with a down link [ 202.463703][ T6166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.367'. [ 202.524739][ T6166] 8021q: adding VLAN 0 to HW filter on device bond5 [ 202.997506][ T26] usb 1-1: USB disconnect, device number 7 [ 203.266921][ T6174] fuse: Bad value for 'user_id' [ 203.582431][ T6184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.371'. [ 203.952505][ T6186] netlink: 14 bytes leftover after parsing attributes in process `syz.0.372'. [ 206.613204][ T5207] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 206.763824][ T6230] netlink: 40 bytes leftover after parsing attributes in process `syz.3.380'. [ 206.833149][ T5207] usb 1-1: Using ep0 maxpacket: 8 [ 206.845036][ T5207] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 206.896255][ T5207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.935144][ T5207] usb 1-1: Product: syz [ 207.000620][ T5207] usb 1-1: Manufacturer: syz [ 207.022266][ T5207] usb 1-1: SerialNumber: syz [ 207.064767][ T5207] usb 1-1: config 0 descriptor?? [ 207.285558][ T5207] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 208.289758][ T5207] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 208.464491][ T6249] loop1: detected capacity change from 0 to 2048 [ 208.658061][ T6249] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.684373][ T6249] netlink: 14 bytes leftover after parsing attributes in process `syz.1.383'. [ 209.560462][ T7] usb 1-1: USB disconnect, device number 8 [ 210.463915][ T6259] loop2: detected capacity change from 0 to 32768 [ 210.497740][ T6259] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 210.507984][ T6259] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 210.517449][ T6259] BTRFS info (device loop2): allowing degraded mounts [ 210.524310][ T6259] BTRFS info (device loop2): metadata ratio 1 [ 210.530401][ T6259] BTRFS info (device loop2): ignoring bad roots [ 210.536775][ T6259] BTRFS info (device loop2): force zlib compression, level 3 [ 210.544244][ T6259] BTRFS info (device loop2): allowing degraded mounts [ 210.551018][ T6259] BTRFS info (device loop2): using free space tree [ 211.168826][ T4361] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 211.363179][ T4361] usb 5-1: Using ep0 maxpacket: 8 [ 211.565484][ T4361] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 211.628030][ T4361] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.636678][ T4361] usb 5-1: Product: syz [ 211.640975][ T4361] usb 5-1: Manufacturer: syz [ 211.646055][ T4361] usb 5-1: SerialNumber: syz [ 211.658142][ T4361] usb 5-1: config 0 descriptor?? [ 211.705556][ T4378] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0xf8bb6bdef03b64ff3b11a2a87ba7a2aeacfdb41cc49a87adad5cc1644d216b29 level 0 [ 211.755288][ T6259] BTRFS error (device loop2): failed to load root extent [ 211.763359][ T6076] BTRFS warning (device loop2): checksum verify failed on logical 5341184 mirror 1 wanted 0xc53d3c5bb04ba5dfc01f4c277f0b81815915cb99da5074f609a3f7f617cf284a found 0xd34891a64d32c06b063fbbf3d26e09cb4d5acf5ade8dc51c4cd532bb53f895d0 level 0 [ 211.845489][ T6259] BTRFS error (device loop2): failed to load root free space [ 211.855443][ T9] BTRFS warning (device loop2): checksum verify failed on logical 5287936 mirror 1 wanted 0x31987782e3a542b4b1826f4a60605b79838e23bf27075900db4b92202c72b2fd found 0xcc73edc8ee24564a8c6ce1ce085684ad2f9862e56f948f195b5cd36555a6be2f level 0 [ 211.887021][ T4361] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 211.953992][ T6076] BTRFS warning (device loop2): checksum verify failed on logical 5292032 mirror 1 wanted 0xcbbb23d5b53a3b4892a5068ee5011732ffcd94742b434497e3f11d7ca86a6d23 found 0x6ab87e71a537053373402d980abd70276b583e303a68e0dd0a46bb41cfc306c8 level 0 [ 212.027080][ T6295] fuse: Bad value for 'user_id' [ 212.097245][ T6259] BTRFS info (device loop2): enabling ssd optimizations [ 212.582861][ T4268] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 212.797792][ T6312] netlink: 14 bytes leftover after parsing attributes in process `syz.0.394'. [ 213.970825][ T4361] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 214.030824][ T4361] usb 5-1: USB disconnect, device number 9 [ 214.273050][ T4791] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 214.463185][ T4791] usb 2-1: Using ep0 maxpacket: 8 [ 214.480906][ T4791] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 214.509872][ T4791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.560291][ T4791] usb 2-1: Product: syz [ 214.609820][ T4791] usb 2-1: Manufacturer: syz [ 214.627738][ T4791] usb 2-1: SerialNumber: syz [ 214.658565][ T4791] usb 2-1: config 0 descriptor?? [ 214.887112][ T4791] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 215.055028][ T6332] netlink: 'syz.3.399': attribute type 1 has an invalid length. [ 215.181094][ T6332] device veth5 entered promiscuous mode [ 215.195588][ T6332] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 215.227884][ T6334] netlink: 28 bytes leftover after parsing attributes in process `syz.3.399'. [ 215.240986][ T6334] 8021q: adding VLAN 0 to HW filter on device bond2 [ 215.901312][ T4791] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 217.150141][ T6356] fuse: Bad value for 'fd' [ 218.501303][ T6362] loop4: detected capacity change from 0 to 32768 [ 218.513148][ T6362] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.405 (6362) [ 218.560964][ T6362] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 218.571262][ T6362] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 218.580848][ T6362] BTRFS info (device loop4): allowing degraded mounts [ 218.587695][ T6362] BTRFS info (device loop4): metadata ratio 1 [ 218.593912][ T6362] BTRFS info (device loop4): ignoring bad roots [ 218.600181][ T6362] BTRFS info (device loop4): force zlib compression, level 3 [ 218.607651][ T6362] BTRFS info (device loop4): allowing degraded mounts [ 218.614549][ T6362] BTRFS info (device loop4): using free space tree [ 218.730872][ T26] usb 2-1: USB disconnect, device number 8 [ 219.165802][ T11] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0xf8bb6bdef03b64ff3b11a2a87ba7a2aeacfdb41cc49a87adad5cc1644d216b29 level 0 [ 219.274068][ T6384] loop2: detected capacity change from 0 to 2048 [ 219.324948][ T6384] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 219.350971][ T6384] netlink: 14 bytes leftover after parsing attributes in process `syz.2.406'. [ 220.004324][ T6362] BTRFS error (device loop4): failed to load root extent [ 220.045270][ T5720] BTRFS warning (device loop4): checksum verify failed on logical 5341184 mirror 1 wanted 0xc53d3c5bb04ba5dfc01f4c277f0b81815915cb99da5074f609a3f7f617cf284a found 0xd34891a64d32c06b063fbbf3d26e09cb4d5acf5ade8dc51c4cd532bb53f895d0 level 0 [ 220.136712][ T6362] BTRFS error (device loop4): failed to load root free space [ 220.147157][ T4376] BTRFS warning (device loop4): checksum verify failed on logical 5287936 mirror 1 wanted 0x31987782e3a542b4b1826f4a60605b79838e23bf27075900db4b92202c72b2fd found 0xcc73edc8ee24564a8c6ce1ce085684ad2f9862e56f948f195b5cd36555a6be2f level 0 [ 220.262572][ T6135] BTRFS warning (device loop4): checksum verify failed on logical 5292032 mirror 1 wanted 0xcbbb23d5b53a3b4892a5068ee5011732ffcd94742b434497e3f11d7ca86a6d23 found 0x6ab87e71a537053373402d980abd70276b583e303a68e0dd0a46bb41cfc306c8 level 0 [ 220.440730][ T6362] BTRFS error (device loop4): open_ctree failed: -22 [ 220.955571][ T6405] device lo entered promiscuous mode [ 221.015402][ T6405] device tunl0 entered promiscuous mode [ 221.155908][ T6405] device gre0 entered promiscuous mode [ 221.239128][ T6405] device gretap0 entered promiscuous mode [ 221.303795][ T6405] device erspan0 entered promiscuous mode [ 221.420197][ T6405] device ip_vti0 entered promiscuous mode [ 221.492384][ T6405] device ip6_vti0 entered promiscuous mode [ 221.569285][ T6405] device sit0 entered promiscuous mode [ 221.706438][ T6405] device ip6tnl0 entered promiscuous mode [ 221.878113][ T6405] device ip6gre0 entered promiscuous mode [ 222.003988][ T6405] device syz_tun entered promiscuous mode [ 222.054855][ T6405] device ip6gretap0 entered promiscuous mode [ 222.137590][ T6405] device bridge0 entered promiscuous mode [ 222.200956][ T6405] device vcan0 entered promiscuous mode [ 222.260045][ T6405] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 222.400064][ T6405] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 222.442512][ T6405] device bond0 entered promiscuous mode [ 222.483108][ T6405] device bond_slave_0 entered promiscuous mode [ 222.489536][ T6405] device bond_slave_1 entered promiscuous mode [ 222.513411][ T6405] device team0 entered promiscuous mode [ 222.528675][ T6405] device team_slave_0 entered promiscuous mode [ 222.553232][ T6405] device team_slave_1 entered promiscuous mode [ 222.583395][ T6405] device dummy0 entered promiscuous mode [ 222.626255][ T6405] device nlmon0 entered promiscuous mode [ 222.638209][ T6405] device caif0 entered promiscuous mode [ 222.661917][ T6405] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 222.693112][ T6429] 8021q: VLANs not supported on gre1 [ 222.699599][ T6432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.415'. [ 224.123686][ T6444] device geneve2 entered promiscuous mode [ 224.546832][ T6450] netlink: 14 bytes leftover after parsing attributes in process `syz.0.418'. [ 225.459149][ T6459] loop2: detected capacity change from 0 to 32768 [ 225.476744][ T6459] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.420 (6459) [ 225.503469][ T6459] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 225.513827][ T6459] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 225.523344][ T6459] BTRFS info (device loop2): allowing degraded mounts [ 225.530276][ T6459] BTRFS info (device loop2): metadata ratio 1 [ 225.536451][ T6459] BTRFS info (device loop2): ignoring bad roots [ 225.542727][ T6459] BTRFS info (device loop2): force zlib compression, level 3 [ 225.550255][ T6459] BTRFS info (device loop2): allowing degraded mounts [ 225.557091][ T6459] BTRFS info (device loop2): using free space tree [ 225.673299][ T6454] device veth7 entered promiscuous mode [ 225.912014][ T9] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0xf8bb6bdef03b64ff3b11a2a87ba7a2aeacfdb41cc49a87adad5cc1644d216b29 level 0 [ 226.008179][ T6459] BTRFS error (device loop2): failed to load root extent [ 226.016789][ T5397] BTRFS warning (device loop2): checksum verify failed on logical 5341184 mirror 1 wanted 0xc53d3c5bb04ba5dfc01f4c277f0b81815915cb99da5074f609a3f7f617cf284a found 0xd34891a64d32c06b063fbbf3d26e09cb4d5acf5ade8dc51c4cd532bb53f895d0 level 0 [ 226.213900][ T6459] BTRFS error (device loop2): failed to load root free space [ 226.225776][ T5397] BTRFS warning (device loop2): checksum verify failed on logical 5287936 mirror 1 wanted 0x31987782e3a542b4b1826f4a60605b79838e23bf27075900db4b92202c72b2fd found 0xcc73edc8ee24564a8c6ce1ce085684ad2f9862e56f948f195b5cd36555a6be2f level 0 [ 226.276765][ T4378] BTRFS warning (device loop2): checksum verify failed on logical 5292032 mirror 1 wanted 0xcbbb23d5b53a3b4892a5068ee5011732ffcd94742b434497e3f11d7ca86a6d23 found 0x6ab87e71a537053373402d980abd70276b583e303a68e0dd0a46bb41cfc306c8 level 0 [ 226.458648][ T6459] BTRFS info (device loop2): enabling ssd optimizations [ 226.684716][ T4268] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 226.920665][ T6507] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 227.097435][ T6507] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 229.823347][ T4800] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 230.086534][ T4800] usb 5-1: config 0 has no interfaces? [ 230.109788][ T4800] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 230.173952][ T4800] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.214425][ T4800] usb 5-1: Product: syz [ 230.237087][ T4800] usb 5-1: Manufacturer: syz [ 230.260522][ T6566] device lo entered promiscuous mode [ 230.270416][ T4800] usb 5-1: SerialNumber: syz [ 230.283564][ T6566] device tunl0 entered promiscuous mode [ 230.298303][ T4800] usb 5-1: config 0 descriptor?? [ 230.316720][ T6566] device gre0 entered promiscuous mode [ 230.330367][ T6566] device gretap0 entered promiscuous mode [ 230.352192][ T6566] device erspan0 entered promiscuous mode [ 230.430632][ T6566] device ip_vti0 entered promiscuous mode [ 230.542467][ T6566] device ip6_vti0 entered promiscuous mode [ 230.618495][ T6566] device sit0 entered promiscuous mode [ 230.702519][ T6566] device ip6tnl0 entered promiscuous mode [ 230.757121][ T6566] device ip6gre0 entered promiscuous mode [ 230.794035][ T6566] device syz_tun entered promiscuous mode [ 230.817958][ T6566] device ip6gretap0 entered promiscuous mode [ 230.841951][ T6566] device bridge0 entered promiscuous mode [ 230.878992][ T6566] device vcan0 entered promiscuous mode [ 230.889858][ T6566] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 230.901798][ T6566] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 230.916510][ T6566] device bond0 entered promiscuous mode [ 230.922370][ T6566] device bond_slave_0 entered promiscuous mode [ 230.932047][ T6566] device bond_slave_1 entered promiscuous mode [ 230.953325][ T6566] device team0 entered promiscuous mode [ 230.971374][ T6566] device team_slave_0 entered promiscuous mode [ 230.999370][ T6566] device team_slave_1 entered promiscuous mode [ 231.027162][ T6566] device dummy0 entered promiscuous mode [ 231.040028][ T6566] device nlmon0 entered promiscuous mode [ 231.066689][ T6566] device caif0 entered promiscuous mode [ 231.100139][ T6566] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 231.192901][ T6575] device veth7 entered promiscuous mode [ 231.237910][ T6576] netlink: 28 bytes leftover after parsing attributes in process `syz.1.442'. [ 231.289787][ T6582] device veth3 entered promiscuous mode [ 231.970029][ T6595] netlink: 14 bytes leftover after parsing attributes in process `syz.0.447'. [ 233.474210][ T6620] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 233.551870][ T6620] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 233.597977][ T4800] usb 5-1: USB disconnect, device number 10 [ 233.746026][ T6624] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 234.079529][ T6626] device veth7 entered promiscuous mode [ 234.207313][ T6633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.460'. [ 234.389181][ T6635] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 234.436915][ T6635] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 234.457769][ T6635] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 234.482663][ T6635] device bridge_slave_0 left promiscuous mode [ 234.517934][ T6635] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.541637][ T6635] device bridge_slave_1 left promiscuous mode [ 234.612218][ T6635] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.712519][ T6635] bond0: (slave bond_slave_0): Releasing backup interface [ 234.789962][ T6635] device bond_slave_0 left promiscuous mode [ 234.812766][ T6635] bond0: (slave bond_slave_1): Releasing backup interface [ 234.821603][ T6635] device bond_slave_1 left promiscuous mode [ 234.837630][ T6635] device team_slave_0 left promiscuous mode [ 234.906836][ T6635] team0: Port device team_slave_0 removed [ 234.925556][ T6635] device team_slave_1 left promiscuous mode [ 234.954953][ T6635] team0: Port device team_slave_1 removed [ 234.982063][ T6635] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.000419][ T6635] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.065562][ T6635] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.107521][ T6635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.301469][ T6635] bond1: (slave ip6gretap1): Releasing backup interface [ 235.352318][ T6635] bond1: (slave ip6gretap1): the permanent HWaddr of slave - 4a:2e:03:0b:7b:16 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 235.497558][ T6635] bond1: (slave veth3): Releasing backup interface [ 235.564743][ T6635] bond2: (slave veth5): Releasing backup interface [ 235.641035][ T6635] bond3: (slave veth7): Releasing backup interface [ 235.681711][ T6635] bond5: (slave veth9): Releasing backup interface [ 236.911183][ T6672] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 237.245848][ T6674] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 237.255483][ T6674] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 237.275017][ T6676] 8021q: VLANs not supported on gre1 [ 237.292829][ T6676] 8021q: VLANs not supported on gre1 [ 237.373217][ T6679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.474'. [ 240.074556][ T6714] device veth9 entered promiscuous mode [ 240.156041][ T6716] netlink: 28 bytes leftover after parsing attributes in process `syz.4.484'. [ 240.835465][ T6722] loop4: detected capacity change from 0 to 2048 [ 241.121104][ T6722] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 241.148160][ T6722] netlink: 14 bytes leftover after parsing attributes in process `syz.4.485'. [ 241.614372][ T6727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.487'. [ 241.901701][ T6734] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 242.020067][ T6734] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 242.953058][ T6397] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 243.145275][ T6397] usb 1-1: config 6 has an invalid interface number: 102 but max is 0 [ 243.163261][ T6397] usb 1-1: config 6 has no interface number 0 [ 243.188812][ T6397] usb 1-1: config 6 interface 102 has no altsetting 0 [ 243.223094][ T6397] usb 1-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=59.64 [ 243.253274][ T6397] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.293926][ T6397] usb 1-1: Product: syz [ 243.334291][ T6397] usb 1-1: Manufacturer: syz [ 243.369831][ T6397] usb 1-1: SerialNumber: syz [ 243.624045][ T6397] qmi_wwan: probe of 1-1:6.102 failed with error -22 [ 243.666938][ T6397] usb 1-1: USB disconnect, device number 9 [ 244.152506][ T6766] fuse: Bad value for 'user_id' [ 244.636949][ T6775] netlink: 14 bytes leftover after parsing attributes in process `syz.0.498'. [ 245.232366][ T6773] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 245.889429][ T6784] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 246.573258][ T6792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.502'. [ 247.035073][ T6795] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 247.239708][ T6795] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 247.377918][ T6800] binder: BINDER_SET_CONTEXT_MGR already set [ 247.404101][ T6800] binder: 6799:6800 ioctl 4018620d 200000000040 returned -16 [ 247.543990][ T6803] device veth3 entered promiscuous mode [ 247.626497][ T6804] netlink: 28 bytes leftover after parsing attributes in process `syz.0.505'. [ 248.138154][ T6814] netlink: 'syz.4.508': attribute type 1 has an invalid length. [ 248.337194][ T6817] loop3: detected capacity change from 0 to 2048 [ 248.663759][ T6817] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 248.687130][ T6817] netlink: 14 bytes leftover after parsing attributes in process `syz.3.509'. [ 249.192900][ T6821] fuse: Bad value for 'fd' [ 249.289336][ T6825] fuse: Bad value for 'fd' [ 250.203773][ T6836] loop1: detected capacity change from 0 to 2048 [ 250.858209][ T6836] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 250.881988][ T6835] netlink: 14 bytes leftover after parsing attributes in process `syz.1.514'. [ 251.509620][ T6849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.519'. [ 252.256536][ T6860] loop3: detected capacity change from 0 to 2048 [ 252.398143][ T6860] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 252.430883][ T6860] netlink: 14 bytes leftover after parsing attributes in process `syz.3.522'. [ 252.732178][ T6862] netlink: 'syz.0.523': attribute type 1 has an invalid length. [ 253.729293][ T6881] loop4: detected capacity change from 0 to 2048 [ 253.763452][ T6881] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 253.789139][ T6881] netlink: 14 bytes leftover after parsing attributes in process `syz.4.527'. [ 254.978519][ T6897] fuse: Bad value for 'user_id' [ 255.203092][ T4361] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 255.380523][ T6903] loop2: detected capacity change from 0 to 2048 [ 255.493206][ T4361] usb 5-1: Using ep0 maxpacket: 32 [ 255.596238][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.602839][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.971073][ T4361] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 256.026114][ T6903] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 256.042362][ T6902] netlink: 14 bytes leftover after parsing attributes in process `syz.2.535'. [ 256.099690][ T4361] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 256.134642][ T4361] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 256.143334][ T4361] usb 5-1: Product: syz [ 256.147707][ T4361] usb 5-1: Manufacturer: syz [ 256.159548][ T4361] usb 5-1: SerialNumber: syz [ 256.174379][ T4361] usb 5-1: config 0 descriptor?? [ 256.266438][ T6893] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 256.573633][ T6914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.537'. [ 256.702123][ T4791] usb 5-1: USB disconnect, device number 11 [ 256.780864][ T6921] netlink: 'syz.0.540': attribute type 1 has an invalid length. [ 256.858701][ T6920] netlink: 'syz.3.539': attribute type 1 has an invalid length. [ 256.968662][ T6921] device veth3 entered promiscuous mode [ 256.981042][ T6924] netlink: 28 bytes leftover after parsing attributes in process `syz.0.540'. [ 257.526684][ T6933] loop3: detected capacity change from 0 to 2048 [ 257.633033][ T6933] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 257.667558][ T6933] netlink: 14 bytes leftover after parsing attributes in process `syz.3.541'. [ 259.599721][ T6956] netlink: 14 bytes leftover after parsing attributes in process `syz.0.548'. [ 260.562158][ T6965] netlink: 'syz.4.551': attribute type 1 has an invalid length. [ 260.690280][ T6965] device veth9 entered promiscuous mode [ 260.715799][ T6965] bond7: (slave veth9): Enslaving as a backup interface with a down link [ 260.759186][ T6970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.553'. [ 260.803123][ T4361] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 260.993076][ T4361] usb 2-1: Using ep0 maxpacket: 8 [ 261.001890][ T4361] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 261.019906][ T4361] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.029980][ T4361] usb 2-1: Product: syz [ 261.037833][ T4361] usb 2-1: Manufacturer: syz [ 261.046474][ T4361] usb 2-1: SerialNumber: syz [ 261.059935][ T4361] usb 2-1: config 0 descriptor?? [ 261.284542][ T4361] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 262.203335][ T6980] loop4: detected capacity change from 0 to 2048 [ 262.966366][ T4361] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -110 [ 262.996912][ T6980] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 263.013084][ T6978] netlink: 14 bytes leftover after parsing attributes in process `syz.4.555'. [ 264.153103][ T126] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 264.363748][ T126] usb 4-1: config 0 has no interfaces? [ 264.401799][ T126] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 264.423780][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.463200][ T126] usb 4-1: Product: syz [ 264.467399][ T126] usb 4-1: Manufacturer: syz [ 264.522626][ T126] usb 4-1: SerialNumber: syz [ 264.556108][ T4791] usb 2-1: USB disconnect, device number 9 [ 264.565511][ T126] usb 4-1: config 0 descriptor?? [ 264.729706][ T7012] device veth7 entered promiscuous mode [ 264.807730][ T7013] netlink: 28 bytes leftover after parsing attributes in process `syz.1.564'. [ 265.046415][ T7017] fuse: Bad value for 'fd' [ 265.847286][ T7031] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 266.522710][ T126] usb 4-1: USB disconnect, device number 11 [ 267.090126][ T7044] netlink: 40 bytes leftover after parsing attributes in process `syz.4.574'. [ 268.093236][ T7050] device veth7 entered promiscuous mode [ 268.217921][ T7052] netlink: 28 bytes leftover after parsing attributes in process `syz.3.577'. [ 269.403297][ T7072] fuse: Bad value for 'user_id' [ 270.883340][ T5207] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 271.114366][ T5207] usb 1-1: config 0 has no interfaces? [ 271.169414][ T5207] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 271.221440][ T5207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.276361][ T5207] usb 1-1: Product: syz [ 271.306374][ T5207] usb 1-1: Manufacturer: syz [ 271.331202][ T5207] usb 1-1: SerialNumber: syz [ 271.376412][ T5207] usb 1-1: config 0 descriptor?? [ 273.227981][ T6397] usb 1-1: USB disconnect, device number 10 [ 273.921478][ T7139] fuse: Bad value for 'user_id' [ 276.648654][ T7183] fuse: Bad value for 'user_id' [ 277.193050][ T4791] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 277.406697][ T4791] usb 5-1: config 0 has no interfaces? [ 277.477069][ T4791] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 277.508882][ T4791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.556128][ T4791] usb 5-1: Product: syz [ 277.578347][ T4791] usb 5-1: Manufacturer: syz [ 277.596442][ T4791] usb 5-1: SerialNumber: syz [ 277.627506][ T4791] usb 5-1: config 0 descriptor?? [ 278.564843][ T7222] netlink: 'syz.1.623': attribute type 1 has an invalid length. [ 278.819938][ T7227] device veth7 entered promiscuous mode [ 279.102670][ T7230] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 279.172048][ T7230] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 279.470001][ T26] usb 5-1: USB disconnect, device number 12 [ 281.803028][ T4361] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 282.025798][ T4361] usb 5-1: config 6 has an invalid interface number: 102 but max is 0 [ 282.086488][ T4361] usb 5-1: config 6 has no interface number 0 [ 282.163307][ T4361] usb 5-1: config 6 interface 102 has no altsetting 0 [ 282.200824][ T7287] netlink: 40 bytes leftover after parsing attributes in process `syz.2.636'. [ 282.220683][ T4361] usb 5-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=59.64 [ 282.248636][ T7291] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 282.283108][ T4361] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.291254][ T4361] usb 5-1: Product: syz [ 282.295831][ T4361] usb 5-1: Manufacturer: syz [ 282.300507][ T4361] usb 5-1: SerialNumber: syz [ 282.336336][ T7291] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 282.512996][ T4361] qmi_wwan: probe of 5-1:6.102 failed with error -22 [ 282.574572][ T4361] usb 5-1: USB disconnect, device number 13 [ 283.406163][ T7309] netlink: 'syz.3.643': attribute type 1 has an invalid length. [ 283.646939][ T7309] device veth7 entered promiscuous mode [ 283.973224][ T4361] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 284.193097][ T4361] usb 5-1: Using ep0 maxpacket: 8 [ 284.202379][ T4361] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 284.240756][ T4361] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.263183][ T4361] usb 5-1: Product: syz [ 284.267501][ T4361] usb 5-1: Manufacturer: syz [ 284.282374][ T4361] usb 5-1: SerialNumber: syz [ 284.300351][ T4361] usb 5-1: config 0 descriptor?? [ 284.524260][ T4361] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 285.396331][ T4331] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 285.603192][ T4331] usb 2-1: Using ep0 maxpacket: 16 [ 285.934753][ T7355] loop3: detected capacity change from 0 to 2048 [ 286.617485][ T7355] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 286.635289][ T7354] netlink: 14 bytes leftover after parsing attributes in process `syz.3.652'. [ 287.046056][ T4361] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 287.089812][ T4361] usb 5-1: USB disconnect, device number 14 [ 287.175380][ T7360] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 287.270972][ T7360] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 289.235043][ T7393] netlink: 'syz.0.660': attribute type 1 has an invalid length. [ 289.284434][ T7391] netlink: 40 bytes leftover after parsing attributes in process `syz.3.657'. [ 289.397307][ T7397] netlink: 28 bytes leftover after parsing attributes in process `syz.0.660'. [ 289.479642][ T7397] 8021q: adding VLAN 0 to HW filter on device bond5 [ 290.021417][ T4331] usb 2-1: unable to get BOS descriptor or descriptor too short [ 290.094051][ T4331] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 290.101703][ T4331] usb 2-1: can't read configurations, error -71 [ 290.413174][ T7411] netlink: 14 bytes leftover after parsing attributes in process `syz.0.663'. [ 291.117838][ T7410] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 293.312625][ T7442] netlink: 'syz.0.671': attribute type 1 has an invalid length. [ 293.556231][ T7442] device veth5 entered promiscuous mode [ 293.841654][ T7452] netlink: 'syz.0.673': attribute type 1 has an invalid length. [ 293.923742][ T7452] netlink: 28 bytes leftover after parsing attributes in process `syz.0.673'. [ 293.972480][ T7452] 8021q: adding VLAN 0 to HW filter on device bond7 [ 294.326660][ T7464] loop2: detected capacity change from 0 to 2048 [ 294.508492][ T7464] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 294.922813][ T7465] netlink: 14 bytes leftover after parsing attributes in process `syz.2.675'. [ 295.641029][ T7489] netlink: 40 bytes leftover after parsing attributes in process `syz.0.678'. [ 295.713073][ T4331] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 295.926682][ T7499] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 295.941917][ T4331] usb 2-1: config 0 has no interfaces? [ 295.961972][ T4331] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 295.985028][ T4331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.028282][ T4331] usb 2-1: Product: syz [ 296.066494][ T4331] usb 2-1: Manufacturer: syz [ 296.109108][ T4331] usb 2-1: SerialNumber: syz [ 296.140914][ T4331] usb 2-1: config 0 descriptor?? [ 297.485160][ T7525] netlink: 'syz.4.689': attribute type 1 has an invalid length. [ 297.661528][ T7531] loop3: detected capacity change from 0 to 2048 [ 298.422447][ T7531] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 298.445512][ T7528] netlink: 14 bytes leftover after parsing attributes in process `syz.3.690'. [ 298.551369][ T7533] device veth11 entered promiscuous mode [ 298.664849][ T7525] netlink: 28 bytes leftover after parsing attributes in process `syz.4.689'. [ 298.960747][ T7541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.692'. [ 299.992140][ T4331] usb 2-1: USB disconnect, device number 12 [ 300.111030][ T7564] binder: BINDER_SET_CONTEXT_MGR already set [ 300.137600][ T7564] binder: 7563:7564 ioctl 4018620d 200000000040 returned -16 [ 300.164414][ T7568] binder: 7563:7568 unknown command 0 [ 300.180204][ T7568] binder: 7563:7568 ioctl c0306201 2000000003c0 returned -22 [ 301.082488][ T7582] loop1: detected capacity change from 0 to 2048 [ 301.119114][ T7583] netlink: 14 bytes leftover after parsing attributes in process `syz.0.703'. [ 301.144826][ T7582] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 301.158834][ T7582] netlink: 14 bytes leftover after parsing attributes in process `syz.1.702'. [ 301.710646][ T7596] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 301.861318][ T7603] 8021q: VLANs not supported on gre1 [ 301.883181][ T4330] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 301.897727][ T7603] 8021q: VLANs not supported on gre1 [ 301.961160][ T7605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.707'. [ 302.073060][ T4330] usb 2-1: Using ep0 maxpacket: 8 [ 302.091154][ T4330] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 302.121754][ T4330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.135672][ T4330] usb 2-1: Product: syz [ 302.156897][ T4330] usb 2-1: Manufacturer: syz [ 302.161576][ T4330] usb 2-1: SerialNumber: syz [ 302.198044][ T4330] usb 2-1: config 0 descriptor?? [ 302.409066][ T4330] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 302.443221][ T4791] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 302.633165][ T126] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 302.654711][ T4791] usb 5-1: config 6 has an invalid interface number: 102 but max is 0 [ 302.690456][ T4791] usb 5-1: config 6 has no interface number 0 [ 302.802252][ T4791] usb 5-1: config 6 interface 102 has no altsetting 0 [ 302.884382][ T126] usb 1-1: config 0 has no interfaces? [ 302.937269][ T126] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 302.952500][ T4791] usb 5-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=59.64 [ 303.041226][ T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.060700][ T4791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.061490][ T7633] binder: 7632:7633 unknown command 0 [ 303.107367][ T126] usb 1-1: Product: syz [ 303.107375][ T7633] binder: 7632:7633 ioctl c0306201 2000000003c0 returned -22 [ 303.160903][ T4791] usb 5-1: Product: syz [ 303.191094][ T4791] usb 5-1: Manufacturer: syz [ 303.275163][ T126] usb 1-1: Manufacturer: syz [ 303.285124][ T126] usb 1-1: SerialNumber: syz [ 303.360380][ T4791] usb 5-1: SerialNumber: syz [ 303.394135][ T126] usb 1-1: config 0 descriptor?? [ 303.629778][ T4791] qmi_wwan: probe of 5-1:6.102 failed with error -22 [ 303.791551][ T7646] loop2: detected capacity change from 0 to 2048 [ 303.836938][ T7646] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 303.867533][ T7646] netlink: 14 bytes leftover after parsing attributes in process `syz.2.714'. [ 304.253664][ T4791] usb 5-1: USB disconnect, device number 15 [ 304.566777][ T7651] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 304.641379][ T7651] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 304.733634][ T7653] netlink: 'syz.4.716': attribute type 1 has an invalid length. [ 304.885713][ T4330] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 304.894943][ T4330] usb 2-1: USB disconnect, device number 13 [ 305.066712][ T7658] device veth11 entered promiscuous mode [ 305.089341][ T7658] bond9: (slave veth11): Enslaving as a backup interface with a down link [ 305.149019][ T7669] netlink: 28 bytes leftover after parsing attributes in process `syz.4.716'. [ 306.657160][ T7695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.723'. [ 307.110605][ T4791] usb 1-1: USB disconnect, device number 11 [ 307.597027][ T7708] netlink: 14 bytes leftover after parsing attributes in process `syz.0.725'. [ 308.303525][ T7712] netlink: 'syz.0.728': attribute type 1 has an invalid length. [ 308.414191][ T7712] device veth7 entered promiscuous mode [ 308.491094][ T7712] bond8: (slave veth7): Enslaving as a backup interface with a down link [ 308.621288][ T7730] device lo entered promiscuous mode [ 308.643933][ T7730] device tunl0 entered promiscuous mode [ 308.661338][ T7730] device gre0 entered promiscuous mode [ 308.667314][ T4791] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 308.690071][ T7730] device gretap0 entered promiscuous mode [ 308.714253][ T7730] device erspan0 entered promiscuous mode [ 308.736107][ T7730] device ip_vti0 entered promiscuous mode [ 308.769100][ T7730] device ip6_vti0 entered promiscuous mode [ 308.797586][ T7730] device sit0 entered promiscuous mode [ 308.829694][ T7730] device ip6tnl0 entered promiscuous mode [ 308.836574][ T7730] device ip6gre0 entered promiscuous mode [ 308.848937][ T7730] device syz_tun entered promiscuous mode [ 308.854962][ T4791] usb 3-1: config 6 has an invalid interface number: 102 but max is 0 [ 308.855848][ T7730] device ip6gretap0 entered promiscuous mode [ 308.871952][ T4791] usb 3-1: config 6 has no interface number 0 [ 308.888178][ T7730] device bridge0 entered promiscuous mode [ 308.888795][ T4791] usb 3-1: config 6 interface 102 has no altsetting 0 [ 308.908419][ T7730] device vcan0 entered promiscuous mode [ 308.918509][ T7730] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 308.928885][ T7730] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 308.940153][ T7730] device bond0 entered promiscuous mode [ 308.948151][ T7730] device bond_slave_0 entered promiscuous mode [ 308.948804][ T4791] usb 3-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=59.64 [ 308.964231][ T7730] device bond_slave_1 entered promiscuous mode [ 308.979521][ T4791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.996945][ T4791] usb 3-1: Product: syz [ 309.010293][ T4791] usb 3-1: Manufacturer: syz [ 309.011860][ T7730] device team0 entered promiscuous mode [ 309.025322][ T4791] usb 3-1: SerialNumber: syz [ 309.062741][ T7730] device team_slave_0 entered promiscuous mode [ 309.102699][ T7730] device team_slave_1 entered promiscuous mode [ 309.139348][ T7730] device dummy0 entered promiscuous mode [ 309.188768][ T7730] device nlmon0 entered promiscuous mode [ 309.253797][ T4791] qmi_wwan: probe of 3-1:6.102 failed with error -22 [ 309.281265][ T4791] usb 3-1: USB disconnect, device number 9 [ 309.290890][ T7730] device caif0 entered promiscuous mode [ 309.337644][ T7730] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 309.845011][ T7764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.739'. [ 310.433166][ T4361] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 310.673011][ T4361] usb 3-1: Using ep0 maxpacket: 8 [ 310.685999][ T4361] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 310.708534][ T4361] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.752274][ T4361] usb 3-1: Product: syz [ 310.769193][ T4361] usb 3-1: Manufacturer: syz [ 310.788393][ T4361] usb 3-1: SerialNumber: syz [ 310.825260][ T7790] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 310.832215][ T7790] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 310.852637][ T4361] usb 3-1: config 0 descriptor?? [ 311.078312][ T4361] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 311.217220][ T7790] vhci_hcd vhci_hcd.0: Device attached [ 311.473017][ T22] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 311.683625][ T4361] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 311.818871][ T7806] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 311.842767][ T7806] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 311.871314][ T7792] vhci_hcd: connection reset by peer [ 311.879276][ T7710] vhci_hcd: stop threads [ 311.887908][ T7710] vhci_hcd: release socket [ 311.909493][ T7710] vhci_hcd: disconnect device [ 312.703005][ T4338] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 312.904491][ T4338] usb 2-1: config 6 has an invalid interface number: 102 but max is 0 [ 312.927056][ T4338] usb 2-1: config 6 has no interface number 0 [ 312.964659][ T4338] usb 2-1: config 6 interface 102 has no altsetting 0 [ 313.024812][ T4338] usb 2-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=59.64 [ 313.093186][ T7835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.756'. [ 313.162884][ T4338] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.171084][ T4338] usb 2-1: Product: syz [ 313.193070][ T4338] usb 2-1: Manufacturer: syz [ 313.197734][ T4338] usb 2-1: SerialNumber: syz [ 313.226662][ T4791] usb 3-1: USB disconnect, device number 10 [ 313.445555][ T4338] qmi_wwan: probe of 2-1:6.102 failed with error -22 [ 313.489097][ T4338] usb 2-1: USB disconnect, device number 14 [ 313.550751][ T7845] netlink: 40 bytes leftover after parsing attributes in process `syz.4.757'. [ 313.977045][ T7858] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 314.031037][ T7858] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 314.173959][ T7865] fuse: Unknown parameter 'grou00000000000000000000' [ 315.859123][ T7887] loop2: detected capacity change from 0 to 2048 [ 315.869712][ T7887] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 315.891668][ T7887] netlink: 14 bytes leftover after parsing attributes in process `syz.2.768'. [ 316.269944][ T7898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.771'. [ 316.580733][ T7904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.773'. [ 316.723433][ T22] vhci_hcd: vhci_device speed not set [ 316.942382][ T7911] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 316.980584][ T7911] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 317.004912][ T7913] fuse: Unknown parameter 'grou00000000000000000000' [ 317.039243][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.045674][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.203020][ T4331] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 317.395524][ T4331] usb 4-1: config 6 has an invalid interface number: 102 but max is 0 [ 317.413563][ T7923] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 317.422379][ T4331] usb 4-1: config 6 has no interface number 0 [ 317.451087][ T4331] usb 4-1: config 6 interface 102 has no altsetting 0 [ 317.492501][ T4331] usb 4-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=59.64 [ 317.506329][ T126] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 317.557330][ T4331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.581443][ T4331] usb 4-1: Product: syz [ 317.601717][ T4331] usb 4-1: Manufacturer: syz [ 317.613939][ T4331] usb 4-1: SerialNumber: syz [ 317.703260][ T126] usb 1-1: Using ep0 maxpacket: 32 [ 317.716410][ T126] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 317.760101][ T126] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 317.810644][ T126] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 317.848993][ T126] usb 1-1: Product: syz [ 317.864305][ T126] usb 1-1: Manufacturer: syz [ 317.876572][ T4331] qmi_wwan: probe of 4-1:6.102 failed with error -22 [ 317.894034][ T126] usb 1-1: SerialNumber: syz [ 317.920125][ T4331] usb 4-1: USB disconnect, device number 12 [ 317.938995][ T126] usb 1-1: config 0 descriptor?? [ 317.991212][ T7918] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 318.473288][ T7930] loop2: detected capacity change from 0 to 2048 [ 318.635012][ T7930] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 319.064162][ T7933] netlink: 14 bytes leftover after parsing attributes in process `syz.2.781'. [ 319.407607][ T4331] usb 1-1: USB disconnect, device number 12 [ 319.600947][ T7943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.784'. [ 319.817327][ T7948] netlink: 'syz.1.786': attribute type 1 has an invalid length. [ 319.880171][ T7948] device veth7 entered promiscuous mode [ 319.897927][ T7948] netlink: 28 bytes leftover after parsing attributes in process `syz.1.786'. [ 320.226317][ T7953] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 320.249842][ T7953] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 320.539575][ T27] audit: type=1326 audit(1752908082.241:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7958 comm="syz.2.789" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f516b18e9a9 code=0x0 [ 320.605583][ T7957] netlink: 40 bytes leftover after parsing attributes in process `syz.1.787'. [ 322.085768][ T7973] loop3: detected capacity change from 0 to 2048 [ 322.120814][ T7973] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 322.146563][ T7973] netlink: 14 bytes leftover after parsing attributes in process `syz.3.793'. [ 323.407596][ T7987] netlink: 'syz.0.797': attribute type 1 has an invalid length. [ 323.513269][ T7990] device veth9 entered promiscuous mode [ 323.535359][ T7987] netlink: 28 bytes leftover after parsing attributes in process `syz.0.797'. [ 323.590804][ T7994] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 323.600159][ T7994] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 323.964013][ T27] audit: type=1326 audit(1752908085.671:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8001 comm="syz.3.802" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a4b58e9a9 code=0x0 [ 324.585237][ T8016] loop4: detected capacity change from 0 to 2048 [ 325.237708][ T8016] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 325.264298][ T8013] netlink: 14 bytes leftover after parsing attributes in process `syz.4.805'. [ 326.028999][ T8035] netlink: 40 bytes leftover after parsing attributes in process `syz.4.808'. [ 326.202716][ T8040] netlink: 'syz.0.811': attribute type 1 has an invalid length. [ 326.392246][ T8047] device veth9 entered promiscuous mode [ 326.496152][ T8040] device veth11 entered promiscuous mode [ 326.537176][ T8043] netlink: 28 bytes leftover after parsing attributes in process `syz.0.811'. [ 328.292618][ T27] audit: type=1326 audit(1752908089.991:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8074 comm="syz.2.819" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f516b18e9a9 code=0x0 [ 328.480119][ T4331] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 328.680782][ T8082] loop4: detected capacity change from 0 to 2048 [ 328.858423][ T8082] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 329.458719][ T4331] usb 2-1: config 0 has no interfaces? [ 329.495967][ T4331] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 329.533076][ T4331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.559769][ T4331] usb 2-1: Product: syz [ 329.567896][ T4331] usb 2-1: Manufacturer: syz [ 329.572551][ T4331] usb 2-1: SerialNumber: syz [ 329.614358][ T4331] usb 2-1: config 0 descriptor?? [ 331.575055][ T8057] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 331.584924][ T8057] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 331.608586][ T8083] netlink: 14 bytes leftover after parsing attributes in process `syz.4.818'. [ 332.173134][ T8101] netlink: 'syz.4.825': attribute type 1 has an invalid length. [ 332.366334][ T8101] device veth13 entered promiscuous mode [ 332.407448][ T8106] netlink: 28 bytes leftover after parsing attributes in process `syz.4.825'. [ 332.948086][ T27] audit: type=1326 audit(1752908094.651:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.3.830" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a4b58e9a9 code=0x0 [ 332.966565][ T22] usb 2-1: USB disconnect, device number 15 [ 333.020819][ T8121] netlink: 40 bytes leftover after parsing attributes in process `syz.4.828'. [ 333.773028][ T126] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 333.966810][ T126] usb 1-1: config 0 has no interfaces? [ 333.987193][ T126] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 334.050024][ T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.076407][ T126] usb 1-1: Product: syz [ 334.096227][ T126] usb 1-1: Manufacturer: syz [ 334.112119][ T126] usb 1-1: SerialNumber: syz [ 334.129750][ T126] usb 1-1: config 0 descriptor?? [ 334.341996][ T8134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.833'. [ 334.393550][ T8144] fuse: Unknown parameter 'group_id00000000000000000000' [ 334.409269][ T8134] netlink: 24 bytes leftover after parsing attributes in process `syz.0.833'. [ 334.730253][ T8153] device veth9 entered promiscuous mode [ 335.049898][ T27] audit: type=1326 audit(1752908096.751:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.3.845" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a4b58e9a9 code=0x0 [ 335.113098][ T26] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 335.243086][ T4791] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 335.303073][ T26] usb 3-1: Using ep0 maxpacket: 8 [ 335.318924][ T26] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 335.352635][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.388557][ T26] usb 3-1: Product: syz [ 335.406840][ T26] usb 3-1: Manufacturer: syz [ 335.426940][ T26] usb 3-1: SerialNumber: syz [ 335.454276][ T4791] usb 2-1: config 0 has no interfaces? [ 335.467506][ T4791] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 335.481579][ T26] usb 3-1: config 0 descriptor?? [ 335.485863][ T4791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.507274][ T4791] usb 2-1: Product: syz [ 335.511670][ T4791] usb 2-1: Manufacturer: syz [ 335.517007][ T4791] usb 2-1: SerialNumber: syz [ 335.549314][ T4791] usb 2-1: config 0 descriptor?? [ 335.707068][ T26] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 336.523178][ T22] usb 1-1: USB disconnect, device number 13 [ 336.653637][ T8185] fuse: Bad value for 'user_id' [ 337.125121][ T26] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 338.027343][ T5207] usb 2-1: USB disconnect, device number 16 [ 338.228328][ T22] usb 3-1: USB disconnect, device number 11 [ 338.488171][ T8215] 8021q: VLANs not supported on gre1 [ 338.514923][ T8215] 8021q: VLANs not supported on gre1 [ 338.578372][ T8217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.862'. [ 338.982977][ T4791] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 339.009944][ T8225] fuse: Bad value for 'user_id' [ 339.182151][ T4791] usb 5-1: config 0 has no interfaces? [ 339.205295][ T4791] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 339.211372][ T8232] netlink: 16 bytes leftover after parsing attributes in process `syz.1.868'. [ 339.233011][ T4791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.277447][ T4791] usb 5-1: Product: syz [ 339.281669][ T4791] usb 5-1: Manufacturer: syz [ 339.312533][ T4791] usb 5-1: SerialNumber: syz [ 339.348364][ T4791] usb 5-1: config 0 descriptor?? [ 339.589985][ T8221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.863'. [ 339.633186][ T8221] netlink: 24 bytes leftover after parsing attributes in process `syz.4.863'. [ 339.633543][ T4800] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 339.873275][ T4800] usb 2-1: Using ep0 maxpacket: 8 [ 339.886422][ T4800] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 339.956252][ T4800] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.994469][ T4800] usb 2-1: Product: syz [ 340.008212][ T4800] usb 2-1: Manufacturer: syz [ 340.022406][ T4800] usb 2-1: SerialNumber: syz [ 340.056637][ T4800] usb 2-1: config 0 descriptor?? [ 340.288729][ T4800] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 341.711423][ T4800] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 341.756181][ T5207] usb 5-1: USB disconnect, device number 16 [ 341.993371][ T22] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 342.194792][ T22] usb 4-1: config 0 has no interfaces? [ 342.214164][ T22] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 342.265386][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.278383][ T8280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.882'. [ 342.331055][ T22] usb 4-1: Product: syz [ 342.336559][ T22] usb 4-1: Manufacturer: syz [ 342.341285][ T22] usb 4-1: SerialNumber: syz [ 342.420693][ T22] usb 4-1: config 0 descriptor?? [ 342.791602][ T126] usb 2-1: USB disconnect, device number 17 [ 343.613102][ T4800] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 343.793004][ T126] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 343.813097][ T4800] usb 5-1: Using ep0 maxpacket: 8 [ 343.822238][ T4800] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 343.849227][ T4800] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.867668][ T4800] usb 5-1: Product: syz [ 343.877955][ T4800] usb 5-1: Manufacturer: syz [ 343.909107][ T4800] usb 5-1: SerialNumber: syz [ 343.957113][ T4800] usb 5-1: config 0 descriptor?? [ 343.985413][ T126] usb 1-1: config 0 has no interfaces? [ 344.001079][ T126] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 344.055687][ T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.072648][ T8309] program syz.1.893 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 344.098162][ T126] usb 1-1: Product: syz [ 344.106459][ T126] usb 1-1: Manufacturer: syz [ 344.121281][ T126] usb 1-1: SerialNumber: syz [ 344.148231][ T126] usb 1-1: config 0 descriptor?? [ 344.188983][ T4800] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 344.444322][ T8304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.891'. [ 344.458178][ T8304] netlink: 24 bytes leftover after parsing attributes in process `syz.0.891'. [ 344.763063][ T22] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 344.802710][ T4800] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 344.953183][ T22] usb 2-1: Using ep0 maxpacket: 8 [ 344.966723][ T22] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 344.980744][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.989394][ T22] usb 2-1: Product: syz [ 344.994065][ T22] usb 2-1: Manufacturer: syz [ 344.998792][ T22] usb 2-1: SerialNumber: syz [ 345.013983][ T22] usb 2-1: config 0 descriptor?? [ 345.228754][ T22] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 345.311571][ T4800] usb 4-1: USB disconnect, device number 13 [ 345.843238][ T4800] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 346.063005][ T4800] usb 4-1: Using ep0 maxpacket: 8 [ 346.075326][ T4800] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 346.090415][ T4800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.098887][ T4800] usb 4-1: Product: syz [ 346.103390][ T4800] usb 4-1: Manufacturer: syz [ 346.109334][ T4800] usb 4-1: SerialNumber: syz [ 346.130135][ T4800] usb 4-1: config 0 descriptor?? [ 346.290269][ T5207] usb 5-1: USB disconnect, device number 17 [ 346.351067][ T4800] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 346.598649][ T126] usb 1-1: USB disconnect, device number 14 [ 347.097523][ T22] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 347.127351][ T22] usb 2-1: USB disconnect, device number 18 [ 347.594369][ T5207] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 347.807287][ T4800] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 347.816560][ T5207] usb 5-1: config 0 has no interfaces? [ 347.892442][ T5207] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 347.913163][ T5207] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.924478][ T5207] usb 5-1: Product: syz [ 347.928690][ T5207] usb 5-1: Manufacturer: syz [ 347.935547][ T5207] usb 5-1: SerialNumber: syz [ 347.941873][ T5207] usb 5-1: config 0 descriptor?? [ 348.088400][ T8341] program syz.1.904 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 348.530899][ T8350] device syzkaller0 entered promiscuous mode [ 348.933319][ T5207] usb 4-1: USB disconnect, device number 14 [ 348.993269][ T4800] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 349.223195][ T4800] usb 2-1: Using ep0 maxpacket: 8 [ 349.232514][ T4800] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 349.314504][ T4800] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.366903][ T4800] usb 2-1: Product: syz [ 349.374153][ T4800] usb 2-1: Manufacturer: syz [ 349.381912][ T4800] usb 2-1: SerialNumber: syz [ 349.402657][ T4800] usb 2-1: config 0 descriptor?? [ 349.619841][ T4800] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 350.246706][ T4800] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 351.244557][ T5207] usb 5-1: USB disconnect, device number 18 [ 351.403330][ T8383] [ 351.405724][ T8383] ====================================================== [ 351.412740][ T8383] WARNING: possible circular locking dependency detected [ 351.419759][ T8383] 6.1.146-syzkaller #0 Not tainted [ 351.424859][ T8383] ------------------------------------------------------ [ 351.431880][ T8383] syz.4.919/8383 is trying to acquire lock: [ 351.437777][ T8383] ffff8880b8e281d8 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x184/0x870 [ 351.446461][ T8383] [ 351.446461][ T8383] but task is already holding lock: [ 351.453847][ T8383] ffff8880b8e28418 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 351.462746][ T8383] [ 351.462746][ T8383] which lock already depends on the new lock. [ 351.462746][ T8383] [ 351.473154][ T8383] [ 351.473154][ T8383] the existing dependency chain (in reverse order) is: [ 351.482167][ T8383] [ 351.482167][ T8383] -> #1 (&base->lock){-.-.}-{2:2}: [ 351.489470][ T8383] _raw_spin_lock_irqsave+0xa4/0xf0 [ 351.495216][ T8383] lock_timer_base+0x123/0x270 [ 351.500511][ T8383] __mod_timer+0x117/0xd20 [ 351.505455][ T8383] queue_delayed_work_on+0x126/0x1e0 [ 351.511271][ T8383] kvfree_call_rcu+0x4cb/0x870 [ 351.516574][ T8383] rtnl_register_internal+0x489/0x590 [ 351.522483][ T8383] rtnl_register+0x2e/0x70 [ 351.527425][ T8383] ip_rt_init+0x323/0x3b5 [ 351.532279][ T8383] ip_init+0xa/0x14 [ 351.536624][ T8383] inet_init+0x2bd/0x3cf [ 351.541392][ T8383] do_one_initcall+0x214/0x7a0 [ 351.546685][ T8383] do_initcall_level+0x137/0x1e4 [ 351.552148][ T8383] do_initcalls+0x4b/0x8a [ 351.557010][ T8383] kernel_init_freeable+0x3fa/0x5ac [ 351.562744][ T8383] kernel_init+0x19/0x1b0 [ 351.567605][ T8383] ret_from_fork+0x1f/0x30 [ 351.572553][ T8383] [ 351.572553][ T8383] -> #0 (krc.lock){..-.}-{2:2}: [ 351.579593][ T8383] __lock_acquire+0x2cf8/0x7c50 [ 351.584970][ T8383] lock_acquire+0x1b4/0x490 [ 351.589997][ T8383] _raw_spin_lock+0x2a/0x40 [ 351.595077][ T8383] kvfree_call_rcu+0x184/0x870 [ 351.600373][ T8383] trie_delete_elem+0x52d/0x690 [ 351.605753][ T8383] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 351.611747][ T8383] bpf_trace_run3+0x1e3/0x400 [ 351.616951][ T8383] enqueue_timer+0x411/0x5c0 [ 351.622065][ T8383] __mod_timer+0x8e1/0xd20 [ 351.627012][ T8383] sk_reset_timer+0x1f/0xb0 [ 351.632034][ T8383] tipc_sk_finish_conn+0x154/0x7e0 [ 351.637670][ T8383] tipc_socketpair+0x250/0x470 [ 351.642972][ T8383] __sys_socketpair+0x2ac/0x540 [ 351.648354][ T8383] __x64_sys_socketpair+0x97/0xb0 [ 351.653910][ T8383] do_syscall_64+0x4c/0xa0 [ 351.658852][ T8383] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 351.665282][ T8383] [ 351.665282][ T8383] other info that might help us debug this: [ 351.665282][ T8383] [ 351.675502][ T8383] Possible unsafe locking scenario: [ 351.675502][ T8383] [ 351.682951][ T8383] CPU0 CPU1 [ 351.688319][ T8383] ---- ---- [ 351.693679][ T8383] lock(&base->lock); [ 351.697749][ T8383] lock(krc.lock); [ 351.704087][ T8383] lock(&base->lock); [ 351.710693][ T8383] lock(krc.lock); [ 351.714498][ T8383] [ 351.714498][ T8383] *** DEADLOCK *** [ 351.714498][ T8383] [ 351.722634][ T8383] 2 locks held by syz.4.919/8383: [ 351.727652][ T8383] #0: ffff8880b8e28418 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 351.736980][ T8383] #1: ffffffff8cb2ae20 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run3+0xf0/0x400 [ 351.746302][ T8383] [ 351.746302][ T8383] stack backtrace: [ 351.752195][ T8383] CPU: 0 PID: 8383 Comm: syz.4.919 Not tainted 6.1.146-syzkaller #0 [ 351.760172][ T8383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 351.770238][ T8383] Call Trace: [ 351.773526][ T8383] [ 351.776466][ T8383] dump_stack_lvl+0x168/0x22e [ 351.781159][ T8383] ? load_image+0x3b0/0x3b0 [ 351.785668][ T8383] ? show_regs_print_info+0x12/0x12 [ 351.790871][ T8383] ? print_circular_bug+0x12b/0x1a0 [ 351.796079][ T8383] check_noncircular+0x274/0x310 [ 351.801024][ T8383] ? add_chain_block+0x940/0x940 [ 351.805970][ T8383] ? lockdep_lock+0xdc/0x1e0 [ 351.810579][ T8383] ? _find_first_zero_bit+0xcf/0x100 [ 351.815891][ T8383] __lock_acquire+0x2cf8/0x7c50 [ 351.820753][ T8383] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 351.826655][ T8383] ? verify_lock_unused+0x140/0x140 [ 351.831874][ T8383] ? kasan_save_stack+0x4c/0x60 [ 351.836731][ T8383] ? kasan_save_stack+0x3a/0x60 [ 351.841595][ T8383] ? __kasan_record_aux_stack+0xb2/0xc0 [ 351.847138][ T8383] ? kvfree_call_rcu+0x108/0x870 [ 351.852074][ T8383] ? trie_delete_elem+0x52d/0x690 [ 351.857101][ T8383] ? bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 351.862740][ T8383] ? bpf_trace_run3+0x1e3/0x400 [ 351.867700][ T8383] ? enqueue_timer+0x411/0x5c0 [ 351.872457][ T8383] ? __mod_timer+0x8e1/0xd20 [ 351.877056][ T8383] ? sk_reset_timer+0x1f/0xb0 [ 351.881728][ T8383] ? tipc_sk_finish_conn+0x154/0x7e0 [ 351.887010][ T8383] ? tipc_socketpair+0x250/0x470 [ 351.891942][ T8383] ? __sys_socketpair+0x2ac/0x540 [ 351.896964][ T8383] ? __x64_sys_socketpair+0x97/0xb0 [ 351.902164][ T8383] ? do_syscall_64+0x4c/0xa0 [ 351.906751][ T8383] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 351.912852][ T8383] lock_acquire+0x1b4/0x490 [ 351.917372][ T8383] ? kvfree_call_rcu+0x184/0x870 [ 351.922334][ T8383] ? read_lock_is_recursive+0x10/0x10 [ 351.927715][ T8383] ? __phys_addr+0xb6/0x170 [ 351.932216][ T8383] _raw_spin_lock+0x2a/0x40 [ 351.936742][ T8383] ? kvfree_call_rcu+0x184/0x870 [ 351.941688][ T8383] kvfree_call_rcu+0x184/0x870 [ 351.946455][ T8383] ? rcu_leak_callback+0x10/0x10 [ 351.951393][ T8383] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 351.957292][ T8383] ? _raw_spin_unlock+0x40/0x40 [ 351.962156][ T8383] trie_delete_elem+0x52d/0x690 [ 351.967014][ T8383] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 351.972467][ T8383] bpf_trace_run3+0x1e3/0x400 [ 351.977153][ T8383] ? do_raw_spin_unlock+0x11d/0x230 [ 351.982356][ T8383] ? bpf_trace_run3+0xf0/0x400 [ 351.987124][ T8383] ? bpf_trace_run2+0x3b0/0x3b0 [ 351.991976][ T8383] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 351.997879][ T8383] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 352.003272][ T8383] ? _raw_spin_lock+0x40/0x40 [ 352.007955][ T8383] enqueue_timer+0x411/0x5c0 [ 352.012543][ T8383] __mod_timer+0x8e1/0xd20 [ 352.016976][ T8383] sk_reset_timer+0x1f/0xb0 [ 352.021480][ T8383] tipc_sk_finish_conn+0x154/0x7e0 [ 352.026600][ T8383] tipc_socketpair+0x250/0x470 [ 352.031467][ T8383] __sys_socketpair+0x2ac/0x540 [ 352.036338][ T8383] __x64_sys_socketpair+0x97/0xb0 [ 352.041356][ T8383] do_syscall_64+0x4c/0xa0 [ 352.045766][ T8383] ? clear_bhb_loop+0x60/0xb0 [ 352.050433][ T8383] ? clear_bhb_loop+0x60/0xb0 [ 352.055121][ T8383] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 352.061029][ T8383] RIP: 0033:0x7f1b7d38e9a9 [ 352.065434][ T8383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.085042][ T8383] RSP: 002b:00007f1b7e1e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 352.093476][ T8383] RAX: ffffffffffffffda RBX: 00007f1b7d5b5fa0 RCX: 00007f1b7d38e9a9 [ 352.101459][ T8383] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 352.109423][ T8383] RBP: 00007f1b7d410d69 R08: 0000000000000000 R09: 0000000000000000 [ 352.117398][ T8383] R10: 0000200000000940 R11: 0000000000000246 R12: 0000000000000000 [ 352.125369][ T8383] R13: 0000000000000000 R14: 00007f1b7d5b5fa0 R15: 00007fffcd59dca8 [ 352.133344][ T8383] [ 352.176234][ T4791] usb 2-1: USB disconnect, device number 19