last executing test programs: 11.441431182s ago: executing program 2 (id=864): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') read$char_usb(r3, &(0x7f0000000040)=""/4122, 0x101a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) preadv(r3, 0x0, 0x0, 0x0, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000001080)=""/178, 0xb2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x2) unshare(0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x9a) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000c40), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x5) ioctl$TCFLSH(r5, 0x8925, 0x1000020009103) 10.240600994s ago: executing program 2 (id=867): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xa, &(0x7f0000000b40)=@raw=[@alu, @func, @tail_call, @map_val, @exit], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) 9.792916572s ago: executing program 2 (id=876): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) io_uring_setup(0x168e, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x1de) write$binfmt_script(r6, &(0x7f00000019c0)={'#! ', './file0', [{0x20, '\x06^-'}]}, 0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_DIRENTPLUS(r7, &(0x7f0000001180)=ANY=[@ANYRES16=r1, @ANYRES64=0x3], 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r6) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)=[&(0x7f0000000340)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\f\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00', &(0x7f00000007c0)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00', &(0x7f0000000c40)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00', &(0x7f00000010c0)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00', &(0x7f0000001540)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00'], &(0x7f00000001c0)=[&(0x7f0000001e80)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00', 0x0]) sendmsg$nl_route(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001a80)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRESDEC, @ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x20000015}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x4, 0x4, 0x4, 0x8}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x17, &(0x7f0000001b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000b, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x90) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e4349108981490a0fff001020301090212000100000000090405"], 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x82842) 6.846421561s ago: executing program 0 (id=882): prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) ioperm(0x0, 0x2, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 6.4909821s ago: executing program 0 (id=885): r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r3) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000240)=@nl=@proc}) io_uring_enter(r0, 0x7ba2, 0x0, 0x0, 0x0, 0xffffffffffffff80) 6.140009845s ago: executing program 1 (id=887): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000040)={0x20, 0x0, 0x7, {0x7, 0x0, "182168b459"}}, 0x0, &(0x7f0000000180)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x0, 0x31, 0xfe, "e51ced8a", "6a82e3ac"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xff, 0x60, 0x5, 0xb1, 0x8, 0x4e, 0x54ab}}}, &(0x7f0000000940)={0x84, &(0x7f00000002c0)={0x40, 0x0, 0xe2, "e9b24bae50dc222c34d3e2342a44ad241509a1f194a6fe58536512015dcf685065767f79c4668fc63b0612567c9575273a89ad7a1043673fe662ab8a9acf453a1bfc2e85ea3ce930789b503d2440772d948c26df9fb2ca26a571f6c9e01f2bda78cf03a91e4bb3822340cc47c49ace7c86dcf40f22862b74031c9c2d469726ae17f0192fb8bb1be3c2b9575152f9756abc399bf53f604f3f0618cf0fc035605890f3c5d679657c565653544100d594fa0c429ccf2c514020bd95e39d58d7a797310432923ac291972aba0afcdafd35bb42d4c95e0c779c98e40de8ca340f27c16cb8"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xa}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000500)={0x20, 0x0, 0x8, {0x1c00, 0x80, [0x0]}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x4}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "30fe"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0xfffb}, &(0x7f0000000780)={0x40, 0x13, 0x6}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000800)={0x40, 0x19, 0x2, "9af5"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x9}, &(0x7f00000008c0)={0x40, 0x1e, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x4}}) utimes(&(0x7f0000000200)='./file0/file0\x00', 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 6.022929348s ago: executing program 0 (id=889): syz_usb_connect$hid(0x0, 0x36, &(0x7f000000d940)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x69, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f000000dd80)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f000000db00)=@string={0x2}}, {0x2c, &(0x7f000000dbc0)=@string={0x2c, 0x3, "33af100e3c1e8a992a1894d647a4f2a6002afeb9df076a3070380af656d699248514577159fd72dee8dc"}}]}) 5.577639665s ago: executing program 2 (id=891): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r5, r4, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 4.549818119s ago: executing program 2 (id=902): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x2) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/bus\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000540)=""/240, 0xf0) getdents64(r1, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x3}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) readlinkat(r2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)=""/235, 0xeb) 3.374117326s ago: executing program 4 (id=904): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r3, 0x80044dff, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r7 = socket(0x80000000000000a, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r7, 0xc60b, 0x0, 0x0, 0xa, 0x1}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB='/'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r4, 0x2d7e, 0x0, 0x0, 0x0, 0x0) 3.10677562s ago: executing program 3 (id=905): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000002800)) 2.403677886s ago: executing program 3 (id=906): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCGSOFTCAR(r1, 0x4b49, &(0x7f0000001080)) 2.330045743s ago: executing program 4 (id=907): ioprio_set$pid(0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) setpgid(0x0, r1) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x149a82, 0x0) sendfile(r2, r2, 0x0, 0x1) 2.191770403s ago: executing program 3 (id=908): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) write$binfmt_aout(r2, 0x0, 0x8a) stat(0x0, 0x0) fchown(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x0) poll(&(0x7f0000000040)=[{r7}], 0x1, 0xfefd) r8 = dup(r6) write$UHID_INPUT(r8, &(0x7f0000002080)={0xf, {"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", 0x104d}}, 0x1006) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc6000002) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 2.176229701s ago: executing program 0 (id=909): iopl(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$caif_stream(0x25, 0x1, 0x0) recvmmsg(r1, &(0x7f0000004dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2c1a12586b65031e, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) syz_open_dev$vim2m(&(0x7f0000000240), 0xb, 0x2) sendmsg$inet6(r2, &(0x7f0000000880)={&(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1400000000000000290000000b0000000000000800000000766e2822ae2e973953f3bef5614c44572833acf65d0ee625bf3b4646da6df469765c460b7de3788723b011d407544d0c107c9471d49e1e2f532aadf13fac5ba9cd5cf851cea00f431ba15bf98f4aba1d27de7e35"], 0x18}, 0x0) iopl(0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$kcm(0x2, 0x200000000000001, 0x106) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04049524080000000054679261eb21209a9600"], 0xd) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) ioctl$PPPIOCSFLAGS(r5, 0x80047453, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x38) close(r4) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYBLOB="0100000000000000000007000000140008"], 0x30}}, 0x0) r7 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000100)={0x9b0000, 0x400, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x9b0903, 0x0, '\x00', @value64}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r8, 0x1, 0x2a, &(0x7f0000000100), 0x4) recvmmsg(r8, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc002a0, 0x0) write$binfmt_misc(r3, &(0x7f0000000040)=ANY=[], 0xffc1) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 2.17546147s ago: executing program 2 (id=910): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x36, 0x4, 0x0, 0x0, 0xd8, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@dev}, {@remote, 0x8}, {@dev, 0x659}, {@empty}, {@empty}, {@multicast1, 0xefd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote, 0x3}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@broadcast}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x34f740, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'\x00', 0x846512678b3a18b2}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000001900)={'sit0\x00', @remote}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000740)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/24, 0x18) socket$alg(0x26, 0x5, 0x0) r7 = accept$alg(r6, 0x0, 0x0) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0x8, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff010}], 0x1, 0x0, 0x3000000, 0x7000000}}], 0xe100, 0x0, 0x0) sendfile(r7, 0xffffffffffffffff, 0x0, 0x2000010000a006) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000400)="79b1cbd0451a8c774e6a040299e958bbaa319548c5b010970881f1f4049f1de80fb24f02d336fcca97d45b3ecdafbbae5ecb444800995cd4ae834021858e233486f8fdd4ae1e51fac0d71e5d89039d5ec7b5d5ef6ea199fa26a31b1d9bc3b2dbd0a8b570b1d6", 0x66) read(r5, &(0x7f00000000c0)=""/29, 0x1d) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r8 = dup(r1) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r9, 0xae9a) 1.117771575s ago: executing program 3 (id=911): r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r3) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000240)=@nl=@proc}) io_uring_enter(r0, 0x7ba2, 0x0, 0x0, 0x0, 0xffffffffffffff80) 1.081086452s ago: executing program 1 (id=912): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x8, 0x42, 0x40}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendto$packet(r0, &(0x7f00000002c0)="05040800d3fc030000004788031c09102f28", 0x12, 0x4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="501fc6ae368e2ec607c0ee6e382df33e46342c2f4a6d300a6e2bbff3759ebfc0c2e423db048de7dc9b9dc0364e030635b31dd3460ce22477e3fe7318d95ebac770d1c511dcb5ac6d75d81cf2efeb2fbbdad26b381601359d44f8fd1f7601a1ab2d4612593973dc937912848bfe60cea3f7c2685d", @ANYBLOB="aecaaf970f1cc41054cec0e86e33b25df1bd9b88118ec3d33480b83fa0d6a55fa2c4e7d9a9a3777a584d31373965c48eab60fd7001a11d"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r3 = socket(0x22, 0x80000, 0x3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000180)=0x8001, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r6 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12', 0x2) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000140)={r6, 0x0, 0x0, 0x4000}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0xc0086202, &(0x7f0000000280)=0x1) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="500100001000130700000000000000007f00000100"/44, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000ac14140000000000000000000000000000000000000000000000000000f4ffffffffffffff000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000400000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0004000200000000000000fe88000000000000000000000000000149c3692c0108cd"], 0x150}}, 0x0) 1.01602167s ago: executing program 4 (id=913): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071120400000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 899.138706ms ago: executing program 4 (id=914): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0206030902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) 887.446266ms ago: executing program 3 (id=915): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x33, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x658}, {@empty, 0xb4}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev, 0x20000}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0xdc, [@rand_addr, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 701.13628ms ago: executing program 0 (id=916): syz_emit_ethernet(0x3a, &(0x7f0000000700)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x0, 0x88be, 0x18, 0x0, @wg=@data}}}}}, 0x0) ioprio_set$pid(0x2, 0xffffffffffffffff, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x6c}, 0x1, 0x0, 0x0, 0x4000881}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r1, 0x80080400) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r2, 0x10d, 0xcf, &(0x7f0000000940), &(0x7f0000000080)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003100), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000008c0)={'batadv_slave_1\x00'}) sendmsg$inet6(r4, &(0x7f0000000900)={&(0x7f00000003c0)={0xa, 0x4e21, 0x8, @private0, 0x9}, 0x1c, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="a60ee4ccca4f2583390f2c2dc8a78508a38eed8161c1ee045766f09d5e188883feb7f941b06384179b273341434bfd49f45a5c6428225c8aa707fbbc72f6823fdb9b135b5d451620c38d8f769dc045b3a42c35ad8b939f41d5a4da4add487db4666bd9954a", 0x65}, {0x0}, {&(0x7f0000000580)="22e4316f4ea980a7e78e9eb2b25e6e5bfc5b71b61a0591b020c97b549df8dff058c199f32342e4bb", 0x28}, {0x0}, {&(0x7f0000000740)="b841e6ab12ecc70f73000de081ee89a4e9ccb8610a63ddf1ac73abce1b667527ce7bb3fe95666fac2c7539052705cf8391b760b98bc9cf9f9f7af0884f41ce44c73b41c96f1c078e9f5287b21ff6ac00ebdb882b3b054810723e6e5aa602081fc55326223411fcbd0e3321aa104a10bdb50bb2b891550f4173ea2e5ec0ae31673a27830cbf6954d79daabf451cdb48f7be890b9d298da8e63823296d44da1046f5f3d15d75f7c5a01cdb70", 0xab}, {&(0x7f00000006c0)="6bc590ba09a73a63d5b003d7a5", 0xd}, {&(0x7f0000000800)}], 0x8}, 0x40) 687.163227ms ago: executing program 4 (id=917): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) sendmmsg$inet(r0, &(0x7f0000004a40)=[{{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001200)="5c4734e4ab42aed6ea642ccdd7f24ff035a1294dae8fc026c764c85a3638f0beb8093ad3f99445fe7ceecef37162ba1d8af1e09ba32bba0ef12ce12e2c5ed7cd6d1cac947d239c67d2c6563ec8d9eff8cff0ae11e306f06f766825b90fe72d2bb860fd4987e3cd381e80501ce60f2536c2ad2eaa94d13e7934691f957640f41de3a1ab9ac5a1cf71b8951b43dc997305f4eec327fd0d413a8669661da274644359143ae2222204fda7a535b922b987054328c81ac25adcf8cbd8eeeb0a7b7065c0a3b536345f24b508b7d243bd9ee9e54b831567974fba12228479e066c16b16e8be4f96ee0941cd5cafb91827adc86465fe11ee95dc9393415282054f9dcc40ac242f33e23c2a35335e396b29a98d8d2a7c8b56b1a7244e3831624db4f3eb71be6655f73d18157a2c8d04faafb5be5a9be1a51603da906979dcd000f1cb5d53bb3c450c7e8b5497716a802fce459e218149cdbad5707d77a48d1cb63e70afed529c3d1b160c73c3e0abc27acf36129ec247df7875a5d189119836440e1e570d0cfecf0190fc03a7385de52d1499d96158a871be1faadb115051d88e13b2c5c8db62dc3ec68984013bc2265c84ad9bcfe99325b392c733460b2d243606a705f89cf85ba039ab02c091dd9100d07ff2eff05f6946fce3369f3f655c90f2b02df270d417c7b644c64d99e7e14b59df5346612165f120fb07c116340eb6ddaf6ad883b5532626529d0c3fc39d56ac39937374f9f8819c869085b37fc69c41c3d2be4154c6d904d599791a3cf6e88ef0a0b2f2ba9971e26f585f77dd37958d84272317972ad7de467ee16b683bdfdbb31c9ccd0dd3e339dac1bda344eb4b9f9c65fb68b52d78fd834767dcd05bf3a98d61e48f7be9ebabd7333a28a906f9b2c0f4caa7fd1bd80dbaa44e78df8ba7a7c83ce1feed99732c4b0bf4d3198c128cec67477e053cefe2bc11add7a790a16803ab94b88a73c044b7f8fb6a607c3643b2d95430e6ddad975fff51c65b490a462cddc7a5caa2ef7177253729b1720740c49dd6919cfa2fe8cb55ef345ba8392a65b622e034fb15d4f77e4db6ff0483c0bd22ac5b9c04881325f8ae664ced307064b4ae014ccf1581024a68e42daea7d11d9f541629302de0c13c983c86c2843a2aa81e4256bb5d28bee7bbfd941d5da9f90689704150887a233cb40f31f55e4255e88c222885c0b471dabf34ee6d8b7ca8f3c9c1fc41b51f6410f51bddb014f52c2a9078f40cde2022d27f993e1d10e694ff1f4be4722703c15260c82ca3b6ae701a90ac4d141fb29e231e2b48e07d72051bf71e44fa18fe81e37c5e53495a572b0de8904bc012605f34b63bf45ece1217f1fd30f5a68acdb77ad8a62cda4b6c55519b9b105f525369e911eafca058289d39eac675cb33eb741e5e940fdf87a11926f57e025b19dac3dda6400deabcebef2e9184bd72c29e58f9ba0fdd5c89315b8d0b40814f964f466b04dc8b82f3d7755d50a65cec09c183c2dc46762d7f27c40c90b380702c1117607cfd9917b435681c18f2591d71a1ef0c81a2dedf763cfd4068aad633718382e553e81de8d30ead2e6c41754fab12517e1a83d1451ac5101b68c2ba7edd3cafe9c374e279f1d7c8eb6be43ece10b3b99bedbc9027ac008746f1dae45555965c21c93dffc1313ad6943227d725f265317f8f866728bb308fa2e805f12734f3c03e86c1499fe8f7bd26769ebec4bd96a7c7118696e8075b73fc81791ae1526101f2a282ac268d0c6020f898b7e86c0cf8b761f076a44820647e37d85fe8f87ff669f17720216c730960a4fabbf23dd6ec71b44dd0ae52bf9684e61cf77eb6799654631b8c13a03b0bafbdf21d2ee7f64e9832602695c81fb53d031b494b5e80e7baec8eb87e6d43c49a9d2cadb058f8660695d7a6d2421aeb8afd4ded6ef169203cc280a6629f335eaa9b04af5e46977b314c9fd64d5838c35b2fb8118bd0ae5dba62473278163765643191f2e75f9f7848254a3667b41c7fe62dc19f9bf6cf9b749881d9edd1a60610b7332b6cd079d31130fa335e04872262b65aac97d96440f0b37ef4f2a563245863e546a6469803b55a63725d9415224d9e6aaa9de4df68276050a4a6ce9b5a934766ec41e413b461bacf2563d4fe27f1cd46acd69b0a3016e2aad0f3174d3c5c9c7cd278e77a6273c745c17b799780f1f1f0bbcd539c0aa2ada8ab9ec169b194b4dcc2824b6ef46ffa90f6d87ff68ca64bce516f8250df60832f007ebe66599f0378e77d37d29f454ffb6d401f8769ba18a087c78a1cd50c47a2c162bd31487c0fbabfaf0d4a63db4c9fdd2f94fbc169ea1c5345ad8d02800dd822ca25ce9514028ba51a4d53703900d975b1a0da44f518b1021ff877fff446be61eb9c1c3998d986de113de6dc1c1677604f29cfe66ebb8d679cf0535f26fa4de3066db2b58ea42ca958a92be25a7484c30eb8b57f8d1b1d6424e2f681c72a3ddd63355c008d32dc38bb509e7a55e4f07750a656e24c6d2cbb41d841347d9fba91579daa935918a56b9f3ccc8abf9d49d28c24a6ef25618da3066ca8b8e93411e4aa7336bef690afb57863fb631b284390b2fa3465320dcebd14e34c6097f1a7b683e4e017853f03b7be7c7a084050f9d3499f23e491776361e0fc2e3b91bd701cdab328e80eb5d393c49d768e8a591851142254b52f9907387529a39ec6f6d8b37d6b9fab7f5c084b3a3cfc2635e0346eebeadb0c98304cd7039b340e5dc8b957e3f46474e122c5615b185e7e95cced90a30587a736e5c7f5d07b5e229e9dbdd90083887982726aebad336c84abc6d09b3b3e300de546b6b77a0607e545a1a6fdd9451d19b11f0d05c4c35b3fa71161a49180b5432d4ed1782f8bec1212d6bede49f7ad67998098998cbaab526478d21996dfbf0d4ab3c53c45037cbd3d3e913c77f049fe530ba734ea9f6f5e134ca66f79bf95845c613b4c9a57cc22c46bcdea5f4e55c7ad98f910a22898ae1b66170a8b820bd1e4cbecd952c8ac91eaea21ecea97db7f810d4adc485a5ea103d67eec9571341ad9ff70a0e661a8183b3205b7127dd4e96a0b5b8984e31d129956ecb03274f746f74dad77cd8b1b5ca964e0b22c51437a0f1017c90ed53a795e5836f9776a5e1e8d82a98dec77ed6bc5378d4f4ed54e04b6f1a577021bde396f3e7aed6efc44f2639ec6b0983a36ec9284e89ac10ad3450f71ebd004cd7740e51e17579db48a133263212dfd3bc34f8566734c40aeb94d1cb42de3b5156708298a370d0818dd1b2227e73589df1ad24db25bd88648944db2775d1de670e5d631c201a0f52c6fd619716fcc17e1213788502a0aa4d6c022b6399af79d38d22207b4e31e90b630a235d9543be8e35c154dd6f86ea8351664ea89378b151f536c2e34bdae11918701e10fb05148f01347d615bb285fcc2f2bab89b4e804e1c4c4407fc3b7b246e306f639c8706dd144b503410c7094138b7d85fa046bf448935cada3382a525035d4f27371f7c53c11cc36ce7510aca0526cd360156e2b620677c5de89a172a38b7d9dbd2a1ba0a6baa52f47f1f8580da7c44e6bea01ec95616bccc6f2d3849c166c755b48ee6c39dcd4099e76fa4c02296b35f7c57c455cb9581b73f61651c755ef33e4aafd5f143806a6e663389190925f8e8d129568f564c6991d4d9717b7557a94682ed723ed562a78d8bfdbe6134621f5277633907220c848e9f4bc8b5919ee7188b1c9828a4ae5f9c5932d153d1dca22cd73e1f69436c18e20ef8e4d67436018afc67c8f91dd90aabf71349e5a8fdb0c89439bf0b74e26947d8535e8f5518c8ce6d64e40d10488300e692306070e919ff0496a98057f5f1b1b4c97f2a0e56f4872d45634a0d97e47ce8f23c12dd0b6e13d4fba5224de15a3b5ba0b82e1bb2c6c4401fccfd37a41aaca959b1f468cf588f947aeffbeb953fb1cf7246c4f539f11fce3b78c08f10bd0ad791f24c817267d8d2557c4a6b23a2d3f98ee65aa21b6eedf85b1f333c77e8fa9c245eca0cc0ce0d95bad193d4da74421d3d234d683f5fe553eabd09fe2f64a81b80ea2ebfd65eb803933a59b2e3c498f2f5d8f702678841654746e53c1a62ebc35356a44a736a39f6c67dfea92736f30d39b46f35940f10a03fcc010678373eaf976d6e2b5f6d776ccaced74680f52ab6066610e30a94c7b555a7c12efd777bf88290ba81808c626dd738712f30b3d132cfad937a9436af32b324ef51bcd35148af4cd0904cff97ffee976880d07b3047ca0b4482eb1c6928e98ab656cb52b5ede1ad8b10c67b6202c06de9498bbc06e8247e2034d832e5069b4804373bd95088c8c38f7cdd99a1568d70020649eae08d7cb6f5a9c0a9aef84eb94d672e909a24f458eb817f516044eb013faab8c5d194b35e9771d69ca0bf4fc53d3e27dee36192cdfdc9ad161e8572b40310baebd3c553daab85772c1346fa56c816f37dabf8a7b5fb8dc5c7049929ad028abdd1925d387fdc034db1b4d9dcb7c17f0385ad369642cd852e8ce049f6cf224d600a1c182102e2c5c495e064ef09a439fe1e712864679a82f25d0c3afe5cd9dda38c06b7b138325978a9077f060fed1f7ecd0d0414237f601cc11ded422c684b7aaed25a2d85c11691d7ec0fc8d7b5418b7c724391bfa44233b3b092e7f50fa8b0133b093c610293e994e8c6f6cd7e21cc8c92a91884ff194ec7478bb02ba00a38fd8e2a07f2d1d67154c6e6c9d78d99eac6d3e2b99f940117e47eaa9d60f73ec159fc4add1264ae4833918011d848d3c5556f2b46a7c766da56211b9f3bb0c27de9ae65b867c337cabce44a0e433313cdb5c365b7a05c2dfd4ffe68c344c1fbc9c7673aeef26816eca3bf6fa86cd98a73b86dc6bbf27c9cc15b476fab609cabf35592ea59d3bafcd513d0cb06f0bd41b20825acf24fb2b9248ca983af38bc87fe870176f16b6a020b33b25371e398e4309f4f6a1e6582b5b3a29fddfd04a9045661da46c87359137f3d615db95322e082b94e69b79ba110741934a6cea02e4636b63278b9a292bed70b79064aa913fd102c0bbd99f6f283104bf2c00f67ecaee5adbf6246abff934ffe09faa09f8d5cdd9a362d66d8831ec61954a58e32585e151b0eadee0e228f1d710d682553b7c2817747dde858332b19aa4651edfb21d49fdc3d83a976ec9f99cf6ccc63a372fcabde62673937e490d16c1361ca00498d0eae43402cad4a1cc79c384d2210abe09c53fc6b83ca73e7685ce8aa70e8078240454d111543744339620a9734e89eb47ae6c735a857ad6812f399437f0a01683d85cd8977add539e537d393da775fbff5aa8fb93cfce92fd91fdcec00847e46b5c2ec77e9ea68c067787c6c85be73bc9a03986089860887905f87581cdba082faaec17f7caa6175b6548e13b072da1c54b7de96e05425950bd34667631476c77926e3ccf5dc406b2c27cb08cfec875b7bf2a1d385c61c1c546ddb5c2718eb07fbbfe463a327ff24f6a2192d7d3373e3ca876e905d92406632ce13f56d24fc77d5bc70844eeafc2cbff2714d2f5c2cee513275561898802b66e14b1cf803adabfa29f87a6a0b1e65e59842dd39479a3443e2810cdfc0ae62013646d5be194f6d4a989ed97de878cc1b09dcfa82c9cbcce7bf7093c8ecaa5ea95a8da9c2e5bb1cae195c8fad6b8f6824f73da786b22ddf2df0fb7529c3dbd289e3a096d89c7319876cd56eab9503d5d3887f8548da0ee20f2399a86a56772a2bbed827cd125a77023cedf2444482ed9b612a8e58ca2d629b104bc3bf2f5386025fe82", 0x1000}, {&(0x7f0000002200)="ad", 0xf4240}], 0x2}}], 0x1, 0x4008440) 565.90476ms ago: executing program 1 (id=918): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x4, 0x0, &(0x7f0000019400)=0xffffffffffffff26) 531.275363ms ago: executing program 4 (id=919): syz_usb_connect$hid(0x0, 0x36, &(0x7f000000d940)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x69, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f000000dd80)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f000000db00)=@string={0x2}}, {0x2c, &(0x7f000000dbc0)=@string={0x2c, 0x3, "33af100e3c1e8a992a1894d647a4f2a6002afeb9df076a3070380af656d699248514577159fd72dee8dc"}}]}) 368.082429ms ago: executing program 1 (id=920): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = epoll_create1(0x0) epoll_pwait2(r0, &(0x7f0000000580)=[{}], 0x1, &(0x7f0000000600), &(0x7f0000000640), 0x8) 323.774955ms ago: executing program 1 (id=921): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0xee01}}, {{@in=@multicast1, 0x0, 0x6c}}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x11}}}}}}, 0x0) 243.636765ms ago: executing program 0 (id=922): ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000180)=ANY=[@ANYBLOB="01"]) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x23, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/16, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300a1b021"], 0x0}, 0x90) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000001c0)=0x6000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 161.202279ms ago: executing program 1 (id=923): ioprio_set$pid(0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) setpgid(0x0, r1) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x149a82, 0x0) sendfile(r2, r2, 0x0, 0x1) 0s ago: executing program 3 (id=924): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@dev, 0x0, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x800, 0x0, 0x2}, 0x20) kernel console output (not intermixed with test programs): port 6081 - 0 [ 63.699398][ T5092] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.708176][ T5092] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.725843][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.738592][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.751634][ T5089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.784840][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.796045][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.809226][ T5089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.823722][ T5089] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.832716][ T5089] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.844804][ T5089] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.853793][ T5089] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.876390][ T5099] veth1_vlan: entered promiscuous mode [ 63.885799][ T5097] veth1_vlan: entered promiscuous mode [ 63.900749][ T5090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.109538][ T5099] veth0_macvtap: entered promiscuous mode [ 64.116111][ T1056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.125842][ T1056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.162600][ T5099] veth1_macvtap: entered promiscuous mode [ 64.203091][ T5097] veth0_macvtap: entered promiscuous mode [ 64.221474][ T1056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.242104][ T1056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.263909][ T2465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.279963][ T2465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.310725][ T5097] veth1_macvtap: entered promiscuous mode [ 64.334112][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.345223][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.356348][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.367256][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.379539][ T5099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.412845][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.424230][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.434597][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.445407][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.459064][ T5099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.476034][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.488091][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.513469][ T5099] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.524632][ T5099] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.533472][ T5099] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.542356][ T5099] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.556032][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.571207][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.582277][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.597442][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.607943][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.619123][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.630899][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.639120][ T5103] Bluetooth: hci0: command tx timeout [ 64.646964][ T5103] Bluetooth: hci1: command tx timeout [ 64.649939][ T5107] Bluetooth: hci2: command tx timeout [ 64.655381][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.668774][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.679630][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.690329][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.709004][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.720172][ T5107] Bluetooth: hci3: command tx timeout [ 64.726960][ T5107] Bluetooth: hci4: command tx timeout [ 64.737711][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.763821][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.791125][ T5176] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.805664][ T5097] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.827598][ T5097] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.836364][ T5097] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.861494][ T5097] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.870864][ T5178] random: crng reseeded on system resumption [ 64.903787][ T5090] veth0_vlan: entered promiscuous mode [ 65.018240][ T5090] veth1_vlan: entered promiscuous mode [ 65.139062][ T5090] veth0_macvtap: entered promiscuous mode [ 65.180580][ T5090] veth1_macvtap: entered promiscuous mode [ 65.248298][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.275608][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.306632][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.329819][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.376503][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.387968][ T5185] Bluetooth: MGMT ver 1.23 [ 65.402238][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.425069][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.438272][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.452670][ T5090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.482538][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.495967][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.512545][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.527197][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.538893][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.551447][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.562366][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.573460][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.585667][ T5090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.612570][ T5090] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.630887][ T5090] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.640140][ T5090] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.651215][ T5090] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.679059][ T5178] Unrecognized hibernate image header format! [ 65.685368][ T5178] PM: hibernation: Image mismatch: architecture specific data [ 65.743732][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.784155][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.832075][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.862462][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.916966][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.929346][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.037348][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.057680][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.408980][ T5197] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 67.725718][ T5107] Bluetooth: hci2: command tx timeout [ 67.731597][ T5103] Bluetooth: hci1: command tx timeout [ 67.752699][ T5107] Bluetooth: hci0: command tx timeout [ 67.759827][ T5103] Bluetooth: hci4: command tx timeout [ 67.765962][ T5107] Bluetooth: hci3: command tx timeout [ 68.117851][ T5198] delete_channel: no stack [ 68.311917][ T2450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.387920][ T2450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.524031][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.551262][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.784063][ T5235] netlink: 288 bytes leftover after parsing attributes in process `syz.4.5'. [ 69.838578][ T5235] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 69.875450][ T5235] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 70.318052][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 70.567271][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.845982][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.853059][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.376326][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 72.478144][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 72.486682][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.990225][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.424258][ T5289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.35'. [ 74.624675][ T5306] binder: 5305:5306 ioctl 4018620d 0 returned -22 [ 75.921824][ T5107] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 75.931101][ T5107] Bluetooth: hci4: Injecting HCI hardware error event [ 75.939810][ T5107] Bluetooth: hci4: hardware error 0x00 [ 75.976585][ T29] audit: type=1326 audit(1721612445.582:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5337 comm="syz.4.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3ff75b59 code=0x7ffc0000 [ 76.074421][ T29] audit: type=1326 audit(1721612445.632:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5337 comm="syz.4.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f9c3ff75b59 code=0x7ffc0000 [ 76.097690][ T29] audit: type=1326 audit(1721612445.632:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5337 comm="syz.4.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3ff75b59 code=0x7ffc0000 [ 76.128908][ T29] audit: type=1326 audit(1721612445.632:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5337 comm="syz.4.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3ff75b59 code=0x7ffc0000 [ 76.304378][ T5334] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 76.978836][ T8] cfg80211: failed to load regulatory.db [ 76.985486][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.066855][ T5150] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.087274][ T5107] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 78.337141][ T5150] usb 4-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=e6.01 [ 78.364560][ T5150] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.388691][ T5150] usb 4-1: Product: syz [ 78.392912][ T5150] usb 4-1: Manufacturer: syz [ 78.430963][ T5150] usb 4-1: SerialNumber: syz [ 78.473139][ T5150] usb 4-1: config 0 descriptor?? [ 78.525526][ T5150] usb 4-1: Found UVC 0.00 device syz (1bcf:0b40) [ 78.546795][ T5150] usb 4-1: Forcing UVC version to 1.0a [ 78.563617][ T5150] usb 4-1: No valid video chain found. [ 78.622162][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.122286][ T29] audit: type=1326 audit(1721612448.742:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5369 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f18f75b59 code=0x7ffc0000 [ 79.230757][ T29] audit: type=1326 audit(1721612448.772:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5369 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f7f18f75b59 code=0x7ffc0000 [ 79.594546][ T29] audit: type=1326 audit(1721612448.772:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5369 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f18f75b59 code=0x7ffc0000 [ 80.426962][ T8] usb 4-1: USB disconnect, device number 2 [ 80.458446][ T29] audit: type=1326 audit(1721612448.772:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5369 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f18f75b59 code=0x7ffc0000 [ 80.567419][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 81.646962][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.079361][ T5100] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 82.092701][ T5100] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 82.101308][ T5100] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 82.110733][ T5100] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 82.122367][ T5100] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 82.130694][ T5100] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 82.745445][ T5396] chnl_net:caif_netlink_parms(): no params data found [ 83.098423][ T5404] netlink: 'syz.0.80': attribute type 1 has an invalid length. [ 83.824277][ T5405] delete_channel: no stack [ 83.991551][ T5396] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.037895][ T5396] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.068398][ T5396] bridge_slave_0: entered allmulticast mode [ 84.108091][ T5396] bridge_slave_0: entered promiscuous mode [ 84.154372][ T5396] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.162199][ T5107] Bluetooth: hci5: command tx timeout [ 84.172305][ T5396] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.179767][ T5396] bridge_slave_1: entered allmulticast mode [ 84.187366][ T5396] bridge_slave_1: entered promiscuous mode [ 84.321125][ T5396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.369453][ T5396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.538626][ T5396] team0: Port device team_slave_0 added [ 84.546016][ T5396] team0: Port device team_slave_1 added [ 84.741273][ T5396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.741321][ T5396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.741343][ T5396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.797109][ T5396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.797124][ T5396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.797139][ T5396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.921449][ T5396] hsr_slave_0: entered promiscuous mode [ 84.922443][ T5396] hsr_slave_1: entered promiscuous mode [ 84.922856][ T5396] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.922906][ T5396] Cannot create hsr debugfs directory [ 85.970423][ T5434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.89'. [ 86.517261][ T5107] Bluetooth: hci5: command tx timeout [ 86.563548][ T5396] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.585472][ T5430] syz.2.88 (5430) used greatest stack depth: 19600 bytes left [ 86.774513][ T5396] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.944390][ T5396] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.150069][ T5100] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 87.160218][ T5100] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 87.168421][ T5100] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 87.176119][ T5100] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 87.183669][ T5100] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 87.191020][ T5100] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 87.226285][ T5396] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.462288][ T29] audit: type=1400 audit(1721612457.082:10): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=5449 comm="syz.2.95" saddr=172.30.0.3 daddr=172.20.20.170 netif=wpan0 [ 88.556648][ T5100] Bluetooth: hci5: command tx timeout [ 88.682511][ T63] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.874667][ T5445] chnl_net:caif_netlink_parms(): no params data found [ 88.905032][ T5396] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.926766][ T5396] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.079313][ T63] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.187227][ T5396] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.241125][ T5396] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.276654][ T5100] Bluetooth: hci6: command tx timeout [ 89.415068][ T63] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.903125][ T5483] kvm: pic: single mode not supported [ 89.905877][ T5483] kvm: pic: single mode not supported [ 89.912102][ T5483] kvm: pic: level sensitive irq not supported [ 90.492273][ T29] audit: type=1400 audit(1721612460.112:11): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=5486 comm="syz.2.105" saddr=172.30.0.3 daddr=172.20.20.170 netif=wpan0 [ 90.636955][ T5100] Bluetooth: hci5: command tx timeout [ 91.356647][ T5100] Bluetooth: hci6: command tx timeout [ 92.293618][ T5107] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.320727][ T5107] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.329215][ T5107] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.392329][ T5107] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.411699][ T5107] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.423823][ T5107] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.179166][ T63] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.437168][ T5100] Bluetooth: hci6: command tx timeout [ 93.737137][ T5445] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.801466][ T5445] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.838111][ T5445] bridge_slave_0: entered allmulticast mode [ 93.853895][ T5445] bridge_slave_0: entered promiscuous mode [ 93.883125][ T5445] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.917015][ T5445] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.928181][ T5445] bridge_slave_1: entered allmulticast mode [ 93.935106][ T5445] bridge_slave_1: entered promiscuous mode [ 94.051054][ T5445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.111435][ T5445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.183331][ T63] bridge_slave_1: left allmulticast mode [ 94.201410][ T63] bridge_slave_1: left promiscuous mode [ 94.259163][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.349659][ T63] bridge_slave_0: left allmulticast mode [ 94.393376][ T63] bridge_slave_0: left promiscuous mode [ 94.426664][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.476624][ T5100] Bluetooth: hci0: command tx timeout [ 95.612228][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.623236][ T5100] Bluetooth: hci6: command tx timeout [ 95.644897][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.670523][ T63] bond0 (unregistering): Released all slaves [ 95.703337][ T5445] team0: Port device team_slave_0 added [ 95.963840][ T5445] team0: Port device team_slave_1 added [ 96.280609][ T5445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.305233][ T5445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.359165][ T5445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.383960][ T5445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.420316][ T5445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.465528][ T5445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.556864][ T5100] Bluetooth: hci0: command tx timeout [ 96.740732][ T5396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.853657][ T5445] hsr_slave_0: entered promiscuous mode [ 96.865908][ T5445] hsr_slave_1: entered promiscuous mode [ 96.885348][ T5445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.925129][ T5445] Cannot create hsr debugfs directory [ 97.001515][ T63] hsr_slave_0: left promiscuous mode [ 97.015872][ T5584] 9pnet_fd: Insufficient options for proto=fd [ 97.026908][ T63] hsr_slave_1: left promiscuous mode [ 97.037838][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.045523][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.065077][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.074398][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.108965][ T63] veth1_macvtap: left promiscuous mode [ 97.115067][ T63] veth0_macvtap: left promiscuous mode [ 97.126661][ T63] veth1_vlan: left promiscuous mode [ 97.138923][ T63] veth0_vlan: left promiscuous mode [ 97.856751][ T5145] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.880861][ T63] team0 (unregistering): Port device team_slave_1 removed [ 97.912017][ T63] team0 (unregistering): Port device team_slave_0 removed [ 97.956701][ T5146] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.054907][ T5145] usb 3-1: Using ep0 maxpacket: 32 [ 98.064162][ T5145] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.076214][ T5145] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.090115][ T5145] usb 3-1: too many endpoints for config 1 interface 1 altsetting 44: 179, using maximum allowed: 30 [ 98.103334][ T5145] usb 3-1: config 1 interface 1 altsetting 44 has 0 endpoint descriptors, different from the interface descriptor's value: 179 [ 98.117773][ T5145] usb 3-1: config 1 interface 1 has no altsetting 0 [ 98.140601][ T5145] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 98.149769][ T5145] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.158153][ T5146] usb 1-1: Using ep0 maxpacket: 8 [ 98.163328][ T5145] usb 3-1: Product: syz [ 98.169390][ T5145] usb 3-1: Manufacturer: syz [ 98.174316][ T5145] usb 3-1: SerialNumber: syz [ 98.181009][ T5146] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 98.197397][ T5146] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 98.205525][ T5146] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.232479][ T5146] usb 1-1: config 0 has no interface number 0 [ 98.238922][ T5146] usb 1-1: config 0 interface 21 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 98.254972][ T5146] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 98.264715][ T5146] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.277184][ T5146] usb 1-1: config 0 descriptor?? [ 98.412250][ T5145] usb 3-1: selecting invalid altsetting 0 [ 98.423278][ T5145] usb 3-1: selecting invalid altsetting 0 [ 98.449373][ T5145] cdc_ncm 3-1:1.0: bind() failure [ 98.483045][ T5145] usb 3-1: selecting invalid altsetting 0 [ 98.509889][ T5145] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -22 [ 98.555648][ T5145] usb 3-1: selecting invalid altsetting 0 [ 98.576190][ T5145] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -22 [ 98.593940][ T5145] usb 3-1: selecting invalid altsetting 0 [ 98.600131][ T5145] usbtest 3-1:1.1: probe with driver usbtest failed with error -22 [ 98.636785][ T5100] Bluetooth: hci0: command tx timeout [ 98.657901][ T5396] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.659524][ T5145] usb 3-1: USB disconnect, device number 2 [ 98.681412][ T5497] chnl_net:caif_netlink_parms(): no params data found [ 98.773434][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.780596][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.843122][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.850268][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.980331][ T5598] xt_connbytes: Forcing CT accounting to be enabled [ 99.003528][ T5598] Cannot find add_set index 0 as target [ 99.067611][ T25] usb 1-1: USB disconnect, device number 2 [ 99.085887][ T5497] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.110276][ T5497] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.119278][ T5497] bridge_slave_0: entered allmulticast mode [ 99.126171][ T5497] bridge_slave_0: entered promiscuous mode [ 99.138387][ T5497] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.145528][ T5497] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.152866][ T5497] bridge_slave_1: entered allmulticast mode [ 99.160830][ T5497] bridge_slave_1: entered promiscuous mode [ 99.255731][ T5497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.343226][ T5497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.530185][ T5497] team0: Port device team_slave_0 added [ 99.561255][ T5497] team0: Port device team_slave_1 added [ 99.931781][ T5497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.974792][ T5497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.036737][ T5497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.070452][ T5497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.089370][ T5497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.604132][ T5497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.716568][ T5100] Bluetooth: hci0: command tx timeout [ 101.132066][ T5497] hsr_slave_0: entered promiscuous mode [ 101.139091][ T5497] hsr_slave_1: entered promiscuous mode [ 101.158703][ T5497] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.177118][ T5497] Cannot create hsr debugfs directory [ 101.945482][ T5396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.099419][ T63] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.222568][ T63] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.272779][ T5661] kcapi: manufacturer command 0 unknown. [ 102.351317][ T63] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.484398][ T63] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.540120][ T5445] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 102.577669][ T5445] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 102.611622][ T5445] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 102.643503][ T5669] netlink: 'syz.2.150': attribute type 4 has an invalid length. [ 102.717725][ T5445] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.793595][ T5396] veth0_vlan: entered promiscuous mode [ 103.048375][ T5396] veth1_vlan: entered promiscuous mode [ 103.260923][ T63] bridge_slave_1: left allmulticast mode [ 103.267955][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 103.297083][ T63] bridge_slave_1: left promiscuous mode [ 103.305434][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.330778][ T63] bridge_slave_0: left allmulticast mode [ 103.336867][ T63] bridge_slave_0: left promiscuous mode [ 103.343364][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.397521][ T63] bridge_slave_1: left allmulticast mode [ 103.412654][ T63] bridge_slave_1: left promiscuous mode [ 103.419930][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.441386][ T63] bridge_slave_0: left allmulticast mode [ 103.465266][ T63] bridge_slave_0: left promiscuous mode [ 103.471641][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.501348][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.522550][ T9] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 103.532457][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.550699][ T9] usb 3-1: config 0 descriptor?? [ 103.568291][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 103.716818][ T5695] block nbd0: shutting down sockets [ 105.332004][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.373232][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.397595][ T63] bond0 (unregistering): Released all slaves [ 105.529160][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.551372][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.568600][ T63] bond0 (unregistering): Released all slaves [ 105.709314][ T5396] veth0_macvtap: entered promiscuous mode [ 105.734333][ T5396] veth1_macvtap: entered promiscuous mode [ 105.800551][ T5445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.893522][ T5150] usb 3-1: USB disconnect, device number 3 [ 105.914525][ T5445] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.973013][ T5396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.016514][ T5396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.036456][ T5396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.048927][ T5396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.059008][ T5396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.074160][ T5396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.084510][ T5396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.113822][ T5396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.140370][ T5396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.304089][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.311664][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.337675][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.344857][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.380340][ T5396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.426452][ T5396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.436302][ T5396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.460830][ T5396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.471574][ T5396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.500578][ T5396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.518639][ T5396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.535692][ T5396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.548089][ T5396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.702538][ T5396] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.713107][ T5396] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.733826][ T5396] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.746589][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 106.763881][ T5396] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.920133][ T5779] overlayfs: overlapping lowerdir path [ 106.938636][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 106.955447][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.981691][ T9] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 107.004629][ T5497] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 107.018645][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.039500][ T9] usb 3-1: Product: syz [ 107.043684][ T9] usb 3-1: Manufacturer: syz [ 107.080822][ T9] usb 3-1: SerialNumber: syz [ 107.113239][ T9] usb 3-1: config 0 descriptor?? [ 107.130463][ T9] usb 3-1: bad CDC descriptors [ 107.135765][ T9] usb 3-1: unsupported MDLM descriptors [ 107.211450][ T5497] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 107.233463][ T5497] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 107.270306][ T5497] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 107.314513][ T63] hsr_slave_0: left promiscuous mode [ 107.346518][ T63] hsr_slave_1: left promiscuous mode [ 107.358547][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.374644][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.383695][ T52] usb 3-1: USB disconnect, device number 4 [ 107.401223][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.414825][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.426208][ T63] hsr_slave_0: left promiscuous mode [ 107.436682][ T63] hsr_slave_1: left promiscuous mode [ 107.456648][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.467363][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.479990][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.501288][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.539795][ T63] veth1_macvtap: left promiscuous mode [ 107.545335][ T63] veth0_macvtap: left promiscuous mode [ 107.551430][ T63] veth1_vlan: left promiscuous mode [ 107.557247][ T63] veth0_vlan: left promiscuous mode [ 107.563439][ T63] veth1_macvtap: left promiscuous mode [ 107.569067][ T63] veth0_macvtap: left promiscuous mode [ 107.574622][ T63] veth1_vlan: left promiscuous mode [ 107.579994][ T63] veth0_vlan: left promiscuous mode [ 108.197208][ T63] team0 (unregistering): Port device team_slave_1 removed [ 108.231183][ T63] team0 (unregistering): Port device team_slave_0 removed [ 108.752240][ T63] team0 (unregistering): Port device team_slave_1 removed [ 108.781967][ T63] team0 (unregistering): Port device team_slave_0 removed [ 109.185756][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.212297][ T5445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.236600][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.303557][ T5806] kvm: vcpu 0: requested 32 ns lapic timer period limited to 200000 ns [ 109.373938][ T5806] kvm: pic: non byte write [ 109.379048][ T2450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.406641][ T2450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.627680][ T5497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.705395][ T5497] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.742701][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.749882][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.822915][ T5147] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.830095][ T5147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.975231][ T5836] netlink: 'syz.0.175': attribute type 4 has an invalid length. [ 109.991157][ T5834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.174'. [ 111.026921][ T5445] veth0_vlan: entered promiscuous mode [ 111.055818][ T5445] veth1_vlan: entered promiscuous mode [ 111.240847][ T5445] veth0_macvtap: entered promiscuous mode [ 111.393543][ T5445] veth1_macvtap: entered promiscuous mode [ 111.453598][ T5497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.469242][ T5445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.485488][ T5445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.506123][ T5445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.523335][ T5445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.540276][ T5445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.565536][ T5445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.586003][ T5445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.624746][ T5445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.645981][ T5445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.657406][ T5445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.668297][ T5445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.678855][ T5445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.693559][ T5445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.717937][ T5445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.758897][ T5445] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.792238][ T5445] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.816166][ T5445] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.834148][ T5445] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.055871][ T5497] veth0_vlan: entered promiscuous mode [ 112.138867][ T5497] veth1_vlan: entered promiscuous mode [ 112.184000][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.209989][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.443394][ T2465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.473815][ T5497] veth0_macvtap: entered promiscuous mode [ 112.883084][ T2465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.986511][ T5497] veth1_macvtap: entered promiscuous mode [ 113.222269][ T5497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.282995][ T5497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.309120][ T5497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.325728][ T5497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.337844][ T5497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.365678][ T5497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.376057][ T5497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.390140][ T5497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.418066][ T5497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.459373][ T5497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.474686][ T5497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.492002][ T5497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.511004][ T5497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.534243][ T5497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.565226][ T5497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.588910][ T5497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.603976][ T5497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.622327][ T5497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.675528][ T5497] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.703395][ T5902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.199'. [ 113.731045][ T5497] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.770690][ T5497] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.802757][ T5497] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.057239][ T2465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.065079][ T2465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.596698][ T5951] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.805361][ T5927] xt_CONNSECMARK: invalid mode: 0 [ 115.022744][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.063417][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.073529][ T5953] sctp: failed to load transform for md5: -2 [ 115.653995][ T5993] netlink: 224 bytes leftover after parsing attributes in process `syz.2.213'. [ 116.026143][ T6001] netlink: 84 bytes leftover after parsing attributes in process `syz.3.217'. [ 116.869879][ T6015] kvm: emulating exchange as write [ 117.453973][ T6062] xt_CONNSECMARK: invalid mode: 0 [ 117.746967][ T6038] sctp: failed to load transform for md5: -2 [ 119.116691][ T52] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 119.176801][ T6099] netlink: 224 bytes leftover after parsing attributes in process `syz.0.231'. [ 119.250305][ T6104] netlink: 84 bytes leftover after parsing attributes in process `syz.2.233'. [ 119.360041][ T52] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 119.393524][ T52] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.434206][ T52] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 119.462646][ T52] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.483351][ T52] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 119.496914][ T52] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 119.506938][ T52] usb 5-1: Product: syz [ 119.511101][ T52] usb 5-1: Manufacturer: syz [ 119.558233][ T52] cdc_wdm 5-1:1.0: skipping garbage [ 119.606684][ T52] cdc_wdm 5-1:1.0: skipping garbage [ 119.634894][ T52] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 119.642414][ T6131] syz.3.236 uses obsolete (PF_INET,SOCK_PACKET) [ 119.657013][ T52] cdc_wdm 5-1:1.0: Unknown control protocol [ 119.728874][ T29] audit: type=1326 audit(1721612489.352:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6133 comm="syz.1.238" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27f2375b59 code=0x0 [ 119.867197][ T29] audit: type=1326 audit(1721612489.492:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6007 comm="syz.4.220" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3d0d75b59 code=0x0 [ 121.162836][ T5143] usb 5-1: USB disconnect, device number 2 [ 122.051561][ T6165] xt_CT: You must specify a L4 protocol and not use inversions on it [ 122.216030][ T6128] netlink: 40 bytes leftover after parsing attributes in process `syz.2.237'. [ 122.504844][ T6189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.246'. [ 122.516972][ T6195] netlink: 224 bytes leftover after parsing attributes in process `syz.2.245'. [ 123.735023][ T4541] udevd[4541]: worker [5091] terminated by signal 33 (Unknown signal 33) [ 123.743906][ T4541] udevd[4541]: worker [5091] failed while handling '/devices/virtual/block/loop1' [ 124.647988][ T5147] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 124.849688][ T5147] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 124.870403][ T5147] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.889861][ T5147] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 124.907943][ T5147] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.927158][ T5147] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 124.937650][ T5147] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 124.946912][ T5147] usb 3-1: Product: syz [ 124.951075][ T5147] usb 3-1: Manufacturer: syz [ 124.961174][ T5147] cdc_wdm 3-1:1.0: skipping garbage [ 124.970161][ T5147] cdc_wdm 3-1:1.0: skipping garbage [ 124.986563][ T5147] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 124.997453][ T5147] cdc_wdm 3-1:1.0: Unknown control protocol [ 125.256551][ T29] audit: type=1326 audit(1721612494.862:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6203 comm="syz.2.249" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6acc375b59 code=0x0 [ 127.094671][ T9] usb 3-1: USB disconnect, device number 5 [ 127.439843][ T6279] netlink: 'syz.0.262': attribute type 1 has an invalid length. [ 127.537450][ T6283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.261'. [ 128.079377][ T6324] netlink: 188 bytes leftover after parsing attributes in process `syz.4.273'. [ 128.159176][ T6329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.275'. [ 128.783328][ T6347] capability: warning: `syz.4.277' uses 32-bit capabilities (legacy support in use) [ 129.749072][ T6355] vlan2: entered promiscuous mode [ 129.809868][ T6355] vlan2: entered allmulticast mode [ 129.830853][ T6355] hsr_slave_1: entered allmulticast mode [ 129.878685][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 130.086937][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 130.099440][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 130.108833][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.125146][ T9] usb 4-1: Product: syz [ 130.140409][ T9] usb 4-1: Manufacturer: syz [ 130.145045][ T9] usb 4-1: SerialNumber: syz [ 130.475179][ T9] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 130.487179][ T5147] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 130.575750][ T6406] Driver unsupported XDP return value 0 on prog (id 51) dev N/A, expect packet loss! [ 130.777815][ T52] usb 4-1: USB disconnect, device number 3 [ 130.851980][ T5147] usb 1-1: New USB device found, idVendor=040a, idProduct=0002, bcdDevice=b1.c4 [ 130.898637][ T52] usblp0: removed [ 130.952313][ T5147] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.019986][ T5147] usb 1-1: config 0 descriptor?? [ 131.138763][ T5147] gspca_main: spca501-2.14.0 probing 040a:0002 [ 131.353275][ T5147] gspca_spca501: reg write: error -71 [ 131.390707][ T5147] spca501 1-1:0.0: Reg write failed for 0x00,0xaa,0x00 [ 131.410728][ T5147] spca501 1-1:0.0: probe with driver spca501 failed with error -22 [ 131.476729][ T5147] usb 1-1: USB disconnect, device number 3 [ 131.657938][ T6434] netlink: 'syz.3.293': attribute type 1 has an invalid length. [ 131.686515][ T6434] netlink: 9348 bytes leftover after parsing attributes in process `syz.3.293'. [ 131.696017][ T6434] netlink: 44 bytes leftover after parsing attributes in process `syz.3.293'. [ 131.800496][ T6446] msdos: Unknown parameter 'bFs ' [ 133.601235][ T6446] sched: RT throttling activated [ 133.607716][ T6439] sctp: failed to load transform for md5: -2 [ 135.596863][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.607151][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.274816][ T6470] netlink: 8280 bytes leftover after parsing attributes in process `syz.4.297'. [ 136.325902][ T6470] netlink: 8280 bytes leftover after parsing attributes in process `syz.4.297'. [ 136.391867][ T6470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.297'. [ 136.597277][ T29] audit: type=1326 audit(1721613018.217:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6489 comm="syz.1.304" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27f2375b59 code=0x0 [ 137.079422][ T6510] 9pnet: p9_errstr2errno: server reported unknown error @hQItekKzExBAblpΆvx*D}ْ;5ǖ3OŲ" [ 140.422756][ T6569] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 141.566367][ T6569] warning: `syz.2.323' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 142.094697][ T5147] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 142.376610][ T5147] usb 1-1: Using ep0 maxpacket: 16 [ 142.591609][ T5147] usb 1-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 142.620924][ T5147] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.674944][ T5147] usb 1-1: Product: syz [ 142.709569][ T5147] usb 1-1: Manufacturer: syz [ 142.719036][ T5147] usb 1-1: SerialNumber: syz [ 142.751299][ T5147] usb 1-1: config 0 descriptor?? [ 142.773316][ T5147] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 142.980968][ T5150] usb 1-1: USB disconnect, device number 4 [ 143.170745][ T6664] No control pipe specified [ 143.182471][ T6669] netlink: 12 bytes leftover after parsing attributes in process `syz.3.344'. [ 143.228515][ T6669] vlan2: entered promiscuous mode [ 143.234542][ T6669] team0: entered promiscuous mode [ 143.245720][ T6669] team_slave_0: entered promiscuous mode [ 143.265230][ T6669] team_slave_1: entered promiscuous mode [ 143.303638][ T6669] team0: left promiscuous mode [ 143.326631][ T6669] team_slave_0: left promiscuous mode [ 143.351558][ T6669] team_slave_1: left promiscuous mode [ 143.662448][ T6689] macvlan1: entered allmulticast mode [ 143.685343][ T6689] veth1_vlan: entered allmulticast mode [ 146.159976][ T6783] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 146.428244][ T6772] process 'syz.1.369' launched './file1' with NULL argv: empty string added [ 146.570941][ T6808] netlink: 32 bytes leftover after parsing attributes in process `syz.0.375'. [ 146.698759][ T5147] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 146.796356][ T6817] trusted_key: syz.0.378 sent an empty control message without MSG_MORE. [ 146.928265][ T5147] usb 5-1: Using ep0 maxpacket: 8 [ 146.991763][ T5147] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10ae, bcdDevice=8a.18 [ 147.012650][ T5147] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.037896][ T5147] usb 5-1: config 0 descriptor?? [ 147.052959][ T5147] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 147.073434][ T5147] dvb_usb_af9035 5-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 147.139764][ T6835] netlink: 32 bytes leftover after parsing attributes in process `syz.0.382'. [ 147.306351][ T5147] usb 5-1: USB disconnect, device number 3 [ 148.893057][ T6904] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 148.917967][ T6888] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 150.393932][ T6941] program syz.1.408 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 150.769886][ T6958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.413'. [ 152.052098][ T6999] sctp: [Deprecated]: syz.0.419 (pid 6999) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.052098][ T6999] Use struct sctp_sack_info instead [ 152.182213][ T7002] program syz.2.422 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.678607][ T5147] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 153.876577][ T5147] usb 2-1: Using ep0 maxpacket: 16 [ 153.890931][ T5147] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.918475][ T5147] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 153.959562][ T5147] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 153.985933][ T5147] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.018896][ T5147] usb 2-1: config 0 descriptor?? [ 154.032782][ T5147] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 154.553426][ T7076] binder: Bad value for 'max' [ 154.772112][ T7085] ubi0: attaching mtd0 [ 154.791284][ T7085] ubi0: scanning is finished [ 154.795921][ T7085] ubi0: empty MTD device detected [ 154.958686][ T7085] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 155.001011][ T7085] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 155.013648][ T7085] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 155.030929][ T7085] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 155.049695][ T7085] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 155.075802][ T7085] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 155.109818][ T7085] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4035786559 [ 155.138185][ T7085] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 155.176429][ T7095] ubi0: background thread "ubi_bgt0d" started, PID 7095 [ 155.473145][ T9] usb 2-1: USB disconnect, device number 2 [ 155.962643][ T7104] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 156.500267][ T7144] netlink: 8280 bytes leftover after parsing attributes in process `syz.3.454'. [ 156.523257][ T7144] netlink: 8280 bytes leftover after parsing attributes in process `syz.3.454'. [ 156.667689][ T7144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.454'. [ 158.517461][ T7183] netlink: 232 bytes leftover after parsing attributes in process `syz.4.463'. [ 158.552873][ T7183] netlink: 72 bytes leftover after parsing attributes in process `syz.4.463'. [ 159.378427][ T29] audit: type=1326 audit(1721613040.307:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7180 comm="syz.1.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27f2375b59 code=0x7ffc0000 [ 159.655598][ T29] audit: type=1326 audit(1721613040.307:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7180 comm="syz.1.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27f2375b59 code=0x7ffc0000 [ 159.678087][ T29] audit: type=1326 audit(1721613040.307:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7180 comm="syz.1.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27f2375b59 code=0x7ffc0000 [ 160.536490][ T29] audit: type=1326 audit(1721613040.307:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7180 comm="syz.1.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27f2375b59 code=0x7ffc0000 [ 160.635207][ T7201] msdos: Unknown parameter 'bFs ' [ 163.027490][ T29] audit: type=1326 audit(1721613040.307:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7180 comm="syz.1.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27f2375b59 code=0x7ffc0000 [ 165.216493][ T29] audit: type=1326 audit(1721613040.307:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7180 comm="syz.1.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27f2375b59 code=0x7ffc0000 [ 165.359600][ T29] audit: type=1326 audit(1721613040.307:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7180 comm="syz.1.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27f2375b59 code=0x7ffc0000 [ 165.499794][ T29] audit: type=1326 audit(1721613040.307:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7180 comm="syz.1.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27f2375b59 code=0x7ffc0000 [ 165.532121][ T7215] __find_get_block_slow() failed. block=144115188075855872, b_blocknr=0, b_state=0x00106019, b_size=4096, device sda1 blocksize: 4096 [ 165.575625][ T7215] grow_buffers: requested out-of-range block 144115188075855872 for device sda1 [ 165.595463][ T29] audit: type=1326 audit(1721613040.307:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7180 comm="syz.1.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f27f2375b59 code=0x7ffc0000 [ 165.622482][ T7218] Smack: duplicate mount options [ 165.637139][ T7215] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 165.684873][ T7219] EXT4-fs (sda1): Can't modify superblock whileperforming online resize [ 165.722814][ T29] audit: type=1326 audit(1721613040.307:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7180 comm="syz.1.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27f2375b59 code=0x7ffc0000 [ 165.836268][ T29] audit: type=1326 audit(1721613040.307:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7180 comm="syz.1.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27f2375b59 code=0x7ffc0000 [ 165.858800][ T29] audit: type=1326 audit(1721613040.307:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7180 comm="syz.1.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f27f2375b59 code=0x7ffc0000 [ 165.882520][ T29] audit: type=1326 audit(1721613040.307:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7180 comm="syz.1.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27f2375b59 code=0x7ffc0000 [ 165.926213][ T29] audit: type=1326 audit(1721613040.307:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7180 comm="syz.1.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27f2375b59 code=0x7ffc0000 [ 166.081868][ T7229] netlink: 232 bytes leftover after parsing attributes in process `syz.0.477'. [ 166.136680][ T7229] netlink: 72 bytes leftover after parsing attributes in process `syz.0.477'. [ 166.137593][ T5107] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 166.155972][ T5107] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 166.164883][ T5107] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 166.224824][ T5107] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 166.233365][ T5107] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 166.241240][ T5107] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 167.310932][ T7230] chnl_net:caif_netlink_parms(): no params data found [ 167.772219][ T7426] netlink: 232 bytes leftover after parsing attributes in process `syz.3.488'. [ 167.772669][ T7230] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.784960][ T7426] netlink: 72 bytes leftover after parsing attributes in process `syz.3.488'. [ 167.814152][ T7230] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.824702][ T7230] bridge_slave_0: entered allmulticast mode [ 167.833256][ T7230] bridge_slave_0: entered promiscuous mode [ 167.860043][ T7394] netlink: 20 bytes leftover after parsing attributes in process `syz.4.487'. [ 167.963957][ T7392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.485'. [ 168.039132][ T7431] bridge_slave_1: left allmulticast mode [ 168.047147][ T7431] bridge_slave_1: left promiscuous mode [ 168.065385][ T7431] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.122751][ T7431] bridge1: port 1(bridge_slave_1) entered blocking state [ 168.164041][ T7431] bridge1: port 1(bridge_slave_1) entered disabled state [ 168.197930][ T7431] bridge_slave_1: entered allmulticast mode [ 168.319974][ T5107] Bluetooth: hci3: command tx timeout [ 168.348668][ T7431] bridge_slave_1: entered promiscuous mode [ 168.377770][ T7431] bridge1: port 1(bridge_slave_1) entered blocking state [ 168.385445][ T7431] bridge1: port 1(bridge_slave_1) entered forwarding state [ 168.411955][ T7230] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.435103][ T7230] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.444243][ T7230] bridge_slave_1: entered allmulticast mode [ 168.455594][ T7230] bridge_slave_1: entered promiscuous mode [ 168.669133][ T7230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.764778][ T7230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.002639][ T7230] team0: Port device team_slave_0 added [ 169.042757][ T7230] team0: Port device team_slave_1 added [ 169.268846][ T7230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.426596][ T7230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.619818][ T7230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.583274][ T5107] Bluetooth: hci3: command tx timeout [ 172.637581][ T5107] Bluetooth: hci3: command tx timeout [ 173.228639][ T7230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.866626][ T7230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.958610][ T7230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.029862][ T7545] netlink: 'syz.4.497': attribute type 2 has an invalid length. [ 174.070425][ T7545] netlink: 46 bytes leftover after parsing attributes in process `syz.4.497'. [ 174.317382][ T7574] ======================================================= [ 174.317382][ T7574] WARNING: The mand mount option has been deprecated and [ 174.317382][ T7574] and is ignored by this kernel. Remove the mand [ 174.317382][ T7574] option from the mount to silence this warning. [ 174.317382][ T7574] ======================================================= [ 174.537773][ T7230] hsr_slave_0: entered promiscuous mode [ 174.625230][ T7230] hsr_slave_1: entered promiscuous mode [ 174.751473][ T7590] netlink: 56 bytes leftover after parsing attributes in process `syz.1.505'. [ 175.631269][ T1056] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.859938][ T1056] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.916727][ T5107] Bluetooth: hci3: command tx timeout [ 176.315419][ T7230] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.418944][ T1056] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.492289][ T7230] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.503010][ T5100] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 176.512956][ T5100] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 176.524416][ T5100] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 176.576593][ T5100] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 176.616576][ T5100] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 176.628161][ T5100] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 176.978143][ T1056] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.084647][ T7230] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.359181][ T7230] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.439435][ T7685] overlayfs: refusing to follow metacopy origin for (/file0) [ 177.751246][ T5100] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 177.786347][ T5100] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 177.795229][ T5100] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 177.803630][ T5100] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 177.852194][ T5100] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 177.864933][ T5100] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 178.017103][ T1056] bridge_slave_1: left allmulticast mode [ 178.022796][ T1056] bridge_slave_1: left promiscuous mode [ 178.107518][ T1056] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.220022][ T1056] bridge_slave_0: left allmulticast mode [ 178.225675][ T1056] bridge_slave_0: left promiscuous mode [ 178.248924][ T7741] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 178.282730][ T1056] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.807942][ T5107] Bluetooth: hci0: command tx timeout [ 179.706793][ T7759] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 179.801206][ T7763] netlink: 56 bytes leftover after parsing attributes in process `syz.4.516'. [ 179.847488][ T7755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.006725][ T4486] Bluetooth: hci4: command tx timeout [ 180.419121][ T1056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.522843][ T1056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.758225][ T1056] bond0 (unregistering): Released all slaves [ 181.356780][ T4486] Bluetooth: hci5: command 0x0406 tx timeout [ 181.438851][ T5107] Bluetooth: hci1: command 0x0406 tx timeout [ 181.438886][ T4486] Bluetooth: hci2: command 0x0406 tx timeout [ 181.818662][ T5100] Bluetooth: hci0: command tx timeout [ 182.216489][ T5100] Bluetooth: hci4: command tx timeout [ 182.850587][ T7663] chnl_net:caif_netlink_parms(): no params data found [ 182.925050][ C0] eth0: bad gso: type: 1, size: 1408 [ 182.937385][ T7230] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 183.047892][ T7230] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 183.184430][ T1056] hsr_slave_0: left promiscuous mode [ 183.233384][ T1056] hsr_slave_1: left promiscuous mode [ 183.247776][ T1056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.281724][ T1056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.310118][ T1056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.346054][ T1056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.415006][ T1056] veth1_macvtap: left promiscuous mode [ 183.434962][ T1056] veth0_macvtap: left promiscuous mode [ 183.459953][ T1056] veth1_vlan: left allmulticast mode [ 183.485871][ T1056] veth1_vlan: left promiscuous mode [ 183.503884][ T1056] veth0_vlan: left promiscuous mode [ 184.279004][ T5102] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 184.316637][ T5103] Bluetooth: hci4: command tx timeout [ 184.512582][ T1056] macvlan1 (unregistering): left allmulticast mode [ 184.551325][ T5102] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 184.592960][ T5102] usb 2-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 184.628806][ T5102] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 184.667030][ T5102] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.836540][ T52] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 185.076639][ T52] usb 5-1: Using ep0 maxpacket: 8 [ 185.131362][ T52] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 185.176493][ T52] usb 5-1: config 0 has no interface number 0 [ 185.182864][ T52] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 185.281884][ T52] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 185.329022][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.374700][ T52] usb 5-1: config 0 descriptor?? [ 185.436088][ T52] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 185.715934][ T1056] team0 (unregistering): Port device team_slave_1 removed [ 185.832891][ T1056] team0 (unregistering): Port device team_slave_0 removed [ 186.159144][ T5103] Bluetooth: hci6: command 0x0406 tx timeout [ 186.397096][ T5100] Bluetooth: hci4: command tx timeout [ 187.524839][ T7230] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 187.612302][ T7967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.525'. [ 187.695118][ T7967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.525'. [ 187.838709][ T5143] usb 5-1: USB disconnect, device number 4 [ 187.848820][ T5102] usb 2-1: string descriptor 0 read error: -71 [ 187.897669][ T5143] iowarrior 5-1:0.1: I/O-Warror #0 now disconnected [ 187.914874][ T5102] usb 2-1: USB disconnect, device number 3 [ 188.027434][ T7230] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 188.203450][ T8025] netlink: 16 bytes leftover after parsing attributes in process `syz.4.528'. [ 189.106793][ T8053] netlink: 24 bytes leftover after parsing attributes in process `syz.1.530'. [ 189.385505][ T29] audit: type=1326 audit(1721613071.007:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8037 comm="syz.1.530" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27f2375b59 code=0x0 [ 189.407059][ T52] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 189.631175][ T7663] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.663815][ T7663] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.683496][ T7663] bridge_slave_0: entered allmulticast mode [ 189.683899][ T52] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 189.700219][ T7663] bridge_slave_0: entered promiscuous mode [ 189.732674][ T7663] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.753832][ T7663] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.760991][ T52] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 189.761047][ T52] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 189.761071][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.791488][ T8036] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 189.854462][ T7663] bridge_slave_1: entered allmulticast mode [ 189.886549][ T7663] bridge_slave_1: entered promiscuous mode [ 190.083077][ T7663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.173854][ T7663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.252923][ T7707] chnl_net:caif_netlink_parms(): no params data found [ 190.646158][ T8222] IPVS: Error connecting to the multicast addr [ 190.765805][ T7663] team0: Port device team_slave_0 added [ 190.799906][ T7663] team0: Port device team_slave_1 added [ 191.018500][ T7663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.051794][ T7663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.195268][ T7663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.294094][ T7230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.307178][ T52] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 191.326778][ T52] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input5 [ 191.448751][ T7663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.544265][ T7663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.589267][ T52] usb 5-1: USB disconnect, device number 5 [ 191.595090][ C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 191.714337][ T7663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.857699][ T7707] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.915945][ T7707] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.976665][ T7707] bridge_slave_0: entered allmulticast mode [ 192.003730][ T7707] bridge_slave_0: entered promiscuous mode [ 192.034677][ T7707] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.044264][ T7707] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.083922][ T7707] bridge_slave_1: entered allmulticast mode [ 192.127908][ T7707] bridge_slave_1: entered promiscuous mode [ 192.569403][ T7707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.649488][ T7707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.740773][ T7663] hsr_slave_0: entered promiscuous mode [ 192.799452][ T7663] hsr_slave_1: entered promiscuous mode [ 192.922063][ T7663] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.930109][ T7663] Cannot create hsr debugfs directory [ 192.940292][ T7230] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.868685][ T8435] overlayfs: failed to resolve './file0': -2 [ 193.915312][ T7707] team0: Port device team_slave_0 added [ 194.009943][ T7707] team0: Port device team_slave_1 added [ 194.073266][ T5186] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.080441][ T5186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.275616][ T7707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.279462][ T8478] trusted_key: encrypted_key: keyword 'upKate' not recognized [ 194.327991][ T7707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.398882][ T8474] 9pnet_fd: Insufficient options for proto=fd [ 194.433948][ T7707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.537484][ T8492] syz.4.545[8492] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.537628][ T8492] syz.4.545[8492] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.551507][ T7707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.579931][ T29] audit: type=1326 audit(1721613076.207:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8490 comm="syz.4.545" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3d0d75b59 code=0x0 [ 194.666397][ T7707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.733542][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.741263][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.876692][ T7707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.889886][ T8503] syz.4.545[8503] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.890035][ T8503] syz.4.545[8503] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 195.033163][ T5186] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.051504][ T5186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.490097][ T7707] hsr_slave_0: entered promiscuous mode [ 195.619605][ T7707] hsr_slave_1: entered promiscuous mode [ 195.669501][ T7707] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.729031][ T7707] Cannot create hsr debugfs directory [ 195.803729][ T8564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.546'. [ 196.462928][ T7230] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.593737][ T7230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.899903][ T7230] veth0_vlan: entered promiscuous mode [ 198.954027][ T29] audit: type=1326 audit(1721613080.577:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8736 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3d0d75b59 code=0x7ffc0000 [ 198.976166][ T7663] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 199.075994][ T7707] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.098130][ T29] audit: type=1326 audit(1721613080.577:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8736 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3d0d75b59 code=0x7ffc0000 [ 199.166538][ T7663] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 199.176565][ T29] audit: type=1326 audit(1721613080.697:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8736 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe3d0d75b59 code=0x7ffc0000 [ 199.268299][ T7663] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 199.329855][ T29] audit: type=1326 audit(1721613080.697:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8736 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3d0d75b59 code=0x7ffc0000 [ 199.331496][ T7230] veth1_vlan: entered promiscuous mode [ 199.430487][ T29] audit: type=1326 audit(1721613080.727:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8736 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3d0d75b59 code=0x7ffc0000 [ 199.549055][ T7707] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.600295][ T29] audit: type=1326 audit(1721613080.747:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8736 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe3d0d75b59 code=0x7ffc0000 [ 199.698897][ T7663] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 199.720589][ T29] audit: type=1326 audit(1721613080.997:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8736 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3d0d75b59 code=0x7ffc0000 [ 199.887523][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 199.932996][ T29] audit: type=1326 audit(1721613080.997:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8736 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe3d0d6cba7 code=0x7ffc0000 [ 200.036241][ T29] audit: type=1326 audit(1721613080.997:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8736 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe3d0d11569 code=0x7ffc0000 [ 200.115809][ T29] audit: type=1326 audit(1721613080.997:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8736 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe3d0d6cba7 code=0x7ffc0000 [ 200.126653][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 200.138757][ T29] audit: type=1326 audit(1721613080.997:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8736 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe3d0d11569 code=0x7ffc0000 [ 200.174468][ T7707] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.230381][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 200.266201][ T29] audit: type=1326 audit(1721613080.997:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8736 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe3d0d6cba7 code=0x7ffc0000 [ 200.278818][ T9] usb 5-1: config 0 has no interface number 0 [ 200.343302][ T7230] veth0_macvtap: entered promiscuous mode [ 200.378342][ T29] audit: type=1326 audit(1721613080.997:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8736 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe3d0d11569 code=0x7ffc0000 [ 200.443459][ T7230] veth1_macvtap: entered promiscuous mode [ 200.469859][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 200.521262][ T29] audit: type=1326 audit(1721613080.997:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8736 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe3d0d6cba7 code=0x7ffc0000 [ 200.547596][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 200.596424][ T29] audit: type=1326 audit(1721613080.997:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8736 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe3d0d11569 code=0x7ffc0000 [ 200.621497][ T7707] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.657209][ T5147] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 200.666562][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.731537][ T9] usb 5-1: config 0 descriptor?? [ 200.805306][ T9] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 200.836917][ T7230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.887779][ T5147] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.898778][ T5147] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 200.916833][ T7230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.956634][ T5147] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 200.972607][ T7230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.003834][ T5147] usb 2-1: New USB device found, idVendor=595a, idProduct=0001, bcdDevice=e7.1a [ 201.016442][ T7230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.054689][ T5147] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.062890][ T7230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.086127][ T5147] usb 2-1: config 0 descriptor?? [ 201.186281][ T7230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.241940][ T7230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.298047][ T7230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.348589][ T7230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.483767][ T7230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.538536][ T5186] usb 2-1: USB disconnect, device number 4 [ 201.557338][ T7230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.589598][ T7230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.666818][ T7230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.726984][ T7230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.789593][ T7230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.827078][ T7230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.885722][ T7230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.959256][ T7230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.257441][ T7230] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.266160][ T7230] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.438702][ T7230] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.463715][ T7230] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.550182][ T7663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.655469][ T7663] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.780467][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.787632][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.817180][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.824372][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.859037][ T7707] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 202.894550][ T7707] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 202.914688][ T7707] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 203.051746][ T7707] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 203.513263][ T5210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.579633][ T7707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.599799][ T5210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.756404][ T5150] usb 5-1: USB disconnect, device number 6 [ 203.778288][ T7707] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.815124][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.822314][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.827850][ T5150] iowarrior 5-1:0.1: I/O-Warror #0 now disconnected [ 203.916930][ T2465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.924772][ T2465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.992776][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.999956][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.284043][ T7663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.441676][ T7663] veth0_vlan: entered promiscuous mode [ 204.521044][ T7663] veth1_vlan: entered promiscuous mode [ 204.597245][ T8861] pim6reg: entered allmulticast mode [ 205.264698][ T7663] veth0_macvtap: entered promiscuous mode [ 205.501903][ T8861] pim6reg: left allmulticast mode [ 205.608610][ T7663] veth1_macvtap: entered promiscuous mode [ 205.746831][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.816460][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.848679][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.920233][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.969914][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.000776][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.156401][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.196822][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.906452][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.951153][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.983338][ T7663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.124340][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.175274][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.225913][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.262661][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.303072][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.466545][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.241450][ T5150] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 208.249004][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.262725][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.276705][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.296443][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.319194][ T7663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.412945][ T7663] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.460594][ T5150] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 208.486413][ T7663] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.506112][ T5150] usb 2-1: New USB device found, idVendor=2c42, idProduct=1636, bcdDevice=17.01 [ 208.527531][ T7663] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.554354][ T5150] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.562735][ T7663] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.572262][ T5150] usb 2-1: Product: syz [ 208.596579][ T5150] usb 2-1: Manufacturer: syz [ 208.611705][ T5150] usb 2-1: SerialNumber: syz [ 208.661108][ T7707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.668744][ T5150] usb 2-1: config 0 descriptor?? [ 208.698307][ T5150] f81232 2-1:0.0: f81534a converter detected [ 208.947255][ T5150] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 209.026255][ T5150] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 209.116125][ T5150] usb 2-1: USB disconnect, device number 5 [ 209.124288][ T5105] udevd[5105]: failed to send result of seq 13447 to main daemon: Connection refused [ 209.149443][ T7707] veth0_vlan: entered promiscuous mode [ 209.168739][ T5150] f81232 2-1:0.0: device disconnected [ 209.298326][ T2450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.359555][ T2450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.403394][ T7707] veth1_vlan: entered promiscuous mode [ 209.520589][ T2450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.532103][ T7707] veth0_macvtap: entered promiscuous mode [ 209.561287][ T7707] veth1_macvtap: entered promiscuous mode [ 209.579577][ T2450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.688412][ T7707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.746396][ T7707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.781984][ T7707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.836980][ T7707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.866636][ T7707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.926790][ T7707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.996005][ T7707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.028167][ T7707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.081098][ T7707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.105032][ T7707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.146482][ T7707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.173823][ T7707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.225209][ T7707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.247583][ T7707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.342484][ T7707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.395030][ T7707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.419122][ T8988] netlink: 13 bytes leftover after parsing attributes in process `syz.4.592'. [ 210.441959][ T7707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.470011][ T7707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.535315][ T7707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.578159][ T7707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.606534][ T7707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.623803][ T7707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.634353][ T7707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.673510][ T7707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.722614][ T7707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.777630][ T7707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.905597][ T7707] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.948606][ T7707] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.008602][ T7707] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.018721][ C0] eth0: bad gso: type: 1, size: 1408 [ 211.045979][ T7707] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.173246][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 211.546449][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 212.121673][ T9] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=73.60 [ 212.146488][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.180211][ T9] usb 3-1: Product: syz [ 212.200487][ T9] usb 3-1: Manufacturer: syz [ 212.205111][ T9] usb 3-1: SerialNumber: syz [ 212.305149][ T9] r8152-cfgselector 3-1: Unknown version 0x0000 [ 212.335522][ T9] r8152-cfgselector 3-1: config 0 descriptor?? [ 212.477342][ T8] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 212.497781][ T1056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.536442][ T1056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.700658][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 212.739302][ T8] usb 4-1: New USB device found, idVendor=2c42, idProduct=1636, bcdDevice=17.01 [ 212.777274][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.782466][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.800873][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.837224][ T9] r8152-cfgselector 3-1: Unknown version 0x0000 [ 212.847079][ T8] usb 4-1: Product: syz [ 212.863910][ T8] usb 4-1: Manufacturer: syz [ 212.874096][ T9] r8152-cfgselector 3-1: bad CDC descriptors [ 212.902999][ T8] usb 4-1: SerialNumber: syz [ 212.936322][ T9] r8152-cfgselector 3-1: USB disconnect, device number 6 [ 212.944613][ T8] usb 4-1: config 0 descriptor?? [ 212.972530][ T8] f81232 4-1:0.0: f81534a converter detected [ 213.168275][ T9070] trusted_key: encrypted_key: keyword 'upKate' not recognized [ 213.220134][ T9067] 9pnet_fd: Insufficient options for proto=fd [ 213.245771][ T8] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 213.271151][ T8] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 213.327050][ T8] usb 4-1: USB disconnect, device number 4 [ 213.362731][ T8] f81232 4-1:0.0: device disconnected [ 213.932582][ T9097] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 214.071464][ T9101] netlink: 16 bytes leftover after parsing attributes in process `syz.1.607'. [ 214.616686][ T5147] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 214.927085][ T5147] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice=cc.97 [ 215.229309][ T5147] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.274699][ T5147] usb 2-1: config 0 descriptor?? [ 215.317572][ T5147] sisusb 2-1:0.0: Invalid USB2VGA device [ 215.356433][ T5147] sisusb 2-1:0.0: probe with driver sisusb failed with error -22 [ 215.657218][ T9130] delete_channel: no stack [ 215.768214][ T9140] msdos: Unknown parameter 'bFs ' [ 216.623011][ T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 221.839233][ T5102] usb 2-1: USB disconnect, device number 6 [ 221.986871][ T8] usb 5-1: device not accepting address 7, error -71 [ 222.175445][ T9170] macvtap0: entered promiscuous mode [ 222.224400][ T9170] macvtap0: left promiscuous mode [ 223.375531][ T9194] delete_channel: no stack [ 223.441268][ T9198] netlink: 'syz.3.628': attribute type 13 has an invalid length. [ 223.487878][ T9198] veth0_macvtap: left promiscuous mode [ 223.526754][ T9198] macvtap0: entered allmulticast mode [ 223.596901][ T9198] macvtap0: refused to change device tx_queue_len [ 223.661191][ T9211] trusted_key: encrypted_key: keyword 'upKate' not recognized [ 223.686982][ T9204] veth0_vlan: left promiscuous mode [ 223.769319][ T9203] 9pnet_fd: Insufficient options for proto=fd [ 223.857165][ T8] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 224.086482][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 224.108638][ T8] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=73.60 [ 224.154018][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.195652][ T8] usb 5-1: Product: syz [ 224.203856][ T8] usb 5-1: Manufacturer: syz [ 224.227809][ T8] usb 5-1: SerialNumber: syz [ 224.247593][ T8] r8152-cfgselector 5-1: Unknown version 0x0000 [ 224.255247][ T8] r8152-cfgselector 5-1: config 0 descriptor?? [ 224.608033][ T8] r8152-cfgselector 5-1: Unknown version 0x0000 [ 224.637421][ T8] r8152-cfgselector 5-1: bad CDC descriptors [ 224.656195][ T8] r8152-cfgselector 5-1: USB disconnect, device number 9 [ 225.069617][ T9268] delete_channel: no stack [ 225.357469][ T5100] Bluetooth: hci6: unexpected event for opcode 0x2031 [ 225.385914][ T9276] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 225.568978][ T9285] loop0: detected capacity change from 0 to 7 [ 225.599569][ T9285] Dev loop0: unable to read RDB block 7 [ 225.599621][ T9285] loop0: unable to read partition table [ 225.599851][ T9285] loop0: partition table beyond EOD, truncated [ 225.599871][ T9285] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 225.599871][ T9285] ) failed (rc=-5) [ 225.939675][ T5186] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 225.939790][ T5186] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 225.977478][ T5186] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 226.160814][ T9304] trusted_key: encrypted_key: keylen parameter is missing [ 226.205648][ T9304] 9pnet_fd: Insufficient options for proto=fd [ 226.573018][ T9310] delete_channel: no stack [ 227.070081][ T9321] netlink: 'syz.4.656': attribute type 21 has an invalid length. [ 227.151491][ T9321] netlink: 'syz.4.656': attribute type 1 has an invalid length. [ 227.168622][ T52] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 227.379570][ T9329] x_tables: duplicate underflow at hook 2 [ 227.389923][ T52] usb 3-1: Using ep0 maxpacket: 8 [ 227.419042][ T52] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=73.60 [ 227.456401][ T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.498436][ T52] usb 3-1: Product: syz [ 227.523133][ T52] usb 3-1: Manufacturer: syz [ 227.554633][ T52] usb 3-1: SerialNumber: syz [ 227.595009][ T52] r8152-cfgselector 3-1: Unknown version 0x0000 [ 227.616403][ T52] r8152-cfgselector 3-1: config 0 descriptor?? [ 228.069916][ T52] r8152-cfgselector 3-1: Unknown version 0x0000 [ 228.079126][ T52] r8152-cfgselector 3-1: bad CDC descriptors [ 228.115936][ T52] r8152-cfgselector 3-1: USB disconnect, device number 7 [ 229.496554][ T5100] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 229.508019][ T5100] Bluetooth: hci6: Injecting HCI hardware error event [ 229.519329][ T5103] Bluetooth: hci6: hardware error 0x00 [ 231.058788][ T9390] can0: slcan on ttyS3. [ 231.187352][ T9400] can0 (unregistered): slcan off ttyS3. [ 231.287295][ T9410] msdos: Unknown parameter 'bFs ' [ 231.676855][ T5103] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 233.338590][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 233.338604][ T29] audit: type=1800 audit(1721613114.967:67): pid=9424 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.679" name="/" dev="fuse" ino=1 res=0 errno=0 [ 234.415296][ T9433] Zero length message leads to an empty skb [ 234.706531][ T5150] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 234.908624][ T5150] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 234.960793][ T5150] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 234.993970][ T5150] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 235.033748][ T5150] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 235.046060][ T5103] Bluetooth: hci3: unexpected event 0x08 length: 78 > 4 [ 235.078834][ T5150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.155831][ T5150] usb 2-1: config 0 descriptor?? [ 235.357038][ T9433] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 236.340606][ T9455] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 236.444646][ T9466] netlink: 'syz.3.693': attribute type 2 has an invalid length. [ 236.456491][ T9455] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 236.458325][ T5150] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 236.504000][ T5150] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 236.554989][ T9455] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 236.588252][ T5150] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 236.635550][ T9455] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 236.724189][ T9455] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 236.794481][ T9455] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 236.918210][ T9455] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 236.968675][ T9455] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 237.053949][ T9455] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 237.073605][ T9455] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 237.640665][ T9512] netlink: 'syz.3.702': attribute type 1 has an invalid length. [ 238.496661][ T5143] usb 2-1: reset high-speed USB device number 7 using dummy_hcd [ 238.971561][ T9534] Bluetooth: MGMT ver 1.23 [ 238.991433][ T9534] Bluetooth: hci3: invalid length 0, exp 1 for type 31 [ 239.567223][ T5102] usb 2-1: USB disconnect, device number 7 [ 240.484652][ T9564] netlink: 'syz.1.713': attribute type 1 has an invalid length. [ 240.647654][ C0] eth0: bad gso: type: 1, size: 1408 [ 240.881868][ T9577] netlink: 44 bytes leftover after parsing attributes in process `syz.1.717'. [ 240.922682][ T9577] netlink: 16 bytes leftover after parsing attributes in process `syz.1.717'. [ 241.195639][ T9581] Bluetooth: hci3: invalid length 0, exp 1 for type 31 [ 241.648105][ T9594] netlink: 'syz.2.724': attribute type 1 has an invalid length. [ 241.683266][ T9594] netlink: 224 bytes leftover after parsing attributes in process `syz.2.724'. [ 241.704609][ T9594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.724'. [ 241.766639][ T5143] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 242.058063][ T5143] usb 4-1: Using ep0 maxpacket: 32 [ 242.778158][ T5143] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 27, changing to 8 [ 242.816720][ T5143] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16698, setting to 1024 [ 242.831050][ C0] eth0: bad gso: type: 1, size: 1408 [ 242.843359][ T5143] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 242.853214][ T5143] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.866625][ T5143] hub 4-1:4.0: USB hub found [ 243.102779][ T9617] netlink: 12 bytes leftover after parsing attributes in process `syz.1.731'. [ 243.138060][ T5143] hub 4-1:4.0: 2 ports detected [ 243.143002][ T5143] usb 4-1: selecting invalid altsetting 1 [ 243.178718][ T5143] hub 4-1:4.0: Using single TT (err -22) [ 243.351029][ T5143] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 243.400118][ T5143] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 243.599385][ T5143] usb 4-1: USB disconnect, device number 5 [ 247.508593][ T9678] netlink: 'syz.1.750': attribute type 14 has an invalid length. [ 248.791676][ T5147] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 249.168023][ T5147] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 249.187131][ T5147] usb 2-1: New USB device found, idVendor=2c42, idProduct=1636, bcdDevice=17.01 [ 249.359316][ T5147] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.367598][ T5147] usb 2-1: Product: syz [ 249.371932][ T5147] usb 2-1: Manufacturer: syz [ 249.376737][ T5147] usb 2-1: SerialNumber: syz [ 249.958680][ T5147] usb 2-1: config 0 descriptor?? [ 249.980449][ T5147] f81232 2-1:0.0: f81534a converter detected [ 250.231777][ T5147] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 250.270392][ T5147] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 250.319719][ T5147] usb 2-1: USB disconnect, device number 8 [ 250.348951][ T5147] f81232 2-1:0.0: device disconnected [ 253.689201][ T5150] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 253.919057][ T5150] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 253.961804][ T9821] netlink: 60 bytes leftover after parsing attributes in process `syz.2.794'. [ 253.976851][ T5150] usb 4-1: New USB device found, idVendor=2c42, idProduct=1636, bcdDevice=17.01 [ 253.995776][ T5150] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.018490][ T5150] usb 4-1: Product: syz [ 254.030183][ T5150] usb 4-1: Manufacturer: syz [ 254.044484][ T5150] usb 4-1: SerialNumber: syz [ 254.061919][ T5150] usb 4-1: config 0 descriptor?? [ 254.096934][ T5150] f81232 4-1:0.0: f81534a converter detected [ 254.129147][ T9821] : entered promiscuous mode [ 254.157542][ T29] audit: type=1326 audit(1721613135.777:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9832 comm="syz.0.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff313775b59 code=0x7ffc0000 [ 254.727220][ T29] audit: type=1326 audit(1721613135.807:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9832 comm="syz.0.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff313775b59 code=0x7ffc0000 [ 254.787753][ T5150] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 254.817190][ T5150] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 254.836889][ T29] audit: type=1326 audit(1721613135.807:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9832 comm="syz.0.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff313775b59 code=0x7ffc0000 [ 254.868149][ T5150] usb 4-1: USB disconnect, device number 6 [ 254.894956][ T5150] f81232 4-1:0.0: device disconnected [ 254.938685][ T29] audit: type=1326 audit(1721613135.807:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9832 comm="syz.0.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff313775b59 code=0x7ffc0000 [ 254.999665][ T29] audit: type=1326 audit(1721613135.807:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9832 comm="syz.0.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff313775b59 code=0x7ffc0000 [ 255.058193][ T29] audit: type=1326 audit(1721613135.807:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9832 comm="syz.0.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff313775b59 code=0x7ffc0000 [ 255.144143][ T29] audit: type=1326 audit(1721613135.807:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9832 comm="syz.0.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff313775b59 code=0x7ffc0000 [ 255.357801][ T29] audit: type=1326 audit(1721613135.817:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9832 comm="syz.0.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff313775b59 code=0x7ffc0000 [ 256.487062][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.494060][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.626443][ T29] audit: type=1326 audit(1721613135.817:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9832 comm="syz.0.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff313775b59 code=0x7ffc0000 [ 256.626444][ T5102] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 256.659510][ T29] audit: type=1326 audit(1721613135.817:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9832 comm="syz.0.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff313775b59 code=0x7ffc0000 [ 256.742764][ T9874] netlink: 'syz.1.805': attribute type 10 has an invalid length. [ 256.750655][ T9874] netlink: 40 bytes leftover after parsing attributes in process `syz.1.805'. [ 256.766587][ T9874] hsr0: entered promiscuous mode [ 256.772258][ T9874] bridge0: port 3(hsr0) entered blocking state [ 256.780351][ T9874] bridge0: port 3(hsr0) entered disabled state [ 256.788570][ T9874] hsr0: entered allmulticast mode [ 256.800002][ T9874] hsr_slave_0: entered allmulticast mode [ 256.830741][ T5102] usb 5-1: Using ep0 maxpacket: 32 [ 256.840634][ T5102] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 27, changing to 8 [ 256.841842][ T9874] hsr_slave_1: entered allmulticast mode [ 256.871793][ T9874] bridge0: port 3(hsr0) entered blocking state [ 256.878119][ T9874] bridge0: port 3(hsr0) entered forwarding state [ 256.885088][ T5102] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16698, setting to 1024 [ 256.926504][ T5102] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 256.955969][ T5102] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.007845][ T5102] hub 5-1:4.0: USB hub found [ 257.247685][ T5102] hub 5-1:4.0: 2 ports detected [ 257.252621][ T5102] usb 5-1: selecting invalid altsetting 1 [ 257.269724][ T5102] hub 5-1:4.0: Using single TT (err -22) [ 257.404740][ T9883] ebtables: ebtables: counters copy to user failed while replacing table [ 259.588831][ T5102] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 259.650394][ T52] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 259.673259][ T5102] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 259.826118][ T5102] usb 5-1: USB disconnect, device number 10 [ 260.251685][ T9910] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 260.305270][ T9910] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 260.776472][ T52] usb 2-1: device not accepting address 9, error -71 [ 260.894585][ T9910] siw: device registration error -19 [ 261.642286][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 261.642356][ T29] audit: type=1800 audit(1721613143.267:136): pid=9927 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.811" name="/" dev="fuse" ino=1 res=0 errno=0 [ 263.667557][ T9965] program syz.1.821 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 263.766457][ T5143] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 264.178019][ T9976] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 264.736487][ T5143] usb 4-1: Using ep0 maxpacket: 32 [ 264.760002][ T5143] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.776422][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 264.794267][ T5143] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.822414][ T5143] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 264.986519][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 265.570988][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.599224][ C0] eth0: bad gso: type: 1, size: 1408 [ 265.617630][ T5143] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 265.628424][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 265.666395][ T5143] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 265.674798][ T5143] usb 4-1: Product: syz [ 265.684807][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 265.709536][ T5143] usb 4-1: Manufacturer: syz [ 265.714148][ T5143] usb 4-1: SerialNumber: syz [ 265.726688][ T9] usb 5-1: SerialNumber: syz [ 265.756222][ T9] usb 5-1: config 0 descriptor?? [ 265.821052][ T5143] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input6 [ 265.863083][ T9] usb 5-1: Found UVC 0.00 device (05ac:8501) [ 265.886521][ T9] uvcvideo 5-1:0.0: Entity type for entity Output 255 was not initialized! [ 265.917443][ T9] usb 5-1: Failed to create links for entity 255 [ 265.923796][ T9] usb 5-1: Failed to register entities (-22). [ 266.153106][ T5147] usb 4-1: USB disconnect, device number 7 [ 266.221615][ T5147] appletouch 4-1:1.0: input: appletouch disconnected [ 266.376472][ T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 266.596426][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 266.650342][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 266.720889][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 266.776427][ T8] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 266.850292][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.871931][ T8] usb 1-1: config 0 descriptor?? [ 267.465273][ T29] audit: type=1107 audit(1721613149.087:137): pid=10047 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='O' [ 267.605252][ T5143] usb 5-1: USB disconnect, device number 11 [ 267.901599][T10011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.190151][T10065] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 268.388336][T10011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.436456][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 268.578938][ T8] hid-generic 0003:0158:0100.0003: unknown main item tag 0x1 [ 268.627176][ T8] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 268.648494][ T8] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 268.668369][T10083] No such timeout policy "syz0" [ 268.669537][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 268.679627][ T8] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 268.703880][ T8] hid-generic 0003:0158:0100.0003: unknown main item tag 0x2 [ 268.715216][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.734345][ T8] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 268.816475][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 268.829477][ T8] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 268.837411][ T8] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 268.845239][ T8] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 268.854025][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 268.863215][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.871430][ T8] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 268.888260][ T8] hid-generic 0003:0158:0100.0003: unexpected long global item [ 268.917455][ T9] usb 4-1: config 0 descriptor?? [ 268.927322][ T8] hid-generic 0003:0158:0100.0003: probe with driver hid-generic failed with error -22 [ 268.980325][ T8] usb 1-1: USB disconnect, device number 5 [ 269.195287][T10107] netlink: 20 bytes leftover after parsing attributes in process `syz.1.847'. [ 269.350292][ T9] microsoft 0003:045E:07DA.0004: No inputs registered, leaving [ 269.397346][ T9] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 269.451875][ T9] microsoft 0003:045E:07DA.0004: no inputs found [ 269.471991][ T9] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 269.610941][T10128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.639222][T10128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.782376][T10121] ebtables: ebtables: counters copy to user failed while replacing table [ 269.949469][ T9] usb 4-1: USB disconnect, device number 8 [ 270.304618][T10145] mkiss: ax0: crc mode is auto. [ 271.438815][T10116] syz.1.849 (10116) used greatest stack depth: 19352 bytes left [ 271.478392][T10157] No such timeout policy "syz0" [ 272.585721][T10171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.856'. [ 272.605064][T10171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.856'. [ 273.844293][T10196] Falling back ldisc for ptm0. [ 274.561005][T10225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.874'. [ 274.596470][T10225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.874'. [ 274.632521][ T5147] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 274.973596][T10237] mkiss: ax0: crc mode is auto. [ 275.075868][ T5147] usb 5-1: Using ep0 maxpacket: 8 [ 275.135622][ T5147] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.816561][ T5186] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 276.935405][ T5147] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 277.066565][ T5186] usb 3-1: Using ep0 maxpacket: 8 [ 277.124895][ T5186] usb 3-1: config 0 has an invalid interface number: 5 but max is 0 [ 277.140602][ T5147] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 277.157078][ T5186] usb 3-1: config 0 has no interface number 0 [ 277.163305][ T5147] usb 5-1: SerialNumber: syz [ 277.173058][ T5186] usb 3-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=f0.ff [ 277.185298][ T5186] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.196133][ T5186] usb 3-1: Product: syz [ 277.201355][ T5186] usb 3-1: Manufacturer: syz [ 277.206432][ T5186] usb 3-1: SerialNumber: syz [ 277.212148][ T5147] usb 5-1: config 0 descriptor?? [ 277.239541][ T5186] usb 3-1: config 0 descriptor?? [ 277.270085][ T5147] usb 5-1: can't set config #0, error -71 [ 277.313582][ T5147] usb 5-1: USB disconnect, device number 12 [ 277.515088][T10267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.881'. [ 278.466430][ T5145] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 278.537217][ T8] usb 3-1: USB disconnect, device number 8 [ 278.568402][T10289] netlink: 24 bytes leftover after parsing attributes in process `syz.4.888'. [ 278.706580][ T5186] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 278.726159][ T5145] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 278.787530][ T5145] usb 1-1: language id specifier not provided by device, defaulting to English [ 278.800944][ T5145] usb 1-1: New USB device found, idVendor=056a, idProduct=0069, bcdDevice= 0.40 [ 278.824319][ T5145] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.841188][ T5145] usb 1-1: Product: syz [ 278.854484][ T5145] usb 1-1: Manufacturer: 꼳ฐḼ馊ᠪ횔ꑇ꛲⨀맾ߟな㡰홖⒙ᒅ煗ﵙ [ 278.878036][ T5145] usb 1-1: SerialNumber: syz [ 278.896548][ T5186] usb 2-1: Using ep0 maxpacket: 32 [ 278.898834][ T5145] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 278.932345][ T5186] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.026164][ T5186] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.080988][ T5186] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 279.091508][ T5186] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.127430][ T5186] usb 2-1: config 0 descriptor?? [ 279.313994][ T9] usb 1-1: USB disconnect, device number 6 [ 279.564887][ T5186] lua 0003:1E7D:2C2E.0005: global environment stack underflow [ 279.596510][ T5186] lua 0003:1E7D:2C2E.0005: item 0 0 1 11 parsing failed [ 279.633650][ T5186] lua 0003:1E7D:2C2E.0005: parse failed [ 279.648162][ T5186] lua 0003:1E7D:2C2E.0005: probe with driver lua failed with error -22 [ 279.669025][T10333] netlink: 'syz.4.901': attribute type 6 has an invalid length. [ 280.014034][T10340] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 280.798801][ T5147] usb 2-1: USB disconnect, device number 11 [ 283.385610][T10387] netlink: 96 bytes leftover after parsing attributes in process `syz.1.912'. [ 283.996687][ T5145] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 284.153161][T10422] [ 284.155530][T10422] ====================================================== [ 284.162551][T10422] WARNING: possible circular locking dependency detected [ 284.169569][T10422] 6.10.0-syzkaller-11323-g7846b618e0a4 #0 Not tainted [ 284.176325][T10422] ------------------------------------------------------ [ 284.183327][T10422] syz.1.923/10422 is trying to acquire lock: [ 284.189283][T10422] ffff88806222a940 (&sbi->pipe_mutex){+.+.}-{3:3}, at: autofs_notify_daemon+0x71f/0xf80 [ 284.199009][T10422] [ 284.199009][T10422] but task is already holding lock: [ 284.206365][T10422] ffff88804762c488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 284.215671][T10422] [ 284.215671][T10422] which lock already depends on the new lock. [ 284.215671][T10422] [ 284.217644][ T5145] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 284.226043][T10422] [ 284.226043][T10422] the existing dependency chain (in reverse order) is: [ 284.226053][T10422] [ 284.226053][T10422] -> #2 (&of->mutex){+.+.}-{3:3}: [ 284.226083][T10422] lock_acquire+0x1ed/0x550 [ 284.259979][T10422] __mutex_lock+0x136/0xd70 [ 284.264995][T10422] kernfs_fop_write_iter+0x1eb/0x500 [ 284.270784][T10422] iter_file_splice_write+0xbd7/0x14e0 [ 284.276746][T10422] do_splice+0xd77/0x1900 [ 284.281577][T10422] __se_sys_splice+0x331/0x4a0 [ 284.286845][T10422] do_syscall_64+0xf3/0x230 [ 284.291855][T10422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.298247][T10422] [ 284.298247][T10422] -> #1 (&pipe->mutex){+.+.}-{3:3}: [ 284.305603][T10422] lock_acquire+0x1ed/0x550 [ 284.310606][T10422] __mutex_lock+0x136/0xd70 [ 284.315608][T10422] pipe_write+0x1c9/0x1a40 [ 284.320519][T10422] __kernel_write_iter+0x47e/0x900 [ 284.326126][T10422] __kernel_write+0x120/0x180 [ 284.331303][T10422] autofs_notify_daemon+0x732/0xf80 [ 284.337001][T10422] autofs_wait+0x10b8/0x1b30 [ 284.342089][T10422] autofs_mount_wait+0x170/0x330 [ 284.347528][T10422] autofs_d_automount+0x555/0x710 [ 284.353053][T10422] __traverse_mounts+0x2ba/0x580 [ 284.358488][T10422] step_into+0x5e5/0x1080 [ 284.363314][T10422] path_openat+0x184b/0x3470 [ 284.368403][T10422] do_filp_open+0x235/0x490 [ 284.373402][T10422] do_sys_openat2+0x13e/0x1d0 [ 284.378584][T10422] __x64_sys_openat+0x247/0x2a0 [ 284.383936][T10422] do_syscall_64+0xf3/0x230 [ 284.388954][T10422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.395354][T10422] [ 284.395354][T10422] -> #0 (&sbi->pipe_mutex){+.+.}-{3:3}: [ 284.403073][T10422] validate_chain+0x18e0/0x5900 [ 284.408429][T10422] __lock_acquire+0x137a/0x2040 [ 284.413778][T10422] lock_acquire+0x1ed/0x550 [ 284.418786][T10422] __mutex_lock+0x136/0xd70 [ 284.423790][T10422] autofs_notify_daemon+0x71f/0xf80 [ 284.429489][T10422] autofs_wait+0x10b8/0x1b30 [ 284.434579][T10422] autofs_mount_wait+0x170/0x330 [ 284.440016][T10422] autofs_d_automount+0x555/0x710 [ 284.445547][T10422] __traverse_mounts+0x2ba/0x580 [ 284.450997][T10422] step_into+0x5e5/0x1080 [ 284.455828][T10422] path_lookupat+0x16f/0x450 [ 284.460918][T10422] filename_lookup+0x256/0x610 [ 284.466179][T10422] kern_path+0x35/0x50 [ 284.470744][T10422] lookup_bdev+0xc5/0x290 [ 284.475573][T10422] resume_store+0x1a0/0x710 [ 284.480576][T10422] kernfs_fop_write_iter+0x3a1/0x500 [ 284.486370][T10422] iter_file_splice_write+0xbd7/0x14e0 [ 284.492335][T10422] direct_splice_actor+0x11e/0x220 [ 284.497962][T10422] splice_direct_to_actor+0x58e/0xc90 [ 284.503835][T10422] do_splice_direct+0x28c/0x3e0 [ 284.509182][T10422] do_sendfile+0x56d/0xe20 [ 284.514095][T10422] __se_sys_sendfile64+0x17c/0x1e0 [ 284.519704][T10422] do_syscall_64+0xf3/0x230 [ 284.524704][T10422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.531096][T10422] [ 284.531096][T10422] other info that might help us debug this: [ 284.531096][T10422] [ 284.541301][T10422] Chain exists of: [ 284.541301][T10422] &sbi->pipe_mutex --> &pipe->mutex --> &of->mutex [ 284.541301][T10422] [ 284.553702][T10422] Possible unsafe locking scenario: [ 284.553702][T10422] [ 284.561127][T10422] CPU0 CPU1 [ 284.566476][T10422] ---- ---- [ 284.571825][T10422] lock(&of->mutex); [ 284.575790][T10422] lock(&pipe->mutex); [ 284.582445][T10422] lock(&of->mutex); [ 284.588923][T10422] lock(&sbi->pipe_mutex); [ 284.593406][T10422] [ 284.593406][T10422] *** DEADLOCK *** [ 284.593406][T10422] [ 284.601532][T10422] 3 locks held by syz.1.923/10422: [ 284.606614][T10422] #0: ffff88802a5e2420 (sb_writers#8){.+.+}-{0:0}, at: direct_splice_actor+0x49/0x220 [ 284.616252][T10422] #1: ffff88804762c488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 284.625974][T10422] #2: ffff888017adf5a8 (kn->active#65){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 284.635957][T10422] [ 284.635957][T10422] stack backtrace: [ 284.641829][T10422] CPU: 1 PID: 10422 Comm: syz.1.923 Not tainted 6.10.0-syzkaller-11323-g7846b618e0a4 #0 [ 284.651522][T10422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 284.661555][T10422] Call Trace: [ 284.664817][T10422] [ 284.667731][T10422] dump_stack_lvl+0x241/0x360 [ 284.672386][T10422] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.677563][T10422] ? print_circular_bug+0x130/0x1a0 [ 284.682737][T10422] check_noncircular+0x36a/0x4a0 [ 284.687658][T10422] ? __pfx_check_noncircular+0x10/0x10 [ 284.693100][T10422] validate_chain+0x18e0/0x5900 [ 284.697938][T10422] ? __pfx_validate_chain+0x10/0x10 [ 284.703117][T10422] ? check_noncircular+0x259/0x4a0 [ 284.708209][T10422] ? __pfx___bfs+0x10/0x10 [ 284.712615][T10422] ? mark_lock+0x9a/0x350 [ 284.716928][T10422] __lock_acquire+0x137a/0x2040 [ 284.721765][T10422] lock_acquire+0x1ed/0x550 [ 284.726252][T10422] ? autofs_notify_daemon+0x71f/0xf80 [ 284.731607][T10422] ? __pfx_lock_acquire+0x10/0x10 [ 284.736615][T10422] ? __pfx___might_resched+0x10/0x10 [ 284.741878][T10422] ? autofs_notify_daemon+0x6c6/0xf80 [ 284.747240][T10422] ? __pfx_lock_release+0x10/0x10 [ 284.752257][T10422] __mutex_lock+0x136/0xd70 [ 284.756763][T10422] ? autofs_notify_daemon+0x71f/0xf80 [ 284.762137][T10422] ? __mutex_unlock_slowpath+0x21d/0x750 [ 284.767773][T10422] ? autofs_notify_daemon+0x71f/0xf80 [ 284.773142][T10422] ? __pfx___mutex_lock+0x10/0x10 [ 284.778156][T10422] ? from_kgid_munged+0x1fe/0x7a0 [ 284.783165][T10422] ? __pfx_from_kgid_munged+0x10/0x10 [ 284.788519][T10422] ? kasan_save_track+0x51/0x80 [ 284.793349][T10422] ? kasan_save_track+0x3f/0x80 [ 284.798180][T10422] ? __kasan_kmalloc+0x98/0xb0 [ 284.802926][T10422] ? autofs_notify_daemon+0x48c/0xf80 [ 284.808284][T10422] autofs_notify_daemon+0x71f/0xf80 [ 284.813467][T10422] ? iter_file_splice_write+0xbd7/0x14e0 [ 284.819087][T10422] ? __pfx_autofs_notify_daemon+0x10/0x10 [ 284.824801][T10422] ? __init_waitqueue_head+0xae/0x150 [ 284.830159][T10422] autofs_wait+0x10b8/0x1b30 [ 284.834736][T10422] ? __pfx_autofs_wait+0x10/0x10 [ 284.839654][T10422] ? autofs_d_automount+0x54b/0x710 [ 284.844831][T10422] ? __pfx_lock_release+0x10/0x10 [ 284.849836][T10422] ? _raw_spin_unlock+0x28/0x50 [ 284.854671][T10422] ? path_has_submounts+0x10b/0x170 [ 284.859864][T10422] autofs_mount_wait+0x170/0x330 [ 284.864787][T10422] autofs_d_automount+0x555/0x710 [ 284.869800][T10422] __traverse_mounts+0x2ba/0x580 [ 284.874715][T10422] step_into+0x5e5/0x1080 [ 284.879024][T10422] ? __up_read+0x2c2/0x6b0 [ 284.883416][T10422] ? __pfx___up_read+0x10/0x10 [ 284.888155][T10422] ? make_vfsuid+0x46/0x90 [ 284.892546][T10422] ? __pfx_step_into+0x10/0x10 [ 284.897290][T10422] ? walk_component+0x18d/0x410 [ 284.902117][T10422] path_lookupat+0x16f/0x450 [ 284.906689][T10422] filename_lookup+0x256/0x610 [ 284.911432][T10422] ? __pfx_filename_lookup+0x10/0x10 [ 284.916715][T10422] ? getname_kernel+0x59/0x2f0 [ 284.921467][T10422] ? rcu_is_watching+0x15/0xb0 [ 284.926217][T10422] ? getname_kernel+0x59/0x2f0 [ 284.930962][T10422] ? getname_kernel+0x140/0x2f0 [ 284.935796][T10422] kern_path+0x35/0x50 [ 284.939848][T10422] lookup_bdev+0xc5/0x290 [ 284.944159][T10422] ? rcu_is_watching+0x15/0xb0 [ 284.948920][T10422] ? __pfx_lookup_bdev+0x10/0x10 [ 284.953839][T10422] ? __kmalloc_node_track_caller_noprof+0x242/0x440 [ 284.960411][T10422] ? __asan_memcpy+0x40/0x70 [ 284.964983][T10422] resume_store+0x1a0/0x710 [ 284.969473][T10422] ? __pfx_resume_store+0x10/0x10 [ 284.974486][T10422] ? sysfs_kf_write+0x182/0x2a0 [ 284.979321][T10422] ? __pfx_sysfs_kf_write+0x10/0x10 [ 284.984497][T10422] kernfs_fop_write_iter+0x3a1/0x500 [ 284.989767][T10422] iter_file_splice_write+0xbd7/0x14e0 [ 284.995213][T10422] ? __pfx_iter_file_splice_write+0x10/0x10 [ 285.001090][T10422] ? rcu_read_lock_any_held+0xb7/0x160 [ 285.006534][T10422] ? __pfx_iter_file_splice_write+0x10/0x10 [ 285.012414][T10422] direct_splice_actor+0x11e/0x220 [ 285.017516][T10422] splice_direct_to_actor+0x58e/0xc90 [ 285.022879][T10422] ? __pfx_direct_splice_actor+0x10/0x10 [ 285.028502][T10422] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 285.034388][T10422] ? __fget_files+0x29/0x470 [ 285.038964][T10422] ? __pfx_lock_release+0x10/0x10 [ 285.043975][T10422] do_splice_direct+0x28c/0x3e0 [ 285.048819][T10422] ? __pfx_do_splice_direct+0x10/0x10 [ 285.054174][T10422] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 285.060061][T10422] ? rw_verify_area+0x1d2/0x6b0 [ 285.064910][T10422] do_sendfile+0x56d/0xe20 [ 285.069314][T10422] ? __pfx_do_sendfile+0x10/0x10 [ 285.074236][T10422] __se_sys_sendfile64+0x17c/0x1e0 [ 285.079329][T10422] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 285.084943][T10422] ? do_syscall_64+0x100/0x230 [ 285.089688][T10422] ? do_syscall_64+0xb6/0x230 [ 285.094344][T10422] do_syscall_64+0xf3/0x230 [ 285.098827][T10422] ? clear_bhb_loop+0x35/0x90 [ 285.103485][T10422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.109369][T10422] RIP: 0033:0x7f27f2375b59 [ 285.113765][T10422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.133353][T10422] RSP: 002b:00007f27f3168048 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 285.141748][T10422] RAX: ffffffffffffffda RBX: 00007f27f2506038 RCX: 00007f27f2375b59 [ 285.149704][T10422] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 285.157664][T10422] RBP: 00007f27f23e4e5d R08: 0000000000000000 R09: 0000000000000000 [ 285.165618][T10422] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 285.173576][T10422] R13: 000000000000006e R14: 00007f27f2506038 R15: 00007ffe334d16d8 [ 285.181534][T10422] [ 285.230632][ T5145] usb 5-1: language id specifier not provided by device, defaulting to English [ 285.267342][ T5145] usb 5-1: New USB device found, idVendor=056a, idProduct=0069, bcdDevice= 0.40 [ 285.308585][ T5145] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.332419][ T5145] usb 5-1: Product: syz [ 285.337530][ T5145] usb 5-1: Manufacturer: 꼳ฐḼ馊ᠪ횔ꑇ꛲⨀맾ߟな㡰홖⒙ᒅ煗ﵙ [ 285.349650][ T5145] usb 5-1: SerialNumber: syz [ 285.359985][ T5145] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 285.385938][T10422] PM: Image not found (code -6) [ 285.573328][ T5145] usb 5-1: USB disconnect, device number 13