last executing test programs: 54.171109857s ago: executing program 3 (id=401): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x1000001, 0x6100) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30"], 0x5c}}, 0x44001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsetxattr(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB='btrfs./d'], 0x0, 0x0, 0x1) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f00000000c0)={0x0, 0x80600}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000240)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x3, 0x48e0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8db4afac10087539797902d00050020a1a903fe01177d3d058dd228008300000000000000000000000000000000000000000000000000000800", "642c083a63d46b4ad07f346003d8a0a9453fa47138cd000000000200", [0x0, 0x8]}}) 52.398268769s ago: executing program 3 (id=403): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x1, 0x4, 0x2}) 51.480021968s ago: executing program 3 (id=405): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2d, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000040000000400000009"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100"], 0x90}}, 0x0) 51.168232018s ago: executing program 3 (id=406): pipe(&(0x7f00000002c0)={0xffffffffffffffff}) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000000080)=""/146, &(0x7f0000000000)=0x92) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) syz_pidfd_open(0x0, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x40000000000000, 0x88}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, &(0x7f0000000480)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={0x0, 0x0, 0x8}, 0x18) r2 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r2, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000003700)=[{0x0}, {&(0x7f00000024c0)=""/225, 0xe1}, {0x0}], 0x3}}], 0x1, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x800000000000001) 50.639244143s ago: executing program 3 (id=408): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0xf6, r2, 0x1, 0x55, 0x6, @multicast}, 0x14) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, 0x0, &(0x7f0000000180)) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf7, r2, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x14) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r4, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x20000001, 0x4, 0x0, 0x1, 0x5}) socket$kcm(0x2, 0x5, 0x84) syz_open_dev$media(&(0x7f0000000040), 0x4c6c, 0x200) socket$kcm(0x10, 0x2, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) sendmmsg$inet(r5, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) clock_gettime(0x300, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 47.643937516s ago: executing program 3 (id=416): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2d, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000040000000400000009"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100"], 0x90}}, 0x0) 46.76580626s ago: executing program 32 (id=416): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2d, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000040000000400000009"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100"], 0x90}}, 0x0) 19.007769558s ago: executing program 4 (id=472): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x2805) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg0\x00'}) pipe2$watch_queue(&(0x7f0000000580), 0x80) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x20, 0x1) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000041c0)="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", 0x2000, 0x0) r2 = syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xbd, 0x16, 0xf, 0x40, 0x8086, 0x110, 0xbfad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x12, 0x24}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="200e00000000a0dc4d663b"], 0x0, 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f000001f000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f00000001c0)="f22e268f426df30fc7f96626dcdf66baf80cb8f426338aef66bafc0c66ed0f79a9b6000000b9800000c00f3235002000000f300f206466bad104b0faee0f01c8b9a80800000f32", 0x47}], 0x1, 0x30, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) 16.685350131s ago: executing program 4 (id=478): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio1(0xffffff9c, &(0x7f00000001c0), 0x40, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$fb0(0xffffff9c, &(0x7f0000000200), 0x109282, 0x0) ioctl$FBIOGETCMAP(r3, 0x4604, &(0x7f0000000040)={0x2, 0x1, &(0x7f00000047c0)=[0x0], 0x0, 0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) ioctl$sock_proto_private(r7, 0x89e0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0x7}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 14.038106706s ago: executing program 1 (id=483): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x3, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000340)={@broadcast, @multicast, @val={@void}, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @broadcast, {[@timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}]}}}}}}, 0x0) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x7ed, @loopback, 0x7fffffff}, 0x1c, &(0x7f0000001980), 0x0, &(0x7f0000001a00)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x84, 0x0, 0x0, 0xf3}}}, @tclass={{0x14, 0x29, 0x43, 0x8}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}], 0x48}}, {{&(0x7f0000001ac0)={0xa, 0x4e23, 0x240, @remote, 0x3}, 0x1c, &(0x7f0000001c40)=[{&(0x7f0000001b00)}, {&(0x7f0000001b40)="e917abc2b364fc3b7dba52f8e52027dbcbaddeea2c2e7b4b564461241ec3a0b488bc3f15a2073f7caddfed9a8d4e5194d1b127c21228b1fcb6da525f809f611b1b800b85e4552da3e7cde6aa88520388888d0d49dd6c8d88ea4df0b3682184b8ac18fa5245e73e1e28fbbbab68d05796efbdcab118ca9f4e4dbda96db5cd15d34eafa5996f4c3818e0aa185f108ba9e872688abe23196777bbd579a68727e8286f5c05a9abd8fed4b87fd2c3f514072d5b7ccbf6d82c632f24ac67c8efe1ae0f6687", 0xc2}], 0x2}}, {{0x0, 0x0, &(0x7f0000003140)=[{0x0}, {&(0x7f0000001e80)="c2111d3e6d5fa97cfdaf10ede71f77b14ef30b82b98ccce3bc9e5732dff8868cc4bfe4d76a802516a94bc0bfc06acabbdc881db5fa4dec3fc57475c9ae5ead03ae038c5bc4be6e9b93e4079cdaa4acaddbaae3e8009632ce6e56b20aa05d5928fcad98f1c5db8e2294db415ef1a5d7cf2a309de5bb434128629203f7319a56b108007fee78168b06aee12ae229d8667de8635043ce60", 0x96}, {&(0x7f0000001f40)="dbee3373f21f9031494d807dc00b6164f4055dba50ef199bac39dc53ffaab76d95340b7afcabd918f2228ca5860d1562a07f13304da168024c5828dccd8464c36745ca9f1397728ea72031196f745cf7dabddcdf967795e381f2539fd2a362ab583af73c1f5f4ed77845e427770c464bf91099d5e1da22af209f1ca827a2c42ad623ea5e55f861545847803dec8c6419f57e4bed2f7a33a4b216", 0x9a}, {&(0x7f0000002000)="cb0ec97bbfc85228648d33606c6b2a1fd30f44c1cbc3d720624f8120fede2383df306b3eb9749779b5c06959d7cfb756fc099b930635a298", 0x38}, {&(0x7f00000020c0)="4d4eaaf3cd5821d0725b526653e75113b3e4c77b5f166d8eadb533aa161fa3ab42e161bdb2d77716d2ad0b6c59eb64e91c7df67cd13e3ae695967fe49e0ee6ae30d804623f3e946d02056f846ddf468b7ac6747db4fb980d65e072806e86e1339d025494de45c0ef357a3a471947fae8c1cea7fd861a13a32419e27d564446db93b138606649c724cb942ebe4aba8b8ddc07bf870e0a30107d59113f4ac192b4d64591ac2f323dbe5511037b65bd30fe9d4c01fadbd712a4988e77c0c7c4781c24ea9ce5bbb2459c06ab1253c5af0d10da0b20db46f6923c1b95528bfe6566c0880dfbac51d34d767cfcfb5895026526c0a6c35d912fed25fcf96f301e323051fd589a6ecc88e3edc47dbf9906f7b68f793bc6c17fd40703fb55852bcdd1cfb564f7b2270141af3ef52fb5ec334e4f921ecd9f74dbd3ac74477859c80634d9975c0e9c86ad1a8bbb6455a2e0489313446980c71efeeb7871c001b027f20313520677714d96a61e24b2ebee88e20e06f464eba3bd972b9ee9cc03ff9f0b818cc587d4661a8b2e3b44bd948e3f75300123ba2a29cd43e73b1ac49e389069a3f582c9fc660d5e874f1438f465588a43d22c8ab820b35b50d159677db4c7a63ce01a5cf345624f331f93e1841bdcdabd42c3095364d08a6dc8fc588977211c406fd6630270ad0ea763fe663a6862cfbf302997a9704a2d71d12c9a00db2cc4d4bcdabd395b84c6ea07bcdc52f578cbb13965f495270deef419c651b9956cf8134466eb961322bfd7e7007ae2a63eb6e376f5b07a16b806210ba099ef6b9055ac7603909fd1accd258f46f2d1bfbcce27944d768799fc0708dc11496305e88fd78d61921474957720bceacc1368040e4416c636cdf2d1640334cbdae69605a886ba48d6c6a856940e417096d76f588a6f6ba9427e503758c515d1db3c782d4d5bdf31fbbf8d680cd8543e203422a56fb02e70483e7a1a09f694b5f5ab75d3de6b776f2ede4dfef91c4007d4a2c4ce0fa125a2e804f0cc7d62d743acc40271202198d67541b4ca19519293918648c1dca7cd4cdd228a7eb83fb7e0577879b2236274076f2855a07c6a30273e9d7b41e9f4d35a27be34365bd98f9f4b5413bc3d44cd5e50917be2bf33912071630d5a1b06231e720c715a1852130395cc6da4a31ca3fe02ac26678b5498889d94470093bad236a953fc63dcbb4a8c3f6201ddeffe7991a511f66585ebf5a08f09fc0bdf4567069c59d5f3697e23b83f523e35d5def97bbee9f5f413134229fb8fd3c953f719d816763b842a408288e9ef9f768d6407c7b7df05fe52e38179267e1dc1c0619f48b1c3dd8b54844a153fd05b15a8820335e7ba8c10c1281b47a1e43358e1e560dc5bd29ce42997050c0ad442d04f9c66ad764e1e7cfab9a794d73b0477a2214553009f0ff8b2556c5632c917b264d12a97484430e8050854efd5bcd004f6f58efec08fdcb1f04ec497a4f264227eca0e304d6c21836a7a6c70246730ee798008d7b2b4610550872fe9aae984299b8bdc8721e2ba80017c507a3dfd2e3d64d4463ba773f654d95d81328879c00bd55095907005d7c34ee37827de34dbcd8e29646d26cd1ee45a9eb1475a2576f51e23ac529cb07c95cb517f9e9ae690f4184bd3aaf5d4a1fb161eb4db1966202875c9faa978e82308aab9877559a8ac6e9e21b17d4f51dc0d062ef5cadc2b66ac994dc2325d265854ac116e1629a8d56a59bf493902da8cf014f5f4f52d37e9dbdf9c2e37a2032830f36a089be47a2dcd3fbb45a92bc7867642108a83d0506851d3825340128d081bd106938d8a546f8663934172d5c25e3adf9abd4a9b4b8faf706d65bddd0e8dd6cd3055993a69c174c3a36cf6343e389ee541be193526d9510f12577d19677f7b57e21bc170f3ab60d168d7baa9ab6072bfb95ca7f2b7b052a0d8dcb564fd1372bf0984bfcf04baaaffa8aabc4fa43c339cdd82c47bf2f118115c88b4fea2b0de17ebbf23aa678092fc42421f5e0e0a94e7de54146b088a3411bc4ad6561c3c2c50aea7516f6166b3e34800a4fc744bffc4f545c6d85b869c6c17b3578f45b661f8fcce84d4d93745f200535f8c321ac2d3cfc9ae6967ddaa48533b0823f7ce9f03561fef8500013dd3f87444addd88527176f3f18b84f1ba314683fc8931c5d85ac389b001ee1228b373cb0504f0195c9f1b1cd35ee669170966c8292d61d31f62fbe15e2fcea47194d149c08f79f3b76ed33c606e7c3911102a51e34552ba33588dd69555399e7c735565571d285f31d1c4394e8a87a50f32fcff1ffeda94667a14a93263c3bba6482fd79d4541af04c183a129b2342639740ed8f8287028a6ad094ea62bace06a981a333a6960a8006647d56a0c2f911b1dd8c96301188e0c10375991129a45ef0857f7f24a4d71158ad1e030ca306d3b0378d870a9d4379ae23c1c24fbb32815c6d184da24ae2a1000a94329a94bcf56699f53f00f08c7e513526d6394f95cf6f51cfd30dcc4f3e4beb7323855a6297607cea1ec2cd1e6330cf8ec4d9a38f28fdce2c4d24e663ecc064f8e66dc679aab7575a6282b5c45c66d0e32457b3351c3d753a0cb03b951e71556f10e9618aa830dc208ecc4b8aae621766e20db9b4978cc55d47daacbc9fc43e210a7e6bd8b72fec69578e5254430386552c4a2f90d09a3746fd4e25d147400375f447df3732c13aeecb4abd3177d34171ddb9273a8eadde1040c36610f0ee86c2383cd04fdf07def984ca1e8dcffe38208455db7906383f493730e628b4ec56dde4c49c2ece5c7e50d5cf05ec0301e0e90b03485da6de4ae352715e508d47765009816edcc3a714e85827cd48c41fcc0ccee912addcb98abbeb2ff1a9dafc46767d96b1f2d6eb240f2544d18f144936509a29abb590dbe07729e6178d0ab2851bfc4a820d45fa6903a531804c736c8d5d4623f14ac8dacc9d5325a451f189536bc9bad59dd9916125bc3c3d259553e3445770f97567d7c8207b6ca4d0b1c5d1568faa5cc567abf4f525dae70a324bfcd931195f8e63ee5c9cb9a69ff82e44b5539b0ab0c1117706b9d9c36b57d776fe2968e13226507fd5d6f7c2e9e8a855071778b57cc84b8142ec4495ff194679bbe0178bc6b817145e347b575011aadc41cd093cc03c7c25f8314914ea3c905636ea04210046935149e82529d9f6281b4bf3843e45bbe4e7bbca65d983d8cb5dec50c2c45f7576454a588efe324d5f289d22ad91d2345faa4620fbfcb8e27aee71df97973b10e36c5aa333da1bf2d7b157496d3d207f75d8697781c739912b3e84575bb77d1359a302a6a5f014315c8e00cfe7ead0f6a162c00bae53b222a326b039a51940a4fd3b613433788b7b7170d706d9a1d390e5d4b1d6f3487b080171549620232975b335d8322a0c3ed3caa744d34707930a45cb48bf1f7f7aec5eff27d9bb4e3fccfe96a1037a156889c92cd61f12da7bda572ca05493334d985acfcbf925327a044500de8ab6e1529eed849ab66e83547de7f37db5b2ddaba31531316e1738cda0c6a37ce57f6ee6317ca3dc2b31e3683307de301532e25b41c9698d29acab68d459b3080c9ddbea74b75210148d93142e7d454ecf12ad8bf24b87592178791ae86c9ee37d61e2256dcec1cc66a433c6096d51cd206239b61ef4c8aa624ca58ac75db0cbbbe8d027b6e8a19e9de8ca8430ca6e9b6ade6348e851289adfa90a88adb02c1eab2ba00d8d2ee9ad3dd0670c2780114a968915079fb4a7d161207567746cd65bebcd1ac585ca869d40d0b2307f601c397d73aa58b23057f49b0748426bd502689bd4c3c16c75b26af19480dc196e5fcc5d4fa73afdddbc713d900c5fd3b22f5d1bb13803ff5e2c165b9371f7e1b04a060455adfb94eaea6ddbcfbe11c86c3480375c52d5c9e7da94cc78c7f9ef27cd6d46a8eac6bda87acd450c6409b8a2eda537d81ccb03a6d07105df2963b4659c9f4ca29cf530fe63423790545b2b42db89ca2672bf26de8d54525e48b5871e54c03c824c1eb5b405bbc087a47a695ab749f24a3c2fde2a40cc2e9092617fbf098b21956ca8e314c502515238300a8614b71a5910b09800ee4b38618b3ee857f65d0aa7d482786b90c944c50b77ff93dac47e609507ef510bf13eae50f4ed5cc64ddda306abf0c44eede9085dc58a2272c2df7d97eba5404117ec75e83ee3ce950e06ef86f6748335fc100ad535d944cf93ffd5db12bc7eb4b34aef739d35b8740640543c401570b2b2468ecce7ab17888c20009471b63c2fbda4d352c85783a4e3afa6c74f34c91fb4401aa884f875c8d0d76c11649fea8e89d01f783e60e55332486b15b525c372c9a638592db8b54427563df52bd2b59929a0caf4c2331eb0814c97c215d4680ffb6b8b2bf97c3a8b3a4f9b787d8b599020eda3ffd782379adc7cd4a58df947a76a78da0976bb22b716190d7fe1604534d98fe46666bd5fd4d3d9c7d502fc2f6a1fc3b18c739b774b73beeccd42513a27f76d789b04e541510b26a816a40ca80b7e3de4391842ae188226bdcabd84a252dcc6a38c9e9ff8bddda142b6703cdddb10c0f70e95ef1fdd4039a6ed14155e2063cc77170cb5ea9f561d14dd6ac7544025e3c046e80a1c045fc36b29b20aac0e0392f8bf4c57c74105ffda5946a20e30bac4ed15ce9d69ec40c8737823b4f7340148d0f6c1f3583216208e970f424c5bbc29ec6f5bf080326ef3807f151341e9ce6d18203ade02cb488cf4298a06bd1364f96edccd2e77aef7ed9f7d9c0daefcdc6433850b114997d1e32a623615f626d52d41bda88a6fecc2a499afb924d9c8bd49924dbddc57c1f3b8a5f2a0dfc3877c79d44f91a988d99efa5c870be18973bc6e0c671381f0477805fafb830656f5f88f01f3045fac9b434552d7e4de4d742a1ed045a8d75c294a179356bdc259a4a42f0ee38714a4bfd836b1f34e811b1903825c25f6ede56ce7e81e39658fb6277538c7ff069090af0db6b21cbccbd3458ed434b52434d059e202ca072a765989e70be0ce396eca9a207387b60e86f3262d30bd1bf98d3277f3205f79ecb6eae3441c2e06c016b2fc31ebfb91437e070f969b9d89a504648682c32fc08485c604204d3a0fdb42668eeb491165efc6367ac8385c273440d35b5e9eb4dea2551d634ce71cc87d70da1a7f3e048ef210948ff6e4a5801e8ddda2353dca4ec58ca7a36ee592b00673107f1831bdd1c56668ed38377ea682b06a1a1636cc625b73f184ef378a05e34e0d3a87037e6886ec9677d3ac7ee9854bfa790817fad0d13c85a7ed04184700db8e7242479774c6f307333498956590e6e98899901bc4ff7deb2adcc50ecfc16e29591bd4b5508a9fb7ad84edc3dcd457e19bd5a5cd562964c74183630d5d07d25d52809fcd879bccd926509a987f5e322ca84b7329f7e2dc6203f7144f430b095a72a1aa1d639f3ae74ebfcb232accbaa6091946c96668a7ce2ce366e27583c118c459fdfce1db2083c997290c7657a2936c7eb5a26817edf6f13fa54e1ac49e3d1423c206d89399892eac1ddddebbd5b2f04afdd503d13e7c50a9e353f1709ec04c95b5acdf52176676107715dd9e093e590c1c5b37e88289cde697143bc4fa6f51f7a5a458700a70cde922cc95172ce5df2db165b48e7d036ba5255a1763f528cd1d91b7a405aaf532e17f51c61368ad822af84a48449a8a73ad18d8370f29b08872e62727a688e19798e92c1241b1b5a15f16d04866d195a02c96d0d83c80e324e1287db23466d8f16063b8b62463fb976a23f68", 0x1000}, {&(0x7f00000030c0)="17d555f8e1f93f2f1f4ef0d7678790df57586433a3630e076426acfd372e345625c824152d01c0a4792691f0bfd4cf1281c16ba641b0ac713f5176824ba7d30900", 0x41}], 0x6, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], 0x260}}], 0x4, 0x4000040) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) getsockopt$inet6_tcp_buf(r5, 0x6, 0xb, 0x0, &(0x7f0000000080)) r6 = syz_open_dev$usbfs(0x0, 0x76, 0x101b01) ioctl$USBDEVFS_CLEAR_HALT(r6, 0x80045515, 0x0) 12.538710416s ago: executing program 1 (id=485): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r3 = add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r3, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks']) open(&(0x7f0000000240)='./file0\x00', 0x606701, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, r5, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1) writev(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000080)='+', 0x1}], 0x2) 11.449118867s ago: executing program 2 (id=486): r0 = gettid() r1 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$ptp(r1, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 11.10000501s ago: executing program 2 (id=488): r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000002080)={0x4e6, [0x7, 0xf], 0x1}, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) socket$xdp(0x2c, 0x3, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x8001af84, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x11, r1, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x34808521, 0x401, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef1054282201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65be667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9c6b6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) socket(0x10, 0x80002, 0x0) io_submit(r5, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r4, &(0x7f00000000c0)='!', 0xb7f40, 0x3000000000000000}]) dup3(r4, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000001800)=""/4098, 0x1002}], 0x1, 0x7fff, 0xe) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) poll(&(0x7f0000002100)=[{r0, 0x688}], 0x1, 0x6) 10.971209261s ago: executing program 0 (id=489): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r3, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 10.587471933s ago: executing program 4 (id=490): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) dup2(0xffffffffffffffff, r0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x200000b, 0x10, r0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000200)=0x8000000) connect$pppl2tp(r2, &(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x400003, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local, 0x4}}}, 0x3a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f00000001c0), 0x4) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 10.196278471s ago: executing program 2 (id=491): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, r1) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) cachestat(r2, &(0x7f0000000300)={0x0, 0x2}, &(0x7f0000000380), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000001e40)={[0x6, 0xb, 0xfffffffffffffff8, 0x1, 0xcc, 0x800, 0x1d16, 0x0, 0x1, 0x9, 0x11, 0x0, 0x4, 0x262, 0x6, 0x1], 0xeeee8000, 0x10}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 9.335529555s ago: executing program 1 (id=492): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x400, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) sendfile(r1, r0, 0x0, 0x38) 9.274238042s ago: executing program 2 (id=493): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f00000002", 0x29}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x78}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) 9.064051658s ago: executing program 4 (id=494): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a01040000f6ffffff00000a0000040900010073797a31000000002c000480280001800d00010073796e70726f78790000000014000280080003400000000505000200010000000900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608e37f300142c00fe800000000064f0ac99f85c1fd500bbfe8000000000000000000000000000aa11000019"], 0x0) 9.039189382s ago: executing program 0 (id=495): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0xa, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x9, 0xb}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x5, 0xa, 0x8001, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8.805534343s ago: executing program 2 (id=496): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12014101f2c59620d016b8108edee501030109022400010000100009040002020083ec0009050602000202000a09"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000e40)={0x40, 0x9, 0xc, "00004700000040f400bec073"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f00000001c0)={0x0, 0x31, 0x28, "c5c7b06b922ce5cff694e64e5ca68260f4fc80eca568661d31a7d7fb3c5146d5439a400d279a8f6a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.347885782s ago: executing program 4 (id=497): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc}) syz_open_dev$amidi(0x0, 0xfa1, 0x100) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpid() fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000200)='source', 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) syz_usb_ep_read(r0, 0xc7, 0x22, &(0x7f0000000000)=""/34) 8.008590825s ago: executing program 1 (id=498): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xbeea, 0x0, 0x1, 0x30b}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x60, 0x0, 0x0) 7.84646186s ago: executing program 0 (id=499): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x606202, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x102) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 7.184303195s ago: executing program 1 (id=500): openat$dlm_monitor(0xffffff9c, &(0x7f00000001c0), 0x2000, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b000000080003", @ANYRES32=r3, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r1], 0x3c}}, 0x10) 780.854578ms ago: executing program 4 (id=501): userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x22, 0x2, 0x24) close(r2) futex(&(0x7f000000cffc)=0x1, 0x6, 0x4, 0x0, 0x0, 0x1) futex(&(0x7f000000cffc)=0x1, 0x5, 0x0, 0x0, &(0x7f0000000100)=0x2, 0x2000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x810, 0xffffffffffffffff, 0xc45f5000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000140)={0x4, {0x1, 0x1, 0x8, 0x4, 0x5, 0x52}}) shutdown(r4, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010010905"], 0x0) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', &(0x7f0000000400)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40011}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x30, r4, 0x5, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0x30}, 0x1, 0x0, 0x0, 0x40048}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0xf39, 0x7fff, 0x6, 0x400, r8, 0x6, '\x00', 0x0, r9, 0x2, 0x1, 0x0, 0xc}, 0x50) r10 = fsmount(r7, 0x0, 0x80) socket(0x2b, 0x1, 0x1) r11 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x3, 0x0, {0x2b, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) fchdir(r10) 741.825725ms ago: executing program 0 (id=503): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1}}, {{0x0, 0x3f, &(0x7f0000000040)=[{&(0x7f00000002c0)="a6", 0x3f}], 0x1}}], 0x2, 0x40448c0) shutdown(r0, 0x1) 740.145509ms ago: executing program 2 (id=504): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x10003, 0x0, 0xfffffffc, 0x2}]}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="090000000600000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r0}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 468.671813ms ago: executing program 0 (id=505): unshare(0x40400) setsockopt$inet_buf(0xffffffffffffffff, 0x114, 0x20, 0x0, 0x0) 0s ago: executing program 0 (id=506): socket$unix(0x1, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000004100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x40000, 0x86) socket$packet(0x11, 0x2, 0x300) socket(0x2, 0x2, 0x1) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="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", 0x1f0, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff0009240605060201000009240300030300", @ANYRES8=r1, @ANYRES16=r0], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.231' (ED25519) to the list of known hosts. [ 87.001652][ T994] cfg80211: failed to load regulatory.db [ 89.836714][ T5822] cgroup: Unknown subsys name 'net' [ 90.102643][ T5822] cgroup: Unknown subsys name 'cpuset' [ 90.168702][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.118721][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.553363][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.568892][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.569825][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.592377][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.594038][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.596592][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.596980][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.609331][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.614464][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.615266][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.616596][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.619837][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.672126][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.673060][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.673932][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.704768][ T5153] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.710921][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.711674][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.712940][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.731606][ T5153] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.780993][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.799456][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.800288][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.801954][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.802825][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.840626][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 97.862685][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 98.055110][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 98.068644][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 98.189337][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 98.668763][ T5841] Bluetooth: hci1: command tx timeout [ 98.747540][ T5841] Bluetooth: hci0: command tx timeout [ 98.827897][ T5837] Bluetooth: hci3: command tx timeout [ 98.828031][ T5837] Bluetooth: hci2: command tx timeout [ 98.828232][ T5841] Bluetooth: hci4: command tx timeout [ 98.930643][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.932209][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.932860][ T5843] bridge_slave_0: entered allmulticast mode [ 98.936294][ T5843] bridge_slave_0: entered promiscuous mode [ 98.997701][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.997865][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.998512][ T5847] bridge_slave_0: entered allmulticast mode [ 99.001741][ T5847] bridge_slave_0: entered promiscuous mode [ 99.006689][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.006874][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.007075][ T5843] bridge_slave_1: entered allmulticast mode [ 99.016249][ T5843] bridge_slave_1: entered promiscuous mode [ 99.246913][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.247080][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.255378][ T5847] bridge_slave_1: entered allmulticast mode [ 99.258836][ T5847] bridge_slave_1: entered promiscuous mode [ 99.759845][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.760022][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.760213][ T5833] bridge_slave_0: entered allmulticast mode [ 99.762338][ T5833] bridge_slave_0: entered promiscuous mode [ 99.765751][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.765912][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.766105][ T5834] bridge_slave_0: entered allmulticast mode [ 99.769811][ T5834] bridge_slave_0: entered promiscuous mode [ 99.886918][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.887890][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.888028][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.888208][ T5849] bridge_slave_0: entered allmulticast mode [ 99.892257][ T5849] bridge_slave_0: entered promiscuous mode [ 99.912197][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.912348][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.912900][ T5833] bridge_slave_1: entered allmulticast mode [ 99.915814][ T5833] bridge_slave_1: entered promiscuous mode [ 99.917263][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.927259][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.928504][ T5834] bridge_slave_1: entered allmulticast mode [ 99.932104][ T5834] bridge_slave_1: entered promiscuous mode [ 100.003491][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.016514][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.026009][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.026173][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.026780][ T5849] bridge_slave_1: entered allmulticast mode [ 100.044819][ T5849] bridge_slave_1: entered promiscuous mode [ 100.362413][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.747520][ T5841] Bluetooth: hci1: command tx timeout [ 100.804206][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.816673][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.820869][ T5843] team0: Port device team_slave_0 added [ 100.827505][ T5841] Bluetooth: hci0: command tx timeout [ 100.907474][ T5153] Bluetooth: hci2: command tx timeout [ 100.907511][ T5153] Bluetooth: hci3: command tx timeout [ 100.907657][ T5841] Bluetooth: hci4: command tx timeout [ 100.939381][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.942593][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.945364][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.947088][ T5843] team0: Port device team_slave_1 added [ 100.951997][ T5847] team0: Port device team_slave_0 added [ 101.030496][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.182796][ T5847] team0: Port device team_slave_1 added [ 101.841816][ T5833] team0: Port device team_slave_0 added [ 101.948161][ T5834] team0: Port device team_slave_0 added [ 101.949738][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.949753][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.949772][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.044030][ T5833] team0: Port device team_slave_1 added [ 102.046945][ T5849] team0: Port device team_slave_0 added [ 102.054312][ T5834] team0: Port device team_slave_1 added [ 102.055578][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.055590][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.055612][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.058270][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.058282][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.058305][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.248478][ T5849] team0: Port device team_slave_1 added [ 102.364601][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.364617][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.364633][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.705090][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.705102][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.705117][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.793834][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.793852][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.793879][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.804020][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.804035][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.804058][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.805672][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.805683][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.805706][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.809693][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.809706][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.809729][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.827631][ T5837] Bluetooth: hci1: command tx timeout [ 102.907460][ T5837] Bluetooth: hci0: command tx timeout [ 102.947448][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.947465][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.947488][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.987492][ T5837] Bluetooth: hci3: command tx timeout [ 102.987523][ T5837] Bluetooth: hci2: command tx timeout [ 102.987785][ T5841] Bluetooth: hci4: command tx timeout [ 103.165211][ T5843] hsr_slave_0: entered promiscuous mode [ 103.167187][ T5843] hsr_slave_1: entered promiscuous mode [ 103.349204][ T5847] hsr_slave_0: entered promiscuous mode [ 103.350901][ T5847] hsr_slave_1: entered promiscuous mode [ 103.352122][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 103.352231][ T5847] Cannot create hsr debugfs directory [ 103.976527][ T5833] hsr_slave_0: entered promiscuous mode [ 103.978750][ T5833] hsr_slave_1: entered promiscuous mode [ 103.979652][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 103.979675][ T5833] Cannot create hsr debugfs directory [ 104.042012][ T5834] hsr_slave_0: entered promiscuous mode [ 104.043692][ T5834] hsr_slave_1: entered promiscuous mode [ 104.044728][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 104.044753][ T5834] Cannot create hsr debugfs directory [ 104.058304][ T5849] hsr_slave_0: entered promiscuous mode [ 104.059644][ T5849] hsr_slave_1: entered promiscuous mode [ 104.060543][ T5849] debugfs: 'hsr0' already exists in 'hsr' [ 104.060565][ T5849] Cannot create hsr debugfs directory [ 104.908652][ T5837] Bluetooth: hci1: command tx timeout [ 104.997513][ T5837] Bluetooth: hci0: command tx timeout [ 105.067610][ T5837] Bluetooth: hci4: command tx timeout [ 105.067744][ T5841] Bluetooth: hci3: command tx timeout [ 105.067785][ T5837] Bluetooth: hci2: command tx timeout [ 105.827010][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.874658][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.908746][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.968149][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.105393][ T5847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.165711][ T5847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.199871][ T5847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.254271][ T5847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.425172][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.482066][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.519332][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.583392][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.769325][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.823889][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.865727][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.917892][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 107.149251][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.168591][ T5849] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 107.221024][ T5849] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 107.271764][ T5849] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 107.350793][ T5849] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 107.483625][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.515622][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.554576][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.555203][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.610782][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.610954][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.684708][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.753467][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.773532][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.773809][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.824056][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.824201][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.945818][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.974266][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.031534][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.031792][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.127204][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.127585][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.191838][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.275203][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.275374][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.283700][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.331031][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.331240][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.471995][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.515448][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.519031][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.562053][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.562338][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.690036][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.111264][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.113084][ T5843] veth0_vlan: entered promiscuous mode [ 109.196231][ T5843] veth1_vlan: entered promiscuous mode [ 109.482160][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.506221][ T5843] veth0_macvtap: entered promiscuous mode [ 109.583210][ T5843] veth1_macvtap: entered promiscuous mode [ 109.688495][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.727085][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.787079][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.874737][ T1450] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.895737][ T1450] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.915443][ T1450] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.931386][ T1450] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.953608][ T5833] veth0_vlan: entered promiscuous mode [ 109.965578][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.111124][ T5833] veth1_vlan: entered promiscuous mode [ 110.256174][ T5834] veth0_vlan: entered promiscuous mode [ 110.386474][ T5847] veth0_vlan: entered promiscuous mode [ 110.394719][ T5834] veth1_vlan: entered promiscuous mode [ 110.423479][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.423501][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.528759][ T5847] veth1_vlan: entered promiscuous mode [ 110.593048][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.593075][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.596083][ T5849] veth0_vlan: entered promiscuous mode [ 110.613441][ T5833] veth0_macvtap: entered promiscuous mode [ 110.665227][ T5833] veth1_macvtap: entered promiscuous mode [ 110.709314][ T5849] veth1_vlan: entered promiscuous mode [ 110.769155][ T5834] veth0_macvtap: entered promiscuous mode [ 110.808663][ T5834] veth1_macvtap: entered promiscuous mode [ 110.814278][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.881921][ T5847] veth0_macvtap: entered promiscuous mode [ 110.894180][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.938333][ T5847] veth1_macvtap: entered promiscuous mode [ 110.960786][ T1160] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.965091][ T1160] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.990145][ T1160] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.995834][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.045787][ T1160] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.091957][ T5849] veth0_macvtap: entered promiscuous mode [ 111.101277][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.183688][ T5849] veth1_macvtap: entered promiscuous mode [ 111.196075][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.203550][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.210594][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.248004][ T5957] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.327699][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.372297][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.425911][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.606116][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.622189][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.648283][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.650655][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.728849][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.733181][ T3529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.733204][ T3529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.816428][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.962060][ T3529] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.996390][ T3529] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.997847][ T3529] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.017052][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.099928][ T3529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.099950][ T3529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.298144][ T1450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.298168][ T1450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.561200][ T1450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.561223][ T1450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.708795][ T5963] serio: Serial port ptm0 [ 112.740625][ T3529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.740650][ T3529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.867907][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.867927][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.101456][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.101478][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.291353][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.291377][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.702860][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 114.779038][ T6000] No control pipe specified [ 114.807644][ T994] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 114.838389][ T975] kernel write not supported for file [eventfd] (pid: 975 comm: kworker/0:2) [ 114.906137][ T5994] tmpfs: Unsupported parameter 'huge' [ 114.932140][ T5994] IPVS: Error connecting to the multicast addr [ 114.982651][ T994] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 114.982685][ T994] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.011913][ T994] usb 2-1: config 0 descriptor?? [ 115.236388][ T6003] serio: Serial port ptm0 [ 115.786274][ T994] ath6kl: Failed to read usb control message: -71 [ 115.786330][ T994] ath6kl: Unable to read the bmi data from the device: -71 [ 115.786344][ T994] ath6kl: unable to read target info byte count: -71 [ 115.814834][ T994] ath6kl: Failed to init ath6kl core: -71 [ 115.815706][ T994] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 115.867668][ T994] usb 2-1: USB disconnect, device number 2 [ 116.320348][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.576835][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.610037][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.047412][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.057459][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.090321][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.157369][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.726768][ T6022] No control pipe specified [ 117.907379][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.997359][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.057377][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.057420][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.177383][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.727370][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.507572][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 120.519411][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 120.663214][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 120.666468][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.666486][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.668956][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 120.671520][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 120.671544][ T9] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 120.671564][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 120.723016][ T9] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 120.723045][ T9] usb 5-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 120.723063][ T9] usb 5-1: Product: syz [ 120.723076][ T9] usb 5-1: Manufacturer: syz [ 120.723089][ T9] usb 5-1: SerialNumber: syz [ 120.759670][ T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 120.759698][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.759709][ T31] usb 4-1: Product: syz [ 120.759717][ T31] usb 4-1: Manufacturer: syz [ 120.759725][ T31] usb 4-1: SerialNumber: syz [ 120.880216][ T6038] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 120.958670][ T9] usb 5-1: config 0 descriptor?? [ 120.975441][ T31] usb 4-1: 0:2 : does not exist [ 120.988928][ T31] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 121.283503][ C1] vkms_vblank_simulate: vblank timer overrun [ 122.344541][ T9] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 122.432036][ T31] usb 4-1: USB disconnect, device number 2 [ 122.573231][ T9] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 122.574974][ T9] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -121 [ 123.011503][ T9] usb 5-1: USB disconnect, device number 2 [ 123.173341][ T5965] udevd[5965]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.656888][ T6053] serio: Serial port ptm0 [ 124.224912][ T6062] netlink: 28 bytes leftover after parsing attributes in process `syz.2.34'. [ 124.516896][ T6066] syz.3.35 uses obsolete (PF_INET,SOCK_PACKET) [ 126.269123][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.950128][ T6089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.42'. [ 126.950145][ T6089] netlink: 24 bytes leftover after parsing attributes in process `syz.1.42'. [ 127.173346][ T6089] syz.1.42 (6089) used greatest stack depth: 18968 bytes left [ 127.237444][ T975] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 127.408519][ T975] usb 4-1: Using ep0 maxpacket: 32 [ 127.412892][ T975] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 127.412924][ T975] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 127.413043][ T975] usb 4-1: config 0 interface 0 has no altsetting 0 [ 127.453020][ T975] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 127.453049][ T975] usb 4-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 127.453061][ T975] usb 4-1: Product: syz [ 127.453069][ T975] usb 4-1: Manufacturer: syz [ 127.453077][ T975] usb 4-1: SerialNumber: syz [ 127.501856][ T975] usb 4-1: config 0 descriptor?? [ 127.726364][ T6099] tmpfs: Unsupported parameter 'huge' [ 127.771839][ T6099] IPVS: Error connecting to the multicast addr [ 127.946002][ T975] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 128.175841][ T975] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 128.175894][ T975] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -121 [ 128.400254][ T975] usb 4-1: USB disconnect, device number 3 [ 130.203666][ C0] vkms_vblank_simulate: vblank timer overrun [ 130.431297][ C0] vkms_vblank_simulate: vblank timer overrun [ 131.327480][ T5905] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 131.471221][ T5905] usb 3-1: device descriptor read/64, error -71 [ 131.535918][ T6131] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.542836][ T6131] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.772278][ T5905] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 131.907407][ T5905] usb 3-1: device descriptor read/64, error -71 [ 132.018156][ T5905] usb usb3-port1: attempt power cycle [ 132.424657][ T5905] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 132.449870][ T5905] usb 3-1: device descriptor read/8, error -71 [ 132.597527][ T5889] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 132.714164][ T5905] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 132.729030][ T5905] usb 3-1: device descriptor read/8, error -71 [ 132.748336][ T5889] usb 1-1: Using ep0 maxpacket: 8 [ 132.756351][ T5889] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 132.756423][ T5889] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 132.756445][ T5889] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 132.756470][ T5889] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 132.756494][ T5889] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.756539][ T5889] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 132.756562][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.808125][ T6131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.851835][ T5905] usb usb3-port1: unable to enumerate USB device [ 133.005932][ T6131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.034690][ T5889] usb 1-1: usb_control_msg returned -32 [ 133.034748][ T5889] usbtmc 1-1:16.0: can't read capabilities [ 133.080837][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.080947][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.614170][ T6192] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 133.627898][ T5889] usb 1-1: USB disconnect, device number 2 [ 134.569785][ T6205] netlink: 28 bytes leftover after parsing attributes in process `syz.0.61'. [ 134.569823][ T6205] netlink: 28 bytes leftover after parsing attributes in process `syz.0.61'. [ 134.627217][ T6157] syzkaller0: entered promiscuous mode [ 134.627251][ T6157] syzkaller0: entered allmulticast mode [ 134.665956][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.957931][ T6205] bridge0: entered promiscuous mode [ 134.963622][ T6205] bond0: entered promiscuous mode [ 134.963646][ T6205] bond_slave_0: entered promiscuous mode [ 134.965312][ T6205] bond_slave_1: entered promiscuous mode [ 135.251751][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.476431][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.502375][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.715804][ T6225] netlink: 'syz.4.66': attribute type 10 has an invalid length. [ 136.187438][ T975] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 136.317468][ T975] usb 3-1: device descriptor read/64, error -71 [ 136.557581][ T975] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 136.687525][ T975] usb 3-1: device descriptor read/64, error -71 [ 136.810763][ T975] usb usb3-port1: attempt power cycle [ 137.147736][ T975] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 137.171411][ T975] usb 3-1: device descriptor read/8, error -71 [ 137.427594][ T975] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 137.448495][ T975] usb 3-1: device descriptor read/8, error -71 [ 137.559232][ T975] usb usb3-port1: unable to enumerate USB device [ 146.949964][ T6225] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 147.922362][ C1] vkms_vblank_simulate: vblank timer overrun [ 148.000858][ C1] vkms_vblank_simulate: vblank timer overrun [ 148.033455][ C1] vkms_vblank_simulate: vblank timer overrun [ 148.085164][ C1] vkms_vblank_simulate: vblank timer overrun [ 148.271294][ C1] vkms_vblank_simulate: vblank timer overrun [ 148.477885][ T6273] netlink: 68 bytes leftover after parsing attributes in process `syz.3.74'. [ 148.839728][ T6279] Zero length message leads to an empty skb [ 149.143317][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.251276][ T6285] netlink: 28 bytes leftover after parsing attributes in process `syz.3.78'. [ 149.251313][ T6285] netlink: 28 bytes leftover after parsing attributes in process `syz.3.78'. [ 149.411396][ T6285] bridge0: entered promiscuous mode [ 149.415967][ T6285] bond0: entered promiscuous mode [ 149.415990][ T6285] bond_slave_0: entered promiscuous mode [ 149.416276][ T6285] bond_slave_1: entered promiscuous mode [ 149.445629][ T6285] debugfs: 'hsr1' already exists in 'hsr' [ 149.445661][ T6285] Cannot create hsr debugfs directory [ 150.207580][ T994] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 150.232546][ T6302] netlink: 'syz.0.85': attribute type 10 has an invalid length. [ 150.263829][ T6304] netlink: 20 bytes leftover after parsing attributes in process `syz.2.86'. [ 150.337514][ T994] usb 4-1: device descriptor read/64, error -71 [ 150.587613][ T994] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 150.717607][ T994] usb 4-1: device descriptor read/64, error -71 [ 150.843649][ T994] usb usb4-port1: attempt power cycle [ 151.209826][ T994] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 151.228528][ T994] usb 4-1: device descriptor read/8, error -71 [ 151.487740][ T994] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 151.508278][ T994] usb 4-1: device descriptor read/8, error -71 [ 151.639065][ T994] usb usb4-port1: unable to enumerate USB device [ 161.893337][ C1] vkms_vblank_simulate: vblank timer overrun [ 162.359737][ C1] vkms_vblank_simulate: vblank timer overrun [ 162.591889][ T6302] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 162.593948][ T6302] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 162.594338][ T6299] syzkaller0: entered promiscuous mode [ 162.594365][ T6299] syzkaller0: entered allmulticast mode [ 162.761173][ C1] vkms_vblank_simulate: vblank timer overrun [ 162.841383][ T6326] netlink: 68 bytes leftover after parsing attributes in process `syz.2.89'. [ 163.457414][ T5905] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 163.614339][ T5905] usb 1-1: Using ep0 maxpacket: 16 [ 163.633739][ T5905] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 163.633771][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.633791][ T5905] usb 1-1: Product: syz [ 163.633804][ T5905] usb 1-1: Manufacturer: syz [ 163.633819][ T5905] usb 1-1: SerialNumber: syz [ 163.654971][ T6346] netlink: 28 bytes leftover after parsing attributes in process `syz.3.93'. [ 163.655005][ T6346] netlink: 28 bytes leftover after parsing attributes in process `syz.3.93'. [ 163.719087][ T5905] usb 1-1: config 0 descriptor?? [ 163.726787][ T5905] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 163.971766][ T6336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.987211][ T6336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.382259][ T5905] usb 1-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 164.531504][ T6368] netlink: 20 bytes leftover after parsing attributes in process `syz.3.99'. [ 164.595438][ T6340] netlink: 16 bytes leftover after parsing attributes in process `syz.0.92'. [ 164.699552][ T975] usb 1-1: USB disconnect, device number 3 [ 164.891111][ T975] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 164.891686][ T975] visor 1-1:0.0: device disconnected [ 165.517454][ T5905] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 165.737384][ C1] vkms_vblank_simulate: vblank timer overrun [ 165.800718][ T5905] usb 4-1: device descriptor read/64, error -71 [ 166.118833][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.288580][ T5905] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 166.501233][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.530244][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.944328][ T5905] usb 4-1: device descriptor read/64, error -71 [ 167.056767][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.069343][ T5905] usb usb4-port1: attempt power cycle [ 167.517628][ T5905] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 167.548440][ T5905] usb 4-1: device descriptor read/8, error -71 [ 167.553875][ T6388] netlink: 'syz.1.102': attribute type 10 has an invalid length. [ 167.591377][ T6388] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 167.807471][ T5905] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 167.828601][ T5905] usb 4-1: device descriptor read/8, error -71 [ 167.948143][ T5905] usb usb4-port1: unable to enumerate USB device [ 168.883283][ T6409] syzkaller0: entered promiscuous mode [ 168.883358][ T6409] syzkaller0: entered allmulticast mode [ 169.387601][ T6420] netlink: 28 bytes leftover after parsing attributes in process `syz.0.109'. [ 169.387652][ T6420] netlink: 28 bytes leftover after parsing attributes in process `syz.0.109'. [ 169.728996][ T6427] netlink: 20 bytes leftover after parsing attributes in process `syz.2.110'. [ 170.436315][ T6446] netlink: 'syz.0.115': attribute type 10 has an invalid length. [ 170.606163][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.850921][ T6453] netlink: 28 bytes leftover after parsing attributes in process `syz.2.114'. [ 171.041006][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.595786][ T6459] fuse: Bad value for 'fd' [ 171.926195][ T6464] fuse: Bad value for 'fd' [ 172.833977][ T6485] syzkaller0: entered promiscuous mode [ 172.834012][ T6485] syzkaller0: entered allmulticast mode [ 173.433374][ T6496] netlink: 20 bytes leftover after parsing attributes in process `syz.2.124'. [ 173.991524][ T6504] fuse: Bad value for 'fd' [ 174.470636][ T6509] fuse: Bad value for 'fd' [ 177.003480][ C1] vkms_vblank_simulate: vblank timer overrun [ 177.502382][ C1] vkms_vblank_simulate: vblank timer overrun [ 178.816756][ T6539] netlink: 28 bytes leftover after parsing attributes in process `syz.2.136'. [ 178.816783][ T6539] netlink: 28 bytes leftover after parsing attributes in process `syz.2.136'. [ 178.889262][ T6539] bridge0: entered promiscuous mode [ 178.891675][ T6539] bond0: entered promiscuous mode [ 178.891690][ T6539] bond_slave_0: entered promiscuous mode [ 178.891842][ T6539] bond_slave_1: entered promiscuous mode [ 178.895221][ T6539] debugfs: 'hsr1' already exists in 'hsr' [ 178.895341][ T6539] Cannot create hsr debugfs directory [ 179.491384][ T6543] netlink: 20 bytes leftover after parsing attributes in process `syz.0.137'. [ 179.874418][ T6551] fuse: Bad value for 'fd' [ 179.921570][ T6549] syzkaller0: entered promiscuous mode [ 179.921602][ T6549] syzkaller0: entered allmulticast mode [ 180.585505][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.180305][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.501951][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.255396][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.369629][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.576145][ T6579] netlink: 28 bytes leftover after parsing attributes in process `syz.4.149'. [ 182.576174][ T6579] netlink: 28 bytes leftover after parsing attributes in process `syz.4.149'. [ 182.743262][ T6579] bridge0: entered promiscuous mode [ 182.811170][ T6579] bond0: entered promiscuous mode [ 182.811194][ T6579] bond_slave_0: entered promiscuous mode [ 182.811466][ T6579] bond_slave_1: entered promiscuous mode [ 182.811721][ T6579] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 182.859209][ T6579] debugfs: 'hsr1' already exists in 'hsr' [ 182.859241][ T6579] Cannot create hsr debugfs directory [ 183.133204][ T6583] netlink: 20 bytes leftover after parsing attributes in process `syz.3.150'. [ 183.767458][ T5905] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 183.801025][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 183.919999][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.920022][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.920034][ T5905] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 183.920059][ T5905] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 183.920072][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.984583][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 183.986582][ T10] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 183.986629][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 183.986642][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 183.986655][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 183.986668][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 183.986680][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.986705][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 183.986718][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.023698][ T5905] usb 4-1: config 0 descriptor?? [ 184.489056][ T10] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 184.494696][ T5905] plantronics 0003:047F:FFFF.0001: reserved main item tag 0xd [ 184.563210][ T6600] tmpfs: Unsupported parameter 'huge' [ 184.634470][ T5905] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 186.700622][ T9] usb 4-1: USB disconnect, device number 12 [ 186.988677][ T10] usb 3-1: USB disconnect, device number 10 [ 188.296824][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.847155][ C1] vkms_vblank_simulate: vblank timer overrun [ 189.155916][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 189.256697][ C1] vkms_vblank_simulate: vblank timer overrun [ 189.333612][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 189.335202][ T31] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 189.346624][ T10] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 189.346684][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 189.346704][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 189.346726][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 189.346746][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 189.346786][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 189.346806][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.540866][ T31] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 189.587436][ T5889] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 189.597570][ T10] usb 2-1: usb_control_msg returned -32 [ 189.597628][ T10] usbtmc 2-1:16.0: can't read capabilities [ 189.928378][ T5889] usb 4-1: Using ep0 maxpacket: 8 [ 189.951885][ T6636] netlink: 28 bytes leftover after parsing attributes in process `syz.0.162'. [ 189.951961][ T6636] netlink: 28 bytes leftover after parsing attributes in process `syz.0.162'. [ 191.112587][ C1] vkms_vblank_simulate: vblank timer overrun [ 191.161825][ T9] usb 2-1: USB disconnect, device number 3 [ 192.796863][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.542446][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.542540][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.717569][ T31] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 194.867450][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 194.871193][ T31] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 194.871327][ T31] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 194.871351][ T31] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 194.871376][ T31] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 194.871398][ T31] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 194.871420][ T31] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 194.871529][ T31] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 194.871553][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.998342][ T5889] usb 4-1: unable to read config index 0 descriptor/start: -110 [ 194.998387][ T5889] usb 4-1: can't read configurations, error -110 [ 195.064291][ T31] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22 [ 195.127463][ T5889] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 195.257602][ T5889] usb 4-1: device descriptor read/64, error -32 [ 195.378231][ T5889] usb usb4-port1: attempt power cycle [ 195.797446][ T5889] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 195.839058][ T5889] usb 4-1: device descriptor read/8, error -32 [ 196.135486][ T5889] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 196.165796][ T5889] usb 4-1: device descriptor read/8, error -32 [ 196.281475][ T5889] usb usb4-port1: unable to enumerate USB device [ 196.931812][ T6697] netlink: 28 bytes leftover after parsing attributes in process `syz.2.173'. [ 197.548475][ T9] usb 5-1: USB disconnect, device number 3 [ 198.049893][ T6705] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 198.527713][ T6618] raw-gadget.1 gadget.3: failed to queue disconnect event [ 199.193332][ C0] vkms_vblank_simulate: vblank timer overrun [ 200.162130][ T6734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.183'. [ 200.310076][ T37] audit: type=1326 audit(1756084930.269:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6737 comm="syz.1.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8098ebe9 code=0x7ffc0000 [ 200.310135][ T37] audit: type=1326 audit(1756084930.269:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6737 comm="syz.1.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8098ebe9 code=0x7ffc0000 [ 200.310175][ T37] audit: type=1326 audit(1756084930.269:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6737 comm="syz.1.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f3f8098ebe9 code=0x7ffc0000 [ 200.310213][ T37] audit: type=1326 audit(1756084930.269:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6737 comm="syz.1.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8098ebe9 code=0x7ffc0000 [ 200.310251][ T37] audit: type=1326 audit(1756084930.269:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6737 comm="syz.1.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8098ebe9 code=0x7ffc0000 [ 200.310289][ T37] audit: type=1326 audit(1756084930.269:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6737 comm="syz.1.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3f8098ebe9 code=0x7ffc0000 [ 200.453179][ T37] audit: type=1326 audit(1756084930.279:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6737 comm="syz.1.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8098ebe9 code=0x7ffc0000 [ 200.453567][ T37] audit: type=1326 audit(1756084930.419:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6737 comm="syz.1.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f3f8098ebe9 code=0x7ffc0000 [ 200.544093][ T37] audit: type=1326 audit(1756084930.509:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6737 comm="syz.1.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3f80985ba7 code=0x7ffc0000 [ 200.544401][ T37] audit: type=1326 audit(1756084930.509:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6737 comm="syz.1.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3f8092ade9 code=0x7ffc0000 [ 200.818697][ T6745] netlink: 28 bytes leftover after parsing attributes in process `syz.0.185'. [ 201.445350][ C0] vkms_vblank_simulate: vblank timer overrun [ 201.476761][ C0] vkms_vblank_simulate: vblank timer overrun [ 202.246525][ T6759] fuse: Bad value for 'fd' [ 202.449128][ C0] vkms_vblank_simulate: vblank timer overrun [ 203.511624][ T6779] tmpfs: Unsupported parameter 'huge' [ 203.521657][ T6779] IPVS: Error connecting to the multicast addr [ 203.777550][ T31] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 203.927466][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 203.929684][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.929700][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 203.932553][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 203.932571][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.932581][ T31] usb 3-1: Product: syz [ 203.932589][ T31] usb 3-1: Manufacturer: syz [ 203.932598][ T31] usb 3-1: SerialNumber: syz [ 204.179112][ T31] usb 3-1: 0:2 : does not exist [ 204.227590][ T31] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 204.487932][ T31] usb 3-1: USB disconnect, device number 11 [ 204.787972][ T6782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.030913][ T6377] udevd[6377]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 206.772787][ T6805] netlink: 28 bytes leftover after parsing attributes in process `syz.2.202'. [ 207.456208][ C0] vkms_vblank_simulate: vblank timer overrun [ 207.837470][ T31] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 208.039178][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 208.057237][ T31] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 208.066870][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.066891][ T31] usb 5-1: Product: syz [ 208.066900][ T31] usb 5-1: Manufacturer: syz [ 208.066908][ T31] usb 5-1: SerialNumber: syz [ 208.783027][ T6813] tty tty1: ldisc open failed (-12), clearing slot 0 [ 208.821145][ T31] usb 5-1: config 0 descriptor?? [ 208.967257][ T31] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 209.932157][ T6828] loop5: detected capacity change from 0 to 231 [ 210.100612][ T6828] Dev loop5: unable to read RDB block 8 [ 210.137570][ T6828] loop5: unable to read partition table [ 210.137868][ T6828] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 210.137868][ T6828] ) failed (rc=-5) [ 210.441958][ T31] gspca_ov534_9: reg_r err -32 [ 210.707482][ T31] gspca_ov534_9: Unknown sensor 0000 [ 210.707595][ T31] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 210.732576][ T31] usb 5-1: USB disconnect, device number 4 [ 215.800546][ C0] vkms_vblank_simulate: vblank timer overrun [ 215.971572][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.217518][ T6917] netlink: 28 bytes leftover after parsing attributes in process `syz.4.233'. [ 220.874863][ T6930] netlink: 28 bytes leftover after parsing attributes in process `syz.4.236'. [ 222.267433][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 222.287119][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 222.287160][ T5844] Bluetooth: hci0: command 0x0406 tx timeout [ 222.287185][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 222.287210][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 222.374926][ T37] kauditd_printk_skb: 52 callbacks suppressed [ 222.374946][ T37] audit: type=1326 audit(1756084952.339:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6939 comm="syz.1.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8098ebe9 code=0x7ffc0000 [ 222.376593][ T37] audit: type=1326 audit(1756084952.339:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6939 comm="syz.1.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8098ebe9 code=0x7ffc0000 [ 222.519371][ T37] audit: type=1326 audit(1756084952.479:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6939 comm="syz.1.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f3f8098ebe9 code=0x7ffc0000 [ 222.520613][ T37] audit: type=1326 audit(1756084952.479:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6939 comm="syz.1.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8098ebe9 code=0x7ffc0000 [ 222.522117][ T37] audit: type=1326 audit(1756084952.479:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6939 comm="syz.1.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8098ebe9 code=0x7ffc0000 [ 222.522158][ T37] audit: type=1326 audit(1756084952.479:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6939 comm="syz.1.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f3f8098ebe9 code=0x7ffc0000 [ 222.522207][ T37] audit: type=1326 audit(1756084952.479:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6939 comm="syz.1.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8098ebe9 code=0x7ffc0000 [ 222.522245][ T37] audit: type=1326 audit(1756084952.479:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6939 comm="syz.1.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f3f8098ebe9 code=0x7ffc0000 [ 222.522286][ T37] audit: type=1326 audit(1756084952.489:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6939 comm="syz.1.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8098ebe9 code=0x7ffc0000 [ 222.522322][ T37] audit: type=1326 audit(1756084952.489:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6939 comm="syz.1.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8098ebe9 code=0x7ffc0000 [ 223.737407][ T31] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 223.889523][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.889561][ T31] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 223.889577][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 223.889592][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 223.889604][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 223.891933][ T31] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 223.891952][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 223.891963][ T31] usb 3-1: Product: syz [ 223.891971][ T31] usb 3-1: Manufacturer: syz [ 223.891978][ T31] usb 3-1: SerialNumber: syz [ 224.001752][ T31] usb 3-1: config 0 descriptor?? [ 224.441615][ T31] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 224.441829][ T31] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 224.570112][ T31] usb 3-1: USB disconnect, device number 12 [ 226.695929][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.113771][ T6973] netlink: 28 bytes leftover after parsing attributes in process `syz.3.248'. [ 227.128043][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.377549][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.703555][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.674713][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.815402][ T7010] netlink: 28 bytes leftover after parsing attributes in process `syz.4.261'. [ 229.915582][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.945230][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.997302][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.472317][ C1] vkms_vblank_simulate: vblank timer overrun [ 232.867399][ T6014] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 233.270391][ T7050] netlink: 28 bytes leftover after parsing attributes in process `syz.2.272'. [ 234.085222][ T6014] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 234.085256][ T6014] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.085276][ T6014] usb 2-1: Product: syz [ 234.085290][ T6014] usb 2-1: Manufacturer: syz [ 234.085304][ T6014] usb 2-1: SerialNumber: syz [ 234.232898][ T6014] usb 2-1: config 0 descriptor?? [ 234.482442][ T6014] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 235.091736][ T6014] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 236.474382][ T7065] mmap: syz.0.278 (7065) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 236.818472][ T7077] fuse: Bad value for 'fd' [ 237.051048][ T7067] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.054355][ T7067] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.076698][ T5838] usb 2-1: USB disconnect, device number 4 [ 240.202220][ C1] vkms_vblank_simulate: vblank timer overrun [ 240.424338][ T7067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.660464][ T7067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.493436][ T1160] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.495519][ T1160] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.495629][ T1160] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.495668][ T1160] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.087218][ C1] vkms_vblank_simulate: vblank timer overrun [ 243.532170][ T37] audit: type=1326 audit(1756084973.499:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7138 comm="syz.3.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719bc8ebe9 code=0x7ffc0000 [ 243.532545][ T37] audit: type=1326 audit(1756084973.499:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7138 comm="syz.3.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719bc8ebe9 code=0x7ffc0000 [ 243.564967][ T37] audit: type=1326 audit(1756084973.529:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7138 comm="syz.3.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f719bc8ebe9 code=0x7ffc0000 [ 243.565021][ T37] audit: type=1326 audit(1756084973.529:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7138 comm="syz.3.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719bc8ebe9 code=0x7ffc0000 [ 243.565575][ T37] audit: type=1326 audit(1756084973.529:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7138 comm="syz.3.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719bc8ebe9 code=0x7ffc0000 [ 247.793593][ C1] vkms_vblank_simulate: vblank timer overrun [ 248.038102][ T7184] tmpfs: Unsupported parameter 'huge' [ 248.053358][ T7184] IPVS: Error connecting to the multicast addr [ 248.466928][ C1] vkms_vblank_simulate: vblank timer overrun [ 248.642438][ T37] audit: type=1326 audit(1756084978.609:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7188 comm="syz.1.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8098ebe9 code=0x7ffc0000 [ 248.644268][ T37] audit: type=1326 audit(1756084978.609:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7188 comm="syz.1.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8098ebe9 code=0x7ffc0000 [ 248.644663][ T37] audit: type=1326 audit(1756084978.609:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7188 comm="syz.1.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f3f8098ebe9 code=0x7ffc0000 [ 248.644825][ T37] audit: type=1326 audit(1756084978.609:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7188 comm="syz.1.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8098ebe9 code=0x7ffc0000 [ 248.644985][ T37] audit: type=1326 audit(1756084978.609:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7188 comm="syz.1.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8098ebe9 code=0x7ffc0000 [ 248.645313][ T37] audit: type=1326 audit(1756084978.609:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7188 comm="syz.1.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3f8098ebe9 code=0x7ffc0000 [ 248.645864][ T37] audit: type=1326 audit(1756084978.609:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7188 comm="syz.1.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8098ebe9 code=0x7ffc0000 [ 248.646030][ T37] audit: type=1326 audit(1756084978.609:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7188 comm="syz.1.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8098ebe9 code=0x7ffc0000 [ 248.646424][ T37] audit: type=1326 audit(1756084978.609:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7188 comm="syz.1.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f3f8098ebe9 code=0x7ffc0000 [ 250.791820][ T7217] fuse: Bad value for 'fd' [ 252.759643][ T7246] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 252.783502][ T37] audit: type=1326 audit(1756084982.749:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7247 comm="syz.0.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae2e0ebe9 code=0x7ffc0000 [ 253.954436][ T7268] fuse: Bad value for 'fd' [ 255.322438][ T7284] tmpfs: Unsupported parameter 'huge' [ 255.326165][ T7284] IPVS: Error connecting to the multicast addr [ 255.960172][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.960260][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.054574][ T7308] delete_channel: no stack [ 257.681559][ T6014] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 257.832244][ T6014] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 257.832282][ T6014] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 257.832324][ T6014] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 257.832346][ T6014] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.903575][ T7310] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 257.973134][ T6014] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 258.199001][ T7310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.201861][ T7310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.385837][ T7314] tipc: Started in network mode [ 258.386069][ T7314] tipc: Node identity 080211000001, cluster identity 4711 [ 258.626839][ T7314] tipc: Enabled bearer , priority 0 [ 258.722821][ T7316] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 258.725267][ T7316] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 259.500603][ T6014] tipc: Node number set to 134418688 [ 260.295364][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 260.295386][ T37] audit: type=1326 audit(1756084990.259:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7323 comm="syz.0.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae2e0ebe9 code=0x7ffc0000 [ 260.297439][ T37] audit: type=1326 audit(1756084990.259:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7323 comm="syz.0.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae2e0ebe9 code=0x7ffc0000 [ 260.406336][ T37] audit: type=1326 audit(1756084990.369:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7323 comm="syz.0.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fbae2e0ebe9 code=0x7ffc0000 [ 260.406394][ T37] audit: type=1326 audit(1756084990.369:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7323 comm="syz.0.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae2e0ebe9 code=0x7ffc0000 [ 260.406440][ T37] audit: type=1326 audit(1756084990.369:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7323 comm="syz.0.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae2e0ebe9 code=0x7ffc0000 [ 260.406483][ T37] audit: type=1326 audit(1756084990.369:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7323 comm="syz.0.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbae2e0ebe9 code=0x7ffc0000 [ 260.406527][ T37] audit: type=1326 audit(1756084990.369:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7323 comm="syz.0.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae2e0ebe9 code=0x7ffc0000 [ 260.406566][ T37] audit: type=1326 audit(1756084990.369:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7323 comm="syz.0.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae2e0ebe9 code=0x7ffc0000 [ 260.553946][ T37] audit: type=1326 audit(1756084990.519:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7323 comm="syz.0.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fbae2e0ebe9 code=0x7ffc0000 [ 261.947311][ C1] vkms_vblank_simulate: vblank timer overrun [ 263.587021][ T7339] fuse: Bad value for 'fd' [ 263.673803][ T7341] netlink: 20 bytes leftover after parsing attributes in process `syz.4.341'. [ 266.127510][ T6014] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 266.277466][ T6014] usb 4-1: Using ep0 maxpacket: 16 [ 266.282214][ T6014] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.282231][ T6014] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 266.284779][ T6014] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 266.284796][ T6014] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.284807][ T6014] usb 4-1: Product: syz [ 266.284815][ T6014] usb 4-1: Manufacturer: syz [ 266.284823][ T6014] usb 4-1: SerialNumber: syz [ 266.611233][ T6014] usb 4-1: 0:2 : does not exist [ 266.741014][ T6014] usb 4-1: USB disconnect, device number 17 [ 267.203801][ T6377] udevd[6377]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 268.881916][ T7399] fuse: Bad value for 'fd' [ 269.407517][ T5908] usb 2-1: USB disconnect, device number 5 [ 269.835042][ T7408] netlink: 28 bytes leftover after parsing attributes in process `syz.3.361'. [ 269.835080][ T7408] netlink: 28 bytes leftover after parsing attributes in process `syz.3.361'. [ 270.007897][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 270.177352][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 270.184437][ T10] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 270.184467][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.184487][ T10] usb 3-1: Product: syz [ 270.184501][ T10] usb 3-1: Manufacturer: syz [ 270.184516][ T10] usb 3-1: SerialNumber: syz [ 270.245202][ T10] usb 3-1: config 0 descriptor?? [ 270.262423][ T10] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 270.537400][ T6014] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 272.049943][ T10] gspca_ov534_9: reg_r err -32 [ 272.377735][ T10] gspca_ov534_9: Unknown sensor 0000 [ 272.377809][ T10] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 272.413597][ T10] usb 3-1: USB disconnect, device number 13 [ 275.868063][ T6014] usb 1-1: unable to get BOS descriptor or descriptor too short [ 275.870409][ T6014] usb 1-1: unable to read config index 0 descriptor/start: -32 [ 275.870434][ T6014] usb 1-1: chopping to 0 config(s) [ 275.870462][ T6014] usb 1-1: can't read configurations, error -32 [ 275.997403][ T6014] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 276.127436][ T6014] usb 1-1: device descriptor read/64, error -32 [ 276.246020][ T6014] usb usb1-port1: attempt power cycle [ 276.597686][ T6014] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 276.639703][ T6014] usb 1-1: device descriptor read/8, error -32 [ 276.863809][ T5838] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 276.886134][ T6014] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 276.897898][ T6014] usb 1-1: device descriptor read/8, error -32 [ 277.007888][ T6014] usb usb1-port1: unable to enumerate USB device [ 277.027393][ T5838] usb 5-1: device descriptor read/64, error -71 [ 277.517432][ T5952] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 277.544902][ T5838] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 277.687951][ T5838] usb 5-1: device descriptor read/64, error -71 [ 277.746674][ T5952] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 277.746697][ T5952] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 277.746712][ T5952] usb 3-1: config 0 interface 0 has no altsetting 0 [ 277.746733][ T5952] usb 3-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 277.746747][ T5952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.799717][ T5838] usb usb5-port1: attempt power cycle [ 277.866146][ T5952] usb 3-1: config 0 descriptor?? [ 277.944300][ T7449] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 278.038541][ T7451] fuse: Bad value for 'fd' [ 278.157421][ T5838] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 278.180491][ T5838] usb 5-1: device descriptor read/8, error -71 [ 278.426083][ C1] vkms_vblank_simulate: vblank timer overrun [ 279.499244][ T5838] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 279.574357][ C1] vkms_vblank_simulate: vblank timer overrun [ 282.534801][ T7461] binder: 7459:7461 ioctl c0306201 200000000540 returned -22 [ 282.828481][ T37] audit: type=1326 audit(1756085012.789:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7466 comm="syz.3.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719bc8ebe9 code=0x7ffc0000 [ 282.832922][ T37] audit: type=1326 audit(1756085012.799:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7466 comm="syz.3.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719bc8ebe9 code=0x7ffc0000 [ 282.889178][ T37] audit: type=1326 audit(1756085012.849:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7466 comm="syz.3.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f719bc8ebe9 code=0x7ffc0000 [ 282.895454][ T37] audit: type=1326 audit(1756085012.859:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7466 comm="syz.3.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719bc8ebe9 code=0x7ffc0000 [ 282.957994][ T37] audit: type=1326 audit(1756085012.859:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7466 comm="syz.3.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719bc8ebe9 code=0x7ffc0000 [ 283.091766][ T37] audit: type=1326 audit(1756085013.059:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7466 comm="syz.3.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f719bc8ebe9 code=0x7ffc0000 [ 283.127741][ T37] audit: type=1326 audit(1756085013.089:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7466 comm="syz.3.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719bc8ebe9 code=0x7ffc0000 [ 283.130852][ T37] audit: type=1326 audit(1756085013.099:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7466 comm="syz.3.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719bc8ebe9 code=0x7ffc0000 [ 283.436415][ T37] audit: type=1326 audit(1756085013.399:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7466 comm="syz.3.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f719bc8ebe9 code=0x7ffc0000 [ 284.599629][ T5838] usb 5-1: device descriptor read/8, error -110 [ 284.717996][ T5838] usb usb5-port1: unable to enumerate USB device [ 284.919366][ T5952] usbhid 3-1:0.0: can't add hid device: -32 [ 284.919518][ T5952] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 286.406654][ T7483] wg1: entered promiscuous mode [ 286.406675][ T7483] wg1: entered allmulticast mode [ 286.487460][ T5838] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 286.538690][ T9] usb 3-1: USB disconnect, device number 14 [ 286.672770][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.672806][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.672868][ T5838] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 286.672892][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.746976][ T5838] usb 4-1: config 0 descriptor?? [ 288.596576][ T5838] usbhid 4-1:0.0: can't add hid device: -71 [ 288.596731][ T5838] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 288.672726][ T5838] usb 4-1: USB disconnect, device number 18 [ 288.679258][ T7500] netlink: 28 bytes leftover after parsing attributes in process `syz.0.385'. [ 288.679292][ T7500] netlink: 28 bytes leftover after parsing attributes in process `syz.0.385'. [ 291.692002][ C1] vkms_vblank_simulate: vblank timer overrun [ 292.487368][ T5952] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 292.688646][ T5952] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 292.688671][ T5952] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 292.688686][ T5952] usb 3-1: config 0 interface 0 has no altsetting 0 [ 292.688707][ T5952] usb 3-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 292.688720][ T5952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.692104][ T5952] usb 3-1: config 0 descriptor?? [ 292.797484][ T7523] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 292.869167][ T7516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.388'. [ 293.614853][ T7516] bridge_slave_1: left allmulticast mode [ 293.614891][ T7516] bridge_slave_1: left promiscuous mode [ 293.618881][ T7516] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.079955][ T7516] bridge_slave_0: left allmulticast mode [ 294.079997][ T7516] bridge_slave_0: left promiscuous mode [ 294.086172][ T7516] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.618261][ T7516] bridge0 (unregistering): left promiscuous mode [ 298.657419][ T50] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 298.817456][ T50] usb 2-1: Using ep0 maxpacket: 8 [ 298.822496][ T50] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 298.822513][ T50] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 298.822523][ T50] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 298.877173][ T50] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 298.877195][ T50] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.877206][ T50] usb 2-1: Product: syz [ 298.877214][ T50] usb 2-1: Manufacturer: syz [ 298.904491][ T50] usb 2-1: SerialNumber: syz [ 299.068363][ T5952] usbhid 3-1:0.0: can't add hid device: -32 [ 299.068452][ T5952] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 299.605436][ T10] usb 3-1: USB disconnect, device number 15 [ 301.807106][ T5838] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 302.777383][ T5838] usb 1-1: Using ep0 maxpacket: 32 [ 302.798611][ T5838] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.798686][ T5838] usb 1-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 302.798713][ T5838] usb 1-1: config 0 interface 0 has no altsetting 0 [ 302.802658][ T5838] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 302.802685][ T5838] usb 1-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 302.802705][ T5838] usb 1-1: Product: syz [ 302.802715][ T5838] usb 1-1: Manufacturer: syz [ 302.802728][ T5838] usb 1-1: SerialNumber: syz [ 302.902863][ T5838] usb 1-1: config 0 descriptor?? [ 302.973641][ T5838] gs_usb 1-1:0.0: Required endpoints not found [ 303.690150][ T7576] netlink: 28 bytes leftover after parsing attributes in process `syz.3.405'. [ 303.690425][ T7576] netlink: 28 bytes leftover after parsing attributes in process `syz.3.405'. [ 304.205036][ T50] usb 2-1: 0:2 : does not exist [ 304.346707][ T5838] usb 1-1: USB disconnect, device number 8 [ 305.685162][ C1] vkms_vblank_simulate: vblank timer overrun [ 305.717961][ T9] usb 2-1: USB disconnect, device number 6 [ 306.241219][ C1] vkms_vblank_simulate: vblank timer overrun [ 306.422788][ C1] vkms_vblank_simulate: vblank timer overrun [ 307.005300][ C1] vkms_vblank_simulate: vblank timer overrun [ 307.227409][ C1] vkms_vblank_simulate: vblank timer overrun [ 307.480011][ C1] vkms_vblank_simulate: vblank timer overrun [ 307.967449][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 307.967671][ T6014] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 308.098289][ T6014] usb 1-1: device descriptor read/64, error -71 [ 308.117845][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 308.120220][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.120272][ T9] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 308.120295][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 308.127449][ T9] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 308.127480][ T9] usb 5-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 308.127500][ T9] usb 5-1: Product: syz [ 308.127514][ T9] usb 5-1: Manufacturer: syz [ 308.127528][ T9] usb 5-1: SerialNumber: syz [ 308.159038][ T9] usb 5-1: config 0 descriptor?? [ 308.348318][ T9] gs_usb 5-1:0.0: Required endpoints not found [ 308.507955][ T6014] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 308.727718][ T6014] usb 1-1: device descriptor read/64, error -71 [ 308.763879][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.837849][ T6014] usb usb1-port1: attempt power cycle [ 309.197510][ T6014] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 309.218308][ T6014] usb 1-1: device descriptor read/8, error -71 [ 309.255787][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.391596][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 309.400107][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 309.430862][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 309.435124][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 309.437202][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 309.498240][ T6014] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 309.528517][ T6014] usb 1-1: device descriptor read/8, error -71 [ 309.807721][ T6014] usb usb1-port1: unable to enumerate USB device [ 309.866205][ C1] vkms_vblank_simulate: vblank timer overrun [ 310.030690][ C1] vkms_vblank_simulate: vblank timer overrun [ 310.965320][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.080502][ T5838] usb 5-1: USB disconnect, device number 9 [ 311.564483][ T59] Bluetooth: hci4: command tx timeout [ 311.663383][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.807495][ T5838] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 311.987464][ T5838] usb 1-1: Using ep0 maxpacket: 16 [ 311.994169][ T5838] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.994201][ T5838] usb 1-1: config 0 interface 0 has no altsetting 0 [ 311.994237][ T5838] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 311.994260][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.001345][ T5838] usb 1-1: config 0 descriptor?? [ 312.935735][ C0] vkms_vblank_simulate: vblank timer overrun [ 313.152675][ C0] vkms_vblank_simulate: vblank timer overrun [ 313.638891][ T59] Bluetooth: hci4: command tx timeout [ 313.893717][ T5838] usbhid 1-1:0.0: can't add hid device: -71 [ 313.893877][ T5838] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 313.970125][ T5838] usb 1-1: USB disconnect, device number 13 [ 314.097571][ T5952] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 314.247419][ T5952] usb 3-1: Using ep0 maxpacket: 32 [ 314.279575][ T5952] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.284721][ T5952] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 314.284752][ T5952] usb 3-1: config 0 interface 0 has no altsetting 0 [ 314.285852][ T5952] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 314.285877][ T5952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.320057][ T5952] usb 3-1: config 0 descriptor?? [ 314.777583][ T5952] usbhid 3-1:0.0: can't add hid device: -71 [ 314.777722][ T5952] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 314.801852][ T5952] usb 3-1: USB disconnect, device number 16 [ 315.142728][ T5838] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 315.387040][ T5838] usb 5-1: config 0 has no interfaces? [ 315.387083][ T5838] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 315.387106][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.400680][ T5838] usb 5-1: config 0 descriptor?? [ 315.610660][ T7674] netlink: 12 bytes leftover after parsing attributes in process `syz.4.434'. [ 315.707740][ T59] Bluetooth: hci4: command tx timeout [ 316.324422][ C0] vkms_vblank_simulate: vblank timer overrun [ 316.695288][ C0] vkms_vblank_simulate: vblank timer overrun [ 317.159696][ T7692] tmpfs: Unsupported parameter 'huge' [ 317.207423][ T50] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 317.368132][ T50] usb 3-1: device descriptor read/64, error -71 [ 317.405350][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.405402][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.617421][ T50] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 317.757551][ T50] usb 3-1: device descriptor read/64, error -71 [ 317.787687][ T59] Bluetooth: hci4: command tx timeout [ 317.867835][ T50] usb usb3-port1: attempt power cycle [ 318.227416][ T50] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 318.278467][ T50] usb 3-1: device descriptor read/8, error -71 [ 318.537372][ T50] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 318.560259][ T50] usb 3-1: device descriptor read/8, error -71 [ 318.668461][ T50] usb usb3-port1: unable to enumerate USB device [ 319.477466][ T12] bond0 (unregistering): left promiscuous mode [ 319.477490][ T12] bond_slave_0: left promiscuous mode [ 319.477901][ T12] bond_slave_1: left promiscuous mode [ 319.618370][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.678286][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.702751][ T12] bond0 (unregistering): Released all slaves [ 319.790859][ T7674] vlan3: entered promiscuous mode [ 319.790882][ T7674] syz_tun: entered promiscuous mode [ 320.255142][ T7692] IPVS: Error connecting to the multicast addr [ 320.256107][ T7698] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 320.256151][ T7698] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 320.393336][ T5838] usb 5-1: USB disconnect, device number 10 [ 320.957408][ T6046] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 321.177546][ T6046] usb 1-1: Using ep0 maxpacket: 16 [ 321.182527][ T6046] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.182555][ T6046] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 321.188752][ T6046] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 321.188780][ T6046] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.188800][ T6046] usb 1-1: Product: syz [ 321.188813][ T6046] usb 1-1: Manufacturer: syz [ 321.188825][ T6046] usb 1-1: SerialNumber: syz [ 321.411661][ T6046] usb 1-1: 0:2 : does not exist [ 321.411723][ T6046] usb 1-1: unit 12 not found! [ 321.961718][ T6046] usb 1-1: USB disconnect, device number 14 [ 323.132311][ T7421] udevd[7421]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 323.845416][ C1] vkms_vblank_simulate: vblank timer overrun [ 324.363768][ C1] vkms_vblank_simulate: vblank timer overrun [ 325.815982][ T12] hsr_slave_0: left promiscuous mode [ 326.117512][ C1] vkms_vblank_simulate: vblank timer overrun [ 326.150018][ T7764] tmpfs: Unsupported parameter 'huge' [ 326.197458][ T12] hsr_slave_1: left promiscuous mode [ 326.218844][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.219082][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.298455][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.298504][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.658184][ C1] vkms_vblank_simulate: vblank timer overrun [ 326.871970][ C1] vkms_vblank_simulate: vblank timer overrun [ 327.434574][ C1] vkms_vblank_simulate: vblank timer overrun [ 327.712876][ T12] veth1_macvtap: left promiscuous mode [ 327.714548][ T12] veth0_macvtap: left promiscuous mode [ 327.820463][ C1] vkms_vblank_simulate: vblank timer overrun [ 327.877827][ T12] veth1_vlan: left promiscuous mode [ 327.925435][ T12] veth0_vlan: left promiscuous mode [ 328.437459][ T5952] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 328.598387][ T5952] usb 2-1: Using ep0 maxpacket: 16 [ 328.604308][ T5952] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 328.604327][ T5952] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 328.664018][ T5952] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 328.664039][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.664050][ T5952] usb 2-1: Product: syz [ 328.664058][ T5952] usb 2-1: Manufacturer: syz [ 328.664066][ T5952] usb 2-1: SerialNumber: syz [ 328.933426][ T5952] usb 2-1: 0:2 : does not exist [ 328.933487][ T5952] usb 2-1: unit 12 not found! [ 329.170481][ T5952] usb 2-1: USB disconnect, device number 7 [ 329.547989][ T6377] udevd[6377]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 329.928341][ T7793] netlink: 29 bytes leftover after parsing attributes in process `syz.1.462'. [ 332.937387][ T5838] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 333.107401][ T5838] usb 5-1: Using ep0 maxpacket: 32 [ 333.110173][ T5838] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.110234][ T5838] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 333.110260][ T5838] usb 5-1: config 0 interface 0 has no altsetting 0 [ 333.113624][ T5838] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 333.113649][ T5838] usb 5-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 333.113669][ T5838] usb 5-1: Product: syz [ 333.113683][ T5838] usb 5-1: Manufacturer: syz [ 333.113697][ T5838] usb 5-1: SerialNumber: syz [ 333.180228][ T5838] usb 5-1: config 0 descriptor?? [ 333.194455][ T5838] gs_usb 5-1:0.0: Required endpoints not found [ 333.628483][ T12] team0 (unregistering): Port device team_slave_1 removed [ 333.878334][ T12] team0 (unregistering): Port device team_slave_0 removed [ 335.723407][ T6046] usb 5-1: USB disconnect, device number 11 [ 336.409767][ T7764] IPVS: Error connecting to the multicast addr [ 336.437538][ T5838] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 336.538277][ T7627] chnl_net:caif_netlink_parms(): no params data found [ 336.613506][ T5838] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 336.613539][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.736521][ T5838] usb 5-1: config 0 descriptor?? [ 336.805939][ T5838] gspca_main: spca508-2.14.0 probing 8086:0110 [ 337.306399][ T5838] gspca_spca508: reg_read err -71 [ 337.377925][ T5838] gspca_spca508: reg_read err -71 [ 337.378491][ T5838] gspca_spca508: reg_read err -71 [ 337.378991][ T5838] gspca_spca508: reg_read err -71 [ 337.379442][ T5838] gspca_spca508: reg write: error -71 [ 337.379647][ T5838] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 337.461924][ T5838] usb 5-1: USB disconnect, device number 12 [ 337.991196][ T7848] fuse: Bad value for 'fd' [ 338.081220][ T7627] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.081413][ T7627] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.081655][ T7627] bridge_slave_0: entered allmulticast mode [ 338.094134][ T7627] bridge_slave_0: entered promiscuous mode [ 338.112721][ T7627] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.112869][ T7627] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.113101][ T7627] bridge_slave_1: entered allmulticast mode [ 338.172572][ T7627] bridge_slave_1: entered promiscuous mode [ 338.720317][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 338.937665][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 338.943567][ T9] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.943600][ T9] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 338.943626][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 338.943662][ T9] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 338.943683][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.046993][ T9] usb 1-1: config 0 descriptor?? [ 339.525009][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 339.525148][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 339.554445][ T9] usb 1-1: USB disconnect, device number 15 [ 339.890486][ T7627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.952301][ T7627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.608349][ T7627] team0: Port device team_slave_0 added [ 340.616336][ T7627] team0: Port device team_slave_1 added [ 340.617529][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 340.777381][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 340.781964][ T9] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 340.781984][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 340.784254][ T9] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 340.784278][ T9] usb 3-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 340.784291][ T9] usb 3-1: Product: syz [ 340.784298][ T9] usb 3-1: Manufacturer: syz [ 340.784306][ T9] usb 3-1: SerialNumber: syz [ 340.978852][ T9] usb 3-1: config 0 descriptor?? [ 341.226789][ T9] gs_usb 3-1:0.0: Required endpoints not found [ 342.084999][ C0] vkms_vblank_simulate: vblank timer overrun [ 342.355057][ C0] vkms_vblank_simulate: vblank timer overrun [ 342.831715][ T7892] tmpfs: Unsupported parameter 'huge' [ 343.013145][ T7892] IPVS: Error connecting to the multicast addr [ 343.016552][ T7627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.016570][ T7627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.016598][ T7627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.078557][ T7627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.078577][ T7627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.078605][ T7627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.541992][ T994] usb 3-1: USB disconnect, device number 21 [ 344.171925][ T7903] fuse: Bad value for 'fd' [ 344.523699][ T7627] hsr_slave_0: entered promiscuous mode [ 344.532298][ T7627] hsr_slave_1: entered promiscuous mode [ 344.533369][ T7627] debugfs: 'hsr0' already exists in 'hsr' [ 344.533394][ T7627] Cannot create hsr debugfs directory [ 346.602500][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 346.638176][ T7929] tipc: Enabling of bearer rejected, already enabled [ 346.641365][ T7932] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 346.641488][ T7932] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 346.758646][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 346.762245][ T9] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 346.762280][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 346.766197][ T9] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 346.766225][ T9] usb 3-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 346.766246][ T9] usb 3-1: Product: syz [ 346.766260][ T9] usb 3-1: Manufacturer: syz [ 346.766274][ T9] usb 3-1: SerialNumber: syz [ 346.814895][ T9] usb 3-1: config 0 descriptor?? [ 346.857500][ T9] gs_usb 3-1:0.0: Required endpoints not found [ 347.127431][ T5838] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 347.281901][ T5838] usb 5-1: Using ep0 maxpacket: 8 [ 347.284965][ T5838] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 347.284999][ T5838] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 347.285021][ T5838] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 347.285055][ T5838] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 347.285096][ T5838] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 347.285114][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.600038][ T5838] usb 5-1: GET_CAPABILITIES returned 0 [ 347.600075][ T5838] usbtmc 5-1:16.0: can't read capabilities [ 353.844116][ T7627] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 353.959122][ T5952] usb 5-1: USB disconnect, device number 13 [ 353.987603][ T994] usb 3-1: USB disconnect, device number 22 [ 353.991265][ T7955] netlink: 32 bytes leftover after parsing attributes in process `syz.1.500'. [ 354.064487][ T7627] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 354.167586][ T7627] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 354.357546][ T7627] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 354.475903][ T7966] delete_channel: no stack [ 354.917815][ T5952] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 355.206316][ T5952] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 355.206356][ T5952] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 355.206398][ T5952] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 355.206422][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.270186][ T5952] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 355.271304][ T5952] usb 5-1: invalid MIDI out EP 0 [ 355.557477][ T5838] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 355.656526][ T7983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.657176][ T7983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.669600][ T7627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.750979][ T5838] usb 1-1: Using ep0 maxpacket: 16 [ 355.755877][ T5838] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 355.755905][ T5838] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 355.765447][ T5838] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 355.765475][ T5838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.765493][ T5838] usb 1-1: Product: syz [ 355.765506][ T5838] usb 1-1: Manufacturer: syz [ 355.765519][ T5838] usb 1-1: SerialNumber: syz [ 355.920760][ T6360] udevd[6360]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 356.056345][ T7627] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.127992][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.128186][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.154803][ T5952] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 356.293489][ T5838] usb 1-1: 0:2 : does not exist [ 356.293589][ T5838] usb 1-1: unit 12 not found! [ 356.467639][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.467839][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.591845][ T7990] [ 356.591860][ T7990] ====================================================== [ 356.591869][ T7990] WARNING: possible circular locking dependency detected SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 356.591879][ T7990] syzkaller #0 Not tainted [ 356.591891][ T7990] ------------------------------------------------------ [ 356.591899][ T7990] syz.1.502/7990 is trying to acquire lock: [ 356.591911][ T7990] ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 356.591976][ T7990] [ 356.591976][ T7990] but task is already holding lock: [ 356.591983][ T7990] ffffffff8efa6608 (smc_v6_hashinfo.lock){++.+}-{3:3}, at: smc_diag_dump_proto+0x174/0x1fb0 [ 356.592032][ T7990] [ 356.592032][ T7990] which lock already depends on the new lock. [ 356.592032][ T7990] [ 356.592039][ T7990] [ 356.592039][ T7990] the existing dependency chain (in reverse order) is: [ 356.592047][ T7990] [ 356.592047][ T7990] -> #1 (smc_v6_hashinfo.lock){++.+}-{3:3}: [ 356.592076][ T7990] lock_acquire+0x120/0x360 [ 356.592113][ T7990] rt_write_lock+0x6a/0x110 [ 356.592133][ T7990] smc_hash_sk+0x8f/0x2a0 [ 356.592152][ T7990] smc_sk_init+0x5a1/0x7f0 [ 356.592171][ T7990] __smc_create+0x10d/0x280 [ 356.592197][ T7990] __sock_create+0x4b3/0x9f0 [ 356.592218][ T7990] __sys_socket+0xd7/0x1b0 [ 356.592237][ T7990] __x64_sys_socket+0x7a/0x90 [ 356.592258][ T7990] do_syscall_64+0xfa/0x3b0 [ 356.592284][ T7990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.592304][ T7990] [ 356.592304][ T7990] -> #0 ((softirq_ctrl.lock)){+.+.}-{3:3}: [ 356.592331][ T7990] validate_chain+0xb9b/0x2140 [ 356.592360][ T7990] __lock_acquire+0xab9/0xd20 [ 356.592383][ T7990] reacquire_held_locks+0x127/0x1d0 [ 356.592412][ T7990] lock_release+0x1b4/0x3e0 [ 356.592435][ T7990] __local_bh_enable_ip+0x10c/0x270 [ 356.592458][ T7990] sock_i_ino+0xa9/0xc0 [ 356.592484][ T7990] smc_diag_dump_proto+0xa4c/0x1fb0 [ 356.592505][ T7990] smc_diag_dump+0x59/0xa0 [ 356.592524][ T7990] netlink_dump+0x6e4/0xe90 [ 356.592544][ T7990] __netlink_dump_start+0x5cb/0x7e0 [ 356.592565][ T7990] smc_diag_handler_dump+0x178/0x210 [ 356.592586][ T7990] sock_diag_rcv_msg+0x4c9/0x600 [ 356.592607][ T7990] netlink_rcv_skb+0x205/0x470 [ 356.592628][ T7990] netlink_unicast+0x843/0xa10 [ 356.592647][ T7990] netlink_sendmsg+0x805/0xb30 [ 356.592669][ T7990] __sock_sendmsg+0x219/0x270 [ 356.592687][ T7990] ____sys_sendmsg+0x508/0x820 [ 356.592712][ T7990] ___sys_sendmsg+0x21f/0x2a0 [ 356.592738][ T7990] __x64_sys_sendmsg+0x1a1/0x260 [ 356.592762][ T7990] do_syscall_64+0xfa/0x3b0 [ 356.592787][ T7990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.592805][ T7990] [ 356.592805][ T7990] other info that might help us debug this: [ 356.592805][ T7990] [ 356.592812][ T7990] Possible unsafe locking scenario: [ 356.592812][ T7990] [ 356.592818][ T7990] CPU0 CPU1 [ 356.592825][ T7990] ---- ---- [ 356.592831][ T7990] rlock(smc_v6_hashinfo.lock); [ 356.592843][ T7990] lock((softirq_ctrl.lock)); [ 356.592857][ T7990] lock(smc_v6_hashinfo.lock); [ 356.592869][ T7990] lock((softirq_ctrl.lock)); [ 356.592881][ T7990] [ 356.592881][ T7990] *** DEADLOCK *** [ 356.592881][ T7990] [ 356.592886][ T7990] 3 locks held by syz.1.502/7990: [ 356.592897][ T7990] #0: ffff8880272fc908 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 356.592943][ T7990] #1: ffffffff8efa6608 (smc_v6_hashinfo.lock){++.+}-{3:3}, at: smc_diag_dump_proto+0x174/0x1fb0 [ 356.592995][ T7990] #2: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_read_lock+0x1f8/0x360 [ 356.593045][ T7990] [ 356.593045][ T7990] stack backtrace: [ 356.593057][ T7990] CPU: 1 UID: 0 PID: 7990 Comm: syz.1.502 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 356.593081][ T7990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 356.593116][ T7990] Call Trace: [ 356.593124][ T7990] [ 356.593133][ T7990] dump_stack_lvl+0x189/0x250 [ 356.593166][ T7990] ? __pfx_dump_stack_lvl+0x10/0x10 [ 356.593196][ T7990] ? __pfx__printk+0x10/0x10 [ 356.593219][ T7990] ? print_lock_name+0xde/0x100 [ 356.593242][ T7990] print_circular_bug+0x2ee/0x310 [ 356.593264][ T7990] check_noncircular+0x134/0x160 [ 356.593300][ T7990] validate_chain+0xb9b/0x2140 [ 356.593331][ T7990] ? validate_chain+0x897/0x2140 [ 356.593370][ T7990] __lock_acquire+0xab9/0xd20 [ 356.593399][ T7990] reacquire_held_locks+0x127/0x1d0 [ 356.593430][ T7990] ? __local_bh_disable_ip+0x264/0x400 [ 356.593458][ T7990] lock_release+0x1b4/0x3e0 [ 356.593484][ T7990] ? __local_bh_enable_ip+0x100/0x270 [ 356.593511][ T7990] __local_bh_enable_ip+0x10c/0x270 [ 356.593537][ T7990] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 356.593566][ T7990] ? rt_read_unlock+0x65/0xa0 [ 356.593587][ T7990] ? sock_i_ino+0x24/0xc0 [ 356.593616][ T7990] sock_i_ino+0xa9/0xc0 [ 356.593645][ T7990] smc_diag_dump_proto+0xa4c/0x1fb0 [ 356.593679][ T7990] ? __pfx_smc_diag_dump_proto+0x10/0x10 [ 356.593703][ T7990] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 356.593739][ T7990] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 356.593772][ T7990] ? __phys_addr+0xd3/0x180 [ 356.593802][ T7990] ? __kasan_kmalloc_large+0x85/0xa0 [ 356.593830][ T7990] ? rcu_is_watching+0x15/0xb0 [ 356.593859][ T7990] ? rcu_is_watching+0x15/0xb0 [ 356.593889][ T7990] ? trace_kmalloc+0x1f/0xd0 [ 356.593914][ T7990] ? __kmalloc_node_track_caller_noprof+0x213/0x450 [ 356.593946][ T7990] ? __build_skb_around+0x257/0x3e0 [ 356.593976][ T7990] smc_diag_dump+0x59/0xa0 [ 356.593999][ T7990] netlink_dump+0x6e4/0xe90 [ 356.594027][ T7990] ? __pfx_netlink_dump+0x10/0x10 [ 356.594048][ T7990] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 356.594075][ T7990] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.594118][ T7990] __netlink_dump_start+0x5cb/0x7e0 [ 356.594145][ T7990] smc_diag_handler_dump+0x178/0x210 [ 356.594170][ T7990] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 356.594192][ T7990] ? __pfx_smc_diag_dump+0x10/0x10 [ 356.594216][ T7990] ? sock_diag_lock_handler+0x19/0x290 [ 356.594238][ T7990] ? sock_diag_lock_handler+0x19/0x290 [ 356.594262][ T7990] sock_diag_rcv_msg+0x4c9/0x600 [ 356.594286][ T7990] netlink_rcv_skb+0x205/0x470 [ 356.594309][ T7990] ? __lock_acquire+0xab9/0xd20 [ 356.594335][ T7990] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 356.594358][ T7990] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 356.594387][ T7990] ? netlink_deliver_tap+0x2e/0x1b0 [ 356.594414][ T7990] netlink_unicast+0x843/0xa10 [ 356.594438][ T7990] ? __pfx_netlink_unicast+0x10/0x10 [ 356.594460][ T7990] ? netlink_sendmsg+0x642/0xb30 [ 356.594484][ T7990] ? skb_put+0x11b/0x210 [ 356.594511][ T7990] netlink_sendmsg+0x805/0xb30 [ 356.594540][ T7990] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.594568][ T7990] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 356.594588][ T7990] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.594613][ T7990] __sock_sendmsg+0x219/0x270 [ 356.594636][ T7990] ____sys_sendmsg+0x508/0x820 [ 356.594667][ T7990] ? __pfx_____sys_sendmsg+0x10/0x10 [ 356.594700][ T7990] ? import_iovec+0x74/0xa0 [ 356.594738][ T7990] ___sys_sendmsg+0x21f/0x2a0 [ 356.594767][ T7990] ? __pfx____sys_sendmsg+0x10/0x10 [ 356.594811][ T7990] ? __fget_files+0x2a/0x420 [ 356.594839][ T7990] ? __fget_files+0x3a6/0x420 [ 356.594871][ T7990] __x64_sys_sendmsg+0x1a1/0x260 [ 356.594901][ T7990] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 356.594936][ T7990] ? rcu_is_watching+0x15/0xb0 [ 356.594968][ T7990] ? do_syscall_64+0xbe/0x3b0 [ 356.594997][ T7990] do_syscall_64+0xfa/0x3b0 [ 356.595023][ T7990] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.595048][ T7990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.595069][ T7990] ? clear_bhb_loop+0x60/0xb0 [ 356.595100][ T7990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.595120][ T7990] RIP: 0033:0x7f3f8098ebe9 [ 356.595138][ T7990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.595156][ T7990] RSP: 002b:00007f3f7df43038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 356.595178][ T7990] RAX: ffffffffffffffda RBX: 00007f3f80bb6450 RCX: 00007f3f8098ebe9 [ 356.595194][ T7990] RDX: 0000000000004000 RSI: 0000200000000140 RDI: 000000000000000b [ 356.595208][ T7990] RBP: 00007f3f80a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 356.595221][ T7990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.595234][ T7990] R13: 00007f3f80bb64e8 R14: 00007f3f80bb6450 R15: 00007ffd56ddfa88 [ 356.595256][ T7990] [ 357.279908][ T5838] usb 1-1: USB disconnect, device number 16 [ 357.742484][ T6377] udevd[6377]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 359.319754][ T10] usb 5-1: USB disconnect, device number 14 [ 360.191569][ T3573] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.410603][ T3573] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.629450][ T3573] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.859298][ T3573] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.057542][ T3573] bridge_slave_1: left allmulticast mode [ 361.057569][ T3573] bridge_slave_1: left promiscuous mode [ 361.057757][ T3573] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.158109][ T3573] bridge_slave_0: left allmulticast mode [ 361.158137][ T3573] bridge_slave_0: left promiscuous mode [ 361.158305][ T3573] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.057337][ T3573] bridge0 (unregistering): left promiscuous mode [ 362.677337][ T3573] bond0 (unregistering): left promiscuous mode [ 362.677361][ T3573] bond_slave_0: left promiscuous mode [ 362.677465][ T3573] bond_slave_1: left promiscuous mode [ 362.677541][ T3573] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 362.827927][ T3573] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.897689][ T3573] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.957686][ T3573] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 363.000333][ T3573] bond0 (unregistering): Released all slaves [ 363.117352][ T3573] tipc: Disabling bearer [ 363.197522][ T3573] tipc: Left network mode [ 364.437425][ T3573] hsr_slave_0: left promiscuous mode [ 364.477384][ T3573] hsr_slave_1: left promiscuous mode [ 364.478045][ T3573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.478066][ T3573] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.503255][ T3573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.503276][ T3573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.567718][ T3573] veth1_macvtap: left promiscuous mode [ 364.567760][ T3573] veth0_macvtap: left promiscuous mode [ 364.567846][ T3573] veth1_vlan: left promiscuous mode [ 364.567912][ T3573] veth0_vlan: left promiscuous mode [ 366.247692][ T3573] team0 (unregistering): Port device team_slave_1 removed [ 366.440092][ T3573] team0 (unregistering): Port device team_slave_0 removed