last executing test programs: 15.535863368s ago: executing program 2 (id=1297): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000040)={0x3, 0x0, 0x3, 0x13}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) flock(r2, 0x8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000200), 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r3, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x2, 0xd) close(0xffffffffffffffff) ioctl$DVB_DEMUX_DMX_STOP(r3, 0x6f2a) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a80)=ANY=[@ANYBLOB="1c000000260001030200002000000000010000ed080003800400c1"], 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, 0x0, 0x0, {}, 0xfd}, 0x18) sendmsg$can_j1939(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89b0, &(0x7f0000000100)={'bond0\x00', &(0x7f0000000080)=@ethtool_cmd={0x0, 0x3, 0x0, 0xfff6, 0x0, 0x1, 0x0, 0x9b, 0x4, 0x3, 0x0, 0x0, 0xfff9, 0x5, 0x44, 0x3, [0x0, 0x58f0]}}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="984e0600c12a010024001280ab29dbf2110001006272713867655f736c617665000000000580"], 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) 15.533221024s ago: executing program 4 (id=1299): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100037040400"/20, @ANYRES32, @ANYBLOB="8304050000000000380012800b000100697036746e6c000028000280"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001800dd8d0900000000000000020000fc0000000500000000060015000200000014001680100008800c000380050001"], 0x38}}, 0x0) 15.18878384s ago: executing program 4 (id=1300): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0x0, 0xe, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = fsopen(&(0x7f0000000200)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x3342, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x5) r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp6\x00') read$FUSE(r7, &(0x7f00000004c0)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000}, 0x94) openat$ptp0(0xffffff9c, 0x0, 0x8c02, 0x0) setsockopt$inet6_udp_int(r7, 0x11, 0x67, &(0x7f0000000240)=0x5, 0x4) ioctl$SIOCSIFHWADDR(r0, 0x89b1, &(0x7f0000000900)={'bond0\x00', @random="0600002000"}) syz_usb_connect(0x1, 0x2d, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0x54, 0x85, 0x92, 0x8, 0x5d1, 0x9005, 0xbdc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xfa, 0x1, 0x10, 0x66, "", [{{0x9, 0x4, 0xf1, 0x1, 0x1, 0xc9, 0xb9, 0x55, 0x4, [], [{{0x9, 0x5, 0xa, 0x1f, 0x8, 0x1, 0x2, 0xfc}}]}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) 13.612373638s ago: executing program 1 (id=1301): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='veth1_to_bond\x00', 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) cachestat(r2, &(0x7f0000000040), &(0x7f000009de80), 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x20000000000, 0x840) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000090a010400000000000000000a0000080900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001014000980080001400000000308"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="5e4e000200000000000007000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008801}, 0x24000034) syz_usb_disconnect(r3) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) r6 = socket(0x840000000002, 0x3, 0x100) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f00000000c0)="a98545bb2e4a126e9674ab4973532564100bdc0a182484ad919ed646eff1af", 0x1f) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f00000002c0)={{0x0, 0xc0000, 0x5, 0xffffffffffffffff, 0x2, 0x8000000000000000, 0x90dd, 0xf, 0x28000, 0x9, 0x8001, 0x4, 0x10000, 0x1, 0x3}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000000980)={r7, 0x1}) ioctl$EVIOCRMFF(r3, 0x550c, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000440)={0x20, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0xb}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) 13.061774818s ago: executing program 0 (id=1303): unshare(0x22020400) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = memfd_create(&(0x7f0000001080)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) fcntl$addseals(r0, 0x409, 0xa) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r0, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000400)={"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"}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000000c0)={0x2, 0x0, [{0x1, 0x0, 0x1, 0x0, 0x0, 0x1200000}, {0xa, 0x7, 0x6, 0x6, 0x1000, 0x9570, 0x39}]}) io_setup(0x222, &(0x7f0000000880)=0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000008c0), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) io_submit(r4, 0x2, &(0x7f0000000900)=[&(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x6417, r5, &(0x7f0000000980)='U', 0x1, 0x4}, &(0x7f00000009c0)={0x0, 0x0, 0x1f, 0x1, 0x8bd9, r5, 0x0, 0x0, 0xfffffffffffffaa3}]) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a00)={0x0, 0x3291, 0x80, 0x3, 0x158, 0x0, r5}, &(0x7f0000000040)=0x0, &(0x7f0000000ac0)=0x0, &(0x7f0000000b00)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000b80)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000c00)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000c40)) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_SENDMSG_ZC={0x30, 0x0, 0x28, 0xffffffffffffffff, 0x0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000ec0)='m', 0xa84e5475952f9a3}], 0x1}, 0x40001002, 0x40c1, 0x1, {0x1}}) io_uring_enter(0xffffffffffffffff, 0x201ffd, 0xfffffffd, 0x9, 0x0, 0x0) r10 = syz_open_dev$dvb_demux(&(0x7f0000000f00), 0x6, 0x1) ioctl$DVB_DEMUX_DMX_EXPBUF(r10, 0xc00c6f3e, &(0x7f0000000f40)={0x6, 0x80000}) socket$inet6_tcp(0xa, 0x1, 0x0) dup(r10) 11.090316849s ago: executing program 3 (id=1305): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) socket$nl_xfrm(0x10, 0x3, 0x6) ioprio_set$pid(0x2, 0x0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001140)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000011c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000001200), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000001240)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001280), 0x8417f, 0x3f00) r3 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r3, &(0x7f0000001340)='.\x00', 0xffffffffffffff9c, &(0x7f0000001380)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x9901) mount$fuse(0x0, &(0x7f0000001440)='./file0\x00', 0x0, 0x84000, 0x0) mount$fuse(0x0, &(0x7f0000001480)='./file0\x00', 0x0, 0x80000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000014c0)='mountinfo\x00') sendfile(r4, r4, &(0x7f0000001500)=0x2eb4, 0x2000007ff) io_uring_setup(0x705b, &(0x7f0000001540)={0x0, 0xe58f, 0x8000, 0x2, 0x1db}) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) r7 = syz_open_dev$dvb_frontend(&(0x7f0000001680), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r7, 0x40106f52, &(0x7f0000000000)={0x18, &(0x7f0000001700)=[{0x11, '\x00', @data=0xfffffffc, 0x9}]}) 11.088857522s ago: executing program 0 (id=1316): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x6, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0xf, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0xd3, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x3, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x1, 0x9, 0x0, 0x4, 0x2}, {0x4, 0x0, 0x6, 0x71f, 0x3, 0x7f}, 0x1, 0x1, 0x3f2}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES8=r0], 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r7 = dup(r6) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000052000100ff000100feffffff"], 0x1c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000901000/0x4000)=nil, &(0x7f0000152000/0x3000)=nil, 0x4000, 0x3}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000000040)={0x6, 0x100, 0x4, {0x2, 0x7f, 0x5f1b84e6, 0x9}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_buf(r7, 0x6, 0x1f, &(0x7f0000000180)="aa5df3f43362539c16b905092f1628bc007d74da47e8e592852c2e0e311d97642cc994bc094f453e546ce666382f5ad7eee1bcb19e1a12b058052707ea998f530242f3f525952c9c575c746ac4d8", 0x4e) 11.088054097s ago: executing program 2 (id=1306): r0 = fsopen(&(0x7f00000000c0)='9p\x00', 0x0) timer_create(0x1, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10}, {@host=0x10, 0x800}, 0x400, "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"}, 0x418, 0x1}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setsig(0x4203, r3, 0x5, 0x0) timer_delete(0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='port', &(0x7f0000000140)='f\x97-i\xcf_Z=\x03b\xa6\x850', 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000180)={0xedd3, 0x5, 0x4, 0x10001, 0x8}) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)={0xaa042, 0x1a1, 0xe}, 0x18) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000280)={0xfffffff, 0x0, 0x522, 0xffffffffffffffff, 0x0, 0x0}) syz_clone3(&(0x7f0000000340)={0x41920100, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r5, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x400, r4, &(0x7f00000006c0)='w', 0x1, 0x80}]) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00'}) socket$nl_route(0x10, 0x3, 0x0) 10.243692049s ago: executing program 4 (id=1308): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="354323e9", @ANYRES16=r1, @ANYBLOB="050326bd70000000000007000000"], 0x14}}, 0x24044080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a31fcffffff08000440000000000900010073797a30000000000800034000000001"], 0x64}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x64000600) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x2e, 0x57, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@any_dev={0x6, 0x845, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000440)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r4, &(0x7f0000000480)={0x0, 0x20fb87, 0x800, 0x3, 0x32c}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x546}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x4000, 0x2, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000780)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x151, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9b3b3db}, 0x94) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000900)="660f3880b6e1b7c12b660f3880080f78ace31b000000d8503a640f063e0f22a566f30f11eeb972080000b807000000ba000000000f30f3666436dcf2643e0f840d000000", 0x44}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x11, 0xffffffffffffffff, 0xfffff000) socket(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000000c80)={0xfff9, 0xe38b, 0xffff, 0x40}, 0x8) sendmsg$inet_sctp(r8, &(0x7f0000000cc0)={&(0x7f0000000d00)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000d80)='N', 0x1}], 0x1, 0x0, 0x0, 0xc005}, 0x4000890) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000dc0), &(0x7f0000000e00)=0x4) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16=r6, @ANYBLOB="ff0727bddb00000c000180080001db", @ANYRES32=r5, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x48080}, 0x20000000) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c5e09586", @ANYRES16=r6, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x28000000}, 0x4) 10.236030698s ago: executing program 1 (id=1319): syz_open_dev$loop(&(0x7f0000000100), 0x10, 0x1ac902) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x4004, 0x0, 0x0, 0x0, 0x6}, 0x30, 0x1) landlock_restrict_self(r2, 0x8) umount2(&(0x7f0000000380)='./file0\x00', 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) ioperm(0x0, 0x7c9, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$SG_IO(r3, 0x301, &(0x7f0000000180)={0x53, 0xfffffffffffffffd, 0x0, 0xad, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x2, 0x21, 0x2, 0x0}) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40058}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {}, 0x1}) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="ad3e532b00a60347b9fc1bb9f6c99e60ace7ec90deb761d93e377faad71149ba5bdb6746c0e7f1ce92b91fa42eec108f56ad71925a6d7b24f0b115e8c6910facc47791f88311a4fcf8060c54a718018a173815395b36c7a8d8d23d5f4997aaa66407818b4364b078b6b9", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) fcntl$dupfd(r0, 0x406, r0) ftruncate(0xffffffffffffffff, 0x2000009) sendfile(0xffffffffffffffff, r0, 0x0, 0x40000001) 9.417963964s ago: executing program 1 (id=1309): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @local}], 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) r7 = fsmount(0xffffffffffffffff, 0x0, 0x2) ioctl$SNAPSHOT_ATOMIC_RESTORE(r7, 0x3304) sendmmsg(r6, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r8) sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[], 0x38}}, 0x2) sendmsg$inet_sctp(r1, &(0x7f0000000080)={&(0x7f00000000c0)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000180)='8', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r9 = dup(r1) write(r9, &(0x7f00000001c0)="16", 0x1) write$binfmt_elf64(r9, &(0x7f0000000200)=ANY=[], 0x178) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000280)={0x20, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) 9.238172035s ago: executing program 0 (id=1310): pwrite64(0xffffffffffffffff, &(0x7f0000000000)="bd3b", 0x2, 0x1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mremap(&(0x7f00008cc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f000046d000/0x2000)=nil) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r0, 0x40086e81, &(0x7f0000000000)=0x3) socket$nl_crypto(0x10, 0x3, 0x15) gettid() r1 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000080)=0x2) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f00000000c0)=0x3842fb) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xa, 0x0, 0x7, 0x6}}) timer_create(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(0xffffffffffffffff, 0x400c4152, &(0x7f0000000680)={0x0, &(0x7f0000000640)=[&(0x7f0000000540)="676c0e5321b15dd94b0d19f81efa3ae43aa157d47bfed360dde83a75e8f636c2e2908fe9b17c334001a00e0f7a47db4b217ad94ef73387a976d42fd6ac3719c96dfb4028bebe83b3b1772628fb104c9ea45bdfbf7952000969174480204081538bbb3feb93f349d8ce583a8d6b536f52f23fa17e350caf278b1db265fd970b4c0ee01f5ff78f7441370cfbf492bd35cf43cef59817fbdaf936eff5e350730cf16fdb3186e9f1e83b4293fa6cd16856f71b3b7816bf4306ae1e64fcc4c5f93e0f78ccf45c651087b8169d6182481afdb47e1e8e32e529b91c512d3cad79"], 0x6}) pipe2(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='7', 0x52) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) vmsplice(0xffffffffffffffff, &(0x7f0000e79000)=[{&(0x7f0000000200)="f7", 0x1}], 0x1, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) r3 = socket(0x10, 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000280)={0x0, @reserved}) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0xfffffffffffffedb, &(0x7f0000000080)={&(0x7f0000000240)=@gettfilter={0xfffffffffffffd04, 0x2e, 0x10, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x7, 0x3}, {0x9, 0x8}, {0xb, 0xe}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000084) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x24040084) 8.808684071s ago: executing program 0 (id=1311): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xfffffffffffffd64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x1000) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000001c0)='./file0\x00') syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = dup(0xffffffffffffffff) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000030601080000000000000000050000070900020073797a32000000000900020073797a300000000005000100070000000900020073797a3000000000e1"], 0x40}, 0x1, 0x0, 0x0, 0x20004001}, 0x8000) r5 = socket$inet_sctp(0x2, 0x5, 0x84) openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r6 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) r7 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{r7, 0x1100}], 0x1, 0x20002081) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x800000, '\x00', @ptr}}) close_range(r5, 0xffffffffffffffff, 0x0) 8.236007112s ago: executing program 2 (id=1312): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100037040400"/20, @ANYRES32, @ANYBLOB="8304050000000000380012800b000100697036746e6c000028000280"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001800dd8d0900000000000000020000fc0000000500000000060015000200000014001680100008800c000380050001"], 0x38}}, 0x0) 7.514963065s ago: executing program 2 (id=1313): openat$adsp1(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = io_uring_setup(0x66a5, &(0x7f0000000100)={0x0, 0xbfb7, 0x800, 0x1, 0x87}) r3 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000000)=r3, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x1000, 0x16d3, 0x5, 0x180, 0x2000000000000004, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x4, 0xfffffffbfffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0x25000, 0x4000}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x0, 0x9}}, 0x0) timer_gettime(0x0, &(0x7f0000000240)) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f00000000c0)={0x2, @pix={0xa, 0x5, 0x30314142, 0x3, 0x7fff, 0x10, 0x1, 0x6, 0x1, 0x4, 0x1, 0x6}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x24008080) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000001300)={0x0, 0x0, 0x2020, 0x2, 0x0, 0xfffffffd}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201510100000010da092b02000000000001090224"], 0x0) syz_usb_connect$cdc_ecm(0x1, 0x79, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x1, 0x1, 0x3, 0x90, 0x9, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0x8, {{0x8, 0x24, 0x6, 0x0, 0x0, "ce1d63"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xb, 0x6, 0x8}, [@mdlm={0x15, 0x24, 0x12, 0x2}, @country_functional={0x10, 0x24, 0x7, 0x40, 0x9, [0x1, 0x9, 0x8001, 0x0, 0x9]}, @acm={0x4, 0x24, 0x2, 0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x4, 0x1, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x8, 0xfb, 0x9}}}}}]}}]}}, &(0x7f0000001900)={0xa, &(0x7f0000001340)={0xa, 0x6, 0x288, 0xe7, 0x2, 0x7, 0x8, 0xc}, 0xfd, &(0x7f0000001380)=ANY=[@ANYBLOB="050ffd000407100206350000db100b58526afef842c56da2a34982483207faaa3a421a46a5e0ca440b584734843888bae23edf7603a4884438b0bd122f8b17560202dd6e9a5115a9cf8c6043d48a5fa9980192c5a7c70e111f4314a2d71f278721cc8fea3c97d1e1e2bc4a2e788e993a60bbf28857e388ad9da0949c36e1b187d01a9e324226ddb2d7bd8e5551449fdc5b36e12a36412c8b22f8711b81f9fba6b2851018c76d15d4fe3bd7a7190842b760299c5e8c47e863592894f4bf636053c2538ab9fded2d67704aae81f911164b781aa93aecbc6b485a100a681be19ef5779d1017ac181d"], 0x6, [{0xb3, &(0x7f0000002300)=ANY=[@ANYBLOB="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"]}, {0xca, &(0x7f0000001680)=ANY=[@ANYBLOB="ca03e7819bd4a88784cfda2321f0890287ce656d037a362d31c1daf92f1e6b225a399a9a0e950147c072f434dbb741c2fdf4e209d6a2dad9d91a3e5305a0d0a113bff6f56ec245509743431e02a8c06e7a99839059482629ca78a833398b66508df7c9e95e534fc8b67eb69ba4fe7349a6bdcee7c3ed69c0ffda0bc906c9db1fe86a4bf7a5bd550424fda1dbb33c3010e12917f4aaae34931cd1aae70ce50af75ad2cd009d104b315b4f766ca953e6b0421e4c7e52ca7e8cd867c6b2a098e85627e95de007137e81e16b"]}, {0x4, &(0x7f0000001780)=@lang_id={0x4, 0x3, 0xc0a}}, {0x13, &(0x7f00000017c0)=@string={0x13, 0x3, "3ab2248e488d528e5960f031c1a631317e"}}, {0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x410}}, {0x9a, &(0x7f0000001840)=@string={0x9a, 0x3, "4f553a0e2a1edc6c656e4afec4cfa4140bae642b84d24939916b77aed8a50ff125ec27612b11054c26cb2f12f05edf1efb2f28d774600a48e5d838b72a240daa58037b78d31dd0394488ab604d0a9dcb623e392ddc92debe9dbece7b3041a3efbb5767e3bb46c83c957cd9c3f4949bc26407c7c0ef464351377e6e4dd7675e9ef1a745a1e21a61071846d6ee5e7e4c8653e70292a901b486"}}]}) 6.991177119s ago: executing program 4 (id=1314): read$eventfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) read(r0, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x335, @time={0x101, 0x10001}, 0x1b, {}, 0x2, 0x0, 0x6}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r3 = syz_open_dev$vivid(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_TRY_FMT(r3, 0xc0cc5640, &(0x7f0000000140)={0xc, @sdr={0x12787500, 0xc}}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, 0x0, &(0x7f0000ff4000), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) close_range(r1, r4, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0xfffffffa, 0x18}, 0xc) 6.734885858s ago: executing program 3 (id=1315): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x1) syz_open_dev$sg(&(0x7f0000000080), 0xbffffffd, 0x20000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000240)=0x92) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) statx(0xffffffffffffffff, 0x0, 0x400, 0x7ff, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000180)=@req={0x6, 0x8, 0x5, 0x4}, 0x10) r4 = socket(0xa, 0x1, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda0602000000fde80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1) ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000280)={0x2a, {0x0, 0xd, 0x2040000, 0x80200007, 0xf7fffffd, 0xfffffffe}}) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="96", 0x1, 0xfffffffffffffffd) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc) 5.709986502s ago: executing program 1 (id=1317): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYRESHEX=0x0, @ANYRES16=r0], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x168503) ioctl$CEC_S_MODE(r2, 0x40046109, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) close(0xffffffffffffffff) mount$fuse(0x0, 0x0, 0x0, 0x200020, &(0x7f00000004c0)=ANY=[@ANYBLOB="504a52ade0b3392008000000652ab275b14b450b2960323350cba12a4797b9b57f2569a2d34854c1adbf465cac781683e6ba7ebccb3c365a", @ANYRES8=r4, @ANYBLOB="e11957215cd820d02f6ef06ffb83c4537f01fe5d1bf242df290836eb16a24365022a8163cd4863309e6d57e77f7e625a16190a7d256d4fd672c6117e565086917f5d8e2260037d030abfd0b27c023319261052b98a82393bb9527eb467ebccb6911e77f55359257c14e807a05948286feb3957189c446df9c1568c3bac2ac6c81240b920cdd2a7213f3c2569b87b70f9c690c098caefd4a07f528e5c540566a6a82e96538adef7be6b62e9ec0f863f3067473cede381a97cbfade44c47e608d8b510bb56558b12f9efc289d794d84161beecae7da69eeb03021d8ec33f8f31c8f66380a6", @ANYBLOB, @ANYRESHEX]) r5 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$pokeuser(0x6, 0x0, 0xa, 0x400137db) r7 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r7, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r7, 0x9) listen(r7, 0x214) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, 0x0, 0x4000) ptrace$pokeuser(0x6, r6, 0xfc, 0x6000003f) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r5, 0xc0a45320, &(0x7f00000000c0)={{0x80, 0xff}, 'port0\x00', 0x3eb, 0x21e3f, 0x10, 0x0, 0x2, 0x5, 0x400, 0x0, 0xa}) openat$sequencer2(0xffffff9c, &(0x7f0000000280), 0x4011, 0x0) readv(r5, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/74, 0x4a}], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) 5.572683482s ago: executing program 4 (id=1318): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x123080) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) r1 = syz_io_uring_setup(0x34d1, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x0, 0xad}, &(0x7f00000002c0), &(0x7f0000000140), &(0x7f0000000100)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x5, 0xfffa}, 0xa, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x0, 0xfffffffd, 0x8, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x69a4, 0x80000001, 0x4, 0x5, 0x100000, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x24000, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x404, 0x7, 0x10103, 0x0, 0x5, 0x3c, 0x91, 0x2, 0xfffffffd, 0x3, 0x5, 0x0, 0x8, 0x4, 0x80, 0x0, 0x5, 0x2, 0x8, 0x4, 0xfffffffd, 0x514], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x4, 0x129432e2, 0xcb, 0xf9, 0xd, 0xffff, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x10007, 0x5, 0x2f, 0xb99, 0x312, 0x78, 0xea4, 0xa, 0x6, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xff7ffffd, 0x8, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x4ecf, 0x7f, 0x9, 0x5, 0xd, 0x80004, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x800004, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x4, 0x5, 0xcf, 0x1ef, 0x5, 0x8, 0x85, 0x6, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x7, 0x7c, 0xffffffff, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, 0x120000, 0x3, 0x6, 0x9, 0x4], [0x9, 0xbb30, 0x3, 0x8, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x4, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x2, 0x100c8, 0x3, 0x2, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x493, 0x1, 0x10003, 0x5, 0x8, 0x2b91, 0xa1f, 0x108, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x100005, 0xb1c, 0x1, 0x200, 0xffff3445, 0xfff]}, 0x45c) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ppoll(&(0x7f00000000c0)=[{r2, 0x80}], 0x1, 0x0, 0x0, 0x0) setns(0xc9, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a000000", 0x4) setsockopt(r5, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0xd, @loopback, 0xe91}}}, 0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$char_usb(r3, &(0x7f0000000040)="e2", 0x918) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001500)={0x0, 0x4c}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000380)={0x0, 0x9dc8, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) syz_open_dev$sndctrl(0x0, 0x2, 0x62042) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 5.223858051s ago: executing program 2 (id=1320): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0x0, 0xe, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = fsopen(&(0x7f0000000200)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x3342, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x5) r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp6\x00') read$FUSE(r7, &(0x7f00000004c0)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000}, 0x94) openat$ptp0(0xffffff9c, 0x0, 0x8c02, 0x0) setsockopt$inet6_udp_int(r7, 0x11, 0x67, &(0x7f0000000240)=0x5, 0x4) ioctl$SIOCSIFHWADDR(r0, 0x89b1, &(0x7f0000000900)={'bond0\x00', @random="0600002000"}) syz_usb_connect(0x1, 0x2d, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0x54, 0x85, 0x92, 0x8, 0x5d1, 0x9005, 0xbdc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xfa, 0x1, 0x10, 0x66, "", [{{0x9, 0x4, 0xf1, 0x1, 0x1, 0xc9, 0xb9, 0x55, 0x4, [], [{{0x9, 0x5, 0xa, 0x1f, 0x8, 0x1, 0x2, 0xfc}}]}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) 5.004385828s ago: executing program 1 (id=1321): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000100), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000140), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, r3, 0x6a98047402e98331}, 0x14}}, 0x40010) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000340)="0f01c80f205066b98200004066b80000000066ba000000000f3067660f5e00baf80c66b8e4844e8866efbafc0c66ed660f090f01d764660fdceff30f0966f3aa", 0x40}], 0x1, 0x72, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_clone3(&(0x7f00000003c0)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x9}, 0x58) mq_notify(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x1f, 0x2, @thr={&(0x7f0000000500)="a49c54f9a3c2464e51636b15b4f98dead9246ecbeb0825d2b891ead03eddc214bd38b88fc32e1b8f4eb6f3b68e46527c882333529d0e4fa1ff59235f061e8083e719f34911fb336490d9453b69c00a99f0494968cf15f264c45eac8c8424f3e8509788fc0837f2315bca75a136f0d663c546b8bd40c336b106257f7735e2", &(0x7f0000000580)}}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000680)={[0x4, 0x1000000000, 0x0, 0x10043, 0x2000001, 0x3, 0x2004cb, 0x2, 0x3c00000000000000, 0x9, 0x9, 0x9, 0x403, 0x0, 0x7], 0x25000, 0x202}) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="100000000100bd0401000000", @ANYRES32, @ANYBLOB="140000000100000001000000", @ANYRES32, @ANYRES32], 0x24, 0x810}}], 0x1, 0x4048050) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket$inet6(0xa, 0x4, 0x200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={0xffffffffffffffff, 0x0, 0x5b, 0x0, &(0x7f0000000880)="e30080670000ec67838717bd86dde148f0630962bb87dd44fe42904bcee14db4241544716b9ea42231ed3373a3e29953e3bb017d9c1fd05dacf5bb80b4b7ee0fae7aea53492b38978defbb39a1ffa8a175e8257c3c5386795f7aaa", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) r7 = syz_open_dev$sg(&(0x7f0000000900), 0x6f5e, 0x0) ioctl$FIBMAP(r7, 0x1, &(0x7f0000000940)=0x85) 4.470057826s ago: executing program 4 (id=1322): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) ftruncate(r0, 0xc17a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$key(0xf, 0x3, 0x2) r4 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80) ioctl$SNDRV_PCM_IOCTL_UNLINK(r4, 0x4161, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) io_setup(0x5, &(0x7f0000000000)=0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f00000005c0)={0x2, "42fce3753785050006be000000000000000000560000000000000800", 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r7, 0xa004}], 0x1, 0x47) io_submit(r5, 0x1, &(0x7f0000000480)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r8, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x2) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x7, &(0x7f0000bf7000/0x4000)=nil, 0x5) 4.240597263s ago: executing program 0 (id=1323): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) socket$inet(0xa, 0x801, 0x84) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x18, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) semget$private(0x0, 0x4000000009, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@newlink={0x38, 0x10, 0x439, 0xffffffff, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4044000) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0x6, 0xffff}, {0x2, 0x6}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x40) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xfff3}, {}, {0x7, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) 3.236267169s ago: executing program 3 (id=1324): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2}, 0x18) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="b4000006004f709b905d6f66b8261f87", 0x10}], 0x1) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000001fc0)={0x601, 0x7, &(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001100)=[0x4, 0x77], &(0x7f0000001f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001f80)=[0x100000001, 0x2, 0x59, 0x3, 0x7ff], 0x0, 0x2000}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) write$cgroup_devices(r3, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x9) syz_open_dev$vim2m(&(0x7f00000003c0), 0x800, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000400)) r4 = syz_open_dev$vim2m(&(0x7f00000004c0), 0x800, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$video(&(0x7f0000000500), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000540)={0xa, 0x0, 0x3, {0xa, 0x1000, 0x4, 0x2}}) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000580)={0x2, @win={{0x6, 0x1, 0x1ff, 0x70}, 0x5, 0x4, 0x0, 0x2, 0x0, 0x1}}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet(r6, &(0x7f0000000680)=[{{&(0x7f0000000740)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000780)=[{&(0x7f00000007c0)="21c9c9cbb032ac38532d136331177bac", 0x10}], 0x1, &(0x7f0000000800)}}, {{0x0, 0x0, &(0x7f0000000840)}}, {{&(0x7f0000000880)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000900)="7dd6", 0x2}], 0x1}}], 0x3, 0x20000041) rseq(0x0, 0x53, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={0x0, 0x0, 0x4, 0x8, 0x6}, 0x2}, 0x20, 0x1, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x401, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xee) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000100)={0x67, @multicast1, 0x4e20, 0x1, 'rr\x00', 0x21, 0xfff, 0x6a}, 0x2c) 2.795450395s ago: executing program 3 (id=1325): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) socket$inet6(0xa, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100037040400"/20, @ANYRES32, @ANYBLOB="8304050000000000380012800b000100697036746e6c000028000280"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001800dd8d0900000000000000020000fc0000000500000000060015000200000014001680100008800c000380050001"], 0x38}}, 0x0) 2.293267045s ago: executing program 3 (id=1326): r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file1\x00', 0x0, 0x18f) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000900)=r2, 0x4) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) close(0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0xe7) semctl$SETVAL(0x0, 0x3, 0x10, 0x0) mmap(&(0x7f00001c0000/0x2000)=nil, 0x2000, 0x200000d, 0x12, r4, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)=@flushpolicy={0x38, 0x12, 0x105, 0x0, 0x0, "", [@address_filter={0x28, 0x1a, {@in6=@remote, @in=@multicast2, 0x2, 0x6, 0xd1}}]}, 0x38}}, 0x4000800) sendmsg$NFT_BATCH(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x29c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) write$P9_RLOCK(r0, &(0x7f0000000040)={0x8, 0x35, 0x1, 0x1}, 0x8) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='comm\x00') lseek(r7, 0x9, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180015000600142603600e120800110000000401a8001600a400208003000080036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9e04000000ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x200000000000033b}, 0x810) add_key(&(0x7f0000000680)='pkcs7_test\x00', 0x0, &(0x7f0000000800)="10130602a2c1cda427021111b4652a7698cc5d90c4", 0x15, 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8924, &(0x7f00000000c0)={'batadv0\x00', 0x1}) gettid() syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x40, 0x43, 0x32, 0x40, 0x1608, 0x305, 0x98de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x95, 0x10, 0x99, "", [{{0x9, 0x4, 0x44, 0xd, 0x0, 0x21, 0x81, 0x5f, 0x8}}]}}]}}, 0x0) 756.019294ms ago: executing program 1 (id=1327): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_NOTIFY_RESEND(r0, &(0x7f0000002ec0)={0x14, 0x7, 0x2000000}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mprotect(&(0x7f000015e000/0x1000)=nil, 0x1000, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = fsopen(0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0cc5605, &(0x7f0000000380)={0x2, @vbi={0xd12, 0x7, 0x3, 0x32314d56, [0x1, 0x2], [0x7fff], 0x1}}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x4050) fsmount(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r4, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r4, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_bulk={0x3, {0x7}, 0x7, 0x40, &(0x7f0000000280), 0x0, 0x1, 0xfffffffa, 0x2, 0xfffffffc, 0x8, &(0x7f0000000480)}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12001, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004082, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r6 = io_uring_setup(0x344c, &(0x7f0000000080)={0x0, 0xbf6e, 0x0, 0x7}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x113}, 0x20) dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x50, r6, 0xa000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ioctl$SIOCSIFHWADDR(r1, 0x8907, 0x0) 300.376371ms ago: executing program 2 (id=1328): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r2 = fsopen(&(0x7f0000000240)='xfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f00000001c0)='source', 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x800, 0x301002) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) writev(r5, &(0x7f0000000c00)=[{&(0x7f0000000940)="6a08879f", 0x4}, {0x0}], 0x2) syz_open_procfs(0xffffffffffffffff, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000380), 0x1fe, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xbffffe0000000001, 0xfa11, 0xfffeffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x5, 0x180, 0x2000000000000004, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x4, 0xfffffffbfffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000006d80)=""/4082, 0xff2}, {&(0x7f0000001340)=""/27, 0x1b}, {0x0, 0xf}], 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) 141.920617ms ago: executing program 0 (id=1329): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x0, 0x9}, 0x10}, 0x94) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) fsopen(&(0x7f0000000680)='ext3\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x5) r0 = msgget$private(0x0, 0x6) msgrcv(r0, 0x0, 0x0, 0x0, 0x2000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x80) r2 = open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46eaf) r3 = syz_clone3(&(0x7f0000000480)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = landlock_create_ruleset(&(0x7f0000000500)={0x0, 0x3}, 0x10, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000540)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x7) landlock_restrict_self(r4, 0xe) landlock_restrict_self(r4, 0xa) r6 = landlock_create_ruleset(&(0x7f00000005c0)={0x2fbd, 0x1}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) tgkill(r3, r3, 0x21) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='loginuid\x00') preadv(r7, &(0x7f0000000700)=[{0x0}], 0x1, 0xffffffff, 0x6653) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 0s ago: executing program 3 (id=1330): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, 0x0, 0x0, 0x4000000) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000abe92710b1134200fe76010203010902240001040000000904090202c918020009050402100000fa000905840240"], 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000001b00)={0xbf8, 0x9, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000230010000100"/19, @ANYRES32=r4, @ANYBLOB="00000000000000002c001a80080002800400208018000a8014000700fc0100000000000000000000000000000800028004000180"], 0x4c}}, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0x5, "d52c2000000102000300ecffffff0100"}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x10000, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r5, 0xc0045009, &(0x7f00000002c0)=0xe1) r6 = syz_open_pts(r2, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000080)=0x6) ioctl$TCFLSH(r6, 0x540b, 0x2) syz_emit_ethernet(0x16, 0x0, 0x0) r7 = syz_open_dev$sndpcmc(0x0, 0x3, 0x100) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r7, 0xc0984124, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) sendmmsg$inet(r0, 0x0, 0x0, 0x4000900) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580), 0x0, 0x10008095, 0x0, 0x0) kernel console output (not intermixed with test programs): umber=3 [ 489.915211][ T8051] usb 3-1: Product: syz [ 489.915227][ T8051] usb 3-1: Manufacturer: syz [ 489.915243][ T8051] usb 3-1: SerialNumber: syz [ 489.947278][ T9832] batman_adv: batadv0: Interface deactivated: macvlan2 [ 489.947342][ T9832] batman_adv: batadv0: Removing interface: macvlan2 [ 489.970117][ T8051] usb 3-1: config 0 descriptor?? [ 489.991968][ T8051] streamzap 3-1:0.0: streamzap_probe: endpoint doesn't match input device 0203 [ 489.991970][ T8033] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 489.994424][ T9832] batman_adv: batadv0: Interface deactivated: veth0 [ 489.994450][ T9832] batman_adv: batadv0: Removing interface: veth0 [ 489.997208][ T8033] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 489.997248][ T8033] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 490.068730][ T8033] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.068757][ T8033] usb 2-1: Product: syz [ 490.068769][ T8033] usb 2-1: Manufacturer: syz [ 490.068781][ T8033] usb 2-1: SerialNumber: syz [ 490.111824][ T8033] usb 2-1: config 0 descriptor?? [ 490.115389][ T9822] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 490.223247][ T24] usb 3-1: USB disconnect, device number 25 [ 490.276508][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 490.361143][ T8033] powermate: unknown product id 0240 [ 490.361162][ T8033] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 490.380671][ T9828] vhci_hcd: connection closed [ 490.382428][ T12] vhci_hcd vhci_hcd.1: stop threads [ 490.382455][ T12] vhci_hcd vhci_hcd.1: release socket [ 490.382672][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 490.436256][ T8033] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input27 [ 490.482793][ C1] powermate: config urb returned -71 [ 490.482948][ C1] powermate: config urb returned -71 [ 490.483114][ C1] powermate: config urb returned -71 [ 490.483299][ C1] powermate: config urb returned -71 [ 490.535830][ T8033] usb 2-1: USB disconnect, device number 39 [ 490.535934][ C1] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 491.106839][ T31] net_ratelimit: 10 callbacks suppressed [ 491.106863][ T31] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 491.106895][ T31] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 491.617006][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 491.617034][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 492.126907][ T31] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 492.126936][ T31] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 492.637470][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 492.637500][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 492.807799][ T8051] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 492.958632][ T8051] usb 1-1: Using ep0 maxpacket: 16 [ 492.959874][ T8051] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 492.968904][ T8051] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 492.969074][ T8051] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.024261][ T8051] usb 1-1: config 0 descriptor?? [ 493.073975][ T8051] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input28 [ 493.147666][ T31] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 493.147719][ T31] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 493.323549][ T4958] bcm5974 1-1:0.0: could not read from device [ 493.368065][ T4958] bcm5974 1-1:0.0: could not read from device [ 493.402532][ T8051] usb 1-1: USB disconnect, device number 36 [ 493.402941][ T4958] bcm5974 1-1:0.0: could not read from device [ 493.434261][ T9869] bcm5974 1-1:0.0: could not read from device [ 494.801704][ T9895] netlink: 20 bytes leftover after parsing attributes in process `syz.1.958'. [ 495.194607][ T9869] batman_adv: batadv0: Adding interface: syzkaller0 [ 495.194634][ T9869] batman_adv: batadv0: Interface activated: syzkaller0 [ 495.755574][ T9904] netlink: 40 bytes leftover after parsing attributes in process `syz.4.960'. [ 495.872981][ T9907] netlink: 28 bytes leftover after parsing attributes in process `syz.4.960'. [ 495.946726][ T9913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.962'. [ 495.952142][ T9908] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 495.952171][ T9908] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 495.955328][ T9908] vhci_hcd vhci_hcd.0: Device attached [ 496.095339][ T9916] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.971'. [ 496.116261][ T9910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.971'. [ 496.116301][ T9910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.971'. [ 496.196631][ T8033] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 496.222099][ T79] net_ratelimit: 31 callbacks suppressed [ 496.222120][ T79] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 496.222146][ T79] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 496.226843][ T8051] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 496.378011][ T8051] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 496.379374][ T8051] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 496.379421][ T8051] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 496.384884][ T8051] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.384911][ T8051] usb 4-1: Product: syz [ 496.384927][ T8051] usb 4-1: Manufacturer: syz [ 496.384944][ T8051] usb 4-1: SerialNumber: syz [ 496.410399][ T8051] usb 4-1: config 0 descriptor?? [ 496.415902][ T9908] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 496.654988][ T8051] powermate: unknown product id 0240 [ 496.655011][ T8051] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 496.660530][ T9914] vhci_hcd: connection reset by peer [ 496.662832][ T49] vhci_hcd vhci_hcd.3: stop threads [ 496.662851][ T49] vhci_hcd vhci_hcd.3: release socket [ 496.662990][ T49] vhci_hcd vhci_hcd.3: disconnect device [ 496.727221][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 496.727258][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 496.780594][ T8051] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input29 [ 496.803824][ C0] powermate: config urb returned -71 [ 496.804009][ C0] powermate: config urb returned -71 [ 496.804248][ C0] powermate: config urb returned -71 [ 496.804442][ C0] powermate: config urb returned -71 [ 496.851112][ T8051] usb 4-1: USB disconnect, device number 26 [ 496.851194][ C0] powermate 4-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 497.236709][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 497.236746][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 497.746766][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 497.746805][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 498.259027][ T1016] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 498.259055][ T1016] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 499.797030][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 500.599891][ T9985] syzkaller0: entered promiscuous mode [ 500.599916][ T9985] syzkaller0: entered allmulticast mode [ 500.673898][ T9985] tipc: Enabled bearer , priority 0 [ 500.857119][ T24] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 500.895157][ T9990] tipc: Resetting bearer [ 500.934656][ T9983] tipc: Resetting bearer [ 500.987749][ T9983] tipc: Disabling bearer [ 501.017378][ T24] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 501.019115][ T24] usb 3-1: config 2 has an invalid interface number: 43 but max is 0 [ 501.019143][ T24] usb 3-1: config 2 has no interface number 0 [ 501.019187][ T24] usb 3-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 501.019206][ T24] usb 3-1: config 2 interface 43 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8 [ 501.019224][ T24] usb 3-1: config 2 interface 43 has no altsetting 0 [ 501.085148][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.085178][ T24] usb 3-1: Product: syz [ 501.085195][ T24] usb 3-1: Manufacturer: syz [ 501.085210][ T24] usb 3-1: SerialNumber: syz [ 501.123793][ T9987] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 501.123950][ T9987] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 501.316780][ T8033] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 501.328244][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.328289][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.357931][ T8349] net_ratelimit: 10 callbacks suppressed [ 501.357954][ T8349] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 501.357981][ T8349] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 501.477890][ T9986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.976'. [ 501.495853][ T9986] netlink: 20 bytes leftover after parsing attributes in process `syz.2.976'. [ 501.600941][ T24] ums-usbat 3-1:2.43: USB Mass Storage device detected [ 501.618993][ T24] ums-usbat 3-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 501.682354][ T24] ums-usbat 3-1:2.43: probe with driver ums-usbat failed with error -5 [ 501.708022][ T24] usb 3-1: USB disconnect, device number 26 [ 501.866700][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 501.866739][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 502.378006][ T31] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 502.378035][ T31] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 502.565934][T10016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.985'. [ 502.899473][ T31] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 502.899512][ T31] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 503.079400][ T8033] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 503.248963][ T8033] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 503.270768][ T8033] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.270799][ T8033] usb 3-1: Product: syz [ 503.270815][ T8033] usb 3-1: Manufacturer: syz [ 503.272458][ T8033] usb 3-1: SerialNumber: syz [ 503.412945][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 503.412973][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 503.762978][ T8033] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 503.763580][ T8033] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 503.811118][ T8033] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 503.834568][ T8033] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 503.856639][ T8033] usb 3-1: USB disconnect, device number 27 [ 504.867569][ T8033] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 505.029051][ T8033] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 505.030806][ T8033] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 505.030849][ T8033] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 505.030879][ T8033] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.078069][T10048] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 505.083861][ T8033] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 505.348919][T10048] fuse: Bad value for 'user_id' [ 505.348935][T10048] fuse: Bad value for 'user_id' [ 505.432273][ T5683] usb 2-1: USB disconnect, device number 40 [ 505.674631][T10048] netlink: 'syz.1.992': attribute type 2 has an invalid length. [ 505.674741][T10048] netlink: 'syz.1.992': attribute type 2 has an invalid length. [ 505.884652][T10028] netlink: 16 bytes leftover after parsing attributes in process `syz.4.987'. [ 506.156682][ T5683] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 506.256820][ T8051] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 506.309266][ T5683] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 506.310651][ T5683] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 506.310686][ T5683] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 506.310725][ T5683] usb 5-1: config 0 has no interface number 0 [ 506.310766][ T5683] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 506.310800][ T5683] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 506.310821][ T5683] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 506.310851][ T5683] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.313882][ T5683] usb 5-1: config 0 descriptor?? [ 506.400386][T10028] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 506.418197][ T8051] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 506.422391][ T8051] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 506.422411][ T8051] usb 4-1: Product: syz [ 506.422422][ T8051] usb 4-1: SerialNumber: syz [ 506.456278][ T8051] usb 4-1: config 0 descriptor?? [ 506.466908][ T31] net_ratelimit: 12 callbacks suppressed [ 506.466930][ T31] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 506.466955][ T31] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 506.707080][ T8051] hso 4-1:0.0: Failed to find BULK eps [ 506.824978][ T5683] usb 5-1: USB disconnect, device number 36 [ 506.964427][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 506.964446][ T30] audit: type=1326 audit(1792716011.594:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10061 comm="syz.0.996" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5f1c code=0x7ffc0000 [ 506.964511][ T30] audit: type=1326 audit(1792716011.594:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10061 comm="syz.0.996" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf7fe5f1c code=0x7ffc0000 [ 506.964597][ T30] audit: type=1326 audit(1792716011.594:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10061 comm="syz.0.996" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5f1c code=0x7ffc0000 [ 506.964680][ T30] audit: type=1326 audit(1792716011.594:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10061 comm="syz.0.996" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf7fe5f1c code=0x7ffc0000 [ 506.965373][ T30] audit: type=1326 audit(1792716011.594:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10061 comm="syz.0.996" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf7fe5f1c code=0x7ffc0000 [ 506.979436][ T30] audit: type=1326 audit(1792716011.614:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10061 comm="syz.0.996" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf7fe5f1c code=0x7ffc0000 [ 506.983070][ T30] audit: type=1326 audit(1792716011.614:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10061 comm="syz.0.996" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf7fe5f1c code=0x7ffc0000 [ 506.990505][ T30] audit: type=1326 audit(1792716011.614:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10061 comm="syz.0.996" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf7fe5f1c code=0x7ffc0000 [ 506.990648][ T30] audit: type=1326 audit(1792716011.624:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10061 comm="syz.0.996" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf7fe5f1c code=0x7ffc0000 [ 506.992073][ T30] audit: type=1326 audit(1792716011.624:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10061 comm="syz.0.996" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf7fe5f1c code=0x7ffc0000 [ 507.000609][ T79] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 507.000634][ T79] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 507.506646][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 507.506687][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 507.604389][ T8033] usb 4-1: USB disconnect, device number 27 [ 508.016978][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 508.017004][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 508.534719][ T8349] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 508.534755][ T8349] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 511.607014][ T49] net_ratelimit: 10 callbacks suppressed [ 511.607045][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 511.607064][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 511.684244][T10125] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1013'. [ 512.047952][ T8033] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 512.116838][ T8349] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 512.116877][ T8349] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 512.198178][ T8033] usb 4-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.00 [ 512.199757][ T8033] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 512.199814][ T8033] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.244875][ T8033] usb 4-1: config 0 descriptor?? [ 512.252441][T10125] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 512.278799][ T8033] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input31 [ 512.512442][ T4958] bcm5974 4-1:0.0: could not read from device [ 512.540087][ T4958] bcm5974 4-1:0.0: could not read from device [ 512.559385][ T8033] usb 4-1: USB disconnect, device number 28 [ 512.628743][ T8349] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 512.628769][ T8349] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 513.138083][ T8349] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 513.138122][ T8349] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 513.176859][ T8051] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 513.358257][ T8051] usb 3-1: Using ep0 maxpacket: 16 [ 513.359935][ T8051] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 513.361545][ T8051] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.361583][ T8051] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.405644][ T8051] usb 3-1: config 0 descriptor?? [ 513.412012][T10142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1018'. [ 513.457295][T10142] syz_tun (unregistering): left allmulticast mode [ 513.479993][ T8051] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input33 [ 513.497326][T10142] tipc: Disabling bearer [ 513.553093][T10145] atomic_op ffff88802cd2d9e0 conn xmit_atomic 0000000000000000 [ 513.599026][T10145] vivid-004: ================= START STATUS ================= [ 513.599081][T10145] vivid-004: Radio HW Seek Mode: Bounded [ 513.599137][T10145] vivid-004: Radio Programmable HW Seek: false [ 513.599153][T10145] vivid-004: RDS Rx I/O Mode: Block I/O [ 513.599197][T10145] vivid-004: Generate RBDS Instead of RDS: false [ 513.599219][T10145] vivid-004: RDS Reception: true [ 513.599263][T10145] vivid-004: RDS Program Type: 0 inactive [ 513.599302][T10145] vivid-004: RDS PS Name: inactive [ 513.599335][T10145] vivid-004: RDS Radio Text: inactive [ 513.599363][T10145] vivid-004: RDS Traffic Announcement: false inactive [ 513.599389][T10145] vivid-004: RDS Traffic Program: false inactive [ 513.599414][T10145] vivid-004: RDS Music: false inactive [ 513.599441][T10145] vivid-004: ================== END STATUS ================== [ 513.690969][ T8349] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 513.691001][ T8349] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 513.725861][T10146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1019'. [ 513.802464][T10138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.822631][T10138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.754841][ T79] net_ratelimit: 10 callbacks suppressed [ 516.754865][ T79] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 516.754891][ T79] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 516.872249][ T4958] bcm5974 3-1:0.0: could not read from device [ 516.935296][ T8051] usb 3-1: USB disconnect, device number 28 [ 517.270323][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 517.270352][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 517.776676][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 517.776705][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 518.286760][ T8349] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 518.286791][ T8349] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 518.800167][ T8349] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 518.800222][ T8349] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 519.126549][T10206] binder: 10190:10206 ioctl c0306201 800003c0 returned -14 [ 519.146651][ T8033] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 520.263725][T10210] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 520.263748][T10210] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 520.291040][T10212] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 520.291386][T10212] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 520.291545][T10212] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 520.375860][T10212] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 520.376234][T10212] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 520.511599][T10210] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 520.511626][T10210] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 520.565693][T10210] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 520.565722][T10210] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 520.629204][T10210] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 520.629232][T10210] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 520.653745][ T8049] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 520.655514][T10210] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 520.655562][T10210] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 520.877483][ T8049] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 520.918605][ T8049] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 520.918637][ T8049] usb 2-1: Product: syz [ 520.918653][ T8049] usb 2-1: SerialNumber: syz [ 520.964939][ T8049] usb 2-1: config 0 descriptor?? [ 521.857279][ T1120] net_ratelimit: 10 callbacks suppressed [ 521.857305][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 521.857359][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 522.368682][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 522.368711][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 522.876736][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 522.876776][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 523.392740][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 523.392767][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 523.581583][ T8033] usb 2-1: USB disconnect, device number 41 [ 523.897853][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 523.897879][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 524.017612][T10259] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1045'. [ 524.044067][T10252] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 524.044091][T10252] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 524.045251][T10252] vhci_hcd vhci_hcd.0: Device attached [ 524.306791][ T8033] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 524.316656][ T8049] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 524.469236][ T8049] usb 1-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 524.485463][ T8049] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 524.485500][ T8049] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 524.563755][ T8049] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.563787][ T8049] usb 1-1: Product: syz [ 524.563804][ T8049] usb 1-1: Manufacturer: syz [ 524.563820][ T8049] usb 1-1: SerialNumber: syz [ 524.642328][ T8049] usb 1-1: config 0 descriptor?? [ 524.659103][T10252] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 525.028242][T10260] vhci_hcd: connection reset by peer [ 525.035839][ T8049] powermate: unknown product id 0240 [ 525.035880][ T8049] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 525.059976][ T49] vhci_hcd vhci_hcd.0: stop threads [ 525.059997][ T49] vhci_hcd vhci_hcd.0: release socket [ 525.060148][ T49] vhci_hcd vhci_hcd.0: disconnect device [ 525.120592][ T8049] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input34 [ 525.197807][ C0] powermate: config urb returned -71 [ 525.198020][ C0] powermate: config urb returned -71 [ 525.198229][ C0] powermate: config urb returned -71 [ 525.198427][ C0] powermate: config urb returned -71 [ 525.308535][ T8049] usb 1-1: USB disconnect, device number 38 [ 525.308634][ C0] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 525.632947][T10269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1047'. [ 526.956958][ T13] net_ratelimit: 10 callbacks suppressed [ 526.956981][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 526.957008][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 527.477301][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 527.477326][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 527.996590][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 527.996625][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 528.066639][ T5683] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 528.094669][T10300] netlink: 276 bytes leftover after parsing attributes in process `syz.3.1056'. [ 528.217435][ T5683] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 528.222100][ T5683] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 528.222119][ T5683] usb 5-1: Product: syz [ 528.222130][ T5683] usb 5-1: SerialNumber: syz [ 528.224967][ T5683] usb 5-1: config 0 descriptor?? [ 528.386997][ T8049] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 528.507101][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 528.507129][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 528.557665][ T8049] usb 4-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 0.00 [ 528.577264][ T8049] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 528.577301][ T8049] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 528.619636][ T8049] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.619659][ T8049] usb 4-1: Product: syz [ 528.619670][ T8049] usb 4-1: Manufacturer: syz [ 528.619680][ T8049] usb 4-1: SerialNumber: syz [ 528.661372][ T8049] kalmia 4-1:1.0: probe with driver kalmia failed with error -22 [ 528.925884][ T8029] usb 4-1: USB disconnect, device number 29 [ 529.017262][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 529.017290][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 529.412320][ T8033] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 530.283727][T10326] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1062'. [ 530.837021][ T5683] usb 5-1: USB disconnect, device number 37 [ 530.957936][ T8049] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 531.107422][ T8049] usb 4-1: Using ep0 maxpacket: 8 [ 531.110150][ T8049] usb 4-1: unable to get BOS descriptor or descriptor too short [ 531.110187][ T8049] usb 4-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 531.111497][ T8049] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 248, changing to 7 [ 531.115130][ T8049] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.115158][ T8049] usb 4-1: Product: syz [ 531.115176][ T8049] usb 4-1: Manufacturer: syz [ 531.115191][ T8049] usb 4-1: SerialNumber: syz [ 531.436350][T10331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.450269][T10331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.646121][ T8049] snd-ua101 4-1:1.1: invalid format type [ 531.646206][ T8049] snd-ua101 4-1:1.0: invalid num_altsetting [ 531.745202][ T8049] usb 4-1: USB disconnect, device number 30 [ 531.779940][ T9831] udevd[9831]: setting mode of /dev/bus/usb/004/030 to 020664 failed: No such file or directory [ 531.780030][ T9831] udevd[9831]: setting owner of /dev/bus/usb/004/030 to uid=0, gid=0 failed: No such file or directory [ 532.076612][ T79] net_ratelimit: 11 callbacks suppressed [ 532.076637][ T79] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 532.076678][ T79] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 532.586669][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 532.586706][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 533.096721][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 533.096750][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 533.607779][ T79] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 533.607805][ T79] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 533.650578][T10361] netlink: 'syz.0.1075': attribute type 10 has an invalid length. [ 533.669187][T10361] netlink: 'syz.0.1075': attribute type 10 has an invalid length. [ 533.858215][T10360] batman_adv: batadv0: Adding interface: macvlan2 [ 533.859210][T10360] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 533.859249][T10360] batman_adv: batadv0: Interface activated: macvlan2 [ 533.925257][T10360] batadv0: mtu less than device minimum [ 533.926928][T10360] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 533.979440][T10365] batadv_slave_1: entered promiscuous mode [ 534.021502][T10371] batadv_slave_1: left promiscuous mode [ 534.956806][ T8033] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 535.117405][ T8033] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 535.136310][ T8033] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.136333][ T8033] usb 1-1: Product: syz [ 535.136344][ T8033] usb 1-1: Manufacturer: syz [ 535.136355][ T8033] usb 1-1: SerialNumber: syz [ 535.167266][ T8033] usb 1-1: config 0 descriptor?? [ 535.483838][T10384] ptrace attach of "ci-upstream-kasan-gce-386/syz-executor exec"[5624] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[10384] [ 536.263654][ T8033] usb 1-1: non-Atmel transceiver xxxx0000 [ 536.421942][T10396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1086'. [ 536.463750][ T8033] usb 1-1: Firmware version (0.0) predates our first public release. [ 536.463777][ T8033] usb 1-1: Please update to version 0.2 or newer [ 536.464358][ T8033] usb 1-1: atusb_probe: initialization failed, error = -19 [ 536.506740][ T8033] usb 1-1: USB disconnect, device number 39 [ 537.218433][ T1120] net_ratelimit: 30 callbacks suppressed [ 537.218457][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 537.218481][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 537.728873][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 537.728902][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 538.102520][T10416] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 538.102552][T10416] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 538.104091][T10416] vhci_hcd vhci_hcd.0: Device attached [ 538.249408][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 538.249435][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 538.346962][ T8049] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 538.398990][ T24] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 538.559558][ T24] usb 5-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 538.561708][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 538.561732][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 538.577014][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.577083][ T24] usb 5-1: Product: syz [ 538.577122][ T24] usb 5-1: Manufacturer: syz [ 538.577163][ T24] usb 5-1: SerialNumber: syz [ 538.650323][ T24] usb 5-1: config 0 descriptor?? [ 538.653432][T10416] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 538.767178][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 538.767226][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 538.791326][T10435] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1093'. [ 538.889563][ T24] powermate: unknown product id 0240 [ 538.889583][ T24] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 538.918533][T10423] vhci_hcd: connection reset by peer [ 538.920310][ T1120] vhci_hcd vhci_hcd.4: stop threads [ 538.920557][ T1120] vhci_hcd vhci_hcd.4: release socket [ 538.942434][ T24] input: Griffin SoundKnob as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input35 [ 538.970785][ C1] powermate: config urb returned -71 [ 538.970962][ C1] powermate: config urb returned -71 [ 538.971165][ C1] powermate: config urb returned -71 [ 538.971354][ C1] powermate: config urb returned -71 [ 539.002138][ T1120] vhci_hcd vhci_hcd.4: disconnect device [ 539.016138][T10426] bridge0: port 4(syz_tun) entered disabled state [ 539.056751][ T24] usb 5-1: USB disconnect, device number 38 [ 539.056867][ C1] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 539.148266][T10426] bridge0: port 6(team0) entered disabled state [ 539.148987][T10426] bridge0: port 5(bond0) entered disabled state [ 539.149656][T10426] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.150179][T10426] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.276923][ T79] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 539.276952][ T79] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 539.338561][T10426] batman_adv: batadv0: Interface deactivated: dummy0 [ 539.684297][T10426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 539.935002][T10426] vlan2: left promiscuous mode [ 539.935021][T10426] bridge0: left promiscuous mode [ 540.070037][T10426] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 540.728982][ T8033] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 540.887451][ T8033] usb 5-1: unable to get BOS descriptor or descriptor too short [ 540.887498][ T8033] usb 5-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 540.896203][ T8033] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 540.896395][ T8033] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 540.929234][ T8033] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 540.929269][ T8033] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 540.965847][ T8033] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.965868][ T8033] usb 5-1: Product: syz [ 540.965880][ T8033] usb 5-1: Manufacturer: syz [ 540.965891][ T8033] usb 5-1: SerialNumber: syz [ 541.455808][ T8033] usb 5-1: USB disconnect, device number 39 [ 541.633232][T10458] udevd[10458]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 541.727440][ T5683] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 541.879693][ T5683] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 541.907438][ T5683] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.907473][ T5683] usb 2-1: Product: syz [ 541.907485][ T5683] usb 2-1: Manufacturer: syz [ 541.907495][ T5683] usb 2-1: SerialNumber: syz [ 542.180424][ T5683] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 542.371706][ T12] net_ratelimit: 10 callbacks suppressed [ 542.371732][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 542.371760][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 542.878223][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 542.878274][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 543.328710][ T5683] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 543.329047][ T5683] ath9k_htc: Failed to initialize the device [ 543.398524][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 543.398550][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 543.486690][ T8049] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 543.514142][ T5683] usb 2-1: ath9k_htc: USB layer deinitialized [ 543.908427][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 543.908492][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 544.416872][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 544.416920][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 544.701240][ T8049] usb 2-1: USB disconnect, device number 42 [ 545.145853][T10480] ptrace attach of "ci-upstream-kasan-gce-386/syz-executor exec"[5625] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[10480] [ 545.796009][T10493] syzkaller0: entered promiscuous mode [ 545.796039][T10493] syzkaller0: entered allmulticast mode [ 545.817138][T10491] ip6_vti0: left promiscuous mode [ 545.835084][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.835138][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.835179][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.835220][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.467866][T10503] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 546.988527][T10510] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1111'. [ 547.486935][ T12] net_ratelimit: 10 callbacks suppressed [ 547.486955][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 547.486974][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 548.007925][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 548.007954][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 548.526827][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 548.526858][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 549.045788][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 549.045827][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 549.547782][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 549.547811][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 549.598717][ T8033] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 549.746879][ T8033] usb 2-1: Using ep0 maxpacket: 16 [ 549.748516][ T8033] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 549.752107][ T8033] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 549.752134][ T8033] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 549.805065][ T8033] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.805102][ T8033] usb 2-1: Product: syz [ 549.805115][ T8033] usb 2-1: Manufacturer: syz [ 549.805125][ T8033] usb 2-1: SerialNumber: syz [ 549.894543][ T8033] usb 2-1: 0:2 : does not exist [ 550.121371][ T8033] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 550.325302][ T8033] usb 2-1: USB disconnect, device number 43 [ 550.480951][ T9831] udevd[9831]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 551.456812][ T5683] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 551.607533][ T5683] usb 1-1: Using ep0 maxpacket: 32 [ 551.608297][ T5683] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 551.609828][ T5683] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 551.645091][ T5683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.645113][ T5683] usb 1-1: Product: syz [ 551.645124][ T5683] usb 1-1: Manufacturer: syz [ 551.645135][ T5683] usb 1-1: SerialNumber: syz [ 551.682321][ T5683] usb 1-1: config 0 descriptor?? [ 551.685289][T10538] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 551.705462][ T5683] hub 1-1:0.0: bad descriptor, ignoring hub [ 551.705482][ T5683] hub 1-1:0.0: probe with driver hub failed with error -5 [ 551.738163][ T5683] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input36 [ 552.637491][ T8349] net_ratelimit: 10 callbacks suppressed [ 552.637516][ T8349] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 552.637543][ T8349] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 552.899148][T10549] syz_tun: entered allmulticast mode [ 552.953647][T10538] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 552.953673][T10538] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 552.955696][T10538] vhci_hcd vhci_hcd.0: Device attached [ 553.116524][T10550] vhci_hcd: connection closed [ 553.122972][ T8349] vhci_hcd vhci_hcd.0: stop threads [ 553.123002][ T8349] vhci_hcd vhci_hcd.0: release socket [ 553.123068][ T8349] vhci_hcd vhci_hcd.0: disconnect device [ 553.127103][ T5683] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 553.148855][ T8349] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 553.148892][ T8349] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 553.194553][ T8033] usb 1-1: USB disconnect, device number 40 [ 553.194689][ C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 553.659636][ T8349] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 553.659665][ T8349] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 554.177152][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 554.177187][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 554.422464][T10556] batman_adv: batadv0: Interface deactivated: dummy0 [ 554.699071][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 554.699098][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 554.947368][T10556] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 554.982708][T10556] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 555.308728][T10556] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 555.482647][T10556] ip6gre1: left allmulticast mode [ 555.503004][T10556] batman_adv: batadv0: Interface deactivated: macvlan2 [ 555.525230][T10556] syzkaller0: left promiscuous mode [ 555.525249][T10556] syzkaller0: left allmulticast mode [ 555.547651][ T12] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.547691][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.547733][ T12] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.547763][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.547802][ T12] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.547831][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.643141][ T8349] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.643277][ T8349] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.692710][T10549] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1123'. [ 555.957005][ T8049] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 556.109549][ T8049] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 556.114042][ T8049] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 556.114076][ T8049] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 556.114091][ T8049] usb 3-1: config 0 has no interface number 0 [ 556.114120][ T8049] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 556.114138][ T8049] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 556.114157][ T8049] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 556.114187][ T8049] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.198154][ T8049] usb 3-1: config 0 descriptor?? [ 556.200259][T10549] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 556.662224][T10548] syz_tun: left allmulticast mode [ 556.682710][ T8049] usb 3-1: USB disconnect, device number 29 [ 557.771913][ T8349] net_ratelimit: 10 callbacks suppressed [ 557.771931][ T8349] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 557.771949][ T8349] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 558.276689][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 558.276727][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 558.792798][ T8349] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 558.792827][ T8349] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 559.125602][T10609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1135'. [ 559.137591][T10609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1135'. [ 559.306958][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 559.306984][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 559.819648][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 559.819675][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 559.842626][ T8029] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 560.038638][ T8029] usb 4-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.00 [ 560.039704][ T8029] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.039754][ T8029] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.075950][ T8029] usb 4-1: config 0 descriptor?? [ 560.635401][ T8029] hid (null): invalid report_size -292171435 [ 560.669060][ T8029] wacom 0003:056A:0318.0012: invalid report_size -292171435 [ 560.669080][ T8029] wacom 0003:056A:0318.0012: item 0 4 1 7 parsing failed [ 560.669549][ T8029] wacom 0003:056A:0318.0012: parse failed [ 560.669625][ T8029] wacom 0003:056A:0318.0012: probe with driver wacom failed with error -22 [ 560.995931][ T8029] usb 4-1: USB disconnect, device number 31 [ 561.514045][ T30] kauditd_printk_skb: 491 callbacks suppressed [ 561.514063][ T30] audit: type=1800 audit(1792716066.144:1048): pid=10633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1143" name="/" dev="fuse" ino=1 res=0 errno=0 [ 562.778416][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.778463][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.883224][ T49] net_ratelimit: 10 callbacks suppressed [ 562.883241][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 562.883258][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 563.386682][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 563.386711][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 563.896705][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 563.896732][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 564.406733][ T8349] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 564.406762][ T8349] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 564.708362][T10675] batman_adv: batadv0: Interface deactivated: dummy0 [ 564.927210][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 564.927250][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 565.425768][T10675] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.235810][T10675] vlan0: left promiscuous mode [ 566.235831][T10675] bridge0: left promiscuous mode [ 566.318340][T10686] macvlan0: entered promiscuous mode [ 566.318542][T10686] netlink: 'syz.0.1151': attribute type 1 has an invalid length. [ 566.318560][T10686] netlink: 'syz.0.1151': attribute type 2 has an invalid length. [ 566.322874][ T8349] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.322910][ T8349] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.322937][ T8349] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.322963][ T8349] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.880765][T10708] netlink: 'syz.4.1155': attribute type 1 has an invalid length. [ 566.880792][T10708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1155'. [ 567.134631][T10716] binder: 10692:10716 ioctl c0306201 800003c0 returned -14 [ 567.848099][T10720] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1158'. [ 568.006796][ T8349] net_ratelimit: 10 callbacks suppressed [ 568.006828][ T8349] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 568.006846][ T8349] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 568.527322][ T8349] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 568.527349][ T8349] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 569.037210][ T8349] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 569.037238][ T8349] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 569.549363][ T8349] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 569.549390][ T8349] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 569.746800][ T5676] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 569.896639][ T5676] usb 1-1: Using ep0 maxpacket: 8 [ 569.897431][ T5676] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 569.902285][ T5676] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.902313][ T5676] usb 1-1: Product: syz [ 569.902327][ T5676] usb 1-1: Manufacturer: syz [ 569.902343][ T5676] usb 1-1: SerialNumber: syz [ 569.952270][ T5676] usb 1-1: config 0 descriptor?? [ 569.974887][ T5676] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 569.974944][ T5676] pctv452e: pctv452e_power_ctrl: 1 [ 569.974944][ T5676] [ 569.975043][ T5676] usb 1-1: selecting invalid altsetting 3 [ 569.975053][ T5676] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 569.975053][ T5676] [ 569.975086][ T5676] dvb-usb: bulk message failed: -22 (5/0) [ 570.039718][ T5676] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 570.058023][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 570.058048][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 570.087897][ T5676] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 570.087944][ T5676] usb 1-1: media controller created [ 570.088472][ T5676] dvb-usb: bulk message failed: -22 (8/0) [ 570.088485][ T5676] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 570.088541][ T5676] dvb-usb: MAC address reading failed. [ 570.141983][ T5676] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 570.186295][T10730] dvb-usb: bulk message failed: -22 (11/0) [ 570.186314][T10730] pctv452e: I2C error -22; AA 02 00 04 00 -> aa 02 31 07 00 04 00 [ 570.368762][ T5676] DVB: Unable to find symbol stb0899_attach() [ 570.368782][ T5676] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 570.496616][ T5676] rc_core: IR keymap rc-tt-1500 not found [ 570.496634][ T5676] Registered IR keymap rc-empty [ 570.498125][ T5676] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 570.501322][ T5676] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input38 [ 570.544344][ T5676] dvb-usb: schedule remote query interval to 100 msecs. [ 570.544365][ T5676] pctv452e: pctv452e_power_ctrl: 0 [ 570.544365][ T5676] [ 570.544374][ T5676] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 570.647281][ T5676] dvb-usb: bulk message failed: -22 (4/0) [ 570.647310][ T5676] dvb-usb: error -22 while querying for an remote control event. [ 570.756878][ T5676] dvb-usb: bulk message failed: -22 (4/0) [ 570.756913][ T5676] dvb-usb: error -22 while querying for an remote control event. [ 570.866561][ T5676] dvb-usb: bulk message failed: -22 (4/0) [ 570.866600][ T5676] dvb-usb: error -22 while querying for an remote control event. [ 570.976625][ T5676] dvb-usb: bulk message failed: -22 (4/0) [ 570.976657][ T5676] dvb-usb: error -22 while querying for an remote control event. [ 571.091809][ T5676] dvb-usb: bulk message failed: -22 (4/0) [ 571.091839][ T5676] dvb-usb: error -22 while querying for an remote control event. [ 571.196662][ T5676] dvb-usb: bulk message failed: -22 (4/0) [ 571.196704][ T5676] dvb-usb: error -22 while querying for an remote control event. [ 571.307292][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 571.307318][ T10] dvb-usb: error -22 while querying for an remote control event. [ 571.362490][T10730] could not allocate digest TFM handle blake2s-160-generic [ 571.380988][T10678] usb 1-1: USB disconnect, device number 41 [ 571.703958][T10678] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 573.148895][ T1120] net_ratelimit: 10 callbacks suppressed [ 573.148915][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 573.148933][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 573.658851][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 573.658878][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 574.177376][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 574.177403][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 574.698266][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 574.698303][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 575.206630][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 575.206669][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 576.608456][ T10] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 576.627956][T10818] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 576.627988][T10818] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 576.628003][T10818] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 576.757526][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 576.758274][ T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 576.760956][ T10] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 576.760986][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 576.761038][ T10] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 576.761068][ T10] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 576.761184][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 576.782964][ T10] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 576.783057][ T10] usb 2-1: Product: syz [ 576.783100][ T10] usb 2-1: Manufacturer: syz [ 576.783141][ T10] usb 2-1: SerialNumber: syz [ 576.867971][ T10] usb 2-1: config 0 descriptor?? [ 576.894211][ T10] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 576.933460][ T10] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 577.417590][ T10] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 577.567443][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 577.569131][ T10] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 577.572752][ T10] usb 5-1: config index 0 descriptor too short (expected 65532, got 18) [ 577.572778][ T10] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 577.572801][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 577.620626][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.620656][ T10] usb 5-1: Product: syz [ 577.620677][ T10] usb 5-1: Manufacturer: syz [ 577.620689][ T10] usb 5-1: SerialNumber: syz [ 577.674749][ T10] r8152-cfgselector 5-1: Unknown version 0x0000 [ 577.674778][ T10] r8152-cfgselector 5-1: config 0 descriptor?? [ 578.277114][ T49] net_ratelimit: 10 callbacks suppressed [ 578.277160][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 578.277187][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 578.788534][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 578.788587][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 579.298489][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 579.298526][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 579.361934][ T5676] usb 2-1: USB disconnect, device number 44 [ 579.361995][ C1] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 579.445159][ T5676] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 579.527795][ T10] r8152-cfgselector 5-1: Unknown version 0x0000 [ 579.528323][ T10] r8152-cfgselector 5-1: No union descriptors [ 579.580984][ T10] r8152-cfgselector 5-1: USB disconnect, device number 40 [ 579.816369][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 579.816397][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 579.900930][T10837] syzkaller1: entered promiscuous mode [ 579.900950][T10837] syzkaller1: entered allmulticast mode [ 580.336973][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 580.337000][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 580.488258][T10678] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 580.638008][T10678] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 580.657853][T10678] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.657882][T10678] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 580.657919][T10678] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.702859][T10678] usb 2-1: config 0 descriptor?? [ 581.346962][T10861] macvlan0: entered promiscuous mode [ 581.347157][T10861] netlink: 'syz.3.1193': attribute type 1 has an invalid length. [ 581.347176][T10861] netlink: 'syz.3.1193': attribute type 2 has an invalid length. [ 581.353249][T10866] tap0: tun_chr_ioctl cmd 1074025677 [ 581.353386][T10866] tap0: linktype set to 769 [ 583.406758][ T8349] net_ratelimit: 10 callbacks suppressed [ 583.406777][ T8349] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 583.406795][ T8349] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 583.515506][ T10] usb 2-1: USB disconnect, device number 45 [ 583.916652][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 583.916690][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 584.276689][ T10] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 584.431325][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 584.431363][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 584.436930][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 584.946792][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 584.946820][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 585.064229][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 585.064282][ T10] usb 2-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=1d.64 [ 585.083940][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 585.083988][ T10] usb 2-1: can't read configurations, error -71 [ 585.456872][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 585.456899][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 585.682223][ T49] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 585.727339][T10900] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 586.349830][T10928] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1201'. [ 586.349852][T10928] veth0_to_bond: default FDB implementation only supports local addresses [ 587.128141][T10678] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 587.257547][T10678] usb 2-1: device descriptor read/64, error -71 [ 587.521535][T10678] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 587.677411][T10678] usb 2-1: device descriptor read/64, error -71 [ 587.706661][ T8034] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 587.739097][ T8029] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 587.787131][T10678] usb usb2-port1: attempt power cycle [ 587.860000][ T8034] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 587.861108][ T8034] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 587.861133][ T8034] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 587.861161][ T8034] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.901077][ T8029] usb 1-1: Using ep0 maxpacket: 32 [ 587.917955][ T8029] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 587.921479][T10943] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 587.926231][ T8029] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 587.926276][ T8029] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 587.926305][ T8029] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 587.926325][ T8029] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 587.926344][ T8029] usb 1-1: config 0 interface 0 has no altsetting 0 [ 588.019029][ T8029] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 588.019063][ T8029] usb 1-1: Product: syz [ 588.019074][ T8029] usb 1-1: Manufacturer: syz [ 588.019085][ T8029] usb 1-1: SerialNumber: syz [ 588.021812][ T8034] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 588.074354][ T8029] usb 1-1: config 0 descriptor?? [ 588.124776][ T8029] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 588.148100][T10678] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 588.166874][ T8029] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 588.174856][T10678] usb 2-1: device descriptor read/8, error -71 [ 588.262621][T10943] fuse: Bad value for 'user_id' [ 588.262642][T10943] fuse: Bad value for 'user_id' [ 588.406079][ T8034] usb 5-1: USB disconnect, device number 41 [ 588.416630][T10678] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 588.450240][T10678] usb 2-1: device descriptor read/8, error -71 [ 588.546774][T10921] net_ratelimit: 10 callbacks suppressed [ 588.546824][T10921] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 588.546852][T10921] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 588.570293][T10678] usb usb2-port1: unable to enumerate USB device [ 588.732911][T10943] netlink: 'syz.4.1206': attribute type 2 has an invalid length. [ 588.732957][T10943] netlink: 'syz.4.1206': attribute type 2 has an invalid length. [ 589.056647][T10920] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 589.056676][T10920] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 589.572747][T10921] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 589.572782][T10921] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 589.753228][T10953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1218'. [ 589.875563][ T5610] usb 1-1: USB disconnect, device number 42 [ 589.875718][ C0] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 589.924233][ T5610] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 590.077652][T10921] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 590.077687][T10921] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 590.598734][T10919] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 590.598761][T10919] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 593.535552][T10981] ovs-dp0: entered promiscuous mode [ 593.657022][T10921] net_ratelimit: 10 callbacks suppressed [ 593.657042][T10921] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 593.657059][T10921] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 594.166905][T10918] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 594.166944][T10918] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 594.678122][T10918] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 594.678150][T10918] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 595.189851][T10919] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 595.189878][T10919] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 595.696657][T10919] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 595.696696][T10919] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 596.347817][ T5610] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 596.497249][ T5610] usb 5-1: Using ep0 maxpacket: 32 [ 596.498138][ T5610] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 596.501194][ T5610] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 596.501330][ T5610] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 596.501472][ T5610] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 596.501544][ T5610] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 596.501615][ T5610] usb 5-1: config 0 interface 0 has no altsetting 0 [ 596.589864][ T5610] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 596.589889][ T5610] usb 5-1: Product: syz [ 596.589900][ T5610] usb 5-1: Manufacturer: syz [ 596.589911][ T5610] usb 5-1: SerialNumber: syz [ 596.624186][ T5610] usb 5-1: config 0 descriptor?? [ 596.649135][ T5610] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 596.700626][ T5610] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 596.841478][T11020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1223'. [ 596.845460][T11020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1223'. [ 597.312056][T11025] netlink: 87 bytes leftover after parsing attributes in process `syz.0.1224'. [ 597.987226][ T5610] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 598.161572][ T10] usb 5-1: USB disconnect, device number 42 [ 598.161659][ C0] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 598.166191][ T5610] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 598.168888][ T5610] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 598.169048][ T5610] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.212096][ T10] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 598.291298][ T5610] as10x_usb: device has been detected [ 598.291922][ T5610] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 598.368517][ T5610] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 598.397687][ T5610] as10x_usb: error during firmware upload part1 [ 598.412148][ T5610] Registered device Abilis Systems DVB-Titan [ 598.596658][T11028] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1225'. [ 598.777609][T10919] net_ratelimit: 10 callbacks suppressed [ 598.777631][T10919] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 598.777657][T10919] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 599.177392][T10678] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 599.287638][T10918] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 599.287685][T10918] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 599.336884][T10678] usb 2-1: Using ep0 maxpacket: 8 [ 599.344216][T10678] usb 2-1: unable to get BOS descriptor or descriptor too short [ 599.344270][T10678] usb 2-1: New USB device found, idVendor=04b8, idProduct=0521, bcdDevice=15.4a [ 599.375012][T10678] usb 2-1: config 0 has an invalid interface number: 122 but max is 0 [ 599.375033][T10678] usb 2-1: config 0 has no interface number 0 [ 599.375063][T10678] usb 2-1: config 0 interface 122 altsetting 187 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 599.375085][T10678] usb 2-1: config 0 interface 122 altsetting 187 has an endpoint descriptor with address 0x95, changing to 0x85 [ 599.375103][T10678] usb 2-1: config 0 interface 122 altsetting 187 endpoint 0x85 has invalid maxpacket 19271, setting to 1024 [ 599.375122][T10678] usb 2-1: config 0 interface 122 altsetting 187 bulk endpoint 0x85 has invalid maxpacket 1024 [ 599.375145][T10678] usb 2-1: config 0 interface 122 altsetting 187 endpoint 0x6 has invalid wMaxPacketSize 0 [ 599.375162][T10678] usb 2-1: config 0 interface 122 altsetting 187 bulk endpoint 0x6 has invalid maxpacket 0 [ 599.375180][T10678] usb 2-1: config 0 interface 122 has no altsetting 0 [ 599.476206][T10678] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.476238][T10678] usb 2-1: Product: syz [ 599.476255][T10678] usb 2-1: Manufacturer: syz [ 599.476272][T10678] usb 2-1: SerialNumber: syz [ 599.509345][T10678] usb 2-1: config 0 descriptor?? [ 599.527190][T11044] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 599.528112][T11044] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 599.797780][T10919] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 599.797817][T10919] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 599.872073][ T5610] usb 3-1: USB disconnect, device number 30 [ 599.926402][T10678] pl2303 2-1:0.122: pl2303 converter detected [ 599.927904][T10678] pl2303 2-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 599.928334][T10678] pl2303 2-1:0.122: pl2303_vendor_write - failed to write [0404]: -71 [ 599.928708][T10678] pl2303 2-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 599.929080][T10678] pl2303 2-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 599.930104][T10678] pl2303 2-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 599.930532][T10678] pl2303 2-1:0.122: pl2303_vendor_write - failed to write [0404]: -71 [ 599.930904][T10678] pl2303 2-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 599.931323][T10678] pl2303 2-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 599.932328][T10678] pl2303 2-1:0.122: pl2303_vendor_write - failed to write [0000]: -71 [ 599.933385][T10678] pl2303 2-1:0.122: pl2303_vendor_write - failed to write [0001]: -71 [ 599.934669][T10678] pl2303 2-1:0.122: pl2303_vendor_write - failed to write [0002]: -71 [ 600.036956][T10678] usb 2-1: pl2303 converter now attached to ttyUSB0 [ 600.045698][T10678] usb 2-1: USB disconnect, device number 52 [ 600.075413][T10678] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 600.076317][T10678] pl2303 2-1:0.122: device disconnected [ 600.119913][ T5610] Unregistered device Abilis Systems DVB-Titan [ 600.132972][ T5610] as10x_usb: device has been disconnected [ 600.316647][T10918] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 600.316716][T10918] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 600.828922][T10922] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 600.828950][T10922] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 601.225529][T11070] batadv_slave_0: Caught tx_queue_len zero misconfig [ 601.581398][T11071] netlink: 'syz.0.1235': attribute type 1 has an invalid length. [ 601.745390][T11086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1238'. [ 601.805029][T11076] macvlan0: entered promiscuous mode [ 601.805054][T11076] batadv0: entered promiscuous mode [ 601.820847][T11076] macvlan0: entered allmulticast mode [ 601.820869][T11076] batadv0: entered allmulticast mode [ 601.875547][T11076] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 601.893062][T11076] batadv0: left allmulticast mode [ 601.893090][T11076] batadv0: left promiscuous mode [ 602.184221][T11072] lo: left promiscuous mode [ 602.184389][T11072] tunl0: left promiscuous mode [ 602.184479][T11072] gre0: left promiscuous mode [ 602.184561][T11072] gretap0: left promiscuous mode [ 602.184648][T11072] erspan0: left promiscuous mode [ 602.184729][T11072] ip_vti0: left promiscuous mode [ 602.184879][T11072] sit0: left promiscuous mode [ 602.185037][T11072] ip6tnl0: left promiscuous mode [ 602.185185][T11072] ip6gre0: left promiscuous mode [ 602.185282][T11072] ip6gretap0: left promiscuous mode [ 602.185451][T11072] bridge0: left promiscuous mode [ 602.185554][T11072] vcan0: left promiscuous mode [ 602.198020][T11072] bond0: left promiscuous mode [ 602.198546][T11072] team0: left promiscuous mode [ 602.198883][T11072] nlmon0: left promiscuous mode [ 602.198987][T11072] vxcan0: left promiscuous mode [ 602.199191][T11072] vxcan1: left promiscuous mode [ 602.298812][T11072] veth0: left promiscuous mode [ 602.299622][T11072] veth1: left promiscuous mode [ 602.299748][T11072] wg0: left promiscuous mode [ 602.299858][T11072] wg1: left promiscuous mode [ 602.299960][T11072] wg2: left promiscuous mode [ 602.300063][T11072] veth0_to_bridge: left promiscuous mode [ 602.338448][T11072] veth1_to_bridge: left promiscuous mode [ 602.338766][T11072] veth0_to_bond: left promiscuous mode [ 602.338880][T11072] bond_slave_0: left promiscuous mode [ 602.338991][T11072] veth1_to_bond: left promiscuous mode [ 602.339102][T11072] bond_slave_1: left promiscuous mode [ 602.339223][T11072] veth0_to_team: left promiscuous mode [ 602.339331][T11072] team_slave_0: left promiscuous mode [ 602.339437][T11072] veth1_to_team: left promiscuous mode [ 602.339545][T11072] team_slave_1: left promiscuous mode [ 602.339731][T11072] veth0_to_batadv: left promiscuous mode [ 602.408349][T11072] batadv_slave_0: left promiscuous mode [ 602.408514][T11072] xfrm0: left promiscuous mode [ 602.408625][T11072] veth0_to_hsr: left promiscuous mode [ 602.408866][T11072] veth1_to_hsr: left promiscuous mode [ 602.409067][T11072] hsr0: left promiscuous mode [ 602.409179][T11072] veth1_virt_wifi: left promiscuous mode [ 602.409292][T11072] veth0_virt_wifi: left promiscuous mode [ 602.409433][T11072] virt_wifi0: left promiscuous mode [ 602.469388][T11072] vlan0: left promiscuous mode [ 602.469637][T11072] vlan1: left promiscuous mode [ 602.469855][T11072] macvlan0: left promiscuous mode [ 602.469964][T11072] macvlan1: left promiscuous mode [ 602.470068][T11072] ipvlan0: left promiscuous mode [ 602.470200][T11072] ipvlan1: left promiscuous mode [ 602.470311][T11072] geneve0: left promiscuous mode [ 602.470479][T11072] geneve1: left promiscuous mode [ 602.470597][T11072] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 602.470703][T11072] netdevsim netdevsim4 netdevsim2: left promiscuous mode [ 602.536931][T11072] netdevsim netdevsim4 netdevsim3: left promiscuous mode [ 602.537049][T11072] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 602.537177][T11072] bridge1: left promiscuous mode [ 602.537298][T11072] veth2: left promiscuous mode [ 602.537484][T11072] veth3: left promiscuous mode [ 602.537638][T11072] bridge2: left promiscuous mode [ 602.537751][T11072] geneve2: left promiscuous mode [ 602.537877][T11072] ip6gre1: left promiscuous mode [ 602.537888][T11072] ip6gre1: left allmulticast mode [ 602.706316][T11072] bond1: left promiscuous mode [ 602.837061][T11072] gretap1: left promiscuous mode [ 603.897803][ T158] net_ratelimit: 10 callbacks suppressed [ 603.897829][ T158] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 603.897856][ T158] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 604.417384][T10921] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 604.417423][T10921] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 604.946061][ T158] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 604.946096][ T158] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 604.986749][T10922] IPVS: starting estimator thread 0... [ 605.109831][T11120] IPVS: using max 38 ests per chain, 91200 per kthread [ 605.335196][T11116] nvme_fabrics: missing parameter 'transport=%s' [ 605.335216][T11116] nvme_fabrics: missing parameter 'nqn=%s' [ 605.447350][T10921] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 605.447380][T10921] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 605.977416][T10922] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 605.977443][T10922] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 607.797127][T11157] netlink: 'syz.2.1250': attribute type 1 has an invalid length. [ 607.797971][T11157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1250'. [ 609.046660][T10919] net_ratelimit: 10 callbacks suppressed [ 609.046683][T10919] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 609.046719][T10919] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 609.556964][T10921] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 609.556993][T10921] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 609.875751][T11169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1253'. [ 610.059700][T11174] netlink: 'syz.1.1255': attribute type 1 has an invalid length. [ 610.067662][T10921] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 610.067694][T10921] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 610.126811][T10677] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 610.276512][T10677] usb 5-1: Using ep0 maxpacket: 32 [ 610.283016][T10677] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 610.292735][T10677] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 610.292755][T10677] usb 5-1: config 0 has no interface number 0 [ 610.321765][T10677] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.321794][T10677] usb 5-1: Product: syz [ 610.321812][T10677] usb 5-1: Manufacturer: syz [ 610.321829][T10677] usb 5-1: SerialNumber: syz [ 610.364155][T10677] usb 5-1: config 0 descriptor?? [ 610.377384][T10677] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 610.377495][T10677] usb 5-1: selecting invalid altsetting 1 [ 610.377515][T10677] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 610.385866][T10677] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 610.386239][T10677] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 610.386275][T10677] usb 5-1: media controller created [ 610.473389][T10677] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 610.511007][T11174] 8021q: adding VLAN 0 to HW filter on device bond1 [ 610.577531][ T158] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 610.577565][ T158] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 610.768254][T11176] 8021q: adding VLAN 0 to HW filter on device bond1 [ 610.768709][T11176] bond1: (slave gre3): The slave device specified does not support setting the MAC address [ 610.769531][T11176] bond1: (slave gre3): Error -95 calling set_mac_address [ 610.870212][T11183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.870615][T11183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.094169][T11177] gretap1: entered promiscuous mode [ 611.097430][ T158] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 611.097504][ T158] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 611.163014][T11177] bond1: (slave gretap1): making interface the new active one [ 611.180452][T11177] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 611.202309][T11174] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 611.276060][T11180] bond1 (unregistering): (slave gretap1): Releasing active interface [ 611.330568][T11180] bond1 (unregistering): Released all slaves [ 611.600213][T10677] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 611.603136][T10677] zl10353_read_register: readreg error (reg=127, ret==-110) [ 611.697127][T11169] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 611.799157][T10677] usb 5-1: USB disconnect, device number 43 [ 613.787261][T10677] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 613.946563][T10677] usb 5-1: Using ep0 maxpacket: 16 [ 614.156597][T10921] net_ratelimit: 10 callbacks suppressed [ 614.156621][T10921] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 614.156648][T10921] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 614.666692][T10922] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 614.666730][T10922] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 615.147157][T10677] usb 5-1: unable to get BOS descriptor or descriptor too short [ 615.147200][T10677] usb 5-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=1d.64 [ 615.153200][T10677] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 615.153230][T10677] usb 5-1: can't read configurations, error -71 [ 615.196717][T10921] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 615.196750][T10921] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 615.706645][ T158] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 615.706694][ T158] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 616.100825][T11235] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 616.217736][T10912] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 616.217764][T10912] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 616.869322][ T10] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 617.050860][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 617.067245][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.067346][ T10] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 617.111583][T11243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1272'. [ 617.134071][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.134096][ T10] usb 5-1: Product: syz [ 617.134107][ T10] usb 5-1: Manufacturer: syz [ 617.134118][ T10] usb 5-1: SerialNumber: syz [ 617.205293][ T10] cdc_mbim 5-1:1.0: skipping garbage [ 617.448369][T11239] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 617.507972][ T5610] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 617.668647][ T5610] usb 3-1: Using ep0 maxpacket: 32 [ 617.680704][ T5610] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 617.705811][ T5610] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 617.705844][ T5610] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 617.705915][ T5610] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.747746][ T5610] usb 3-1: config 0 descriptor?? [ 618.184964][T11239] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 618.185784][ T10] cdc_mbim 5-1:1.0: setting tx_max = 16384 [ 618.248205][ T10] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 618.603866][ T10] wwan wwan0: port wwan0mbim0 attached [ 618.697944][ T5610] usb 3-1: USB disconnect, device number 31 [ 618.988372][ T10] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 82:9e:d7:e6:e5:c4 [ 619.094441][ T10] usb 5-1: USB disconnect, device number 46 [ 619.137132][ T10] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 619.320395][ T158] net_ratelimit: 10 callbacks suppressed [ 619.320421][ T158] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 619.320448][ T158] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 619.655384][ T10] wwan wwan0: port wwan0mbim0 disconnected [ 619.828474][T10915] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 619.828512][T10915] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 620.337249][ T158] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 620.337288][ T158] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 620.858080][T10915] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 620.858120][T10915] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 621.366657][ T158] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 621.366684][ T158] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 622.406665][ T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 622.558385][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 622.560632][ T10] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 622.577218][ T10] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 622.577254][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 622.577285][ T10] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 622.577305][ T10] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 622.577324][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 622.583434][ T10] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 622.583456][ T10] usb 4-1: Product: syz [ 622.583467][ T10] usb 4-1: Manufacturer: syz [ 622.583501][ T10] usb 4-1: SerialNumber: syz [ 622.692678][ T10] usb 4-1: config 0 descriptor?? [ 622.722106][ T10] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 622.765104][ T10] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 624.125300][T10677] usb 4-1: USB disconnect, device number 32 [ 624.125406][ C1] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 624.149490][T10677] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 624.209807][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.209872][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.436699][T10915] net_ratelimit: 10 callbacks suppressed [ 624.436718][T10915] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 624.436736][T10915] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 624.946746][T10922] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 624.946787][T10922] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 625.456621][ T8034] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 625.456976][ T8351] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 625.457009][ T8351] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 625.608121][ T8034] usb 5-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 625.613310][ T8034] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 625.613348][ T8034] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 625.677233][ T8034] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.677265][ T8034] usb 5-1: Product: syz [ 625.677281][ T8034] usb 5-1: Manufacturer: syz [ 625.677297][ T8034] usb 5-1: SerialNumber: syz [ 625.966831][T10919] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 625.966859][T10919] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 626.181694][ T8034] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 626.321218][T11317] nvme_fabrics: missing parameter 'transport=%s' [ 626.321232][T11317] nvme_fabrics: missing parameter 'nqn=%s' [ 626.387693][ T8034] usb 5-1: USB disconnect, device number 47 [ 626.478216][ T8351] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 626.478243][ T8351] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 626.554203][T11139] udevd[11139]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 627.700279][ T10] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 627.856657][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 627.861780][ T10] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 627.866062][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 627.866097][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.917030][ T10] usb 2-1: config 0 descriptor?? [ 628.192605][ T10] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 629.546627][T10919] net_ratelimit: 10 callbacks suppressed [ 629.546646][T10919] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 629.546685][T10919] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 629.634112][ T10] usb 2-1: USB disconnect, device number 53 [ 630.056707][T10919] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 630.056736][T10919] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 630.063268][T11352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1293'. [ 630.566746][T10919] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 630.566773][T10919] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 631.076630][ T8351] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 631.076669][ T8351] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 631.079549][T11357] tipc: Can't bind to reserved service type 0 [ 631.588275][T10915] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 631.588303][T10915] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 632.632010][T11367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1299'. [ 632.896795][ T10] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 633.047245][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 633.056120][ T10] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 633.071327][ T10] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 633.071388][ T10] usb 4-1: config 1 has no interface number 0 [ 633.071436][ T10] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 633.071464][ T10] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 633.071492][ T10] usb 4-1: config 1 interface 105 has no altsetting 0 [ 633.128421][ T10] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 633.128444][ T10] usb 4-1: Product: syz [ 633.128455][ T10] usb 4-1: Manufacturer: syz [ 633.128466][ T10] usb 4-1: SerialNumber: syz [ 633.172144][T11372] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 633.172232][T11372] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 633.298817][T11383] kAFS: unable to lookup cell 'ÿ' [ 633.306279][T11383] kAFS: unable to lookup cell '(,c¾Ì' [ 634.198852][ T10] aqc111 4-1:1.105: probe with driver aqc111 failed with error -71 [ 634.235079][ T10] usb 4-1: USB disconnect, device number 33 [ 634.646713][T10919] net_ratelimit: 10 callbacks suppressed [ 634.646732][T10919] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 634.646754][T10919] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 635.158906][ T8351] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 635.158942][ T8351] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 635.192685][ T8034] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 635.366703][ T8034] usb 2-1: Using ep0 maxpacket: 8 [ 635.367466][ T8034] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 635.392817][ T8034] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.392847][ T8034] usb 2-1: Product: syz [ 635.392863][ T8034] usb 2-1: Manufacturer: syz [ 635.392878][ T8034] usb 2-1: SerialNumber: syz [ 635.432535][ T8034] usb 2-1: config 0 descriptor?? [ 635.516620][ T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 635.667478][T10915] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 635.667518][T10915] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 635.668193][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 635.670694][ T10] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 635.730335][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 635.755647][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.755677][ T10] usb 4-1: Product: syz [ 635.755692][ T10] usb 4-1: Manufacturer: syz [ 635.755712][ T10] usb 4-1: SerialNumber: syz [ 635.790460][ T10] usb 4-1: config 0 descriptor?? [ 635.836674][ T8034] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 635.843497][ T10] streamzap 4-1:0.0: streamzap_probe: endpoint doesn't match input device 0203 [ 636.099169][T10678] usb 4-1: USB disconnect, device number 34 [ 636.177477][T10915] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 636.177503][T10915] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 636.225582][T11388] raw_sendmsg: syz.1.1301 forgot to set AF_INET. Fix it! [ 636.686787][T10919] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 636.686822][T10919] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 636.738104][ T8034] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 636.764037][ T8034] usb 2-1: USB disconnect, device number 54 [ 637.326546][ T8034] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 637.509975][ T8034] usb 1-1: Using ep0 maxpacket: 8 [ 637.512532][ T8034] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 637.531274][ T8034] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 637.536180][ T8034] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.536211][ T8034] usb 1-1: Product: syz [ 637.536222][ T8034] usb 1-1: Manufacturer: syz [ 637.536233][ T8034] usb 1-1: SerialNumber: syz [ 637.577579][ T8034] usb 1-1: config 0 descriptor?? [ 637.608570][ T8034] streamzap 1-1:0.0: streamzap_probe: endpoint doesn't match input device 0203 [ 637.871400][ T8034] usb 1-1: USB disconnect, device number 43 [ 637.993404][T11411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1308'. [ 639.036644][ T8034] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 639.200434][ T8034] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 639.204673][ T8034] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 639.204719][ T8034] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.308804][ T8034] as10x_usb: device has been detected [ 639.310242][ T8034] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 639.354158][ T8034] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 639.378572][ T8034] as10x_usb: error during firmware upload part1 [ 639.379272][ T8034] Registered device Abilis Systems DVB-Titan [ 639.485622][T11418] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1309'. [ 639.793860][ T59] net_ratelimit: 10 callbacks suppressed [ 639.793880][ T59] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 639.793905][ T59] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 640.084747][T11431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1312'. [ 640.318348][T10915] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 640.318387][T10915] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 640.828445][ T59] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 640.828512][ T59] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 640.918111][T10678] usb 2-1: USB disconnect, device number 55 [ 641.013625][T10678] Unregistered device Abilis Systems DVB-Titan [ 641.062769][T10678] as10x_usb: device has been disconnected [ 641.307598][ T8034] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 641.339097][ T59] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 641.339140][ T59] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 641.468274][ T8034] usb 3-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 641.471880][ T8034] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 641.471911][ T8034] usb 3-1: config 0 has no interfaces? [ 641.471946][ T8034] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.514536][ T8034] usb 3-1: config 0 descriptor?? [ 641.847730][ T59] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 641.847761][ T59] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 641.968745][T11435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.989304][T11435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.023850][ T8034] usb 3-1: string descriptor 0 read error: -71 [ 642.033616][ T8034] usb 3-1: USB disconnect, device number 32 [ 643.338798][T11459] kAFS: unable to lookup cell 'ÿ' [ 643.354454][T11463] kAFS: unable to lookup cell '(,c¾Ì' [ 644.907169][ T8351] net_ratelimit: 10 callbacks suppressed [ 644.907188][ T8351] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 644.907207][ T8351] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 645.417213][T10915] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 645.417247][T10915] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 645.539200][T11480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1325'. [ 645.692262][T11467] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1322'. [ 645.927367][T10915] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 645.927412][T10915] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 646.290410][T11484] PKCS7: Unknown OID: [4] 4.2(bad) [ 646.290426][T11484] PKCS7: Only support pkcs7_signedData type [ 646.441360][ T8351] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 646.441388][ T8351] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 646.566678][ T10] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 646.718284][ T10] usb 4-1: New USB device found, idVendor=1608, idProduct=0305, bcdDevice=98.de [ 646.719789][ T10] usb 4-1: config 2 has an invalid interface number: 68 but max is 0 [ 646.719842][ T10] usb 4-1: config 2 has no interface number 0 [ 646.719865][ T10] usb 4-1: config 2 interface 68 has no altsetting 0 [ 646.732338][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.732412][ T10] usb 4-1: Product: syz [ 646.732454][ T10] usb 4-1: Manufacturer: syz [ 646.732495][ T10] usb 4-1: SerialNumber: syz [ 646.946737][T10915] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 646.946769][T10915] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 647.267501][ T10] io_ti 4-1:2.68: required endpoints missing [ 647.298297][ T10] usb 4-1: USB disconnect, device number 35 [ 648.527769][ T33] INFO: task kworker/1:2:1621 blocked for more than 143 seconds. [ 648.527795][ T33] Tainted: G L syzkaller #0 [ 648.527805][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 648.527812][ T33] task:kworker/1:2 state:D stack:20920 pid:1621 tgid:1621 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 648.527858][ T33] Workqueue: usb_hub_wq hub_event [ 648.527985][ T33] Call Trace: [ 648.527991][ T33] [ 648.528002][ T33] __schedule+0x17dd/0x5820 [ 648.528127][ T33] ? __pfx___schedule+0x10/0x10 [ 648.528158][ T33] ? schedule+0x90/0x2b0 [ 648.528182][ T33] schedule+0x164/0x2b0 [ 648.528205][ T33] schedule_preempt_disabled+0x13/0x30 [ 648.528227][ T33] __mutex_lock+0x7c4/0x15a0 [ 648.528295][ T33] ? __mutex_lock+0x5cd/0x15a0 [ 648.528340][ T33] ? hub_event+0x20c9/0x4d30 [ 648.528361][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 648.528400][ T33] hub_event+0x20c9/0x4d30 [ 648.528420][ T33] ? do_raw_spin_unlock+0xf5/0x200 [ 648.528467][ T33] ? register_lock_class+0x31/0x2e0 [ 648.528516][ T33] ? __pfx_hub_event+0x10/0x10 [ 648.528546][ T33] ? rcu_is_watching+0x16/0xb0 [ 648.528576][ T33] ? process_scheduled_works+0x97a/0x1630 [ 648.528603][ T33] process_scheduled_works+0xc3d/0x1630 [ 648.528660][ ** replaying previous printk message ** [ 648.528660][ T33] ? __pfx_process_scheduled_works+0x10/0x10 [ 648.528686][ T33] ? assign_work+0x3cf/0x5d0 [ 648.528709][ T33] worker_thread+0xa47/0xfb0 [ 648.528739][ T33] ? __kthread_parkme+0x71/0x1f0 [ 648.528768][ T33] kthread+0x38b/0x480 [ 648.528791][ T33] ? __pfx_worker_thread+0x10/0x10 [ 648.528810][ T33] ? __pfx_kthread+0x10/0x10 [ 648.528834][ T33] ret_from_fork+0x514/0xb70 [ 648.528864][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 648.528880][ T33] ? __switch_to+0xc78/0x1410 [ 648.528905][ T33] ? __pfx_kthread+0x10/0x10 [ 648.528929][ T33] ret_from_fork_asm+0x1a/0x30 [ 648.528958][ T33] [ 648.529064][ T33] [ 648.529064][ T33] Showing all locks held in the system: [ 648.529074][ T33] locks held by khungtaskd/33: 1, last CPU#1: [ 648.529159][ T33] #0: ffffffff8fd58a60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 648.533259][ T33] locks held by kworker/1:2/1621: 5, on CPU#1: [ 648.533285][ T33] #0: ffff88801c70c940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 648.533657][ T33] #1: ffffc90005fafc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 648.533718][ T33] #2: ffff88802c8f61d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 648.533780][ T33] #3: ffff88802c992568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 648.533839][ T33] #4: ffff88802c8a2d60 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 648.533918][ T33] locks held by getty/5364: 2, on CPU#1: [ 648.533934][ T33] #0: ffff8880348ce0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 648.535341][ T33] #1: ffffc9000323b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 648.535390][ T33] locks held by kworker/0:3/5610: 6, on CPU#0: [ 648.535402][ T33] #0: ffff88801c70c940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 648.535444][ T33] #1: ffffc90004157c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 648.535484][ T33] #2: ffff88802b2ff1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 648.535525][ T33] #3: ffff88802b39b568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 648.535577][ T33] #4: ffff88802b22b060 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 648.535619][ T33] #5: ffffffff90affd08 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14d/0x1810 [ 648.535670][ T33] locks held by kworker/0:4/5669: 5, on CPU#0: [ 648.535681][ T33] #0: ffff88801c70c940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 648.535722][ T33] #1: ffffc90004437c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 648.535763][ T33] #2: ffff88802c9c21d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 648.535803][ T33] #3: ffff88802c9c7568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 648.535843][ T33] #4: ffff88802c8a2d60 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 648.535897][ T33] locks held by syz.0.1303/11394: 1, last CPU#0: [ 648.535908][ T33] #0: ffffffff8fd58a60 (rcu_read_lock){....}-{1:3}, at: folio_lruvec_lock_irqsave+0x24/0x550 [ 648.535959][ T33] locks held by syz.1.1327/11490: 1, last CPU#1: [ 648.535971][ T33] #0: ffff888050dca0a0 (&ctx->uring_lock){+.+.}-{4:4}, at: __se_sys_io_uring_register+0x223/0x1b80 [ 648.536062][ T33] locks held by syz.1.1327/11501: 1, on CPU#1: [ 648.536073][ T33] #0: ffff888050dca0a0 (&ctx->uring_lock){+.+.}-{4:4}, at: __se_sys_io_uring_register+0x223/0x1b80 [ 648.536122][ T33] locks held by syz.1.1327/11502: 2, last CPU#1: [ 648.536133][ T33] #0: ffff88807e9eccc0 (&mm->mmap_lock){++++}-{4:4}, at: faultin_page_range+0x420/0x8f0 [ 648.567522][ T5610] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 648.601598][ T33] #1: ffff8880b843bea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 648.601852][ T33] locks held by syz.0.1329/11493: 1, last CPU#0: [ 648.601903][ T33] #0: ffff888079e47bc8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 648.602086][ T33] locks held by syz.0.1329/11494: 1, last CPU#0: [ 648.602146][ T33] #0: ffff88807e9e8f80 (&mm->mmap_lock){++++}-{4:4}, at: __might_fault+0xaf/0x130 [ 648.602344][ T33] locks held by syz.0.1329/11500: 2, last CPU#0: [ 648.602393][ T33] #0: ffff88807e9e8340 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 648.602533][ T33] #1: ffffffff8fd58a60 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 648.613326][ T33] [ 648.613359][ T33] ============================================= [ 648.613359][ T33] [ 648.613410][ T33] NMI backtrace for cpu 0 [ 648.613476][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 648.613570][ T33] Tainted: [L]=SOFTLOCKUP [ 648.613594][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 648.613638][ T33] Call Trace: [ 648.613661][ T33] [ 648.613691][ T33] dump_stack_lvl+0xe8/0x150 [ 648.613789][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 648.613875][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 648.613973][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 648.614060][ T33] sys_info+0x135/0x170 [ 648.614123][ T33] watchdog+0xfd2/0x1030 [ 648.614232][ T33] ? watchdog+0x1c7/0x1030 [ 648.614309][ T33] kthread+0x38b/0x480 [ 648.614404][ T33] ? __pfx_watchdog+0x10/0x10 [ 648.614444][ T33] ? __pfx_kthread+0x10/0x10 [ 648.614537][ T33] ret_from_fork+0x514/0xb70 [ 648.614610][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 648.614656][ T33] ? __switch_to+0xc78/0x1410 [ 648.614690][ T33] ? __pfx_kthread+0x10/0x10 [ 648.614724][ T33] ret_from_fork_asm+0x1a/0x30 [ 648.614761][ T33] [ 648.614788][ T33] Sending NMI from CPU 0 to CPUs 1: [ 648.614873][ C1] NMI backtrace for cpu 1 [ 648.614890][ C1] CPU: 1 UID: 0 PID: 5623 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 648.614917][ C1] Tainted: [L]=SOFTLOCKUP [ 648.614924][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 648.614936][ C1] RIP: 0010:do_wait+0xa0/0x580 [ 648.614964][ C1] Code: f5 b8 8f 7a 91 be 08 00 00 00 e8 0b b9 b0 00 31 f6 48 0f a3 1d 79 6e f2 0f 0f 92 c3 40 0f 92 c6 bf 02 00 00 00 e8 60 bf 3f 00 <84> db 74 14 e8 17 33 24 00 84 c0 0f 84 1b 03 00 00 e8 ca bb 3f 00 [ 648.614981][ C1] RSP: 0000:ffffc90004217bc8 EFLAGS: 00000293 [ 648.614999][ C1] RAX: ffffffff81882150 RBX: 0000000000000001 RCX: ffff88807f3b5dc0 [ 648.615014][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 648.615025][ C1] RBP: ffffc90004217d50 R08: ffffffff917a8fbf R09: 1ffffffff22f51f7 [ 648.615040][ C1] R10: dffffc0000000000 R11: fffffbfff22f51f8 R12: ffffc90004217c80 [ 648.615055][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 648.615068][ C1] FS: 0000000000000000(0000) GS:ffff888123ba9000(0063) knlGS:0000000058104480 [ 648.615085][ C1] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 648.615098][ C1] CR2: 00000000f5031da4 CR3: 0000000072afe000 CR4: 00000000003526f0 [ 648.615116][ C1] Call Trace: [ 648.615123][ C1] [ 648.615138][ C1] kernel_wait4+0x232/0x2b0 [ 648.615157][ C1] ? __pfx_kernel_wait4+0x10/0x10 [ 648.615194][ C1] ? hrtimer_nanosleep+0x2cc/0x3a0 [ 648.615243][ C1] __ia32_compat_sys_wait4+0x165/0x230 [ 648.615264][ C1] ? __pfx___ia32_compat_sys_wait4+0x10/0x10 [ 648.615293][ C1] ? rcu_is_watching+0x16/0xb0 [ 648.615319][ C1] ? asm_int80_emulation+0x1a/0x20 [ 648.615343][ C1] do_int80_emulation+0x198/0x500 [ 648.615374][ C1] ? asm_int80_emulation+0x1a/0x20 [ 648.615392][ C1] ? clear_bhb_loop+0x70/0xc0 [ 648.615411][ C1] ? clear_bhb_loop+0x70/0xc0 [ 648.615433][ C1] asm_int80_emulation+0x1a/0x20 [ 648.615451][ C1] RIP: 0023:0xf71377ab [ 648.615486][ C1] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 648.615502][ C1] RSP: 002b:00000000f752fc6c EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 648.615520][ C1] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00000000f752fe08 [ 648.615534][ C1] RDX: 0000000040000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 648.615545][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 648.615556][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 648.615568][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 648.615590][ C1] [ 648.674583][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 649.513065][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 649.523850][ T33] Tainted: [L]=SOFTLOCKUP [ 649.528206][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 649.538385][ T33] Call Trace: [ 649.541738][ T33] [ 649.544745][ T33] vpanic+0x56d/0xa60 [ 649.548786][ T33] ? __pfx___schedule+0x10/0x10 [ 649.553657][ T33] ? __pfx_vpanic+0x10/0x10 [ 649.558183][ T33] panic+0xc5/0xd0 [ 649.561949][ T33] ? __pfx_panic+0x10/0x10 [ 649.566381][ T33] ? preempt_schedule_common+0x7f/0xd0 [ 649.571894][ T33] ? preempt_schedule_thunk+0x16/0x40 [ 649.577282][ T33] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 649.583468][ T33] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 649.589662][ T33] watchdog+0x102b/0x1030 [ 649.594044][ T33] ? watchdog+0x1c7/0x1030 [ 649.598512][ T33] kthread+0x38b/0x480 [ 649.602611][ T33] ? __pfx_watchdog+0x10/0x10 [ 649.607301][ T33] ? __pfx_kthread+0x10/0x10 [ 649.611918][ T33] ret_from_fork+0x514/0xb70 [ 649.616556][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 649.621709][ T33] ? __switch_to+0xc78/0x1410 [ 649.626423][ T33] ? __pfx_kthread+0x10/0x10 [ 649.631075][ T33] ret_from_fork_asm+0x1a/0x30 [ 649.635870][ T33] [ 649.639536][ T33] Kernel Offset: disabled [ 649.643895][ T33] Rebooting in 86400 seconds..