last executing test programs: 10m44.023507514s ago: executing program 2 (id=938): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x30, r1, 0x301, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x1, 0x12}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x3}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000064}, 0x40) 10m43.914535352s ago: executing program 2 (id=942): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) listen(r0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0xfd) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}]) shutdown(r0, 0x0) 10m43.729280158s ago: executing program 2 (id=946): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 10m43.554665736s ago: executing program 2 (id=951): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xffe0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x4, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x3, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x42}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x5, 0x2, 0xc, 0x8, 0x9, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x1, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0xffffffff, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x5, 0x3, 0x6, 0xe, 0x0, 0x20080}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1978, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0x4e, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff14, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xb}, {0x6, 0x6, 0x1ff, 0x8, 0x200, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x9, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x8000, 0x9, 0x4fc, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0xad, 0x2, 0xffff, 0x5917}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x6, 0x1, 0x8, 0x66a}, {0xffb, 0x6, 0x4, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x100000, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0xe, 0x2, 0x53ce, 0x3}, {0xffffff81, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x1, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52a, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x0, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x2, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x0, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0x102, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd213, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0xfd}, {0x1c00000, 0x3, 0x8, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed3, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0xfffffffe, 0x5, 0x3, 0x8}, {0x0, 0x1, 0x1, 0x2, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x3, 0x0, 0x80000001}, {0x10001, 0x7be, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x3, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0x1, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b5}, {0xa24b, 0x947d, 0x3, 0x4, 0x80000000, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x6}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x0, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xc, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0xfffffffd}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0xffe00000, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x2000004, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x9, 0x1, 0x0, 0x3}, {0x1, 0x7, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x9, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0xffffffff, 0x9, 0x8, 0xfff, 0x4, 0x8000}, {0x8195, 0x2, 0x1000, 0x0, 0x0, 0xfffffffc}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x5, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x4, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7c0, 0x2, 0x6, 0x207f}, {0x10, 0x2, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x800, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x6bd67380fe3bd6e5}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0xa}, {0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6, 0x1}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x5}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10m43.243958042s ago: executing program 2 (id=959): r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 10m43.126138108s ago: executing program 2 (id=963): unshare(0x4000400) r0 = syz_open_dev$usbfs(&(0x7f00000002c0), 0x1ff, 0x8a401) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) 10m28.08543486s ago: executing program 32 (id=963): unshare(0x4000400) r0 = syz_open_dev$usbfs(&(0x7f00000002c0), 0x1ff, 0x8a401) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) 11.7554756s ago: executing program 0 (id=5008): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x80894) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x800, 0x0, 0x3, 0x1}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4801, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000580)) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x44, 0x20, 0x1, 0xffffffff, 0x0, {0xa, 0x10, 0x40, 0x4, 0x20, 0x0, 0x0, 0x6}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r5}) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x8936, &(0x7f0000000000)) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) ioctl$int_in(r3, 0x5421, &(0x7f00000000c0)=0x7fffffffffffffff) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x238, 0x11, 0x148, 0x238, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x8800, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffe}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x2, {0x41}}, 0x10, 0x0}, 0x80) accept4(r3, 0x0, 0x0, 0x0) 9.372608745s ago: executing program 0 (id=5013): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f00000001c0)={0x7, 0x5, 0x3bd4}) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) preadv(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x4000f2, 0x1000) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x82004) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x15, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xc}, {}, {}, [@generic={0x0, 0x9, 0x8, 0x0, 0x2}, @ldst={0x3, 0x0, 0x3, 0xb, 0xb, 0x100, 0xfffffffffffffffc}, @map_fd={0x18, 0x8}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x5, 0x4}) 9.360060323s ago: executing program 4 (id=5014): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000004040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x400) syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000080)={r4}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000e40)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003240)="6e4b7fc10a", 0x5}, {&(0x7f0000000580)="d0f7fe3489", 0x5}], 0x2, 0x0, 0x0, 0x4000800}], 0x1, 0x20004050) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28c81, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f00000000c0)) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r8, 0x29, 0x4b, 0x0, 0xad) setsockopt$sock_int(r8, 0x1, 0x9, &(0x7f0000000200), 0x4) syz_usb_control_io(r1, &(0x7f00000005c0)={0x2c, &(0x7f0000000340)={0x20, 0x22, 0x83, {0x83, 0x2, "b792783c57964ba7a8349e195be5d6f33fad9523bc3cd88d47704816be91de3ccc2e302482930bb03d2b40eb2f0062d35ef0a137607f6d88722cd80796d71fd5875cecfad92c135d6b07052bae2a0971e6135a5357cc3438b14d6296fef3a808352afd574d59b11c9ec15e97b367b84c978dd67fa1dcde884954ca092f6268bdde"}}, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003660000006603749bfaf50acb8065e6492b07000000000000009194f9bd441048511a17d86d2ff910f1aa05cc941c9a472f637ab7edd8e88e6c7537cfa82d0416cb0e11c4376dfb25f11b5acdd1bf2e33214654c590d88a015f75564d3e4c03c2152e6dd611a1202f7ddb"], &(0x7f00000002c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xac, "7ef74f3bde675fdc67bea074edfef6fb"}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "0bb3d778dd7b53c1f2394678a7d631d4"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x7bd, 0xf00, 0x5}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x18, 0x6, 0x0, "488bb8fd", "e1f5c948"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4a, 0x0, 0x0, 0x6, 0xc, 0x998d, 0x5}}}, &(0x7f0000000c40)={0x84, &(0x7f0000000600)={0x0, 0xb, 0x63, "a1a0d14aacaf9ba9379a4e30c26c65398a340248b755e54d0263b00b15e7e7ac931b1cba0d60d40418248ac5c03147a739b62ca47014405349c1665988f4b5cc447d3baf44af443ac4c698b8aff6333bd367cb98bd8b0e36deaefcf377898bed4abd1b"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x200, 0x8}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0xf912}, &(0x7f00000009c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000a00)={0x40, 0xb, 0x2, 'TA'}, &(0x7f0000000a40)={0x40, 0xf, 0x2, 0xa6c2}, &(0x7f0000000a80)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, &(0x7f0000000ac0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000b00)={0x40, 0x19, 0x2, "8b2c"}, &(0x7f0000000b40)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000b80)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000bc0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000c00)={0x40, 0x21, 0x1, 0x85}}) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x8890) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="ec0100005c8baebf10a8bf51d93734c417180010022bbd7000fbdbdf2500000000000000000000ffffac1e0001000000000000000000000000000000014e21c64b4e2200070a0000b02b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000180)={0x3, 0x0, '\x00', 0x1, &(0x7f0000000140)}) 8.208130651s ago: executing program 1 (id=5016): r0 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmdt(r5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000300)=ANY=[@ANYRES64=r5], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x10004e0, 0xe4b, 0xa22]}) munlockall() dup(r3) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x71, 0x1, 0x3, 0x1}, 0x8) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x100) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000140)={0x48, 0xc, r2, 0x0, 0xfffffffffffffffc, 0x1541}) epoll_create(0x3) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r2, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0x7ff, 0x41}) close_range(r0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 7.56383098s ago: executing program 5 (id=5017): r0 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmdt(r5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000300)=ANY=[@ANYRES64=r5], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x10004e0, 0xe4b, 0xa22]}) munlockall() dup(r3) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x71, 0x1, 0x3, 0x1}, 0x8) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x100) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000140)={0x48, 0xc, r2, 0x0, 0xfffffffffffffffc, 0x1541}) epoll_create(0x3) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r2, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 7.151509179s ago: executing program 4 (id=5018): r0 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmdt(r5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000300)=ANY=[@ANYRES64=r5], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x10004e0, 0xe4b, 0xa22]}) munlockall() dup(r3) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x71, 0x1, 0x3, 0x1}, 0x8) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x100) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000140)={0x48, 0xc, r2, 0x0, 0xfffffffffffffffc, 0x1541}) epoll_create(0x3) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r2, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0x7ff, 0x41}) close_range(r0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) 6.093559927s ago: executing program 3 (id=5019): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000004040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x400) syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000080)={r4}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000e40)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003240)="6e4b7fc10a", 0x5}, {&(0x7f0000000580)="d0f7fe3489", 0x5}], 0x2, 0x0, 0x0, 0x4000800}], 0x1, 0x20004050) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28c81, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f00000000c0)) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r8, 0x29, 0x4b, 0x0, 0xad) setsockopt$sock_int(r8, 0x1, 0x9, &(0x7f0000000200), 0x4) syz_usb_control_io(r1, &(0x7f00000005c0)={0x2c, &(0x7f0000000340)={0x20, 0x22, 0x83, {0x83, 0x2, "b792783c57964ba7a8349e195be5d6f33fad9523bc3cd88d47704816be91de3ccc2e302482930bb03d2b40eb2f0062d35ef0a137607f6d88722cd80796d71fd5875cecfad92c135d6b07052bae2a0971e6135a5357cc3438b14d6296fef3a808352afd574d59b11c9ec15e97b367b84c978dd67fa1dcde884954ca092f6268bdde"}}, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003660000006603749bfaf50acb8065e6492b07000000000000009194f9bd441048511a17d86d2ff910f1aa05cc941c9a472f637ab7edd8e88e6c7537cfa82d0416cb0e11c4376dfb25f11b5acdd1bf2e33214654c590d88a015f75564d3e4c03c2152e6dd611a1202f7ddb"], &(0x7f00000002c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xac, "7ef74f3bde675fdc67bea074edfef6fb"}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "0bb3d778dd7b53c1f2394678a7d631d4"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x7bd, 0xf00, 0x5}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x18, 0x6, 0x0, "488bb8fd", "e1f5c948"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4a, 0x0, 0x0, 0x6, 0xc, 0x998d, 0x5}}}, &(0x7f0000000c40)={0x84, &(0x7f0000000600)={0x0, 0xb, 0x63, "a1a0d14aacaf9ba9379a4e30c26c65398a340248b755e54d0263b00b15e7e7ac931b1cba0d60d40418248ac5c03147a739b62ca47014405349c1665988f4b5cc447d3baf44af443ac4c698b8aff6333bd367cb98bd8b0e36deaefcf377898bed4abd1b"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x200, 0x8}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0xf912}, &(0x7f00000009c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000a00)={0x40, 0xb, 0x2, 'TA'}, &(0x7f0000000a40)={0x40, 0xf, 0x2, 0xa6c2}, &(0x7f0000000a80)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, &(0x7f0000000ac0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000b00)={0x40, 0x19, 0x2, "8b2c"}, &(0x7f0000000b40)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000b80)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000bc0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000c00)={0x40, 0x21, 0x1, 0x85}}) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x8890) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="ec0100005c8baebf10a8bf51d93734c417180010022bbd7000fbdbdf2500000000000000000000ffffac1e0001000000000000000000000000000000014e21c64b4e2200070a0000b02b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000180)={0x3, 0x0, '\x00', 0x1, &(0x7f0000000140)}) 5.868523595s ago: executing program 1 (id=5020): openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x103902, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x10000006, 0x1}, &(0x7f0000000340)=0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x501b, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r4, 0x5) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r2, 0x3516, 0x2000, 0x0, 0x0, 0xfffffdcf) 5.866455942s ago: executing program 5 (id=5021): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x4c, 0x1e, 0x109, 0x70bd26, 0x25dfdbfe, {}, [{0x38, 0x1, [@m_simple={0x34, 0xa, 0x0, 0x0, {{0xb}, {0x4}, {0x6, 0x6, "82af"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x10000084) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4000000) io_uring_setup(0x664c, &(0x7f0000000500)={0x0, 0x1014e2, 0x4, 0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000002c0)=ANY=[], 0x0}, 0x94) unshare(0x28000600) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000059cd443f6b68ffae7f0500100005ffffffffffffffff000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, 0x0, 0x1) ioctl$RTC_AIE_ON(r3, 0x7001) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000000)={0x1, 0x2e, 0xf, 0x3, 0x4007, 0x10, 0x6, 0xa0, 0x1}) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x7fffffff, 0x80000) r5 = syz_open_dev$loop(&(0x7f0000000040), 0x2, 0x101000) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000080)={r5, 0x7, {0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x6, 0x7, 0x14, "22d0d9f92378ec7846e210c7186a97813610e04e7dcf815881cd6500964ab176a8ecae5ad01977ab27012d6b2547a86a00e55acd2419e9a6f987aebb01a8fbb0", "121a3a19f0d20b85dd491b09c69be4532fe51123f863f8e82a06f43a810ec135cdd6f013bad9af0129f0110adeea0e0fcb22b5637d8cb083b989e3c7bc96c92b", "11cae5b5b44e0f046a8ed5b76de16f596d138445aa757a2bd07c2af8c3ef75ef", [0x9, 0x1]}}) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10, r6, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1d) socket$nl_generic(0x10, 0x3, 0x10) 5.628415772s ago: executing program 0 (id=5022): gettid() getpid() r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000011140100000000000000000008004b001301000008004a00010000000800010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000840}, 0x800) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x7, 0x80007, 0x10, 0x1, 0xe, "2d0000000005040000003c00ff9404c005e0ff"}) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000000)=ANY=[@ANYBLOB="090001cbf8ba63aea94400ed"], 0x9) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0xfd, 0x1, 0x0, @multicast2, @loopback}, @redirect={0x3, 0x4, 0x0, @empty, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x3, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@dev}, {@local}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0xa, 0x16, 0x0, 0x1, [@generic="92276d95ae3a"]}, @typed={0xc, 0x17, 0x0, 0x0, @u64=0x700}]}, 0x2c}, 0x1, 0x0, 0x0, 0x42804}, 0x80000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000100010ac05470200000000000109024300010000000009040000010300000009210000000122a00009058103"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="0024360000003607ad6667e44bb2cd263ca19db35b646f7517ef18a52585593c883c638de3e0cb6def5646c7f872b2a6ba74ebfd5d7ab4f639a795dbb34c9700"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_matches\x00') syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = socket$kcm(0x29, 0x2, 0x0) close(r6) r7 = socket$kcm(0x2b, 0x1, 0x0) close(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x4) 5.593981114s ago: executing program 4 (id=5023): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0xfffffff0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 5.169484255s ago: executing program 4 (id=5024): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x9, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) unshare(0x8000000) shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffc000/0x3000)=nil) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, r4, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f00000004c0)={@flat=@binder={0x73622a85, 0x1000, 0x2}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x0, 0x1, 0x3c}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) writev(r3, &(0x7f00000000c0), 0x0) r6 = syz_io_uring_setup(0x4f3, &(0x7f0000000380)={0x0, 0x486e, 0x1000, 0x2, 0x3c0}, &(0x7f0000000000)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0xffffffff, @my=0x0}}) io_uring_enter(r6, 0x47b2, 0x10f9, 0x82, 0x0, 0x48) 3.78201462s ago: executing program 4 (id=5025): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000c200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1574, &(0x7f0000002140)={[{0x53, 0x4e00, "95ebff0c131815e91585968cfaf496fed10ba1a31ee54a1b86596288616c8785094344d7b841931a3f346b4915ee46879fb151b6693ca9e2400333dadaf44cacc303a95513f205db79a890d4f3d2c8831b4e9e"}, {0x1000, 0x4e00, "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"}, {0xa1, 0x4e00, "7c5069e92b37609bc41af15e174a217ab957abbcee8cbf23106b69ec3ed2ab79c8ba5752e452437ef78a782478ea3c5ee83214861d9ec882b0fdf09e80669e7e24becf198bf7eff40ae95d605798322fb03052da1b69e197739ef20651eac1908b9b6f17d6b91267ef49b72615ae5f3867f5abab07ab7830204f378c645796ba055593cc7c89333cace0b1a44241d622542768acce45eb3aace267cf0b4e1e388f"}, {0xe4, 0x4e00, "0b6942af2066b7f796abf90c32baa3b7c7126e29156313b45f4a259f012d79fc9055e9cd238e3acd597d88e93395a135c362e3c6561c7e3c05a73ffe7cd764fa28f45b60ecaf11bf6c1730a99bc68e319f1c22620cfe9238c421d7a8a0f28329f242d21ca748a37cecc5c1ab8830912c97ba323a1d47a29cd60832678724f37cf58fc9a192bdd88b7c7a03d36028b99c07f18e961d9f7aef04fa1823f47a6c9bb0db1b62c27b1655ca2961128a0cbae85e00c2f9482830fe76a5f45c0795dcb602726c300305354e6417a57ed9d2cffa131414bb2eb1480bd2e41e1033fa6038e86f1715"}, {0x3d, 0x4e00, "ed712acb928fe3d423d23d1d64524a9645eaf85ef09f484835111dcd69c46a8844d14a510854dde740b6e0e80406a2a20f20036ede77ae7bfd795102fd"}, {0xde, 0x4e00, "be5af89d43d5ee9878b8aeea2c3ab9ac46bad172871403646ccd4edeb7478afe50f94e99428c33cb9ef20ac3df4553f6bedf4ff6b8ec3bfe79b85831d648edfb1eadb5123b0bd86401cfbf72f88d25099746f4371820cabcbfadb8d327d4eff381a5792423599337af17c08b79f80cda4877767760e5c9558d76ed21da0166abc5aba384551e5d35da20b0586a4472f1ab410a9aa128038edb76a41496615ebe631a8f16c1c66f155f4098a58f328f406f6f218c36c21e46942a21df655893b2b82a6d83bc217df8650fe65687379ac5592d8bf1916a10b4a1a43d5d350d"}, {0x5c, 0x4e00, "33f4a6419190204f799a0f2d86af0138097a4a22341398df7856578d9afb6cf6eb593635b1ce17dfa426a881fd7a2e412ef6e65cf4da8ff3ed0c842a735f77668df85e13b35e37578bd57a1d23a28137e0b7c85ae760c5c21c83fe73"}, {0x8e, 0x4e00, "65baadb676fbefc41ff5a131806b9fff5e510ed30cff37db0d05ddfe60155cc5b1b444659f71bf01545f5df4701bb7ed2b0c72beab206422d56b9caa3fb5e7d9e4bceb07e38da80a8090e3be1609433d0e653efe70c45cfebf4fb90413f22a87ebbb95272ed05b4db13320070e5f46d07ea56000f19848284e9308dc36286e31c44d18faec9b9009234700303112"}, {0xfb, 0x4e00, "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"}, {0x67, 0x4e00, "af207a0b0dc48e724d815a5eb0beed520c14d4a63cddd02d8387f815f01716592a06e5dba557e7499ade5532d093139d999e7eedba9b1c482c12a503f8f6c5d42db429f621768fe41525e7f98195d153cfc43409e248ac7ae83dd1ba67212633964f33d83099ba"}]}) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x2b, 0x0, 0x50480240, 0x0, 0x61c6, 0x6, 0xa11, 0x0, 0x0, 0x1}}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0800000004000000551e7fb0e622dd0252b9814d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x7, &(0x7f00000001c0)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0xfffffffffffffffc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffff28, 0x3, 0x0, 0x0, 0x0, 0x100000, 0xc000, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f000000a200)="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", 0x2000, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x3, {0xfffffffffffffffd, 0x1000000000000000, 0x9759, 0x40000000000305, 0x2, 0xd, {0x4, 0x800000000000003, 0x4, 0xfe2b25e, 0x2000000000000000, 0x0, 0x6, 0x4, 0x4003, 0xc001, 0x39, r5, r6, 0x8, 0x5417}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2a00) ioctl$SG_GET_VERSION_NUM(r8, 0x2284, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0xfc, 0x0, @vifc_lcl_ifindex, @empty}, 0x10) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYRES64=r0], 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 3.555312789s ago: executing program 1 (id=5026): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 3.545185466s ago: executing program 5 (id=5027): openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x103902, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x10000006, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x501b, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r2, 0x3516, 0x2000, 0x0, 0x0, 0xfffffdcf) 3.506151761s ago: executing program 1 (id=5028): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x200002}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = mq_open(&(0x7f0000000000)='e_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000040000000, 0x4, 0x4, 0x9}) mq_timedsend(r4, 0x0, 0x0, 0x5, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x18}) mq_timedreceive(r4, &(0x7f0000000140)=""/154, 0x9a, 0x0, &(0x7f0000000040)={0x77359400}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@gettfilter={0x44, 0x2e, 0x400, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xe, 0x6}, {0xfff2, 0x2}, {0xfff2, 0xffe0}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0xa8}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) dup(r7) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc6041, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r10 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r10, 0x0, r10) 3.452305355s ago: executing program 3 (id=5029): listen(0xffffffffffffffff, 0x9) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0xf, 0x2, 0x4, 0x5}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x2400c0c0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x2, 'batadv_slave_1\x00', {0x8}, 0x7}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f00000014c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001480)={&(0x7f0000000200)={0x1248, r3, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5b9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}]}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffff6ba}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}]}]}, @TIPC_NLA_NODE={0xa4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x49}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x70, 0x3, "959a702901cc21966094365f588503add49c0aa9b41e753ead34273ba14c23bdcbead3699bb689819a2eada6d8be8cce0c03847ef45bd61aca6df257240d9b8e26fa6f2126001d4047df82141556e9fe38eea1f13d952a7e341ce0577a5f8e502ef960423067db0633426891"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_NODE={0x1010, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffa0}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe1b4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}]}]}, 0x1248}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001500), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001580), r2) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000015c0)={0x0, @initdev, @empty}, &(0x7f0000001600)=0xc) getpeername$packet(0xffffffffffffffff, &(0x7f0000001640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001680)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001800)={'gretap0\x00', &(0x7f00000016c0)={'gre0\x00', 0x0, 0x8000, 0x8000, 0x1, 0x10000, {{0x43, 0x4, 0x3, 0x2, 0x10c, 0x64, 0x0, 0x2, 0x29, 0x0, @empty, @private=0xa010102, {[@timestamp_addr={0x44, 0x4c, 0x7c, 0x1, 0x8, [{@empty, 0x97}, {@empty, 0x6}, {@private=0xa010100, 0x8}, {@empty, 0xb7ad}, {@local, 0x6}, {@local, 0x5}, {@empty, 0x7}, {@private, 0x2}, {@multicast2, 0x5}]}, @noop, @cipso={0x86, 0x11, 0xffffffffffffffff, [{0x1, 0xb, "a6fabec475ea75f89b"}]}, @timestamp_prespec={0x44, 0x3c, 0xab, 0x3, 0x7, [{@broadcast, 0xbe}, {@broadcast, 0x8}, {@loopback, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xa}, {@multicast2, 0xc}, {@dev={0xac, 0x14, 0x14, 0x28}, 0xc4e8}, {@local, 0x9}]}, @rr={0x7, 0x2b, 0xc8, [@private=0xa010102, @multicast1, @rand_addr=0x64010101, @local, @remote, @private=0xa010100, @broadcast, @loopback, @rand_addr=0x64010100, @rand_addr=0x64010101]}, @timestamp_addr={0x44, 0x24, 0x63, 0x1, 0x0, [{@remote, 0x20000000}, {@multicast1, 0x7}, {@local, 0x6}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0xa5}]}, @timestamp={0x44, 0xc, 0xb1, 0x0, 0xc, [0x8001, 0x1]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000018c0)={'gre0\x00', &(0x7f0000001840)={'sit0\x00', 0x0, 0x40, 0xc6, 0x3, 0x9, {{0x10, 0x4, 0x3, 0x17, 0x40, 0x68, 0x0, 0x40, 0x29, 0x0, @multicast1, @empty, {[@generic={0x94, 0x10, "694b42f75c173a909defe64f5312"}, @rr={0x7, 0x1b, 0xbe, [@remote, @private=0xa010102, @rand_addr=0x64010102, @broadcast, @loopback, @rand_addr=0x64010100]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001a00)={'gre0\x00', &(0x7f0000001900)={'ip_vti0\x00', 0x0, 0x1, 0x10, 0x7, 0x80000001, {{0x2f, 0x4, 0x0, 0x7, 0xbc, 0x68, 0x0, 0xdb, 0x2f, 0x0, @empty, @private=0xa010101, {[@generic={0x89, 0x10, "c24ca935a41956c981d602677be9"}, @timestamp_prespec={0x44, 0x34, 0xf9, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@remote, 0x7}, {@dev={0xac, 0x14, 0x14, 0x29}}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xa8}, {@local, 0x9}, {@empty, 0x4}]}, @rr={0x7, 0x2b, 0x95, [@private=0xa010102, @broadcast, @rand_addr=0x64010102, @private=0xa010102, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, @multicast1, @loopback, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x1c, 0xf7, 0x3, 0x5, [{@remote, 0xffffff2a}, {@multicast2, 0x1000000}, {@private=0xa010101, 0x2}]}, @timestamp_prespec={0x44, 0x1c, 0x15, 0x3, 0x4, [{@rand_addr=0x64010101, 0xfffff539}, {@remote, 0x80000001}, {@remote, 0x9}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001b00)={'tunl0\x00', &(0x7f0000001a40)={'syztnl0\x00', 0x0, 0x20, 0x7800, 0x3c00000, 0x9, {{0x26, 0x4, 0x3, 0x6, 0x98, 0x66, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x15, 0x0, [{0x7, 0x3, ','}, {0x7, 0xc, "1c533a06f71997d1fc5d"}]}, @ssrr={0x89, 0x17, 0xfb, [@dev={0xac, 0x14, 0x14, 0x3b}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast2, @private=0xa010101]}, @timestamp_addr={0x44, 0x24, 0xaf, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x1a}, 0x4}, {@broadcast, 0xa}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@rand_addr=0x64010101, 0x7}]}, @ssrr={0x89, 0xb, 0x50, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @noop, @end, @timestamp={0x44, 0x24, 0x86, 0x0, 0x5, [0x100, 0x7, 0x2, 0x60, 0x10, 0x7, 0x0, 0x4]}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000001c40)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b40)={0x8c, r5, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_WOL_MODES={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}]}, @ETHTOOL_A_WOL_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x48084}, 0x41) r12 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r12, &(0x7f0000001c80)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) r13 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001d40), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001d80)={{0x1, 0x1, 0x18, r1, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000001dc0)={0x0, 0x0, 0x0}, &(0x7f0000001e00)=0xc) fstat(r4, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000001cc0)='./file0\x00', &(0x7f0000001d00), 0xa00010, &(0x7f0000001ec0)={{'fd', 0x3d, r13}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r15}, 0x2c, {'group_id', 0x3d, r16}, 0x2c, {[{@default_permissions}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1a00}}, {@allow_other}], [{@fowner_gt={'fowner>', r17}}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@flag='dirsync'}, {@measure}]}}) ioctl$VIDIOC_DECODER_CMD(r14, 0xc0485660, &(0x7f0000002000)={0x3, 0x1, @start={0x4}}) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000002080)={0x2, 0x4}, 0x2) ioctl$KDGKBTYPE(r14, 0x4b33, &(0x7f00000020c0)) setsockopt$IP_VS_SO_SET_ADD(r12, 0x0, 0x482, &(0x7f0000002100)={0x33, @multicast1, 0x4e24, 0x1, 'nq\x00', 0x0, 0x5, 0xf}, 0x2c) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000002180)={'filter\x00', 0x0, [0x2, 0x5, 0xfffffffd]}, &(0x7f0000002200)=0x44) 3.210593814s ago: executing program 0 (id=5030): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x50}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002200)={0x50, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x3c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private1}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 3.209152087s ago: executing program 0 (id=5031): ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffffffffffd, 0x0, 0x6, @buffer={0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x801, 0x1}, 0x48) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_)d=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = open_tree(r4, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, 0x0, r4, 0x0, 0x46) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYRESDEC], &(0x7f0000000040)='GPL\x00'}, 0x94) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x18, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000100000001]}}) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f0000000680)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) 2.319775356s ago: executing program 3 (id=5032): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000456000/0x18000)=nil, 0x0, 0x0, 0x3, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.319033212s ago: executing program 4 (id=5033): pipe2(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000400)={[0x2, 0xffffffffffff8000, 0xb, 0x1c, 0xd802, 0x5, 0xff, 0x4, 0xffffffffd3d32f95, 0xd, 0x7fffffff, 0x80000001, 0x5, 0x1, 0x5, 0x97], 0xc000, 0x82}) r2 = syz_open_dev$radio(&(0x7f0000000940), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, &(0x7f0000000040)={0x98f904, 0x2, @value=0x5}) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0xfffffe0000000001, 0xfa0f, 0xffffffff}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x48000, 0x0) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000280)) connect$tipc(0xffffffffffffffff, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf2501"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7) recvmmsg(r7, &(0x7f0000003200)=[{{0x0, 0x0, 0x0}, 0x70000}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xfffffff7}], 0x3, 0x40, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000001c0)={{0x30000, 0x1000, 0xc, 0xf0, 0x0, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x10}, {0x2, 0x1000, 0x3, 0x9, 0x8, 0xb, 0x9, 0xa, 0x5, 0x0, 0x3, 0xc4}, {0xd000, 0x98ddb7fb0f345f3, 0xb, 0x0, 0x2, 0x7, 0x4, 0x0, 0xc, 0x0, 0x6, 0x3}, {0xb000, 0x80a0000, 0x8, 0xfc, 0x40, 0x4f, 0x2, 0xd, 0x2, 0x3, 0x3}, {0x2, 0x26000, 0x9, 0x1, 0x7, 0x9, 0x9, 0x5, 0x25, 0x46, 0xe, 0x4b}, {0x1000, 0xd000, 0x0, 0x0, 0x6, 0x6c, 0x1, 0x8, 0x4, 0x8d, 0x21, 0x3}, {0x6000, 0xeeef0000, 0xb, 0x9d, 0xd, 0xfe, 0x0, 0xf, 0x5, 0x3, 0x0, 0xf8}, {0x100000, 0xd000, 0xd, 0x17, 0x3, 0x2, 0xff, 0x0, 0x14, 0x6, 0x2, 0x7}, {0x4000, 0x5}, {0x2, 0x9}, 0x40010002, 0x0, 0xf000, 0x300, 0x5, 0x2000, 0xeeef0000, [0xffffffffffffff47, 0x401, 0x8, 0x5]}) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB], 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400000040000120fcff0700040000000100000804004880100001800c0010800400088004002a800c0002000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(0xffffffffffffffff, 0xc008aec1, &(0x7f00000000c0)={0x2, 0x0, [{0x7, 0x3, 0x4, 0x6, 0xe, 0x3, 0x4b}, {0x7, 0x1000, 0x2, 0xa, 0x10000, 0x5, 0x2}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) 2.314243743s ago: executing program 0 (id=5034): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000004040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x400) syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000080)={r4}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000e40)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003240)="6e4b7fc10a", 0x5}, {&(0x7f0000000580)="d0f7fe3489", 0x5}], 0x2, 0x0, 0x0, 0x4000800}], 0x1, 0x20004050) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28c81, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f00000000c0)) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r8, 0x29, 0x4b, 0x0, 0xad) setsockopt$sock_int(r8, 0x1, 0x9, &(0x7f0000000200), 0x4) syz_usb_control_io(r1, &(0x7f00000005c0)={0x2c, &(0x7f0000000340)={0x20, 0x22, 0x83, {0x83, 0x2, "b792783c57964ba7a8349e195be5d6f33fad9523bc3cd88d47704816be91de3ccc2e302482930bb03d2b40eb2f0062d35ef0a137607f6d88722cd80796d71fd5875cecfad92c135d6b07052bae2a0971e6135a5357cc3438b14d6296fef3a808352afd574d59b11c9ec15e97b367b84c978dd67fa1dcde884954ca092f6268bdde"}}, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003660000006603749bfaf50acb8065e6492b07000000000000009194f9bd441048511a17d86d2ff910f1aa05cc941c9a472f637ab7edd8e88e6c7537cfa82d0416cb0e11c4376dfb25f11b5acdd1bf2e33214654c590d88a015f75564d3e4c03c2152e6dd611a1202f7ddb"], &(0x7f00000002c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xac, "7ef74f3bde675fdc67bea074edfef6fb"}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "0bb3d778dd7b53c1f2394678a7d631d4"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x7bd, 0xf00, 0x5}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x18, 0x6, 0x0, "488bb8fd", "e1f5c948"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4a, 0x0, 0x0, 0x6, 0xc, 0x998d, 0x5}}}, &(0x7f0000000c40)={0x84, &(0x7f0000000600)={0x0, 0xb, 0x63, "a1a0d14aacaf9ba9379a4e30c26c65398a340248b755e54d0263b00b15e7e7ac931b1cba0d60d40418248ac5c03147a739b62ca47014405349c1665988f4b5cc447d3baf44af443ac4c698b8aff6333bd367cb98bd8b0e36deaefcf377898bed4abd1b"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x200, 0x8}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0xf912}, &(0x7f00000009c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000a00)={0x40, 0xb, 0x2, 'TA'}, &(0x7f0000000a40)={0x40, 0xf, 0x2, 0xa6c2}, &(0x7f0000000a80)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, &(0x7f0000000ac0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000b00)={0x40, 0x19, 0x2, "8b2c"}, &(0x7f0000000b40)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000b80)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000bc0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000c00)={0x40, 0x21, 0x1, 0x85}}) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x8890) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="ec0100005c8baebf10a8bf51d93734c417180010022bbd7000fbdbdf2500000000000000000000ffffac1e0001000000000000000000000000000000014e21c64b4e2200070a0000b02b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000180)={0x3, 0x0, '\x00', 0x1, &(0x7f0000000140)}) 2.218803196s ago: executing program 1 (id=5035): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80080) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x80984120, &(0x7f0000000580)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x8001, 0x0, 0x98, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x121800, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000086a82, 0x0) r4 = dup(r3) r5 = gettid() ptrace$ARCH_SET_GS(0x1e, r5, &(0x7f00000000c0), 0x1001) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r4, 0x3554000) fadvise64(r4, 0x85f5, 0x4000000005, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) unshare(0x40400) semop(0x0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semop(0x0, &(0x7f0000000380)=[{0x1, 0xbbdd, 0x1000}, {0x1, 0x2, 0x1000}], 0x2) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000240)=[0x6, 0x7fff]) socket$inet_tcp(0x2, 0x1, 0x0) r7 = fsopen(&(0x7f0000000940)='9p\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000040)='source', &(0x7f0000000b40)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>\xbcc\x84\xfe\xb3hOB\xdc4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8bZ\xec\x16\x9e[\xfe\x0f\x15\x81\x9cWC\xd2\x1f\xf0\xf2M24\xc3\x14B\xa7\x05\xd6(/&{\x9fl\x90\xbcM\xa4d\xa5\x8c\xcej\x1czTj\xa1G\xc1\xc4P\x88\"\xb5\xda6d\x04+\xd9\x0fw*FB\xa7\x8d\xfb\x15\rw\xf6c\x8a\xc2\xbeZ\xb2\xe8q\xde\xbe^\x91\x81\x16\x95b\xbad\x90.\x10\xc5e\xa7\xac\x9dQfTi\xdfB\x9b\xc7\x9c\xd7yN2\x83.F\x866\xc6/\xf8d<\x0eA\xf8s\x8b\xc5\x1b\xb9\f\x82', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000400)='source', &(0x7f0000000240)='//\xf2/\x06\b\xa30\\\\\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x10000006, 0x1}, &(0x7f0000000340)=0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x501b, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r4, 0x5) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r2, 0x3516, 0x2000, 0x0, 0x0, 0xfffffdcf) 1.879495354s ago: executing program 5 (id=5037): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r1 = io_uring_setup(0x67bb, &(0x7f00000025c0)={0x0, 0x1999, 0x80, 0x8000, 0x6e}) close(r1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendfile(r2, r2, 0x0, 0x400000000000000) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_FPU(r5, 0x41a0ae8d, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x1, @local}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="53c208214e54306380d783bc311020d9545b3d7713679fa2d5d238ad0054edeeb79380310f2e4e6cdc89a62ccbcaa3fe4d0873fc261d26bc235c0027d491adbbb033bae3ed011dabe3eeeae262bd61a7c4247afece56bd8d70e332219b9f612155dc6477e9f5e53fccbd337e0f3bb7acaa90ff", 0x73}, {&(0x7f0000000340)="1edde855fa19bce1204a79860d9951396c3a6ee463dce50cadbac978bd2bd47685b59095d86b4ead9ff46d6602c10a485cdae540d0b27ccfe5f2bad9d1e82f2b80b6eeb920bc9b7306b74957fd9e1a078aaa187685e7f00707019a081875cec051f2422e87862aa44a6ac678d3f6f7c08715c4c1b47d2e8a56535736289ca8391ef07f111fcd7217351c8f00902b11455e66d0e75c1dca36273110d993eb637d6bb842ef9f6c1cec162da1e23b5a15ad68391d6c4192fa7946bd21e7ce34499383a9725f7226ee1aae3d5a1d4832c96dade8f0226a033fda0cf15f9beea2dae2caacf990", 0xe4}], 0x2, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x450}, 0x4000080) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) ioctl$SNDCTL_DSP_RESET(r6, 0x5000, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000006c0)='htcp', 0x4) shutdown(r0, 0x1) 1.459921477s ago: executing program 5 (id=5038): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 959.357404ms ago: executing program 5 (id=5039): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x80894) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x800, 0x0, 0x3, 0x1}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x4801, 0x0) syz_open_procfs$userns(0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x40000) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r5}) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x8936, &(0x7f0000000000)) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) ioctl$int_in(r3, 0x5421, &(0x7f00000000c0)=0x7fffffffffffffff) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x238, 0x11, 0x148, 0x238, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x8800, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffe}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x2, {0x41}}, 0x10, 0x0}, 0x80) accept4(r3, 0x0, 0x0, 0x0) 726.341282ms ago: executing program 1 (id=5040): r0 = socket$inet(0x2, 0xa, 0x5) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000040)={@empty, @dev={0xac, 0x14, 0x14, 0x28}, 0x1, "cf4347345b485478af7626c37ec4a0f24a8a584d4b4ff95aa8ca44f093d9ace8", 0x0, 0x1, 0x6, 0x4}, 0x3c) getsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000000100)=""/157, &(0x7f0000000000)=0x9d) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000580)='overlay\x00', 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0x1b8, 0x0, 0x1b8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}, {0x5}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xf, 0x2}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000100)=@req={0x0, 0x2, 0xc, 0x9}, 0xc) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, 0x0, 0x110) r7 = openat$fb0(0xffffffffffffff9c, 0x0, 0x22002, 0x0) r8 = syz_open_dev$media(&(0x7f0000000380), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc0287c02, &(0x7f00000008c0)={0x80000000, 0x0, &(0x7f0000000940)=[{{}, {0x80000000, 0x0}}, {{}, {0x80000000, 0x0}}]}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)=0x20005, 0x4) r12 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r12, 0x0, 0x0, 0x20000010, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) ioctl$MEDIA_IOC_SETUP_LINK(r8, 0xc0347c03, &(0x7f00000001c0)={{r10, r9, 0x1, [0x0, 0xf7df]}, {r10, r11, 0x4, [0x8, 0xffffffff]}, 0x1, [0x8, 0x3df]}) ioctl$FBIOBLANK(r7, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r7, 0x40044620, 0x0) 163.805417ms ago: executing program 3 (id=5041): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x70bd28, 0x1, {0xf, 0x0, 0xfffc}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}}, 0x80) 0s ago: executing program 3 (id=5042): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80080) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x80984120, &(0x7f0000000580)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x8001, 0x0, 0x98, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x121800, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000086a82, 0x0) r4 = dup(r3) r5 = gettid() ptrace$ARCH_SET_GS(0x1e, r5, &(0x7f00000000c0), 0x1001) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r4, 0x3554000) fadvise64(r4, 0x85f5, 0x4000000005, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) unshare(0x40400) semop(0x0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semop(0x0, &(0x7f0000000380)=[{0x1, 0xbbdd, 0x1000}, {0x1, 0x2, 0x1000}], 0x2) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000240)=[0x6, 0x7fff]) socket$inet_tcp(0x2, 0x1, 0x0) r7 = fsopen(&(0x7f0000000940)='9p\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000040)='source', &(0x7f0000000b40)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>\xbcc\x84\xfe\xb3hOB\xdc4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8bZ\xec\x16\x9e[\xfe\x0f\x15\x81\x9cWC\xd2\x1f\xf0\xf2M24\xc3\x14B\xa7\x05\xd6(/&{\x9fl\x90\xbcM\xa4d\xa5\x8c\xcej\x1czTj\xa1G\xc1\xc4P\x88\"\xb5\xda6d\x04+\xd9\x0fw*FB\xa7\x8d\xfb\x15\rw\xf6c\x8a\xc2\xbeZ\xb2\xe8q\xde\xbe^\x91\x81\x16\x95b\xbad\x90.\x10\xc5e\xa7\xac\x9dQfTi\xdfB\x9b\xc7\x9c\xd7yN2\x83.F\x866\xc6/\xf8d<\x0eA\xf8s\x8b\xc5\x1b\xb9\f\x82', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000400)='source', &(0x7f0000000240)='//\xf2/\x06\b\xa30\\\\\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b initial count (1786943000 ns). Using initial count to start timer. [ 573.572134][T16987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4054'. [ 573.896378][ T5864] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 573.966352][T14131] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 574.110731][ T5864] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 574.119444][ T5864] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 574.150546][ T5864] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 574.150566][T14131] usb 1-1: Using ep0 maxpacket: 32 [ 574.159775][T16999] xt_TPROXY: Can be used only with -p tcp or -p udp [ 574.172455][ T5864] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.175444][T14131] usb 1-1: config 0 has an invalid descriptor of length 183, skipping remainder of the config [ 574.234741][T14131] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 574.269454][ T5864] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 574.280765][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 574.416268][T14131] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 574.422522][ T5864] usb 4-1: Product: syz [ 574.457471][T14131] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 574.466964][ T5864] usb 4-1: Manufacturer: syz [ 574.467123][T14131] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.506439][T14131] usb 1-1: Product: syz [ 574.526365][T14131] usb 1-1: Manufacturer: syz [ 574.548905][ T5864] cdc_wdm 4-1:1.0: skipping garbage [ 574.551833][T14131] usb 1-1: SerialNumber: syz [ 574.577229][ T5864] cdc_wdm 4-1:1.0: skipping garbage [ 574.618789][ T5864] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 574.633342][T14131] usb 1-1: config 0 descriptor?? [ 574.736317][T16987] openvswitch: netlink: Tunnel attr 42 out of range max 16 [ 574.929012][T14131] usb 1-1: USB disconnect, device number 38 [ 575.811041][T17025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4066'. [ 576.170519][T17041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4069'. [ 576.459595][T17045] tipc: Cannot configure node identity twice [ 577.081194][T17066] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4079'. [ 577.332040][T14131] usb 4-1: USB disconnect, device number 50 [ 577.548776][T17075] xt_TPROXY: Can be used only with -p tcp or -p udp [ 578.490358][T17084] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 578.497369][T17084] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 578.504224][T17084] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 578.516470][T17084] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 578.534341][T17084] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 578.599469][T17097] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 578.813806][T17098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4086'. [ 579.437757][T17105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4090'. [ 580.296321][ T5864] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 580.536325][ T5864] usb 6-1: Using ep0 maxpacket: 16 [ 580.544540][ T5864] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.567398][ T5864] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 580.586782][ T5833] Bluetooth: hci4: command 0x0c1a tx timeout [ 580.592989][T16468] Bluetooth: hci1: command 0x0c1a tx timeout [ 580.599650][T16468] Bluetooth: hci3: command 0x0c1a tx timeout [ 580.605917][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 580.656301][ T5864] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 580.686115][ T5864] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 580.719339][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.755659][ T5864] usb 6-1: config 0 descriptor?? [ 580.797471][T17112] xt_TPROXY: Can be used only with -p tcp or -p udp [ 580.903453][T17140] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 580.917225][T17140] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 581.092946][T17140] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 581.103836][T17140] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 581.141088][T17140] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 581.296721][T17151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4106'. [ 581.658689][T17132] random: crng reseeded on system resumption [ 581.726786][ T5864] input: HID 0955:7214 Haptics as /devices/virtual/input/input45 [ 581.825282][ T5864] shield 0003:0955:7214.001A: Registered Thunderstrike controller [ 581.872501][ T5864] shield 0003:0955:7214.001A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 581.986910][ T9] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 582.002183][ T5864] usb 6-1: USB disconnect, device number 37 [ 582.029011][ T9] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 582.098086][ T9] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 582.148595][ T9] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 582.356239][T17145] Bluetooth: hci5: command 0x0c1a tx timeout [ 582.989033][T17145] Bluetooth: hci2: command 0x0c1a tx timeout [ 583.146410][T17145] Bluetooth: hci1: command 0x0c1a tx timeout [ 583.146419][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 583.226345][T17145] Bluetooth: hci4: command 0x0c1a tx timeout [ 583.376447][T17205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4117'. [ 583.966506][ T5940] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 584.283814][T17232] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 584.501521][T17213] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 584.553233][ T5940] usb 1-1: Using ep0 maxpacket: 8 [ 584.757970][ T5940] usb 1-1: too many configurations: 249, using maximum allowed: 8 [ 584.801429][ T5940] usb 1-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=b3.ff [ 584.817795][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 584.841503][ T5940] usb 1-1: Product: syz [ 584.851328][ T5940] usb 1-1: Manufacturer: syz [ 584.882978][ T5940] usb 1-1: SerialNumber: syz [ 584.927844][ T5940] usb 1-1: config 0 descriptor?? [ 584.950151][T17241] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 585.428470][ T5940] mdc800 1-1:0.0: probe fails -> wrong Number of Configuration [ 585.556607][ T5940] usb 1-1: USB disconnect, device number 39 [ 586.930179][T17279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4138'. [ 586.956318][ T797] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 587.136325][ T797] usb 4-1: Using ep0 maxpacket: 16 [ 587.151282][ T797] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 587.208723][ T797] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 587.277392][ T797] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 587.321826][ T797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.363224][ T797] usb 4-1: config 0 descriptor?? [ 588.068761][ T49] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.122147][ T49] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.166303][ T49] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.175324][ T49] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.479554][T17313] random: crng reseeded on system resumption [ 588.941299][T17340] fuse: Unknown parameter '0x0000000000000003' [ 589.275712][T17345] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 589.471753][T17348] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4153'. [ 589.859678][T17353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4154'. [ 589.976779][ T796] usb 4-1: USB disconnect, device number 51 [ 590.158447][T17364] syz_tun: entered allmulticast mode [ 590.178971][T17363] syz_tun: left allmulticast mode [ 590.272121][T17368] openvswitch: netlink: Flow actions attr not present in new flow. [ 590.310144][ T9] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 590.366575][ T796] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 590.469205][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 590.478270][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 590.498934][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 590.519980][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.536346][ T796] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 590.564157][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 590.564179][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 590.564191][ T9] usb 1-1: Product: syz [ 590.564199][ T9] usb 1-1: Manufacturer: syz [ 590.572335][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 590.572350][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 590.572394][ T9] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 590.574560][ T796] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.574594][ T796] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.574616][ T796] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 590.574654][ T796] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 590.574675][ T796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.588149][ T796] usb 5-1: config 0 descriptor?? [ 590.782827][T17353] openvswitch: netlink: Tunnel attr 42 out of range max 16 [ 591.005544][ T796] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 591.021449][ T796] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 591.041314][ T796] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 591.056637][ T796] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 591.064383][ T796] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 591.071993][ T796] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 591.082975][ T796] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 591.091511][ T796] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 591.099409][ T796] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 591.107860][ T796] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 591.148820][ T796] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 591.485566][ T796] usb 5-1: USB disconnect, device number 65 [ 592.128163][T17399] syz_tun: entered allmulticast mode [ 592.142460][T17398] syz_tun: left allmulticast mode [ 592.476462][ T9] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 592.989338][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 593.015708][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 593.039519][T17409] 9p: p9: multiple sources not supported [ 593.049267][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 593.083566][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 593.127986][ T9] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 593.137711][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.207704][ T5940] usb 1-1: USB disconnect, device number 40 [ 593.256326][ T9] usb 5-1: Product: syz [ 593.266623][ T9] usb 5-1: Manufacturer: syz [ 593.292379][ T9] usb 5-1: SerialNumber: syz [ 593.306786][ T9] usb 5-1: config 0 descriptor?? [ 593.399322][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input46 [ 593.520175][ C0] xpad 5-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 593.536403][ T9] usb 5-1: USB disconnect, device number 66 [ 593.826270][ T5940] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 593.977968][ T5940] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 594.018189][ T5940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.052029][ T5940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.089264][ T5940] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 594.116268][ T5940] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 594.135627][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.176378][ T5940] usb 1-1: config 0 descriptor?? [ 594.668953][ T5940] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 594.936527][ T9] usb 1-1: USB disconnect, device number 41 [ 595.181779][T17460] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 596.624480][T17476] 9p: p9: multiple sources not supported [ 597.686268][ T796] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 597.867548][ T796] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 597.966537][ T796] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.978853][ T796] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.989912][ T796] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 598.003881][ T796] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 598.014264][ T796] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.048842][ T796] usb 6-1: config 0 descriptor?? [ 598.468109][ T796] hid_parser_main: 20 callbacks suppressed [ 598.468125][ T796] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 598.514178][ T796] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 598.555838][ T796] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 598.576103][ T796] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 598.619820][ T796] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 598.628050][ T796] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 598.635651][ T796] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 598.644555][ T796] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 598.654137][ T796] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 598.662588][ T796] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 598.710729][ T796] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 598.778822][ T796] usb 6-1: USB disconnect, device number 38 [ 598.881620][T17535] fido_id[17535]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 599.436531][ T9] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 599.586268][ T9] usb 2-1: device descriptor read/64, error -71 [ 599.770956][T17553] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4222'. [ 599.847018][ T10] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 599.854695][ T9] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 599.986289][ T9] usb 2-1: device descriptor read/64, error -71 [ 600.012193][ T10] usb 1-1: config 0 has no interfaces? [ 600.020805][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 600.043275][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.069856][ T10] usb 1-1: config 0 descriptor?? [ 600.096793][ T9] usb usb2-port1: attempt power cycle [ 600.466245][ T9] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 600.546771][ T9] usb 2-1: device descriptor read/8, error -71 [ 600.906614][ T9] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 600.967426][ T9] usb 2-1: device descriptor read/8, error -71 [ 601.098470][ T9] usb usb2-port1: unable to enumerate USB device [ 601.544513][T17584] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 602.064771][T17591] xt_TPROXY: Can be used only with -p tcp or -p udp [ 603.071479][T17599] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 603.256874][T17287] usb 1-1: USB disconnect, device number 42 [ 603.302834][T17607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4234'. [ 603.653348][T17611] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 603.956059][T17601] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 607.067577][T17660] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 607.354340][T17664] syzkaller0: entered promiscuous mode [ 607.360165][T17664] syzkaller0: entered allmulticast mode [ 607.434371][T17667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4253'. [ 608.227309][T17681] xt_TPROXY: Can be used only with -p tcp or -p udp [ 612.035305][T17698] xt_TPROXY: Can be used only with -p tcp or -p udp [ 612.661066][ T1113] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.703464][ T1113] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.720296][ T1113] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.802244][ T1113] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.417441][T17705] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 613.425291][T17705] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 613.432175][T17705] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 613.511218][T17705] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 613.561119][T17705] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 613.563588][T17711] xt_hashlimit: size too large, truncated to 1048576 [ 614.324726][T17726] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4265'. [ 614.385968][T17726] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4265'. [ 614.913626][T17740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4269'. [ 614.922943][T17145] Bluetooth: hci5: command 0x0c1a tx timeout [ 615.214780][ T49] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.247209][ T49] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.298084][ T49] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.382711][ T49] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.507953][T17145] Bluetooth: hci3: command 0x0c1a tx timeout [ 615.514377][T17145] Bluetooth: hci2: command 0x0c1a tx timeout [ 615.546367][T17145] Bluetooth: hci1: command 0x0c1a tx timeout [ 615.663191][T17145] Bluetooth: hci4: command 0x0c1a tx timeout [ 615.968306][T17761] xt_TPROXY: Can be used only with -p tcp or -p udp [ 616.732110][T17776] xt_hashlimit: size too large, truncated to 1048576 [ 617.226364][ T9] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 617.620962][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 617.631849][T17818] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 617.689477][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 617.739630][ T9] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 617.779725][ T9] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 617.856322][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.917954][ T9] usb 6-1: config 0 descriptor?? [ 617.996053][T17825] xt_hashlimit: size too large, truncated to 1048576 [ 619.044657][T17846] netlink: 'syz.0.4294': attribute type 10 has an invalid length. [ 619.054884][T17846] team0: Port device vxcan1 added [ 619.554038][T17862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4299'. [ 619.644164][T17864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4301'. [ 619.928728][T17868] xt_TPROXY: Can be used only with -p tcp or -p udp [ 620.178116][ T10] usb 6-1: USB disconnect, device number 39 [ 620.787961][T17888] xt_TPROXY: Can be used only with -p tcp or -p udp [ 620.897473][ T10] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 621.129924][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 621.248885][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 621.266578][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 621.283368][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 621.295928][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 621.429019][ T10] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 621.439142][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.451571][ T10] usb 5-1: Product: syz [ 621.464136][ T10] usb 5-1: Manufacturer: syz [ 621.476589][ T10] usb 5-1: SerialNumber: syz [ 621.494705][ T10] usb 5-1: config 0 descriptor?? [ 621.505629][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input47 [ 621.766059][ T10] usb 5-1: USB disconnect, device number 67 [ 621.808411][T17882] udevd[17882]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 621.843634][T17899] program syz.5.4307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 622.766334][ T796] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 622.926277][ T796] usb 1-1: Using ep0 maxpacket: 32 [ 622.956810][ T796] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 622.967757][ T796] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 622.977350][ T796] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 622.991662][ T796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.156359][ T796] usb 1-1: config 0 descriptor?? [ 624.402617][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.412931][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.582620][ T796] usb 1-1: USB disconnect, device number 43 [ 626.028335][T17981] netlink: 'syz.3.4329': attribute type 7 has an invalid length. [ 626.036364][T17981] netlink: 'syz.3.4329': attribute type 8 has an invalid length. [ 626.102013][T17982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4330'. [ 627.425823][T17988] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 628.859845][T17978] lo: entered allmulticast mode [ 628.865278][T17978] lo: left allmulticast mode [ 628.906576][T17999] syz_tun: entered allmulticast mode [ 628.916497][T17999] syz_tun: left allmulticast mode [ 629.432600][ T796] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 629.617210][T18020] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 629.756239][ T796] usb 2-1: Using ep0 maxpacket: 32 [ 629.842208][ T796] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 629.853136][ T796] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 629.871584][ T796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.028881][ T796] usb 2-1: config 0 descriptor?? [ 630.606049][T18033] xt_hashlimit: size too large, truncated to 1048576 [ 630.874324][T18040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4345'. [ 631.156910][T18049] lo: entered allmulticast mode [ 631.163971][T18049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4348'. [ 631.181568][T18046] lo: left allmulticast mode [ 632.206292][ T9] usb 2-1: USB disconnect, device number 74 [ 633.458601][T18079] xt_hashlimit: size too large, truncated to 1048576 [ 634.252687][T18088] syz_tun: entered allmulticast mode [ 634.307431][T18088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4359'. [ 634.992061][T18088] syz_tun (unregistering): left allmulticast mode [ 635.299047][T18092] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 635.387489][T18092] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 635.388615][T18098] fuse: Bad value for 'fd' [ 635.393609][T18092] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 635.437781][T18092] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 635.450262][T18092] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 636.186529][ T10] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 636.366599][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 636.385582][ T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 636.412310][ T10] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 636.479688][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.544981][T18122] program syz.0.4368 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 636.738120][ T10] usb 5-1: config 0 descriptor?? [ 636.852330][T18124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4369'. [ 637.220537][T17145] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 637.229553][ T5833] Bluetooth: hci5: command 0x0c1a tx timeout [ 637.241286][T17145] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 637.252044][T17145] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 637.260426][T17145] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 637.273949][T17145] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 637.411129][T18132] syz_tun: entered allmulticast mode [ 637.432478][T18132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4371'. [ 637.467509][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 637.473683][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 637.479868][T17145] Bluetooth: hci4: command 0x0c1a tx timeout [ 637.479890][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 637.544835][T18132] syz_tun (unregistering): left allmulticast mode [ 637.685883][T18129] chnl_net:caif_netlink_parms(): no params data found [ 637.800354][T18129] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.810924][T18129] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.821582][T18129] bridge_slave_0: entered allmulticast mode [ 637.836849][T18129] bridge_slave_0: entered promiscuous mode [ 637.851877][T18129] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.859750][T18129] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.868967][T18129] bridge_slave_1: entered allmulticast mode [ 637.880346][T18129] bridge_slave_1: entered promiscuous mode [ 637.919446][T18129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 637.938344][T18129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.010500][T18129] team0: Port device team_slave_0 added [ 638.019272][T18129] team0: Port device team_slave_1 added [ 638.067508][T18129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.074716][T18129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.120198][T18129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 638.137761][T18129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 638.145425][T18129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.172582][T18129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 638.291470][T18129] hsr_slave_0: entered promiscuous mode [ 638.370709][T18129] hsr_slave_1: entered promiscuous mode [ 638.382544][T18129] debugfs: 'hsr0' already exists in 'hsr' [ 638.394276][T18129] Cannot create hsr debugfs directory [ 638.825785][ T796] usb 5-1: USB disconnect, device number 68 [ 638.960982][T18152] fuse: Bad value for 'fd' [ 638.982377][T18149] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 638.996617][T18149] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 639.003113][T18149] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 639.011064][T18149] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 639.024987][T18149] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 639.038776][T18149] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 639.052118][T18149] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 639.077814][T18149] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 639.153849][T18129] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 639.190543][T18129] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 639.227288][T18129] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 639.274949][T18129] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 639.665710][T18165] 9p: p9: multiple sources not supported [ 640.486080][T18186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4381'. [ 640.597429][ T1128] bond0 (unregistering): Released all slaves [ 640.937700][T18182] syz_tun: entered allmulticast mode [ 641.045773][T18186] syz_tun (unregistering): left allmulticast mode [ 641.085489][T16468] Bluetooth: hci0: command 0x041b tx timeout [ 641.092908][ T5833] Bluetooth: hci4: command 0x0c1a tx timeout [ 641.092983][T17145] Bluetooth: hci1: command 0x0c1a tx timeout [ 641.099917][T16468] Bluetooth: hci3: command 0x0c1a tx timeout [ 641.108651][T17145] Bluetooth: hci2: command 0x0c1a tx timeout [ 641.142464][ T1128] tipc: Left network mode [ 641.355734][T18129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 641.459486][T18129] 8021q: adding VLAN 0 to HW filter on device team0 [ 641.487761][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.494897][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 641.547176][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.554520][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 641.705808][T18203] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4385'. [ 641.733089][ T1128] hsr_slave_0: left promiscuous mode [ 641.742724][ T1128] hsr_slave_1: left promiscuous mode [ 642.391573][T18129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 642.448632][T18129] veth0_vlan: entered promiscuous mode [ 642.477050][T18129] veth1_vlan: entered promiscuous mode [ 642.555922][T18129] veth0_macvtap: entered promiscuous mode [ 642.578722][T18129] veth1_macvtap: entered promiscuous mode [ 642.615383][T18129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 642.639949][ T1128] IPVS: stop unused estimator thread 0... [ 642.654987][T18129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 642.683193][ T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.698047][T18218] binder: 18217:18218 ioctl c0306201 0 returned -14 [ 642.703811][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.754982][ T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.772736][ T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.057295][T18219] binder: 18217:18219 ioctl c0306201 0 returned -14 [ 643.156295][T18190] Bluetooth: hci0: command 0x041b tx timeout [ 643.210263][T18216] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 643.218834][T18216] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 643.225111][T18216] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 643.232188][T18216] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 643.239313][T18216] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 643.302832][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.327706][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.361210][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.372061][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.480724][T18229] xt_hashlimit: size too large, truncated to 1048576 [ 643.487678][T17287] usb 1-1: new low-speed USB device number 44 using dummy_hcd [ 643.648071][T17287] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 643.662085][T17287] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 643.679998][T17287] usb 1-1: config 0 has no interface number 0 [ 643.698900][T17287] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 643.736871][T17287] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 643.748847][T17287] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 643.760034][T17287] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.773507][T17287] usb 1-1: config 0 descriptor?? [ 644.037613][T18240] lo: entered allmulticast mode [ 644.046719][T18239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4392'. [ 644.060679][T18238] lo: left allmulticast mode [ 644.506493][T18190] Bluetooth: hci2: command 0x0c1a tx timeout [ 645.235184][T18190] Bluetooth: hci1: command 0x0c1a tx timeout [ 645.241459][T18190] Bluetooth: hci3: command 0x0c1a tx timeout [ 645.319201][T18190] Bluetooth: hci0: command 0x041b tx timeout [ 645.326501][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 646.218429][T17287] usb 1-1: USB disconnect, device number 44 [ 646.841593][T18276] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 647.295685][T18275] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 647.304420][T18275] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 647.323857][T18275] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 647.339425][T18275] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 647.357207][T18275] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 647.400885][T18290] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4408'. [ 647.559033][T18300] netlink: 'syz.4.4409': attribute type 7 has an invalid length. [ 647.567116][T18300] netlink: 'syz.4.4409': attribute type 8 has an invalid length. [ 647.675607][T18287] 9p: p9: multiple sources not supported [ 647.958700][T18305] binder: 18302:18305 ioctl c0306201 0 returned -14 [ 648.691888][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 649.119446][T18308] binder: 18302:18308 ioctl c0306201 0 returned -14 [ 649.347856][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 649.386248][ T5829] Bluetooth: hci0: command 0x041b tx timeout [ 649.392306][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 649.398497][T18190] Bluetooth: hci4: command 0x0c1a tx timeout [ 649.446032][T18317] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 649.671462][ T5908] usb 1-1: new low-speed USB device number 45 using dummy_hcd [ 649.905089][ T5908] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 649.926263][ T5908] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 649.944844][ T5908] usb 1-1: config 0 has no interface number 0 [ 649.960549][ T5908] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 649.985282][ T5908] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 650.006335][ T5908] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 650.015597][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.055045][ T5908] usb 1-1: config 0 descriptor?? [ 650.801215][T18330] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 650.808107][T18330] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 650.822852][T18330] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 650.829348][T18330] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 650.835434][T18330] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 651.004567][T18342] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 651.101854][T18346] netlink: 'syz.1.4425': attribute type 7 has an invalid length. [ 651.109751][T18346] netlink: 'syz.1.4425': attribute type 8 has an invalid length. [ 651.517879][T17287] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 651.676669][T17287] usb 5-1: Using ep0 maxpacket: 8 [ 651.683739][T17287] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 651.694425][T17287] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 651.704535][T17287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.718326][T17287] usb 5-1: config 0 descriptor?? [ 651.727741][T17287] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 651.803114][ T5908] usb 1-1: USB disconnect, device number 45 [ 652.008102][T18359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4431'. [ 652.106053][T18363] lo: entered allmulticast mode [ 652.187839][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 652.328359][ T5894] usb 5-1: USB disconnect, device number 69 [ 652.407112][ T5908] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 652.579201][ T5908] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 652.587750][ T5908] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 652.599638][ T5908] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 652.612297][ T5908] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 652.621340][ T5908] usb 1-1: Manufacturer: syz [ 652.700170][ T5908] usb 1-1: config 0 descriptor?? [ 652.804927][ T5908] igorplugusb 1-1:0.0: incorrect number of endpoints [ 652.836534][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 652.842676][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 652.926304][ T5829] Bluetooth: hci0: command 0x041b tx timeout [ 652.926313][T17145] Bluetooth: hci4: command 0x0c1a tx timeout [ 653.009107][T18363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.059022][T18363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.101616][ T5894] usb 1-1: USB disconnect, device number 46 [ 653.124870][T18362] lo: left allmulticast mode [ 653.543794][T18392] program syz.4.4440 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 653.856577][T17287] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 654.032478][T17287] usb 6-1: Using ep0 maxpacket: 16 [ 654.041613][T17287] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 654.416942][T17287] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 654.426035][T17287] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.540575][T17287] usb 6-1: config 0 descriptor?? [ 654.575921][T17287] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 654.666718][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 654.994267][T17145] Bluetooth: hci0: command 0x041b tx timeout [ 655.086772][T18420] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 655.668385][T18427] random: crng reseeded on system resumption [ 656.487284][T18441] team0: Port device vxcan1 removed [ 656.503592][T18441] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 657.075507][T17287] usb 6-1: USB disconnect, device number 40 [ 659.638314][T18480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4464'. [ 659.647958][T18485] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4467'. [ 659.722583][T18485] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4467'. [ 659.753157][T18485] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4467'. [ 659.997744][ T10] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 660.308076][ T10] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 660.316961][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 660.329477][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 660.341836][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 660.850655][ T10] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 660.862169][ T10] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 660.900503][ T10] usb 2-1: Product: syz [ 660.936543][ T10] usb 2-1: Manufacturer: syz [ 660.958883][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 660.966172][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 660.971459][ T10] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 660.976285][T17287] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 661.172761][T17287] usb 5-1: no configurations [ 661.177538][T17287] usb 5-1: can't read configurations, error -22 [ 661.317291][T18480] openvswitch: netlink: Tunnel attr 42 out of range max 16 [ 661.406332][T17287] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 661.616932][T17287] usb 5-1: no configurations [ 661.621665][T17287] usb 5-1: can't read configurations, error -22 [ 661.648975][T17287] usb usb5-port1: attempt power cycle [ 661.908611][T18523] bridge_slave_0: left allmulticast mode [ 661.914410][T18523] bridge_slave_0: left promiscuous mode [ 661.920324][T18523] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.995653][T18523] bridge_slave_1: left allmulticast mode [ 662.001446][T18523] bridge_slave_1: left promiscuous mode [ 662.010546][T18523] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.137495][T17287] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 662.154101][T18523] bond0: (slave bond_slave_0): Releasing backup interface [ 662.182450][T18523] bond0: (slave bond_slave_1): Releasing backup interface [ 662.219435][T18523] team0: Port device team_slave_0 removed [ 662.245253][T18523] team0: Port device team_slave_1 removed [ 662.254711][T18523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 662.265371][T17287] usb 5-1: no configurations [ 662.270375][T18523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 662.399649][T17287] usb 5-1: can't read configurations, error -22 [ 662.434172][T18523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 662.442115][T18523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 662.574292][ T5908] usb 2-1: USB disconnect, device number 75 [ 662.586443][T17287] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 662.617499][T17287] usb 5-1: no configurations [ 662.622147][T17287] usb 5-1: can't read configurations, error -22 [ 662.657290][T18523] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 662.754631][T17287] usb usb5-port1: unable to enumerate USB device [ 662.868789][T18530] team0: Port device vxcan1 removed [ 662.886557][T18530] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 663.110209][T18541] program syz.1.4485 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 663.620241][T18557] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 664.231868][T18568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4492'. [ 664.501786][T18570] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 664.626247][ T5894] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 664.921391][ T5894] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 664.947274][ T5894] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 665.030034][ T5894] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 665.075684][T18578] program syz.5.4498 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 665.085130][ T5894] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.225213][ T5894] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 665.266997][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 665.288947][ T5894] usb 5-1: Product: syz [ 665.297712][ T5894] usb 5-1: Manufacturer: syz [ 665.340972][ T5894] cdc_wdm 5-1:1.0: skipping garbage [ 665.354469][ T5894] cdc_wdm 5-1:1.0: skipping garbage [ 665.392336][ T5894] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 665.547759][T18568] openvswitch: netlink: Tunnel attr 42 out of range max 16 [ 666.304469][T18599] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4503'. [ 666.448085][T18600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4502'. [ 666.651226][T18605] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 666.858005][T17287] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 667.177572][T17287] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 667.196233][T17287] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 667.264170][T17287] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 667.300113][T17287] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.341559][T18613] 9p: p9: multiple sources not supported [ 667.483129][T17287] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 667.513453][T17287] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 667.542880][T17287] usb 4-1: Product: syz [ 667.543744][ T10] usb 5-1: USB disconnect, device number 74 [ 667.611158][T17287] usb 4-1: Manufacturer: syz [ 667.647052][T17287] cdc_wdm 4-1:1.0: skipping garbage [ 667.656194][T17287] cdc_wdm 4-1:1.0: skipping garbage [ 667.675169][T17287] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 669.220741][T18642] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4514'. [ 669.359235][T17287] usb 4-1: USB disconnect, device number 52 [ 669.433504][T18648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4515'. [ 670.044226][T18661] xt_hashlimit: size too large, truncated to 1048576 [ 670.046362][T17287] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 670.157095][T18666] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 670.258182][T17287] usb 4-1: Using ep0 maxpacket: 16 [ 670.275884][T17287] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.287282][T17287] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 670.308933][T17287] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 670.495063][T17287] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 670.509093][T17287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.533529][T17287] usb 4-1: config 0 descriptor?? [ 670.837611][T18678] 9p: p9: multiple sources not supported [ 670.961887][T17287] hid_parser_main: 5 callbacks suppressed [ 670.961909][T17287] shield 0003:0955:7214.001E: unknown main item tag 0x0 [ 671.025937][T17287] shield 0003:0955:7214.001E: unknown main item tag 0x0 [ 671.034402][T17287] shield 0003:0955:7214.001E: unknown main item tag 0x0 [ 671.083768][T17287] shield 0003:0955:7214.001E: unknown main item tag 0x0 [ 671.091512][T17287] shield 0003:0955:7214.001E: unknown main item tag 0x0 [ 671.103982][T17287] input: HID 0955:7214 Haptics as /devices/virtual/input/input50 [ 671.192952][T17287] shield 0003:0955:7214.001E: Registered Thunderstrike controller [ 671.205251][T18656] random: crng reseeded on system resumption [ 671.215348][T17287] shield 0003:0955:7214.001E: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 671.569945][T18684] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4525'. [ 671.607535][ T796] shield 0003:0955:7214.001E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 671.607974][ T5894] usb 4-1: USB disconnect, device number 53 [ 671.843346][ T796] shield 0003:0955:7214.001E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 671.887551][ T796] shield 0003:0955:7214.001E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 672.091511][T18690] netlink: 'syz.1.4526': attribute type 7 has an invalid length. [ 672.099442][T18690] netlink: 'syz.1.4526': attribute type 8 has an invalid length. [ 672.698612][T18706] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 673.064892][T18708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4531'. [ 673.336289][ T10] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 674.058085][ T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 674.126861][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 674.157223][T18718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4533'. [ 674.182623][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 674.215158][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 674.302973][ T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 674.335947][ T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 674.366850][ T10] usb 4-1: Product: syz [ 674.379909][ T10] usb 4-1: Manufacturer: syz [ 674.426654][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 674.432335][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 674.480756][ T10] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 674.660837][T18708] openvswitch: netlink: Tunnel attr 42 out of range max 16 [ 674.932089][T18731] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4536'. [ 675.203836][T18734] 9p: p9: multiple sources not supported [ 675.479875][T18744] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4539'. [ 676.383969][ T5908] usb 4-1: USB disconnect, device number 54 [ 676.689343][T18753] netlink: 300 bytes leftover after parsing attributes in process `syz.3.4542'. [ 676.859362][T18760] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4545'. [ 677.196470][T18765] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 677.431169][T18767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4544'. [ 677.816304][ T796] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 678.163214][ T796] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 678.201101][ T796] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 678.227587][ T796] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 678.239523][ T796] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.252540][ T796] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 678.280974][ T796] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 678.299763][ T796] usb 4-1: Product: syz [ 678.309698][ T796] usb 4-1: Manufacturer: syz [ 678.383571][ T796] cdc_wdm 4-1:1.0: skipping garbage [ 678.400005][ T796] cdc_wdm 4-1:1.0: skipping garbage [ 678.409323][ T796] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 678.475240][T18790] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4550'. [ 678.605117][T18767] openvswitch: netlink: Tunnel attr 42 out of range max 16 [ 678.794774][T18790] 9p: p9: multiple sources not supported [ 679.175767][T18799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4551'. [ 679.391251][T18802] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 679.910361][T18808] xt_TPROXY: Can be used only with -p tcp or -p udp [ 680.532634][ T10] usb 4-1: USB disconnect, device number 55 [ 680.818281][T18817] netlink: 300 bytes leftover after parsing attributes in process `syz.5.4555'. [ 680.874945][T18819] binder: BINDER_SET_CONTEXT_MGR already set [ 680.886767][T18819] binder: 18818:18819 ioctl 4018620d 200000004a80 returned -16 [ 680.939946][T18821] xt_hashlimit: size too large, truncated to 1048576 [ 680.980766][T18824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4557'. [ 682.095833][T18842] binder: 18841:18842 ioctl c0306201 0 returned -14 [ 683.002804][T18854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4565'. [ 683.256482][T17287] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 683.445086][T17287] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 683.467412][T17287] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 683.479469][T18857] binder: 18841:18857 ioctl c0306201 0 returned -14 [ 683.506234][T17287] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 683.519806][T17287] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.583600][T18861] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4566'. [ 683.596094][T17287] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 683.615835][T17287] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 683.634714][T17287] usb 4-1: Product: syz [ 683.640900][T17287] usb 4-1: Manufacturer: syz [ 683.721147][T17287] cdc_wdm 4-1:1.0: skipping garbage [ 683.737212][T17287] cdc_wdm 4-1:1.0: skipping garbage [ 683.747538][T17287] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 683.799742][ T796] usb 5-1: new low-speed USB device number 75 using dummy_hcd [ 683.922905][T18854] openvswitch: netlink: Tunnel attr 42 out of range max 16 [ 683.956262][T17287] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 683.969766][ T796] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 683.978375][ T796] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 683.991269][ T796] usb 5-1: config 0 has no interface number 0 [ 684.001504][ T796] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 684.012381][ T796] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 684.239906][T18866] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 684.277092][ T796] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 684.388651][ T796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.526655][T17287] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 684.535525][T17287] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 684.565794][T17287] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 684.583238][T17287] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.596348][ T796] usb 5-1: config 0 descriptor?? [ 684.628279][T17287] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 684.643795][T17287] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 684.656219][T17287] usb 6-1: Product: syz [ 684.660657][T17287] usb 6-1: Manufacturer: syz [ 684.678024][T17287] cdc_wdm 6-1:1.0: skipping garbage [ 684.683306][T17287] cdc_wdm 6-1:1.0: skipping garbage [ 684.688608][T17287] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 684.946361][T18860] openvswitch: netlink: Tunnel attr 42 out of range max 16 [ 685.713390][T18874] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4569'. [ 685.722955][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.729501][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.793866][T18875] 9p: p9: multiple sources not supported [ 685.933830][T18877] xt_hashlimit: size too large, truncated to 1048576 [ 686.497972][T17287] usb 4-1: USB disconnect, device number 56 [ 686.798035][T17287] usb 6-1: USB disconnect, device number 41 [ 686.883521][ T796] usb 5-1: USB disconnect, device number 75 [ 687.247831][T18897] 9p: p9: multiple sources not supported [ 687.726381][ T5894] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 687.886202][ T5894] usb 6-1: Using ep0 maxpacket: 32 [ 688.140993][ T5894] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 688.150338][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.177032][ T5894] usb 6-1: config 0 descriptor?? [ 688.549739][ T5894] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 688.638208][ T5894] usb 6-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 688.733970][ T5894] usb 6-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 688.898197][T18927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4582'. [ 689.028145][T18931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4584'. [ 689.081188][T18935] 9p: p9: multiple sources not supported [ 689.276654][ T796] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 689.581482][ T796] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 689.591519][ T796] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 689.613133][ T796] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 689.624578][ T796] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 689.696256][ T796] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 689.706631][ T796] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 689.715186][ T796] usb 5-1: Product: syz [ 689.719886][ T796] usb 5-1: Manufacturer: syz [ 689.737264][ T796] cdc_wdm 5-1:1.0: skipping garbage [ 689.748671][ T796] cdc_wdm 5-1:1.0: skipping garbage [ 689.757237][ T796] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 689.986713][T18931] openvswitch: netlink: Tunnel attr 42 out of range max 16 [ 690.431639][T18951] program syz.3.4589 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 691.195730][T18974] 9p: p9: multiple sources not supported [ 691.601945][T18983] netlink: 'syz.1.4596': attribute type 7 has an invalid length. [ 691.617358][T18983] netlink: 'syz.1.4596': attribute type 8 has an invalid length. [ 692.004068][T17287] usb 5-1: USB disconnect, device number 76 [ 692.750283][T18997] program syz.4.4601 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 693.366389][T19009] 9p: p9: multiple sources not supported [ 693.525273][T19015] netlink: 'syz.5.4606': attribute type 7 has an invalid length. [ 693.533181][T19015] netlink: 'syz.5.4606': attribute type 8 has an invalid length. [ 694.824696][T19031] program syz.0.4612 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 695.045511][T19036] 9p: p9: multiple sources not supported [ 696.903364][T19062] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 697.169327][T19068] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 697.657403][T19077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4625'. [ 697.814861][T19080] program syz.3.4627 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 698.085218][T19072] 9p: p9: multiple sources not supported [ 698.229211][T19087] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 698.613691][T19092] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4629'. [ 698.756750][T19095] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4630'. [ 699.376228][T17287] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 699.530689][T17287] usb 5-1: Using ep0 maxpacket: 8 [ 699.537370][T17287] usb 5-1: too many configurations: 249, using maximum allowed: 8 [ 699.570504][T17287] usb 5-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=b3.ff [ 699.581168][T17287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 699.589616][T17287] usb 5-1: Product: syz [ 699.596201][T17287] usb 5-1: Manufacturer: syz [ 699.612656][T17287] usb 5-1: SerialNumber: syz [ 699.657207][T17287] usb 5-1: config 0 descriptor?? [ 700.077015][T19112] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 700.163109][T19110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4634'. [ 700.276137][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 700.397486][T19122] 9p: p9: multiple sources not supported [ 700.634734][ T796] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 700.658891][T17287] mdc800 5-1:0.0: probe fails -> wrong Number of Configuration [ 700.675367][T17287] usb 5-1: USB disconnect, device number 77 [ 700.856706][ T796] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 700.876039][ T796] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 700.895959][ T796] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 700.926256][ T796] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.147895][ T796] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 701.166215][ T796] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 701.174335][ T796] usb 2-1: Product: syz [ 701.198379][ T796] usb 2-1: Manufacturer: syz [ 701.269698][ T796] cdc_wdm 2-1:1.0: skipping garbage [ 701.274956][ T796] cdc_wdm 2-1:1.0: skipping garbage [ 701.306706][ T796] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 701.449447][ T10] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 701.606360][ T9] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 701.626257][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 701.643380][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.654662][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 701.668815][T19134] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 701.838074][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 701.878025][ T10] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 701.895484][ T9] usb 1-1: config 0 has no interfaces? [ 701.909532][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 701.932172][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.949732][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.973764][ T10] usb 5-1: config 0 descriptor?? [ 701.982901][ T9] usb 1-1: config 0 descriptor?? [ 702.988800][T19124] random: crng reseeded on system resumption [ 703.034118][T17287] usb 2-1: USB disconnect, device number 76 [ 703.105615][ T10] input: HID 0955:7214 Haptics as /devices/virtual/input/input52 [ 703.175516][ T10] shield 0003:0955:7214.001F: Registered Thunderstrike controller [ 703.205489][ T10] shield 0003:0955:7214.001F: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 703.383106][ T9] shield 0003:0955:7214.001F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 703.383424][T14131] usb 5-1: USB disconnect, device number 78 [ 703.412021][ T9] shield 0003:0955:7214.001F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 703.428210][ T9] shield 0003:0955:7214.001F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 703.439682][ T9] shield 0003:0955:7214.001F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 703.759643][T19157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4644'. [ 704.659396][T19176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4649'. [ 704.844513][T17287] usb 1-1: USB disconnect, device number 47 [ 704.961047][T19184] binder: 19182:19184 ioctl c0306201 0 returned -14 [ 705.392341][T19189] trusted_key: encrypted_key: insufficient parameters specified [ 705.609573][T19196] 9p: p9: multiple sources not supported [ 705.727136][T19189] binder: 19182:19189 ioctl c0306201 0 returned -14 [ 705.828898][ T5874] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 706.136732][ T9] usb 4-1: new low-speed USB device number 57 using dummy_hcd [ 706.156190][ T5874] usb 2-1: Using ep0 maxpacket: 16 [ 706.162995][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 706.183425][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 706.236270][ T5874] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 706.274043][ T5874] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 706.297379][ T9] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 706.307176][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.324570][ T9] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 706.345605][ T5874] usb 2-1: config 0 descriptor?? [ 706.353823][ T9] usb 4-1: config 0 has no interface number 0 [ 706.377227][ T9] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 706.405916][ T9] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 706.437860][ T9] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 706.492905][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.624384][ T9] usb 4-1: config 0 descriptor?? [ 706.815398][T19195] random: crng reseeded on system resumption [ 706.854016][ T5874] input: HID 0955:7214 Haptics as /devices/virtual/input/input54 [ 706.928953][ T5874] shield 0003:0955:7214.0020: Registered Thunderstrike controller [ 706.941567][ T5874] shield 0003:0955:7214.0020: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 707.087190][ T10] shield 0003:0955:7214.0020: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 707.108304][T14131] usb 2-1: USB disconnect, device number 77 [ 707.111861][ T10] shield 0003:0955:7214.0020: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 707.127759][ T10] shield 0003:0955:7214.0020: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 707.150402][ T10] shield 0003:0955:7214.0020: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 707.384965][T19224] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4663'. [ 707.466317][T19226] 9p: p9: multiple sources not supported [ 708.326297][ T9] usb 4-1: USB disconnect, device number 57 [ 709.150420][T19245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4670'. [ 709.568563][T17287] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 709.781243][T19258] 9p: p9: multiple sources not supported [ 709.818216][T17287] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 709.827720][T17287] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 709.846238][T17287] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 709.866999][T17287] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.906378][T17287] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 709.915824][T17287] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 710.068129][T17287] usb 5-1: Product: syz [ 710.075951][T17287] usb 5-1: Manufacturer: syz [ 710.111045][T17287] cdc_wdm 5-1:1.0: skipping garbage [ 710.145620][T17287] cdc_wdm 5-1:1.0: skipping garbage [ 710.364510][T19245] openvswitch: netlink: Tunnel attr 42 out of range max 16 [ 710.396493][T17287] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 710.503326][T17287] usb 5-1: USB disconnect, device number 79 [ 711.947403][T19307] netlink: 'syz.4.4685': attribute type 7 has an invalid length. [ 711.955304][T19307] netlink: 'syz.4.4685': attribute type 8 has an invalid length. [ 712.128444][T19311] xt_TPROXY: Can be used only with -p tcp or -p udp [ 715.065013][T19360] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 716.069558][ T5864] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 716.568867][ T5864] usb 4-1: Using ep0 maxpacket: 16 [ 716.578260][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 716.596194][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 716.608940][ T5864] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 716.642120][ T5864] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 716.651854][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.754884][ T5864] usb 4-1: config 0 descriptor?? [ 716.799314][T19377] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 717.008862][T19392] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4706'. [ 717.125291][T19391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4705'. [ 717.213559][T19367] random: crng reseeded on system resumption [ 717.244382][T19395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4707'. [ 717.305728][ T5864] input: HID 0955:7214 Haptics as /devices/virtual/input/input55 [ 717.353184][ T5864] shield 0003:0955:7214.0021: Registered Thunderstrike controller [ 717.653040][ T5864] shield 0003:0955:7214.0021: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 717.733422][ T9] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 717.764002][ T5864] usb 4-1: USB disconnect, device number 58 [ 717.770054][ T9] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 717.820504][ T9] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 717.832713][ T9] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 718.665144][T19420] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4713'. [ 718.686284][T19420] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4713'. [ 718.705710][T19420] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4713'. [ 719.136769][T19430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4715'. [ 719.660140][ T9] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 719.839949][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 719.852144][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 719.934402][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 719.943972][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 719.972628][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 720.003209][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 720.033405][ T9] usb 2-1: Product: syz [ 720.046143][ T9] usb 2-1: Manufacturer: syz [ 720.070898][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 720.094335][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 720.116314][ T9] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 722.149724][T19465] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 722.191017][T19477] xt_TPROXY: Can be used only with -p tcp or -p udp [ 722.667908][T17287] usb 2-1: USB disconnect, device number 78 [ 723.121510][T19488] netlink: 300 bytes leftover after parsing attributes in process `syz.4.4732'. [ 723.991940][T19501] 9p: p9: multiple sources not supported [ 725.419540][T19525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4740'. [ 725.773520][T17287] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 725.975332][T19538] netlink: 300 bytes leftover after parsing attributes in process `syz.5.4744'. [ 726.012092][T17287] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 726.022430][T17287] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 726.063974][T17287] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 726.093079][T17287] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 726.161600][T17287] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 726.223164][T19542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4745'. [ 726.288579][T17287] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 726.320803][T17287] usb 2-1: Product: syz [ 726.328960][T17287] usb 2-1: Manufacturer: syz [ 726.555758][T17287] cdc_wdm 2-1:1.0: skipping garbage [ 726.571184][T17287] cdc_wdm 2-1:1.0: skipping garbage [ 726.673391][T17287] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 726.736319][ T5864] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 726.774672][T19546] 9p: p9: multiple sources not supported [ 726.999173][ T5864] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 727.007844][ T5864] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 727.031345][ T5864] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 727.075424][ T5864] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 727.161992][ T5864] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 727.259119][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 727.316379][ T5864] usb 5-1: Product: syz [ 727.332536][ T5864] usb 5-1: Manufacturer: syz [ 727.433404][ T5864] cdc_wdm 5-1:1.0: skipping garbage [ 727.464081][ T5864] cdc_wdm 5-1:1.0: skipping garbage [ 727.489023][ T5864] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 728.297986][T17287] usb 2-1: USB disconnect, device number 79 [ 729.129357][T17287] usb 5-1: USB disconnect, device number 80 [ 729.582033][T19566] 9p: p9: multiple sources not supported [ 729.743536][T19576] xt_TPROXY: Can be used only with -p tcp or -p udp [ 731.543249][T19609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4762'. [ 731.926204][ T5864] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 732.102747][ T5864] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 732.130640][ T5864] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 732.166059][ T5864] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 732.241982][ T5864] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 732.285524][ T5864] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 732.294695][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 732.302846][ T5864] usb 2-1: Product: syz [ 732.307175][ T5864] usb 2-1: Manufacturer: syz [ 732.318792][ T5864] cdc_wdm 2-1:1.0: skipping garbage [ 732.324826][T19617] netlink: 'syz.0.4764': attribute type 7 has an invalid length. [ 732.332694][T19617] netlink: 'syz.0.4764': attribute type 8 has an invalid length. [ 732.340616][ T5864] cdc_wdm 2-1:1.0: skipping garbage [ 732.359175][ T5864] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 732.917261][T19626] xt_hashlimit: size too large, truncated to 1048576 [ 734.299476][T19647] trusted_key: encrypted_key: insufficient parameters specified [ 735.098677][ T9] usb 2-1: USB disconnect, device number 80 [ 735.522142][T19661] xt_hashlimit: size too large, truncated to 1048576 [ 735.959405][T19672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4780'. [ 737.914079][ T12] bond0 (unregistering): Released all slaves [ 737.931034][ T12] bond1 (unregistering): Released all slaves [ 738.209338][ T12] tipc: Left network mode [ 738.492201][T19700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4788'. [ 738.662940][T19704] xt_hashlimit: size too large, truncated to 1048576 [ 738.723872][T19710] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 738.835980][T19713] syz_tun: entered allmulticast mode [ 738.867749][T14131] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 738.940429][T19716] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4791'. [ 739.024906][T19716] syz_tun (unregistering): left allmulticast mode [ 739.036723][T14131] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 739.059992][T14131] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 739.138763][T14131] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 739.248374][T14131] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 739.316653][T14131] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 739.336607][T14131] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 739.348306][T14131] usb 4-1: Product: syz [ 739.399513][T14131] usb 4-1: Manufacturer: syz [ 739.425304][T14131] cdc_wdm 4-1:1.0: skipping garbage [ 739.433128][T14131] cdc_wdm 4-1:1.0: skipping garbage [ 739.450348][T14131] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 741.160627][T19744] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4801'. [ 741.398239][ T12] IPVS: stop unused estimator thread 0... [ 741.504866][ T9] usb 4-1: USB disconnect, device number 59 [ 741.788860][T19766] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 743.055214][T19800] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4818'. [ 744.849433][T19824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4824'. [ 745.126447][T17287] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 745.413594][T17287] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 745.428025][T17287] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 745.503526][T17287] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 745.576189][T17287] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.618916][T17287] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 745.628364][T17287] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 745.664899][T17287] usb 1-1: Product: syz [ 745.694345][T17287] usb 1-1: Manufacturer: syz [ 745.742438][T17287] cdc_wdm 1-1:1.0: skipping garbage [ 745.755886][T17287] cdc_wdm 1-1:1.0: skipping garbage [ 745.774608][T17287] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 745.951089][T19824] openvswitch: netlink: Tunnel attr 42 out of range max 16 [ 746.056218][ T9] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 746.077523][T19831] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 746.302175][ T9] usb 4-1: config 0 has no interfaces? [ 746.307923][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 746.322135][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.333114][ T9] usb 4-1: config 0 descriptor?? [ 746.447658][T17287] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 746.650099][T19844] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 746.837927][T17287] usb 5-1: Using ep0 maxpacket: 16 [ 746.845116][T17287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 746.856651][T17287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 746.868324][T17287] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 746.896501][T17287] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 746.905795][T17287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.090374][T17287] usb 5-1: config 0 descriptor?? [ 747.201153][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.207612][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.672339][T14131] usb 1-1: USB disconnect, device number 48 [ 747.781159][T19837] random: crng reseeded on system resumption [ 747.799011][T17287] input: HID 0955:7214 Haptics as /devices/virtual/input/input56 [ 747.815941][T17287] shield 0003:0955:7214.0022: Registered Thunderstrike controller [ 747.824101][T17287] shield 0003:0955:7214.0022: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 748.001118][T14131] shield 0003:0955:7214.0022: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 748.026331][T14131] shield 0003:0955:7214.0022: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 748.040381][T17287] usb 5-1: USB disconnect, device number 81 [ 748.052403][T14131] shield 0003:0955:7214.0022: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 748.070771][T14131] shield 0003:0955:7214.0022: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 748.404514][T19855] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 748.683542][ T5864] usb 4-1: USB disconnect, device number 60 [ 749.077109][T19870] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4835'. [ 749.274282][T19871] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 749.591189][T19882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4838'. [ 749.822067][T19885] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 749.910941][ T9] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 750.130777][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 750.139715][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 750.266701][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 750.462296][ T796] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 750.517102][T19901] syzkaller0: entered promiscuous mode [ 750.523930][T19901] syzkaller0: entered allmulticast mode [ 750.601691][T19896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4843'. [ 750.828008][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 750.876241][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 750.906629][ T796] usb 4-1: Using ep0 maxpacket: 16 [ 750.917837][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 750.932296][ T9] usb 5-1: Product: syz [ 750.944915][ T9] usb 5-1: Manufacturer: syz [ 750.974460][ T796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 750.986273][T14131] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 751.008462][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 751.013680][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 751.026567][ T796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 751.026827][ T9] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 751.080439][ T796] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 751.156464][ T796] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 751.200401][ T796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.224732][ T796] usb 4-1: config 0 descriptor?? [ 751.243370][T14131] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 751.285160][T14131] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 751.295634][T14131] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 751.332195][T14131] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.371086][T14131] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 751.389677][T14131] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 751.398538][T14131] usb 2-1: Product: syz [ 751.402774][T14131] usb 2-1: Manufacturer: syz [ 751.444525][T14131] cdc_wdm 2-1:1.0: skipping garbage [ 751.450329][T14131] cdc_wdm 2-1:1.0: skipping garbage [ 751.460882][T14131] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 751.685018][T19896] openvswitch: netlink: Tunnel attr 42 out of range max 16 [ 751.879777][T19898] random: crng reseeded on system resumption [ 751.899446][ T796] input: HID 0955:7214 Haptics as /devices/virtual/input/input57 [ 751.927454][ T796] shield 0003:0955:7214.0023: Registered Thunderstrike controller [ 751.953904][ T796] shield 0003:0955:7214.0023: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 752.108653][T17287] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 752.120486][T14131] usb 4-1: USB disconnect, device number 61 [ 752.127305][T17287] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 752.170677][T17287] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 752.195101][T17287] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 752.271660][ T5894] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 752.308860][ T5894] dvb_usb_az6027 6-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 752.347282][ T5894] usb 6-1: USB disconnect, device number 42 [ 752.814331][T17287] usb 5-1: USB disconnect, device number 82 [ 752.906425][T14131] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 753.066408][T14131] usb 1-1: Using ep0 maxpacket: 8 [ 753.081922][T14131] usb 1-1: too many configurations: 249, using maximum allowed: 8 [ 753.141349][T14131] usb 1-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=b3.ff [ 753.151017][T14131] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 753.159578][T14131] usb 1-1: Product: syz [ 753.172705][T14131] usb 1-1: Manufacturer: syz [ 753.184875][T14131] usb 1-1: SerialNumber: syz [ 753.198867][T14131] usb 1-1: config 0 descriptor?? [ 753.226290][ T5894] usb 2-1: USB disconnect, device number 81 [ 753.721499][T14131] mdc800 1-1:0.0: probe fails -> wrong Number of Configuration [ 753.753310][T14131] usb 1-1: USB disconnect, device number 49 [ 754.019007][T19929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4851'. [ 754.787004][T19947] netlink: 'syz.5.4855': attribute type 7 has an invalid length. [ 754.794869][T19947] netlink: 'syz.5.4855': attribute type 8 has an invalid length. [ 756.328857][T19969] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4860'. [ 756.698341][ T10] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 756.762476][T19977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4859'. [ 756.928817][ T10] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 756.967478][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 756.989491][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 757.096242][T17287] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 757.281498][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 757.461539][T17287] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 757.476745][T17287] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 757.503541][ T10] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 757.504252][T17287] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 757.636149][ T10] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 757.796612][ T10] usb 6-1: Product: syz [ 757.800795][ T10] usb 6-1: Manufacturer: syz [ 757.862931][T17287] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 757.886197][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 757.901646][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 757.934858][ T10] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 757.991359][T17287] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 758.065769][T17287] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 758.089055][T19969] openvswitch: netlink: Tunnel attr 42 out of range max 16 [ 758.139018][T17287] usb 5-1: Product: syz [ 758.143226][T17287] usb 5-1: Manufacturer: syz [ 758.206993][T17287] cdc_wdm 5-1:1.0: skipping garbage [ 758.228987][T17287] cdc_wdm 5-1:1.0: skipping garbage [ 758.256325][T17287] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 759.166598][ T10] usb 6-1: USB disconnect, device number 43 [ 759.373451][T19999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4866'. [ 759.838041][ T5894] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 760.071363][T14131] usb 5-1: USB disconnect, device number 83 [ 760.085924][ T5894] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 760.111884][ T5894] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 760.295766][ T5894] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 760.368014][ T5894] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 760.543597][ T5894] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 760.556222][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 760.565838][ T5894] usb 1-1: Product: syz [ 760.649287][ T5894] usb 1-1: Manufacturer: syz [ 760.743251][ T5894] cdc_wdm 1-1:1.0: skipping garbage [ 760.748667][ T5894] cdc_wdm 1-1:1.0: skipping garbage [ 760.754086][ T5894] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 760.996437][T19992] openvswitch: netlink: Tunnel attr 42 out of range max 16 [ 761.043926][T20012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4871'. [ 761.542132][T20019] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 761.944319][T20026] 9p: p9: multiple sources not supported [ 762.573032][ T10] usb 1-1: USB disconnect, device number 50 [ 763.128463][T20037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4876'. [ 763.950490][T20044] xt_TPROXY: Can be used only with -p tcp or -p udp [ 764.358544][T20055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4880'. [ 764.656017][T20061] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4881'. [ 765.136219][ T5894] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 765.343622][ T5894] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 765.364403][ T5894] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 765.387363][ T5894] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 765.407675][ T5894] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 765.566692][ T5894] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 765.576710][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 765.585256][ T5894] usb 6-1: Product: syz [ 765.590477][ T5894] usb 6-1: Manufacturer: syz [ 765.606281][ T5894] cdc_wdm 6-1:1.0: skipping garbage [ 765.614031][ T5894] cdc_wdm 6-1:1.0: skipping garbage [ 765.631778][ T5894] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 766.580588][T20077] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 766.586747][T20077] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 766.596570][T20077] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 766.612518][T20077] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 766.631502][T20077] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 766.763562][T20091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4890'. [ 767.004725][T20093] xt_TPROXY: Can be used only with -p tcp or -p udp [ 767.946329][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 768.886123][ T5829] Bluetooth: hci0: command 0x041b tx timeout [ 768.892179][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 768.898454][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 768.904441][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 769.056199][T20107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4893'. [ 769.294298][ T796] usb 6-1: USB disconnect, device number 44 [ 769.466334][T17287] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 769.736173][T17287] usb 2-1: Using ep0 maxpacket: 16 [ 769.747895][T17287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 769.767387][T17287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 769.778729][T17287] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 769.793055][T17287] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 769.803553][T17287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.851854][T17287] usb 2-1: config 0 descriptor?? [ 770.124595][T20127] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 770.683915][T17287] input: HID 0955:7214 Haptics as /devices/virtual/input/input58 [ 770.705588][T20135] binder: 20133:20135 ioctl c0306201 0 returned -14 [ 770.849663][T17287] shield 0003:0955:7214.0024: Registered Thunderstrike controller [ 770.866452][T17287] shield 0003:0955:7214.0024: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 770.976967][ T796] shield 0003:0955:7214.0024: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 771.020963][T17287] usb 2-1: USB disconnect, device number 82 [ 771.035922][ T796] shield 0003:0955:7214.0024: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 771.107298][T20131] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 771.113704][T20131] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 771.119873][T20131] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 771.126347][T20131] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 771.132844][T20131] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 771.139933][T20110] random: crng reseeded on system resumption [ 771.178006][ T796] shield 0003:0955:7214.0024: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 771.236208][ T796] shield 0003:0955:7214.0024: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 771.432429][T20145] netlink: 'syz.0.4903': attribute type 7 has an invalid length. [ 771.454262][T20145] netlink: 'syz.0.4903': attribute type 8 has an invalid length. [ 771.472541][T20141] binder: 20133:20141 ioctl c0306201 0 returned -14 [ 771.849873][T17287] usb 6-1: new low-speed USB device number 45 using dummy_hcd [ 772.327673][T17287] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 772.339456][T17287] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 772.359320][T17287] usb 6-1: config 0 has no interface number 0 [ 772.477984][T17287] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 772.502291][T17287] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 772.576264][T17287] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 772.585385][T17287] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.686591][T17145] Bluetooth: hci2: command 0x0c1a tx timeout [ 772.695713][T17287] usb 6-1: config 0 descriptor?? [ 772.777703][T20161] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4907'. [ 772.792786][T20159] netlink: 'syz.3.4906': attribute type 7 has an invalid length. [ 772.888605][T20159] netlink: 'syz.3.4906': attribute type 8 has an invalid length. [ 773.146388][T17145] Bluetooth: hci0: command 0x041b tx timeout [ 773.152601][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 773.158739][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 773.164299][T18190] Bluetooth: hci3: command 0x0c1a tx timeout [ 774.806490][T17287] usb 6-1: USB disconnect, device number 45 [ 776.192424][T20205] netlink: 'syz.4.4916': attribute type 7 has an invalid length. [ 776.209913][T20205] netlink: 'syz.4.4916': attribute type 8 has an invalid length. [ 776.315124][T20197] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 779.951564][T20252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4929'. [ 780.441199][T20265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4932'. [ 780.863181][T20275] 9p: p9: multiple sources not supported [ 780.869215][T17287] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 781.167280][T17287] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 781.176296][T17287] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 781.195800][T17287] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 781.270792][T17287] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 781.490028][T17287] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 781.504712][T17287] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 781.571547][T17287] usb 5-1: Product: syz [ 781.575888][T17287] usb 5-1: Manufacturer: syz [ 781.587941][T17287] cdc_wdm 5-1:1.0: skipping garbage [ 781.593426][T17287] cdc_wdm 5-1:1.0: skipping garbage [ 781.599063][T17287] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 781.837683][T20265] openvswitch: netlink: Tunnel attr 42 out of range max 16 [ 784.458281][T14131] usb 5-1: USB disconnect, device number 84 [ 785.600765][T20336] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 785.822005][T20318] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 785.828164][T20318] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 785.837417][T20318] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 785.869614][T20318] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 785.915537][T20318] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 786.974544][T20354] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4953'. [ 786.985021][T20354] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4953'. [ 787.154386][T20358] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 787.181792][T18190] Bluetooth: hci2: command 0x0c1a tx timeout [ 787.206357][T20354] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4953'. [ 787.879108][T18190] Bluetooth: hci1: command 0x0c1a tx timeout [ 787.886857][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 787.919479][T20365] xt_hashlimit: size too large, truncated to 1048576 [ 787.946778][T18190] Bluetooth: hci0: command 0x041b tx timeout [ 787.952891][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 788.792795][T20382] 9p: p9: multiple sources not supported [ 789.591017][T20406] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 789.936467][T20405] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 791.323833][T20423] xt_hashlimit: size too large, truncated to 1048576 [ 792.081945][T20432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4971'. [ 792.497427][T20442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4970'. [ 792.806307][ T5894] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 792.967385][ T9] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 793.011134][ T5894] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 793.019986][ T5894] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 793.081190][ T5894] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 793.143200][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 793.152983][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 793.163661][ T5894] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 793.178462][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 793.206252][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 793.221341][ T5894] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 793.231458][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 793.239569][ T5894] usb 5-1: Product: syz [ 793.258418][ T5894] usb 5-1: Manufacturer: syz [ 793.265286][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 793.274659][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 793.282826][ T9] usb 2-1: Product: syz [ 793.287489][ T9] usb 2-1: Manufacturer: syz [ 793.514946][T20457] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 793.586950][ T5894] cdc_wdm 5-1:1.0: skipping garbage [ 793.597737][ T5894] cdc_wdm 5-1:1.0: skipping garbage [ 793.654433][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 793.691722][ T5894] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 793.702000][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 793.749175][ T9] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 793.813961][T20432] openvswitch: netlink: Tunnel attr 42 out of range max 16 [ 793.976911][T20442] openvswitch: netlink: Tunnel attr 42 out of range max 16 [ 794.170506][T20468] 9p: p9: multiple sources not supported [ 794.612085][T17287] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 794.846731][T17287] usb 1-1: config 0 has no interfaces? [ 794.856140][T17287] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 794.901875][T17287] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.947656][T20474] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 795.066646][T17287] usb 1-1: config 0 descriptor?? [ 795.255585][ T5908] usb 5-1: USB disconnect, device number 85 [ 795.627420][ T5908] usb 2-1: USB disconnect, device number 83 [ 797.097475][T20502] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 797.440024][ T9] usb 1-1: USB disconnect, device number 51 [ 797.947451][T20509] 9p: p9: multiple sources not supported [ 799.731139][T20531] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4991'. [ 800.056369][ T9] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 800.386680][ T9] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 800.395451][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 800.408396][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 800.418331][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 800.476298][ T9] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 800.504239][ T9] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 800.611243][ T9] usb 6-1: Product: syz [ 800.634155][ T9] usb 6-1: Manufacturer: syz [ 801.003329][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 801.081912][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 801.104124][ T9] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 801.225580][T20548] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 801.346698][T20531] openvswitch: netlink: Tunnel attr 42 out of range max 16 [ 802.726868][T14131] usb 6-1: USB disconnect, device number 46 [ 803.698309][T20578] 9p: p9: multiple sources not supported [ 804.534811][ T29] audit: type=1326 audit(1774629282.555:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20580 comm="syz.1.5004" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7febaa19c799 code=0x0 [ 804.585281][ T29] audit: type=1326 audit(1774629282.605:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20580 comm="syz.1.5004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febaa19c799 code=0x7ffc0000 [ 804.610835][ T29] audit: type=1326 audit(1774629282.605:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20580 comm="syz.1.5004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febaa19c799 code=0x7ffc0000 [ 804.674234][ T29] audit: type=1326 audit(1774629282.605:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20580 comm="syz.1.5004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febaa19c799 code=0x7ffc0000 [ 804.752135][ T29] audit: type=1326 audit(1774629282.605:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20580 comm="syz.1.5004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7febaa19c799 code=0x7ffc0000 [ 804.839325][ T29] audit: type=1326 audit(1774629282.635:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20580 comm="syz.1.5004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febaa19c799 code=0x7ffc0000 [ 804.861871][ T5894] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 804.928640][ T29] audit: type=1326 audit(1774629282.635:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20580 comm="syz.1.5004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febaa19c799 code=0x7ffc0000 [ 805.011156][ T29] audit: type=1326 audit(1774629282.635:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20580 comm="syz.1.5004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febaa19c799 code=0x7ffc0000 [ 805.036204][ T29] audit: type=1326 audit(1774629282.635:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20580 comm="syz.1.5004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7febaa15cfce code=0x7ffc0000 [ 805.085849][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.096877][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 805.106701][ T5894] usb 2-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 805.119739][ T29] audit: type=1326 audit(1774629282.635:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20580 comm="syz.1.5004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7febaa19c42b code=0x7ffc0000 [ 805.147648][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.158101][ T5894] usb 2-1: config 0 descriptor?? [ 805.892612][T20596] 9p: p9: multiple sources not supported [ 807.567009][ T5894] usb 2-1: string descriptor 0 read error: -71 [ 807.573734][ T5894] uclogic 0003:5543:0045.0025: failed retrieving string descriptor #200: -71 [ 807.603871][ T5894] uclogic 0003:5543:0045.0025: failed retrieving pen parameters: -71 [ 807.624124][ T5894] uclogic 0003:5543:0045.0025: failed probing pen v2 parameters: -71 [ 807.671922][ T5894] uclogic 0003:5543:0045.0025: failed probing parameters: -71 [ 807.692373][ T5894] uclogic 0003:5543:0045.0025: probe with driver uclogic failed with error -71 [ 807.723395][ T5894] usb 2-1: USB disconnect, device number 84 [ 807.859638][T20625] trusted_key: encrypted_key: key user:syz not found [ 808.096421][T20622] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 808.106459][ T9] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 808.276158][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 808.283114][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 808.294553][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 808.305253][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 808.324336][ T9] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 808.378615][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.408503][ T9] usb 5-1: config 0 descriptor?? [ 808.696800][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.703179][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.900010][ T9] shield 0003:0955:7214.0026: unknown main item tag 0x0 [ 808.907111][ T9] shield 0003:0955:7214.0026: unknown main item tag 0x0 [ 808.914047][ T9] shield 0003:0955:7214.0026: unknown main item tag 0x0 [ 808.921491][ T9] shield 0003:0955:7214.0026: unknown main item tag 0x0 [ 808.929029][ T9] shield 0003:0955:7214.0026: unknown main item tag 0x0 [ 808.948594][ T9] input: HID 0955:7214 Haptics as /devices/virtual/input/input60 [ 809.212975][T20616] random: crng reseeded on system resumption [ 809.229144][ T9] shield 0003:0955:7214.0026: Registered Thunderstrike controller [ 809.262572][ T9] shield 0003:0955:7214.0026: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 809.495826][T20632] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 809.659494][ T5894] shield 0003:0955:7214.0026: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 809.670985][ T9] usb 5-1: USB disconnect, device number 86 [ 809.678920][ T5894] shield 0003:0955:7214.0026: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 809.712701][ T5894] shield 0003:0955:7214.0026: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 809.909692][T20641] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 810.813337][T20646] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 811.366270][T17287] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 811.536320][T17287] usb 4-1: Using ep0 maxpacket: 16 [ 811.548393][T17287] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 811.585782][T17287] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 811.598091][T20659] netlink: 'syz.5.5021': attribute type 7 has an invalid length. [ 811.608474][T20659] netlink: 'syz.5.5021': attribute type 8 has an invalid length. [ 811.628022][T20661] netlink: 'syz.0.5022': attribute type 23 has an invalid length. [ 811.638430][T17287] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 811.659950][T17287] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 811.672634][T17287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.692488][T17287] usb 4-1: config 0 descriptor?? [ 811.906186][T14131] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 812.126077][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 812.156232][T14131] usb 1-1: Using ep0 maxpacket: 16 [ 812.187715][T14131] usb 1-1: config index 0 descriptor too short (expected 67, got 36) [ 812.202714][T17287] shield 0003:0955:7214.0027: unknown main item tag 0x0 [ 812.214517][T14131] usb 1-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 812.287695][T17287] shield 0003:0955:7214.0027: unknown main item tag 0x0 [ 812.298651][T14131] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.320886][T17287] shield 0003:0955:7214.0027: unknown main item tag 0x0 [ 812.339522][T14131] usb 1-1: config 0 descriptor?? [ 812.339634][T17287] shield 0003:0955:7214.0027: unknown main item tag 0x0 [ 812.368661][T17287] shield 0003:0955:7214.0027: unknown main item tag 0x0 [ 812.407122][T20649] random: crng reseeded on system resumption [ 812.426464][T17287] input: HID 0955:7214 Haptics as /devices/virtual/input/input61 [ 812.614847][T17287] shield 0003:0955:7214.0027: Registered Thunderstrike controller [ 812.632837][T17287] shield 0003:0955:7214.0027: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 812.809967][T14131] apple 0003:05AC:0247.0028: hidraw0: USB HID v0.00 Device [HID 05ac:0247] on usb-dummy_hcd.0-1/input0 [ 812.922612][T17287] shield 0003:0955:7214.0027: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 812.937517][T14131] usb 4-1: USB disconnect, device number 62 [ 812.954412][T17287] shield 0003:0955:7214.0027: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 812.998539][T17287] shield 0003:0955:7214.0027: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 813.015627][ T10] usb 1-1: USB disconnect, device number 52 [ 813.384341][T20674] fuse: Bad value for 'fd' [ 813.443252][T20676] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5026'. [ 813.666349][T20687] ip6gretap0: entered promiscuous mode [ 813.704150][T20688] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20004 [ 813.977883][T20696] fuse: Bad value for 'fd' [ 814.041736][T20697] fuse: Bad value for 'fd' [ 814.053385][T20697] loop9: detected capacity change from 0 to 7 [ 814.064366][T20697] Dev loop9: unable to read RDB block 7 [ 814.084613][T20697] loop9: unable to read partition table [ 814.098889][T20697] loop9: partition table beyond EOD, truncated [ 814.116843][T20697] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 814.371790][T20679] ip6gretap0: left promiscuous mode [ 814.585280][T20672] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 814.591736][T20672] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 814.600395][T20672] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 814.606667][T20672] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 814.616813][T20672] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 814.921341][T20709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5033'. [ 814.999350][ T10] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 815.206283][ T796] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 815.288206][T20719] 9p: p9: multiple sources not supported [ 815.358654][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 815.375244][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 815.386348][T18190] Bluetooth: hci2: command 0x0c1a tx timeout [ 815.394241][ T796] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 815.403136][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 815.486287][ T796] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 815.523786][ T796] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 815.533348][ T796] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 815.560182][ T796] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 815.564485][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 815.797997][ T796] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 815.813512][ T796] usb 5-1: Product: syz [ 815.822317][ T796] usb 5-1: Manufacturer: syz [ 815.841409][ T796] cdc_wdm 5-1:1.0: skipping garbage [ 815.856962][ T10] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 815.861393][ T796] cdc_wdm 5-1:1.0: skipping garbage [ 815.877009][T20721] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5038'. [ 815.896264][ T796] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 815.915740][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.943568][ T10] usb 1-1: config 0 descriptor?? [ 816.269419][T20709] openvswitch: netlink: Tunnel attr 42 out of range max 16 [ 816.418988][T20730] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 816.485869][ T10] hid_parser_main: 139 callbacks suppressed [ 816.485892][ T10] shield 0003:0955:7214.0029: unknown main item tag 0x0 [ 816.509696][ T10] shield 0003:0955:7214.0029: unknown main item tag 0x0 [ 816.538801][ T10] shield 0003:0955:7214.0029: unknown main item tag 0x0 [ 816.697751][T20702] random: crng reseeded on system resumption [ 816.708781][T18190] Bluetooth: hci0: command 0x041b tx timeout [ 816.729321][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 816.729335][T18190] Bluetooth: hci1: command 0x0c1a tx timeout [ 816.729362][T18190] Bluetooth: hci3: command 0x0c1a tx timeout [ 816.777645][ T10] shield 0003:0955:7214.0029: unknown main item tag 0x0 [ 816.784623][ T10] shield 0003:0955:7214.0029: unknown main item tag 0x0 [ 816.828590][ T10] input: HID 0955:7214 Haptics as /devices/virtual/input/input62 [ 816.974169][ T10] shield 0003:0955:7214.0029: Registered Thunderstrike controller [ 817.035121][ T10] shield 0003:0955:7214.0029: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 817.355531][ T5894] usb 1-1: USB disconnect, device number 53 [ 817.363092][ T10] shield 0003:0955:7214.0029: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 817.394868][ T5894] ------------[ cut here ]------------ [ 817.400350][ T5894] workqueue: work disable count underflowed [ 817.406252][ T5894] WARNING: kernel/workqueue.c:4410 at enable_work+0x1c7/0x230, CPU#0: kworker/0:6/5894 [ 817.416070][ T5894] Modules linked in: [ 817.420267][ T5894] CPU: 0 UID: 0 PID: 5894 Comm: kworker/0:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 817.431234][ T5894] Tainted: [L]=SOFTLOCKUP [ 817.435552][ T5894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 817.445598][ T5894] Workqueue: usb_hub_wq hub_event [ 817.450643][ T5894] RIP: 0010:enable_work+0x1c7/0x230 [ 817.455852][ T5894] Code: 4f e7 37 00 4d 85 f6 75 48 e8 45 e7 37 00 eb 47 e8 3e e7 37 00 90 0f 0b 90 e9 bc fe ff ff e8 30 e7 37 00 48 8d 3d 29 f0 86 0e <67> 48 0f b9 3a e9 d2 fe ff ff e8 1a e7 37 00 90 0f 0b 90 e9 1d ff [ 817.475457][ T5894] RSP: 0018:ffffc90004157018 EFLAGS: 00010083 [ 817.481532][ T5894] RAX: ffffffff818dc7a0 RBX: 0000000000000000 RCX: 0000000000100000 [ 817.489506][ T5894] RDX: ffffc90019728000 RSI: 0000000000008437 RDI: ffffffff9014b7d0 [ 817.497474][ T5894] RBP: 0000000000000000 R08: ffff88807e946787 R09: 1ffff1100fd28cf0 [ 817.505445][ T5894] R10: dffffc0000000000 R11: ffffed100fd28cf1 R12: 1ffff1100fd28cf0 [ 817.513415][ T5894] R13: 001fffffffc00001 R14: ffff88807e946780 R15: 0000000000000000 [ 817.521387][ T5894] FS: 0000000000000000(0000) GS:ffff88812545a000(0000) knlGS:0000000000000000 [ 817.530320][ T5894] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 817.536922][ T5894] CR2: 000020000020b030 CR3: 0000000032952000 CR4: 00000000003526f0 [ 817.544901][ T5894] DR0: 0000000000000008 DR1: 0000000000000002 DR2: 0000000000000081 [ 817.552870][ T5894] DR3: ffffffffefffff14 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 817.560836][ T5894] Call Trace: [ 817.564111][ T5894] [ 817.567039][ T5894] __cancel_work_sync+0xf7/0x110 [ 817.571985][ T5894] thermal_zone_device_unregister+0x23e/0x3f0 [ 817.578057][ T5894] power_supply_unregister+0xf9/0x140 [ 817.583425][ T5894] ? __pfx_shield_remove+0x10/0x10 [ 817.588531][ T5894] shield_remove+0x72/0x120 [ 817.593033][ T5894] hid_device_remove+0x228/0x370 [ 817.597971][ T5894] ? __pfx_hid_device_remove+0x10/0x10 [ 817.603430][ T5894] device_release_driver_internal+0x46f/0x870 [ 817.609499][ T5894] bus_remove_device+0x455/0x570 [ 817.614437][ T5894] ? __pfx_bus_remove_device+0x10/0x10 [ 817.619899][ T5894] device_del+0x527/0x8f0 [ 817.624229][ T5894] ? lockdep_hardirqs_on+0x7a/0x110 [ 817.629425][ T5894] ? __pfx_device_del+0x10/0x10 [ 817.634315][ T5894] ? do_raw_spin_lock+0x12b/0x2f0 [ 817.639340][ T5894] hid_destroy_device+0x6b/0x1b0 [ 817.644279][ T5894] usbhid_disconnect+0x9f/0xc0 [ 817.649038][ T5894] usb_unbind_interface+0x26e/0x910 [ 817.654256][ T5894] ? __pfx_usb_unbind_interface+0x10/0x10 [ 817.659997][ T5894] device_release_driver_internal+0x4d9/0x870 [ 817.666088][ T5894] bus_remove_device+0x455/0x570 [ 817.671040][ T5894] ? __pfx_bus_remove_device+0x10/0x10 [ 817.676503][ T5894] device_del+0x527/0x8f0 [ 817.680846][ T5894] ? __pfx_device_del+0x10/0x10 [ 817.685689][ T5894] ? kobject_put+0x51d/0x560 [ 817.690282][ T5894] usb_disable_device+0x3d4/0x8d0 [ 817.695307][ T5894] usb_disconnect+0x32f/0x990 [ 817.699981][ T5894] hub_event+0x1cc9/0x4f30 [ 817.704410][ T5894] ? __lock_acquire+0x6b5/0x2cf0 [ 817.709356][ T5894] ? __pfx_hub_event+0x10/0x10 [ 817.714123][ T5894] ? process_scheduled_works+0xa8d/0x18c0 [ 817.719842][ T5894] ? process_scheduled_works+0xa8d/0x18c0 [ 817.725564][ T5894] process_scheduled_works+0xb6e/0x18c0 [ 817.731127][ T5894] ? __pfx_process_scheduled_works+0x10/0x10 [ 817.737105][ T5894] ? assign_work+0x3d5/0x5e0 [ 817.741693][ T5894] worker_thread+0xa53/0xfc0 [ 817.746301][ T5894] kthread+0x388/0x470 [ 817.750361][ T5894] ? __pfx_worker_thread+0x10/0x10 [ 817.755467][ T5894] ? __pfx_kthread+0x10/0x10 [ 817.760048][ T5894] ret_from_fork+0x51e/0xb90 [ 817.764636][ T5894] ? __pfx_ret_from_fork+0x10/0x10 [ 817.769737][ T5894] ? __switch_to+0xc7d/0x1450 [ 817.774411][ T5894] ? __pfx_kthread+0x10/0x10 [ 817.778990][ T5894] ret_from_fork_asm+0x1a/0x30 [ 817.783770][ T5894] [ 817.786793][ T5894] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 817.794069][ T5894] CPU: 0 UID: 0 PID: 5894 Comm: kworker/0:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 817.804999][ T5894] Tainted: [L]=SOFTLOCKUP [ 817.809312][ T5894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 817.819395][ T5894] Workqueue: usb_hub_wq hub_event [ 817.824427][ T5894] Call Trace: [ 817.827698][ T5894] [ 817.830627][ T5894] vpanic+0x56c/0xa60 [ 817.834607][ T5894] ? __pfx__printk+0x10/0x10 [ 817.839187][ T5894] ? __pfx_vpanic+0x10/0x10 [ 817.843692][ T5894] ? is_bpf_text_address+0x292/0x2b0 [ 817.848966][ T5894] ? is_bpf_text_address+0x26/0x2b0 [ 817.854165][ T5894] panic+0xc5/0xd0 [ 817.857888][ T5894] ? __pfx_panic+0x10/0x10 [ 817.862311][ T5894] ? ret_from_fork_asm+0x1a/0x30 [ 817.867255][ T5894] __warn+0x315/0x4f0 [ 817.871231][ T5894] ? enable_work+0x1c7/0x230 [ 817.875820][ T5894] ? enable_work+0x1c7/0x230 [ 817.880407][ T5894] __report_bug+0x29a/0x540 [ 817.884908][ T5894] ? enable_work+0x1c7/0x230 [ 817.889494][ T5894] ? __pfx___report_bug+0x10/0x10 [ 817.894540][ T5894] ? __flush_work+0xa26/0xc50 [ 817.899218][ T5894] ? __flush_work+0x100/0xc50 [ 817.904350][ T5894] report_bug_entry+0x19a/0x290 [ 817.909200][ T5894] ? enable_work+0x1c7/0x230 [ 817.913788][ T5894] ? enable_work+0x1cc/0x230 [ 817.918406][ T5894] handle_bug+0xce/0x200 [ 817.922646][ T5894] exc_invalid_op+0x1a/0x50 [ 817.927148][ T5894] asm_exc_invalid_op+0x1a/0x20 [ 817.931990][ T5894] RIP: 0010:enable_work+0x1c7/0x230 [ 817.937199][ T5894] Code: 4f e7 37 00 4d 85 f6 75 48 e8 45 e7 37 00 eb 47 e8 3e e7 37 00 90 0f 0b 90 e9 bc fe ff ff e8 30 e7 37 00 48 8d 3d 29 f0 86 0e <67> 48 0f b9 3a e9 d2 fe ff ff e8 1a e7 37 00 90 0f 0b 90 e9 1d ff [ 817.956854][ T5894] RSP: 0018:ffffc90004157018 EFLAGS: 00010083 [ 817.962926][ T5894] RAX: ffffffff818dc7a0 RBX: 0000000000000000 RCX: 0000000000100000 [ 817.970889][ T5894] RDX: ffffc90019728000 RSI: 0000000000008437 RDI: ffffffff9014b7d0 [ 817.978863][ T5894] RBP: 0000000000000000 R08: ffff88807e946787 R09: 1ffff1100fd28cf0 [ 817.986843][ T5894] R10: dffffc0000000000 R11: ffffed100fd28cf1 R12: 1ffff1100fd28cf0 [ 817.994813][ T5894] R13: 001fffffffc00001 R14: ffff88807e946780 R15: 0000000000000000 [ 818.002787][ T5894] ? enable_work+0x1c0/0x230 [ 818.007393][ T5894] ? enable_work+0x1c0/0x230 [ 818.011987][ T5894] __cancel_work_sync+0xf7/0x110 [ 818.016922][ T5894] thermal_zone_device_unregister+0x23e/0x3f0 [ 818.022994][ T5894] power_supply_unregister+0xf9/0x140 [ 818.028363][ T5894] ? __pfx_shield_remove+0x10/0x10 [ 818.033473][ T5894] shield_remove+0x72/0x120 [ 818.037965][ T5894] hid_device_remove+0x228/0x370 [ 818.042910][ T5894] ? __pfx_hid_device_remove+0x10/0x10 [ 818.048366][ T5894] device_release_driver_internal+0x46f/0x870 [ 818.054524][ T5894] bus_remove_device+0x455/0x570 [ 818.059462][ T5894] ? __pfx_bus_remove_device+0x10/0x10 [ 818.064939][ T5894] device_del+0x527/0x8f0 [ 818.069290][ T5894] ? lockdep_hardirqs_on+0x7a/0x110 [ 818.074497][ T5894] ? __pfx_device_del+0x10/0x10 [ 818.079347][ T5894] ? do_raw_spin_lock+0x12b/0x2f0 [ 818.084375][ T5894] hid_destroy_device+0x6b/0x1b0 [ 818.089321][ T5894] usbhid_disconnect+0x9f/0xc0 [ 818.094080][ T5894] usb_unbind_interface+0x26e/0x910 [ 818.099280][ T5894] ? __pfx_usb_unbind_interface+0x10/0x10 [ 818.104999][ T5894] device_release_driver_internal+0x4d9/0x870 [ 818.111068][ T5894] bus_remove_device+0x455/0x570 [ 818.116006][ T5894] ? __pfx_bus_remove_device+0x10/0x10 [ 818.121472][ T5894] device_del+0x527/0x8f0 [ 818.125805][ T5894] ? __pfx_device_del+0x10/0x10 [ 818.130648][ T5894] ? kobject_put+0x51d/0x560 [ 818.135240][ T5894] usb_disable_device+0x3d4/0x8d0 [ 818.140262][ T5894] usb_disconnect+0x32f/0x990 [ 818.144940][ T5894] hub_event+0x1cc9/0x4f30 [ 818.149370][ T5894] ? __lock_acquire+0x6b5/0x2cf0 [ 818.154317][ T5894] ? __pfx_hub_event+0x10/0x10 [ 818.159079][ T5894] ? process_scheduled_works+0xa8d/0x18c0 [ 818.164792][ T5894] ? process_scheduled_works+0xa8d/0x18c0 [ 818.170504][ T5894] process_scheduled_works+0xb6e/0x18c0 [ 818.176076][ T5894] ? __pfx_process_scheduled_works+0x10/0x10 [ 818.182063][ T5894] ? assign_work+0x3d5/0x5e0 [ 818.186648][ T5894] worker_thread+0xa53/0xfc0 [ 818.191256][ T5894] kthread+0x388/0x470 [ 818.195314][ T5894] ? __pfx_worker_thread+0x10/0x10 [ 818.200417][ T5894] ? __pfx_kthread+0x10/0x10 [ 818.205000][ T5894] ret_from_fork+0x51e/0xb90 [ 818.209587][ T5894] ? __pfx_ret_from_fork+0x10/0x10 [ 818.214690][ T5894] ? __switch_to+0xc7d/0x1450 [ 818.219364][ T5894] ? __pfx_kthread+0x10/0x10 [ 818.223946][ T5894] ret_from_fork_asm+0x1a/0x30 [ 818.228719][ T5894] [ 818.231999][ T5894] Kernel Offset: disabled [ 818.236313][ T5894] Rebooting in 86400 seconds..