last executing test programs: 27m48.992565339s ago: executing program 4 (id=1775): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000300)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x0, {0x2, 0x0, @private}, 'syz_tun\x00'}) getpid() open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=@OVL_FILEID_V0={0x15, 0xfe, {0x0, 0xfb, 0x15, 0x2, 0x44, "b464e15688d32a5c55332899da424cb5"}}, 0x1) 27m44.224340141s ago: executing program 4 (id=1782): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0xffffffffffffff28, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0x1e}, {0xffff, 0x1}, {0xfff2, 0x8}}, [@TCA_EGRESS_BLOCK={0x0, 0xe, 0xfffffff7}]}, 0x8d}, 0x1, 0x0, 0x0, 0x44885}, 0x4004800) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000000)={r2, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x10) r3 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa400d225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000006c0)={0x44, &(0x7f00000009c0)=ANY=[@ANYBLOB="40010400000003", @ANYRES64=r3, @ANYRESDEC=r3, @ANYRESHEX=0x0, @ANYRESHEX=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000080)='./bus\x00', 0x3) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000146000/0x4000)=nil) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x7) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x2, 0x2, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r7 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000200)=0x13d6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea000000071e1101d000000000095feffffff0000"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V1(r1, 0x80705864, &(0x7f0000000140)) 27m41.087968349s ago: executing program 4 (id=1802): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x1c8, 0xc8, 0x8, 0xfa04, 0x0, 0x6c02, 0x160, 0x194, 0x194, 0x160, 0x194, 0x3, 0x0, {[{{@ip={@remote, @broadcast, 0xff000000, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x1, 0x1e}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@unspec=@STANDARD={0x28}}, {{@ip={@broadcast, @multicast1, 0xff000000, 0xffffff00, 'veth1_to_batadv\x00', 'nr0\x00', {}, {0xff}, 0x5c, 0x1, 0x7f}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000600)={0x5, {{0xa, 0x4e23, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0xd71, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x1100000, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200)={'#! ', './cgroup', [{}, {0x20, '\x9b'}], 0xa, "aa85bbaae6178139733967c26f091e051518a401f5949c22207ab92e3f2438799ef226b040622b684dab2e0b6cc39430520aa077cc719c9c01d1a50ab5d5f0a9378ab65bb6300f61f043def03d65677967e47b56e76c1b1d46032b3322c8af88fb4960cd43e05555a5530ca38b641d132a00f234f14cafe652919f39d9c250bfb16fe4f0d2db776b2b923bf6298c5671569a3fa3d95e2691387eba0808df17df02fa110fd936bd4c2c60c6d916f5ee6e45314af37e99a6adcfe70e2592a1c77cbb10de2cabff"}, 0xd5) syz_usb_connect(0x5, 0x36, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$key(0xf, 0x3, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x9424d000) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) listen(r2, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x4008000) recvmmsg(r2, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0) read$FUSE(r2, &(0x7f0000000940)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) 27m38.014444481s ago: executing program 4 (id=1807): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003680)={0x24, 0x16, 0xa01, 0x0, 0x1, {0x2}, [@nested={0x10, 0x122, 0x0, 0x1, [@nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xe3, 0x0, 0x0, @pid}]}]}]}, 0x24}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="7c0100001a001307fdffffff00000000fe8000000000000000000000000000aafc010000000000000000000000000000fffc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="640101000000000000000000000000000000000033000000ac1414000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d000007000000000000000000000000000000000000000000000000000000060000000200000000000000000000000a00020060000017000000008900010073686131000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000057b65964f40189fd88c98a3b09"], 0x17c}}, 0x8000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000035c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003580)={&(0x7f0000000740)={0x2dc0, r2, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xb1}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x30b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14c8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}], @NL80211_ATTR_CSA_IES={0x1390, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_PROBE_RESP={0x3a9, 0x91, "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"}], @beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0xc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_HEAD={0x125, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x1}, @broadcast, @broadcast, @from_mac=@broadcast, {0x2, 0x8}}, 0x5, @default, 0x4464, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x89}, @val={0x4, 0x6, {0x2, 0x5, 0x7ff, 0x6}}, @void, @void, @void, @val={0x2a, 0x1, {0x1}}, @val={0x3c, 0x4, {0x1, 0xd, 0x34, 0x2}}, @void, @void, @void, @void, [{0xdd, 0xdf, "73e36f3c1a6d7fb50d9d1f7268c24a040f5cd38cd6cb90cfee852e17aabff0a5a1ae573de5fe714d5d643f5f8838e34977763d529eff2a7d1cde07967a1fc2970aa763cd9b4c8180e7631dcb742bad56a3a0ac8b4f307ea9d7055f20cd128f93132090bc2508d48bb5cfcf1762812c4f702ce07a32c25e608bc46a6cb878310105ec1f15ecc8cd64e4e034c82e99b6b3d50161eff67f3d5661ac2f30d48a8b24d98e65cfe205240926b230969696d264e58092574f0970365224c310f73a635ec59611195d5671df52a9ca5025729c4140c11f94f9414a906c39aab16d3813"}]}}, @NL80211_ATTR_BEACON_TAIL={0x54, 0xf, [@sec_chan_ofs={0x3e, 0x1, 0x2}, @cf={0x4, 0x6, {0x4, 0x2, 0xe, 0x101}}, @gcr_ga={0xbd, 0x6}, @ht={0x2d, 0x1a, {0x10, 0x0, 0x6, 0x0, {0x80000000, 0x4, 0x0, 0xc, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x400, 0x1, 0x2}}, @mesh_id={0x72, 0x6}, @ibss={0x6, 0x2, 0x7}, @random_vendor={0xdd, 0x13, "4bfc325bf740edf3277b963e0895cd22cccf4a"}]}, @NL80211_ATTR_BEACON_HEAD={0x393, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x7ff7}, @broadcast, @device_b, @random="bf6083472e3b", {0x4, 0x9}, @value=@ver_80211n={0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x2, @default, 0x50, @void, @val={0x1, 0x3, [{0x30}, {0x48, 0x1}, {0x36, 0x1}]}, @val={0x3, 0x1, 0xf3973dade8c7d819}, @void, @void, @void, @val={0x25, 0x3, {0x1, 0x2c, 0xb}}, @void, @val={0x3c, 0x4, {0x1, 0x4, 0xae, 0x7}}, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa0e9, 0xc51, 0x0, 0x5}, 0x300, 0x0, 0x1}}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0xe1, "7ad717cf8a2b8a38fdfe9403d76569b11104de0c668f3ee14318f2a1aea29bdae72931a23bfa43012745d58cfdb5ee68bfe88126f5316ec7dea40b65e258b1b8c6ebb4064364ef6056ca08e714c9875a7dd6320f318de4605e9d6509808b4f1337dd0c54a277e6d6baa0da3bbdd2f2b7f8a04a1d8cfd6eaf1141258693fac6478bda9ad7c893cdd1afd9e0f8eabf2c884d53381c1ea366dc397dd8a2e50695b7b8f728a8f2db1a324adc9bae022fd2efa00ed7f17fbafa07c029332887038762e6e5839b9f051b14c4cb283005476cd6db037dfc76fa1e254c3c56b5a0d5dc2edc"}, {0xdd, 0xaf, "2208ee3cf3e02e0ac0e03f3283bf9dc89e341b3d14acdc6b05cbbc1d981e3f5ea425fba1935ac7ce2d8f8fb7cae8e2b34478c70935a2ab542a4f6ba613a8f393396fc5fba6c421ecf777cb1c13caeda8b9e5bf2a257214714756b77409df1175d81cde9cc26d9d2505171dfb46f0e425787d827911e96553e347247f9b6ac9598ac8ccecf62cbf31d8caa489beab015dd9b3f98afdef60ab2cb4457dd4df36f35371929c4539d1df382243951e8987"}, {0xdd, 0xd5, "528c3132210e33c3bc1a573fb951d5d1ab60a2967215c07a949abeae79d27b3903a6ecf5dd4899e49cbd6bee8372de027dca006641fb2b702dd63853425def3fb3ef079da1fb94c030da2ec359f2c99d7fc6fc8d3366cb1b3772ab5446d200c92ef2493d127bd78b77275743a9c22cd38f5ef0aadc90e8f77b507b70ad4c3f548a0133b247b0e3938b408bfd0fb75fcc83c49ecbaf87f00e9a8236da198e496255b6e0805f0723fbbb030c77b27f3cb4167c065ee9a5aa4116e5e0239286c472ad9bbee82d3cfb00ac97d35ebf6f5003b67f77a5ec"}, {0xdd, 0xc3, "f9358479772fe9c9a91005e8ce6dd473a48cb3f04e3c571cb421cfd37c5d601a1c046655062c24c2387040509fb338e9db0a80d38fcae997c5a8573a1936d7bb1e39f08a4eeadfb9310afd079ff2a10f8dcb77cb031b4a6110be47c7319a1b8b9c955eb60c10704db18f0c25edd4f5f1b8b8b0d22b0af1bc1062c9e7958bbbc0497e2e66df7795307ab943d42f196d60d2f069d4fc38ae1afc78cee4ec15aaaa7b17352f34287d26da508723d26393705a6235fe0c4d525a684fcd5be34cf84f6a6644"}]}}, @NL80211_ATTR_BEACON_HEAD={0x251, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x463f}, @broadcast, @device_a, @initial, {0x6}}, 0x10, @default, 0x1005, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @val={0x6, 0x2, 0x9}, @val={0x5, 0xee, {0xd, 0x46, 0x81, "ddde76a5cb55e521fa65f808486b10d692bc8dfd7dfc3bbaa4bae3d8b2aba62836bc3978bd45994c767928dccf43eb0eada7725e4e6009707494a95f8102e9f7c8dd0525f73887d7423857d37043494295eaf5c94f77dba1bde7b8b54841901c50b5e9ef9301fa909ee3a67772b1c1e96eab2d85fa4667e605b8a1132bfaf1dab7c91ffdd4c14693b6785cfb8c05496fec6e57770d282a98299dfcc3233143ee5d345b4c6a943fe8cb4dd34c05c42ae886a98a62ac5f8985826c6d6c2343b6e2d50473b2e6ecb7da1fb16dc28a36c146f33e369aee57cb44748f6d70d16bdcabb6d1a9ea2527a72ae7f706"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0xef, 0x6, 0x3}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x5, 0xe, 0x2d, 0x9}}, [{0xdd, 0x98, "ec62d14c3cc5b580f88365bae22a04d3796b656fc57ac1ce21ba72294768913e0ed24307aad203406a36eca07caf20cd846eb1cc2b0bd1976f7a4b8d23efa88bff21cc725ca2fff0d9826f08b0a046491096dbc59d12c91260dd89fd00a49e14ef8c7af666e1824db89d67135781fa123857a758fe091492f39dea87c38c4dc8ac3d84a9bcc7868266013df9cc72be340c2776beb4b795ea"}, {0xdd, 0x37, "3d05a8680622414fedd92cfebf1cf2868ea2d68b2eea58bd0f4e6e151eeec33bdd9f382006b7629eae2c33339d90b23efcb45b54165aef"}, {0xdd, 0x27, "7058d32cad64bc30016bfa5865780190ccadaa4f653695a29b65e6fd5eef6d6e91bfbe6118ea0c"}, {0xdd, 0x19, "866c3e84103742cd897d67ab8fd2e5ca0fae7c1a28edd5cdd7"}]}}, @NL80211_ATTR_FTM_RESPONDER={0x21c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xbc, 0x3, "eb089049e7905909d180b54f07bd0d5c93f3f33d6da3da4bac7b0d7e5c0aac9ecac02955870fe4844216a2814a5d6865d0996d43eb847ece34c4911daf23fe94a91a06505a47714b1449d452da05c9954d7664bc2ebeb5f29101dffdfd4d4b4a8914f8643fb6bf5cd384b93a3dad7ce0c9a7ce238c633ff83327ebaca5faf8b87b740e7c7756cac0e583d84b0724a63cc868d5056535278bc4666272fdf94e985715f1e7ad4a32394f31b29911fb848b9bf64a69fb007f38"}, @NL80211_FTM_RESP_ATTR_LCI={0x42, 0x2, "be0075e47461d4b4dc7c16e28f3ac1a3b352e7103f98b2fd8e37e111ac2ad4d935543dc8a264fcdb02902a3ec3a1dd5560baad13696b083e99e17ee30c7c"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x13, 0x3, "2b8d96762818f481e879dac0e520ab"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xfc, 0x3, "43ece64a960489fd5651f715fd805d7271dc86e0fec2b386756b55c7a2e6a908a10477529a7f7347b4f677000f89cccb1b15930687731bbb6b44d867907e0e8e32fe20287da15bac1e1bd0b83ae02370114e2ed71e12dd2ae5387b0196192ac68c54197ba3309b4deb43084e563aac8e40682a9d6e80d9efa53995c9425e3be6e883df282b7abaf4f70c86f0fe6df0f0c1dc26d63ab876255fc330c91fa007318182e53aa0b467386372ca28eca22919699f6f7aaa2095e229aad59436fe19c4b1bcab2a67a04f005f0820adfbd8f0d312f9f053661c63d9fe5c171c4cc1959f3bdc2a93bddfc1d71816387b8fba60bb89e1d73774e8be97"}]}, @NL80211_ATTR_BEACON_TAIL={0x4c, 0xf, [@supported_rates={0x1, 0x8, [{0x6, 0x1}, {0x6}, {0x60}, {0x24}, {0x6, 0x1}, {0x17}, {0x12, 0x1}, {0x6, 0x1}]}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x9, 0x2, @broadcast, 0x3, @value=@device_b, 0x8, 0x10001, @device_b, 0x8}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x4, 0xc1, @device_a, 0x40, 0x6, 0x9}}]}, @NL80211_ATTR_BEACON_TAIL={0xf8, 0xf, [@random={0x40, 0xc4, "b0aa9075f524a13f8dd797432c6b717ab60d254c5962301bee3f3769197fe32a84f253f527ba8866723d693b644fec3c81128dda9d494ff85f359ee2853a064b492205ff2e5e5e8af70d67b6bd951e743ee52e8284ff95198c1ceff18e159806f7b9c7aea9624b34098199939c0734a57182bd60da196a1446f5b329ebf608472b8dc2d781055f4e8ad09f0516f63a207a3efb08519477dd346ceb2dfbe1295f88c745460946b32aeecbf96a19577ed02557b155319d097c9d5878cfc72e9e4fc841a0bf"}, @measure_req={0x26, 0x16, {0x1, 0xff, 0xb, "acfb18e2a6b2bcac235d800994b6c380fcac21"}}, @random_vendor={0xdd, 0x11, "9204e78d7cc72391a2178b3c8dbff8bb04"}, @challenge={0x10, 0x1, 0xdb}]}, @NL80211_ATTR_IE_PROBE_RESP={0x51, 0x7f, [@erp={0x2a, 0x1, {0x1, 0x1}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0xc, 0x92, @broadcast, 0x8001, 0xffffffff, 0x8}}, @mesh_chsw={0x76, 0x6, {0xb, 0x83, 0x1c, 0x4}}, @perr={0x84, 0x29, {0x7, 0x3, [{{}, @device_b, 0x2, @void, 0x36}, {{}, @device_a, 0x0, @void, 0xd}, {{}, @broadcast, 0x10001, @void, 0x33}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x17c, 0x7f, [@random_vendor={0xdd, 0x94, "371dbce06aabb058c4264ce985c20197fcaf03deeb692584e9b5031086e7efe15b5ef18af2a5368e634793d57f30ed4efee550be8d3175866af2c8e042d469ca021c9bc67856c1baf577cf97b81f4e745db67c1b3f01984410551e7f97d6f0a74edb6267458ffb5dfee576eef63da3573a8e80c92d5109a0dc61e33e29558523706f19a933266632b0fef6714e134968031b1e80"}, @ht={0x2d, 0x1a, {0x4000, 0x1, 0x1, 0x0, {0x5, 0x1fff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x300, 0x8, 0xa}}, @chsw_timing={0x68, 0x4, {0x6, 0x1}}, @measure_req={0x26, 0xb6, {0x75, 0x0, 0x0, "bf55b03381c15f2454df0349391ba190d7840f0a5884d28d50cac2c6124ae2baa2bc758338cc48b5b562818bbaba5eab5966292073a61d7c520a452b59719fbb390bf506eb2c428d3289dec65b7a10d666561edcbc46256f09bf1a634ea8c50b6e303d558b2ea62373b0c118a815baa3c0c2cf6af0633d7b6e75fd67fb4758a40dff70c12d53d6cdada58d4506e5f8f988d4817d23edb01c64bc4d06cb142a9d96eb501c39132ec9e09d240bc06dc68425b336"}}, @gcr_ga={0xbd, 0x6, @device_b}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0xff81, 0x8, 0xe, 0x1643, 0x7ff]}, @beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x32e, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x5}, @device_b, @broadcast, @initial, {0xc, 0x4}}, 0xa, @default, 0x0, @val={0x0, 0x11, @random="9e5e703241758fe3c775f1e478758a2ed6"}, @void, @void, @val={0x4, 0x6, {0x1, 0x3, 0x100, 0x4}}, @void, @val={0x5, 0x31, {0x5, 0xb4, 0x8, "145b927f1786c582ebd8dcedad4f55f20df872c2afa5c5be81ab2cf4eed919408cf45dec4957a64a2effa4a74f90"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x6, 0xe}}, @void, @void, @void, @val={0x76, 0x6, {0x40, 0x2, 0x3d, 0x2}}, [{0xdd, 0x56, "273cd16507b09ad8eb7bbfac1ed01bc065b085cb07aecaccd26316bfd24d1fb2a7e34cb4446f16abff31812b912834d11be67d23e13d0d1bd78662c8e626785b57bcbf5bc882f4912a96f7eda2b6247c01bf071fb5c7"}, {0xdd, 0xcb, "57044aca0d1bcf49b1d9491dd970608d8f763f9365faaccf5083e0f497d25567f1a91b2f09d2192a141758e45301cca6af4227524ec58d7ab2f3037dfbbb97f1111b1a212824d622a4c9fa40683e615c14baf5040a548e832d7d0e501e24abcb9f9b0c556b4bd120b65de813df56240590d3911ecdf381f331f5a4db319fd7f2c23c29fde838180be05f96da9ff6a164cd3f7c53fdae23b265883ac1e4056fcfa5322bd2549d5c5d92178c6c52ca9f37537d647625d2177c2e21c95f90841b560f6870c9838c69c631c5b0"}, {0xdd, 0x73, "1ae80c764489b3eb44be6751123869234d5544c28b0cefe8145d944fe6ea11d43b4b82191863261010d48335ef2b731c66b0fa53e3ca39c64ede5d569c404e73ba5d402b5bf82ea1b5b3fada29e0e3120e85fb34909d6d997ba8b87df1e27267dd8cd225a5f4cc39a82a190796fd67a8ac52c2"}, {0xdd, 0xba, "4ae9bcbde66fe920316062354f814d5b96b8079e9796ae72b5f26d3822c54656c4b76b18908a13c98c4b97f6b452c1dc2a0b1af61ce8f194305384a5cebdcd78a8fe6d59551d19db6318576d395615831144cb9722662519c577d28f111d956f60f520e5620a4df942903164bd7e4c6c5e49fa49a7e9bed69b526f4687e418ce1a52a8920f33ec1217a68b115a9d48e9c72b1d219700f676cdaddc2cbf3b0141ea4da8b73e847555d8ced81c439ba8b36be57ee4915d94b11987"}, {0xdd, 0x52, "2b9144ed5c384ca6e93d9fc54b08e16fa772b3e5fa2cff64295d4a0a1a451e7300fea918e14899ffaf1f99f68f113f0726c5b9d23fb46126dc5e2fef8d3e64ee9a0bcb6c289164ea74cf19f1f8d2434aaf32"}]}}]]}, @NL80211_ATTR_CSA_IES={0x280, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x12, 0xf, [@mesh_id={0x72, 0x6}, @chsw_timing={0x68, 0x4, {0x7, 0x2}}]}, @NL80211_ATTR_BEACON_HEAD={0x83, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0xd}, @device_b, @device_a, @initial, {0x5}, @value=@ver_80211n={0x0, 0x3, 0x1, 0x0, 0x0, 0x3, 0x1}}, 0x3, @random=0x9, 0x2080, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x1b, 0x1}, {0xb, 0x1}, {0x30, 0x1}, {0x6c, 0x1}, {0x6}, {0x4}]}, @val={0x3, 0x1, 0xc}, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0xd, 0xb, 0x4}}, @void, @void, @void, @void, [{0xdd, 0x25, "b1945c9fafea12e889bc43e456029233b5a1e69c49b10cc770032bd8c07d06fe32dc7dfd14"}, {0xdd, 0x15, "433558a8cc962d7a6c2389a548d261467324980ad2"}]}}, @NL80211_ATTR_FTM_RESPONDER={0x1c0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x101, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xb0, 0x3, "b43ab825ac30a3a2f6f8d105f92d3f1b98bc427e50dd5c1fb911317796bc58c306bd652cbf849a6cf7eb4621f176b964b5e7577908b36bf235312674f969fde0ba98727101c10f58053caf57ddeca37a5720d5c96a3d85e1a58c5642fa0136fb65deb929eae54c1cce04cfe15d5042f392b6256d4073e4251aa1ae95dc5fd9760a349fc8e125482ae9a06fde6e5f56d274fa9077455dac24d15392fdb0fcb87af658212591ec185f35e3cd58"}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x401, 0x1]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x14, 0xba, [0x5, 0x0, 0x6bc3, 0x3, 0x700, 0x7, 0x9, 0x7ff]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0xa902, 0x7]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3cb}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x28d}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}], @NL80211_ATTR_CSA_IES={0x1724, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0x24c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x5b, 0x3, "cc817b711c2630ce48324e38eeebcba6f492aeb14938da6e99cbfb79a7a9db28280ac9d6bce0786d5f2c1f9e985dbad528985e1bda66ea0666b56328d8d2d988d0f79fe67837cc0c5cb1455c55816dcbd0176424369451"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xbc, 0x3, "a900f0e0c7fd4ee992c02c1ab03fabdda0a585fc38db8fafc098cfd95d36cddd31bfa90a8afb756063e1ca03a24fb5500f4a702cede279c82b833fd6672797fd7d71f94ad0238951139495a6194c392c0b16c21e1e801f820b08a963d352c85449e131d1950f1ad9280f9255948c5c31f5dd7c7547ba83d0e8240bc301bdfe08fc69ae0a7a017917aa2eaac9d832f7ee0123a947cb5e58d0aa77c8fcb876a601ae7f3e2e0b7218a6a3b2d95976e093b11fe84629d17ba9b1"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x86, 0x3, "2b940ea4ddd86b296a0a0d3e98d4c68b801314a0c76f4afb3f90219660c5d834d3098b92ecfc9d92c819ba208378d7b6243730d8153728d48b89f38fede1261c83e13627fa221311655b32fa2f574c33b8d8d47705bfc2244e90dd25775287f0b38f03ba463391153a6926cacd6ea13f5c15071b6019e9f95acc32d7dc5a7ae8ad61"}, @NL80211_FTM_RESP_ATTR_LCI={0xa2, 0x2, "de324221db60fcf913b05db354c6a31fbda8eebb0ecaf525487bac5bd9af3675dc110a4358a1328dbd865265771b5394596e31a3c8555e8a9f0bc7548413dd25eb4c1b5952465cb80873f68a2f11fce27cb22af0d4470f09887be6e621cbf6f50ca6efaea25a734a32f1380b1611350767c8d138efd05580e3c5e7f595e0e173bd88fe1bc8ac7e1e9485f72c90ca87dfd4c13c71888b919c189bdbfb04d6"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_FTM_RESPONDER={0x180, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x2e, 0x3, "88c6b95c71b7dbe533168588a497b39af1b2b9c1d7202f5e0a6eacdd1b8dd0c45a9d35a194fb53c5db62"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x76, 0x2, "2689104ad9e3df92adf0a0532c3082d1c9182eef8feb58b8cf7292993e348da0d63e2fcf40b1b5664ed47384e144253387b1bdb14e931cc4f1094f691bd5bf0aa103e8203158128ac5259ca9d91cb6d8006aee45fc700216c9f4bc50fba66ba513daaf56378172f556ee16cf5b2fb96df4b6"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x39, 0x3, "85338f46c097ed9349369491a905404b157717ae991276ac3b9e7bd369dcac2050e090d7648e845db2b2d8a2636adc9b6543a6ad09"}, @NL80211_FTM_RESP_ATTR_LCI={0x94, 0x2, "eea6370acc00f77ef0e73a60bd888a19bf8442d03598e2e00074c978e25b5dbeec483e4e8d68d12c7892b6e8976e9652ffccb175125d4b2971a6d29fa35bf3191289b587b63ace68dccd755b86d3d9f0027b6ceb0bc92802c569105dd8452f15a336d581715ac7abc0d7a40839f600480704c7132c4358662187205baa23b87456ca62c4c6cca9076db3399058ec5f85"}]}, @NL80211_ATTR_IE_PROBE_RESP={0xa, 0x7f, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x9, 0x7, 0x4}}]}, @NL80211_ATTR_PROBE_RESP={0x4ba, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x656, 0x91, "a498348b4004c0884159be00b8a1620c58a6d53e4b1950ff6737d11627854a52062880fe06ea2b9bd764c23a2a798575ccf631ec414a1e080e70e65fedf5053578f73cb28818b9c56be43c0e2df3d93f2e49764390cf6e401c0879d49f7c47c94409a7a5ce30604fe6f84e614d5094d65d1b4bad14b12651670f6a54f7b0ac1266cd63c242d5d9f41e1055430b2c0c27fd9948a3a50efd4d7fc836d8697a057692d495f6c8ba1816d4643c8b19a18ca3c4e88d8dadfe370b4c8df655ee16ec56432d12ed1921e9e78a53d71e9a7422ba4f5833e016b4d17a10f16959c1866d4828380d2434b89c3bb98cf2bbc72a78fdf3be1b8214e10d257475d27d232aacea4bfa9c143db73e23438cc31582010511e6224ac1dfcf8bf6bd9357260e891e8ebb570c1412b23dcd80ac9cd5da02ea87e91ba6d83fb77273b705177b67b5b7c7b58cad52bd6575b05ea123053ed25d967da98e014aee85e50d11309f9ced1a6f500356aead4b1257a49d6b5fc66fb66fd60239cd5ba952d06b3907e2ad70ac2084736da148d407ee77e600a2de97a6a6f61ee1acd17bca2b8cceb61c5d477667528f8fad2364b054a5f538558d40070194d104fcd465f01c4c61efc0b3428e05129b726cf5ded845fed60104e0ff7617b9ef656809cab257328108819e285c74bfae9da87300d0eeaac30610905408e8fd8443b48b5e9873ab3d944d6e7d7a0989a6b666473f6242332dd7494c6b45c356f65c74f69144749b8b471e8b27f812dca1a86dbbd749c6ee3ef27e6930440ec7d9790be1d32918c3ae71c62cfdf9b810fa64cad8b28e2602776a7e7cf02058b6f9f7ac8020e66c7e182f35d794f1012eb135cf060a76c73ecc11e940fffa72162541a1c8fd4b798f75b492e410c2bc9857003fb886452a342e73315b32e57816b660aeeb67dc165e5d45ed97e4cd1e9d32d16ac58b40360fc9dce3103786a4b0c8d31f7c92a5cd5c1fcad7d1d4094b0a3c76d32d35b4d6159ac23d114719eb205d49871d1b304054692bf8b48c12dce51cb2a83de3bfd06888c514adaa4f590e085242b6714e4fb6e19c6f8a96cb9bbd927a0b6fa4746cd8e7c9aeeffa213ff2163363647f4aafcf2983c65f38c189f168e37695e078cec773a9e192aee2476a0f82bf228d5259b75897b305d6786c47d5feaec37e0ee3a4b66939f1a4faed762b7d79abe6d8029cd5f58da929db6c52530e3464be4329f9422db237dda5d8247973159e9100345a95f220725f8db5c92339535305cbcc262b4b8e94ce98abd83f2f40f72bfafc304ba9dae713fa9b05c3081e1461173ab7816384c0f47a4ac82b331b584a704d48406879d12aa7d6a80677816b8fe9496bc77e91468844df4d440ad17d7f05200f1c7d6fadbe689d5f8eff925b2509a726550b0a905a3208fbc6c88323080e4c9e1ea4235c2312a1e99eb576a767c6f345ef3629b09197606dc28f4f715fc0c0cdc8a87cf07eff33da658328423dc44986d02e63c6d54f7b7856d0ed404838ab50d0f44809ee23a1f607b8f6c0f27cfd1dbe6828080dbf75f08a8a890d5bf2b9203804d8b76cae83932c91c5b80e280c30731e41f8eeed3262afc705c6a932dfb54060b9d92ff08279cde62fede757ef724c145b50b66d558f432e1b277d1e8e7b98f1788b8e86a9a63d0907f28651fc749ac925cb076bb095fd70883eface9653e7b73b19b1f6a9fcfdfa3925cf11af1a5929a979cb9cbdfce9a7407eb70979bf1f5a63a10845dd364d84c258c2aa394e824ed9a292377f54bf3ceaf9383b67056c42a3ee5e79d03acc308d0f633f1e157b02b45ae3c8c26abdbe32084c34231210c608feb9dda29ce395bc842636d65b8f05bac40a691f9123eca044737d19b2b2c9e3f0d8b235972afe0ed10019a03415e5a1f3584831a9484a6e670e4233deba2ef3bed3a97c086b95f92d81c7caa1eae7f3d2d8aba09ac790f64403bef835b33a7e7aba77de9a46255ce53f77fa525e21f367bb765a91fb8c08bc3f410f470a001932c822b52a8df2f19a3561c245e4d1e31c857bfdd424b6b4eeca89eed26a28734fa674be04a332d5478124c7d88199ee18bf891b226f1399cb26036b450c7a9b08068065e0363dfb464a832fa40aadef323ab41d1c668d7bed52bfda84f85d36ec9c2e3d435cdd504c1073f2e968f1029869a841fb6ee789d880b1875e7ef5d3de02ba71c9e23e29c1f2969feb90a10d9043982ae6a6b5133c894646f3d9ffb2782ca8c9ae90b547c54e1aa46ebebc5a3e23e1adfb60"}, @NL80211_ATTR_IE_ASSOC_RESP={0xe1, 0x80, [@peer_mgmt={0x75, 0x8, {0x1, 0x9, @val=0x1, @val=0x20, @void}}, @ht={0x2d, 0x1a, {0x2, 0x3, 0x4, 0x0, {0x9, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x400, 0x4, 0xe}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0x2, 0x40}}, @dsss={0x3, 0x1, 0x30}, @perr={0x84, 0xa9, {0x1, 0xb, [{{}, @broadcast, 0xa6, @void, 0x1a}, {{}, @broadcast, 0x6, @void, 0xd}, {{}, @device_a, 0x3, @void, 0x2a}, {{}, @device_b, 0x1, @void, 0x29}, {{}, @device_b, 0x116, @void, 0x3b}, {{}, @device_a, 0x3, @void, 0x8}, {{0x0, 0x1}, @device_a, 0x6, @value=@device_b, 0x12}, {{0x0, 0x1}, @device_b, 0x9, @value=@device_b, 0x2c}, {{}, @device_b, 0xbb18, @void, 0x25}, {{0x0, 0x1}, @device_a, 0x3, @value=@broadcast, 0x33}, {{0x0, 0x1}, @device_b, 0x8001, @value=@broadcast, 0x29}]}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xb8, 0x80, [@sec_chan_ofs={0x3e, 0x1, 0x3}, @fast_bss_trans={0x37, 0x6a, {0x1, 0x3, "b3382a2da12e9563d3ff75115b3fc231", "739a93742b869d9b00eb99da261ee399799fbef8b6b88011da5c4b8b2d229e9d", "b21551666c892d9e6fe27f47728fbcc93eaa3514518f72335c5574d75b223175", [{0x3, 0xc, "0f606c35267dcbf33c3506e7"}, {0x2, 0x6, "3d73edee5867"}, {0x1}]}}, @dsss={0x3, 0x1, 0x99}, @link_id={0x65, 0x12, {@initial, @broadcast, @device_b}}, @mesh_chsw={0x76, 0x6, {0x2, 0x3, 0x27, 0x3}}, @supported_rates={0x1, 0x1, [{0x16, 0x1}]}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x9, 0x7c, 0xff}}, @chsw_timing={0x68, 0x4, {0x7, 0x1}}, @rann={0x7e, 0x15, {{0x0, 0x2}, 0x2, 0x2, @device_a, 0x7, 0x9, 0x8}}]}, @NL80211_ATTR_PROBE_RESP={0x457, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x1e1, 0x91, "c5925f1e82f8ae9df10b7d6259623c5fa748c4fe0972121ce6794ce4ca9aeaf5a5f8d918ce052bf08212d233fa4eb01736e10ef1131e98786d8f389c5a6c3e8981a19637092f23f59ac6ae2b2c75395062ba316c6a953c9ed09e1198b19f6ca9b86b2a2b82da64a4f3f111c53539bf768add4fc3a347af81dd3f96e18db3519153ec8c82213179f5d80ac5ba5a9848807950c8499e5fd05e83d2f5c8d0364f8ba834a93a8ab5e2e20acaaaaeb509f94b5948e08636d83f1afe7f5a6482cef59c5c84cab8e9ab68d029ec9c93f8d1ee729399abc60bd9a41c59e0f32fce7bc00426c8592bdc03bd096d4fbfafadbbb3383c9be20c5eea44884a94e2e1aa0d8ea79c6d45a3fdd47b59e01420d1f940dda230da13831eee0188327ea279f5bccea47a87f95eab1fec93668695b51a1ac423c12b06841b8760b2492f714e1594a738cbefdb378ee31d154b733d4ac7911f0ea8a94fbaf4662af278d4a83e1d96683bfe4d2b368283db9ecd5ed640c066c7f5d0f74664fc1c374586ee61c073d1380b9cfe7f151c6685bfcf6beb2b36db22ef425244d914fb75a92e0a09288dd781f2231d8289ae4f8319c3264676434b10adfce11ac5489fb88da9a25cba625ddff1417cb55fef5808b89ee416ffa3cb6327cc3145913c8fe42ca7e8146a7e"}, @NL80211_ATTR_IE_ASSOC_RESP={0xd, 0x80, [@dsss={0x3, 0x1, 0x1}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xff, 0x34, 0x5}}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x2, 0x0, 0x9]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x2]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x3, 0x8]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x8, 0x40, 0xc9, 0x5, 0x2, 0x2, 0x4]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x1, 0x1, 0x8, 0x6, 0x1, 0xb]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0xf801, 0x400, 0x0, 0x698]}]}]}, 0x2dc0}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x4000, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67030075705f69643d0837e8fbd3bc1779bec0b48be6c0b52b369ba06f2bbe6efe6f967c22f75494290647adcf5cba9fce1d98f42eda56e9c9a737f0b65cb55ec8e17d7651cb2a658d53cfd8b8840d4ce0947eb4342969e3181a54cc06012731d88a0c70fa8abbb28e15805fdda4c5c05f8b09b8d7f2cb99e07bdb632d2d6f684ea65cbf2b5e", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0/../file0/../file0/file0\x00', 0x4) syz_usb_connect(0x5, 0x57, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0], 0x0) 27m34.916732817s ago: executing program 4 (id=1820): openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000040)={'syz0\x00', {0x7fff, 0x9, 0x1, 0xecb2}, 0x48, [0x8, 0x10000, 0x8, 0x400c69f, 0x5d, 0x5, 0x4, 0x1, 0xa618, 0x7f, 0x1, 0xba, 0x5, 0x4000, 0xd, 0x2, 0x8, 0xd08c, 0x1, 0x3, 0x91, 0x4a, 0xff, 0x7, 0x7, 0x5, 0x3, 0x3, 0x4e, 0x1ff, 0x2d8, 0xe, 0x5, 0x8, 0x9, 0x8, 0x2, 0x8, 0xd, 0xfffffff2, 0x3, 0x7fff, 0x3569, 0xc68, 0x5041, 0x4, 0xffff, 0x3, 0x0, 0x1ff, 0x5, 0x7, 0x5, 0x9, 0x5c8c5db, 0x8f18, 0x7fffffff, 0x101, 0x4, 0x4, 0x8000, 0x1, 0x1, 0x6], [0x40000009, 0x4d78, 0x6, 0x66c, 0x7, 0x4, 0x2, 0x7ff, 0x1, 0x3, 0xc0000001, 0x1, 0x803, 0x36, 0x5, 0x4, 0x10000, 0x8, 0x28, 0xfff, 0x6, 0x6, 0x4, 0x66, 0xfff, 0x4, 0x5, 0x0, 0xfffffff7, 0xffff, 0x401, 0xbfa7, 0x10001, 0x5, 0x819f, 0x8, 0x7, 0x410001, 0x10000, 0x7, 0x18001, 0x8, 0xd, 0x0, 0x8, 0x5, 0x4, 0xfffffffd, 0x9, 0xfffffff9, 0x2a2, 0xc9, 0x100, 0x7, 0x7fff, 0x407, 0x1, 0x8, 0x1, 0x1d3, 0x10000, 0x48b3, 0x0, 0x8], [0x2, 0x6, 0x200, 0xfffffffe, 0xfffffffd, 0x4, 0xc, 0xfffffffe, 0x401, 0x10000, 0x3ff, 0x8001, 0x2, 0x5, 0x4, 0x9, 0xf, 0x4, 0x6, 0xff, 0x2, 0x5, 0xa, 0x81, 0x6, 0x8, 0x5, 0xc3bcf961, 0xffffffff, 0x6, 0x9fdb, 0x4, 0x3, 0x7, 0xffffffff, 0xfffffff7, 0x3, 0x1, 0xffff8dc0, 0x6, 0x2, 0x6, 0xf, 0x0, 0x5, 0x0, 0x6, 0xd, 0x7, 0xffff9149, 0x9, 0x4, 0x7, 0x3, 0x8001, 0xb, 0x3, 0xe99, 0x9, 0x8, 0x400, 0xff, 0x80000001, 0x73], [0x7f, 0x8, 0x4989, 0x4, 0x7, 0x7, 0x9, 0x9, 0x401, 0x3, 0xfffffff9, 0x401, 0x401, 0x400, 0x80, 0x401, 0x7, 0x3, 0x8, 0x10000000, 0x0, 0x6, 0x5, 0x101, 0x2800000, 0x7, 0xffffffff, 0x40007f77, 0x3, 0x6, 0x147f, 0x80000000, 0x4770, 0xefe, 0xff, 0x8, 0x3ff, 0x8738, 0x9, 0x800, 0x800, 0x3, 0x0, 0x80000000, 0x9, 0x7, 0xd7, 0x772f, 0x5, 0x1, 0xfffffffd, 0x8001, 0x5, 0xffff, 0x7, 0x0, 0x1ba38052, 0x8, 0x7, 0x84a, 0x4d0b, 0x8, 0x7, 0x5]}, 0x45c) unshare(0x28040680) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0xffff}], 0x20000000000000dc, 0x0, 0x0, 0x0) 27m29.670782734s ago: executing program 4 (id=1831): r0 = socket(0x1d, 0x2, 0x6) r1 = epoll_create(0x26) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff0e}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x3d, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffdce) io_uring_enter(r2, 0x8ae, 0x6931, 0x17, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001840)={0x90000001}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r3, 0x2, {0x2, 0x0, 0x2}}, 0x18) sendmsg$can_raw(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@canfd={{0x1, 0x0, 0x1, 0x1}, 0xbe, 0x2, 0x0, 0x0, "f23134c0ff3fd9609f30260e3bc9bb726666a1a2e56ebf895ba54b573e250f94190000000000000000a93f3986fea8a11a71e74ad9eb30d3b400"}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008014) 27m29.33165661s ago: executing program 32 (id=1831): r0 = socket(0x1d, 0x2, 0x6) r1 = epoll_create(0x26) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff0e}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x3d, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffdce) io_uring_enter(r2, 0x8ae, 0x6931, 0x17, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001840)={0x90000001}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r3, 0x2, {0x2, 0x0, 0x2}}, 0x18) sendmsg$can_raw(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@canfd={{0x1, 0x0, 0x1, 0x1}, 0xbe, 0x2, 0x0, 0x0, "f23134c0ff3fd9609f30260e3bc9bb726666a1a2e56ebf895ba54b573e250f94190000000000000000a93f3986fea8a11a71e74ad9eb30d3b400"}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008014) 13m50.859776268s ago: executing program 1 (id=4883): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d0020073f0000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a"], 0x44}}, 0x2000040) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008804}, 0x20040040) 13m50.61960058s ago: executing program 1 (id=4884): r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x12, r0, 0x0) splice(r0, 0x0, r0, &(0x7f0000000080)=0x100000000, 0x8, 0x7) 13m50.442293676s ago: executing program 1 (id=4886): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x54, 0x10, 0x401, 0x2000000, 0x40000, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00'}, @IFLA_GRE_OKEY={0x8, 0x5, 0x6225}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) 13m50.186249519s ago: executing program 1 (id=4887): unshare(0x8040480) socket$can_j1939(0x1d, 0x2, 0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x8, 0x4932, 0xc2, 0x1, 0x1, 0x6}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000006c0), 0xca, r0}, 0x38) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000180)={0x0, &(0x7f0000000540)=[@code={0xa, 0x52, {"b3c9f0832f56360fc77cf10e66bad00466b8cc4466ef410f23346566420f38817c8aceb805000000b9006800000f01c1640fc76b25e900800000b97e0900000f32"}}], 0x52}) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000000)={[{0x3cd2ef60, 0x404, 0x1, 0xff, 0x8, 0x80, 0x8, 0xb, 0x90, 0x0, 0x7, 0x7, 0x3c5baf4e}, {0xa9, 0xd9, 0x0, 0x2, 0x7, 0x8, 0x5, 0x6, 0xb, 0x1, 0x3, 0x9, 0xf2}, {0x7fffffff, 0x0, 0xc, 0x2, 0x0, 0x2, 0x7, 0x0, 0x9, 0x4, 0x4, 0x4, 0x1}], 0x7}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r6, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0x8, 0x2, 0x404, 0xffffffffefffff14, 0x3, 0x100000000, 0x7, 0x4]}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000480)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x75, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6}, {0xffff1000, 0x2000, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0xff, 0xbd, 0x40}, {0x2000, 0x8080000, 0xc, 0x0, 0x7, 0xb, 0x0, 0x0, 0x8, 0x3, 0xfd, 0xff}, {0x1000, 0x33331000, 0x18592cbc7c573fc6, 0x5, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4}, {0x80a0000, 0xeeee8000, 0xe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x0, 0x5, 0x1, 0x2, 0x0, 0x0, 0xff, 0x1, 0x6}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000, 0x6}, 0xddf8ffdb, 0x0, 0x0, 0x110, 0x3, 0xf801, 0x9000, [0x80000001, 0x0, 0x1, 0x1]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) open_tree(r2, &(0x7f0000000640)='\x00', 0x89901) 13m48.764961921s ago: executing program 1 (id=4894): socket$vsock_stream(0x28, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000021c0)=0x7) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) r3 = semget$private(0x0, 0x6, 0x3b1) semctl$SETVAL(r3, 0xff7f0000, 0x10, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x3, 0x2ffffffff}, 0xc) r4 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000080)=0x6, 0x4) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) r5 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12015082d5281b08c00901024ffa0102030109021200013daea0020904"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r5, &(0x7f0000000980)={0x14, 0x0, &(0x7f0000000940)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) 13m48.323261712s ago: executing program 1 (id=4898): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000800) 13m47.14082559s ago: executing program 33 (id=4898): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000800) 11m35.213147429s ago: executing program 3 (id=5498): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="200000000000000084000000020000005e0c0400010000000b248c16c0b8eb"], 0x20, 0xc005}], 0x1, 0x10) 11m35.107983469s ago: executing program 3 (id=5499): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xffffffffffffffbf) fcntl$setsig(r2, 0xa, 0x12) ppoll(&(0x7f0000000000)=[{r3, 0x400}], 0x1, 0x0, &(0x7f0000000080), 0x8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x13) socket(0xa, 0x3, 0x3a) r4 = socket$netlink(0x10, 0x3, 0x4) socket(0xa, 0x3, 0x3a) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f000014f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, &(0x7f0000003540)=@vmx={0x9, 0x0, 0x2080, {0xa000, 0xc000, {}, 0x1, 0x9}, {"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", "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"}}) ioctl$KVM_GET_NESTED_STATE(r8, 0xc080aebe, &(0x7f0000000000)=@svm={0x1, 0x1, 0x1080, {0xdddd1000}, {"44d4ceeec7a8bcbc6a4afaefb1601b768ade9d690a06775c9da9d6e394eeb8d91aa71930071fd70ef955b948d000f9122d5c870aad16e8544a078b9defcad2db26347bbc5d8787026b746542777efdc7f7ae2bb3f9d814eb5e29fcb280d0459b5f1cf374c373312171124a5bd328b362d3921e4df4801ae5f115e4ff793f213856fe54f99266089b9612577c263b64207e4508531632408c566298f8dd44eea85430c5a421963edc9c586d6c305180f72f274fd1fb6d941b636ae4166d6f142622b211906273c156a18e5ab1c97a0c47c7cd2f41e13340e2cca5f5c50b38edb4ebc297f8600a600ea7c6627ccac3352a6065671789a11ab02e2a66b482634772ad53c9bb3ad58c5b926ae6fad81c5ad785967399cf3bc9bd15a0ede85593fddac539a17d846e1db403825219c4e62a4eb006586e323e1f16190508a476d08b086c961f4213cdeb4c1f57763a1566d3e700fdd5a4874822ef563bebb1dc47f363569d17a42514b5b172b40fb680f0124bc1746299d12bef318d16414483d8f39cd8d7e6c925d270af18304f7d4a33037fadab90248c08b32e740be99f2f0ed9a2c2816d7e49a5f7eed4fde2069c3d303e44cc579d6874ea79511b0333ea79424ad499e72927c32cca64f04c848c930923c1c7195d7d6c9cd546d846fe0cbf2e9b1c1fceec5b792f85cb695302536a2544d48d649ce1309f35181a97a485725240f71fb78c80765bb90a3b2c57acf93da9882495cd5c6346b37edf5292e0818783fe888393af63f4b33bc907fe2fb3d889a20b8fa8bf27c13ec4fd7ec1588809cd545cd38c511fdc9a1e0a86cb0a47f453e2ceebf0f4d9cdb3ff9bc8098e1d0818bbceeb9d4c43048c3a512a9d11f7bd7d42f40621aa9d70525b4997a4a438c92cf3dba569b8a839e986475e11447cea21f95fe194e00e27bab7a4ce3e481d0f29b42967edab130a1fa3d94d601d2dd5d151ed3567575e915618d1af63d7e2d8905b38411a1099955b8c9b76d65b9ddc15ddf3e6dbaa42a91ee048f0c5c4adcb5f2216c1acc4860733e79d556c3a70e0ace12472e51f9c0685e8646130474212797599328632200c3b8e8587c8f60669816746f1b2fa1591bf23ee5199c6c01f605b9ab5f7401ebae842d8901b0cecc94f512ec965c6f046c159308f12361c68c44c3a03efb320356805267949848db26a33bb745c2e6bd00bc484be082f51b9a1a7ab8a25c58134601ee596a025e9f58dae2f67bbd816011a2d273980310fd283b6e4728b90c75173d5ad635b8ace8679334b4ad7a7d8bf52ee8febd5e1cf8557b818a2f562cb5a46122ddee3a41b040f278acdef35ce03615a8e8b2aa710912c6e68915b7b0c10030a28872f53e92d9905bed1124600ca2371cde0faaf4f3ab4ecc4bd0cad1af1c24f2fc63bf9c82d790ab23a4db477b47b3ed03d847a1313a22e4ea3bc8b168bda83cb6afe6e77805746cc379afa1c995e5792b8714138513d1b4e70197627dff5b06f73de2ccfe4e12875f73263ddf300c188d79cdb3a88e56e201b25def575112aac33e37c5c603d52b0d6e51f52564d829dcbffbbd6cda98aeb47f4d28924da46f0db6b016dfa41c53c79e6890c34b23f70777622ad6df41531c2171ecdca3ce4342668330a99748f468c31b251061571536ebbe4949cdad606d89bf68472dd5d755bf61cd5226825a30897ce2f7f5ae2db366d01ac33c0dd13281a333a5a3db2852b9c22658ed320758a3cf8ec5f6b4da2cc2c681c162075aa278abb7fe9516ad0de24779a703314ce589d1ad4d5a8661d6e0e5908f1e2a272a0e661bf9658558c315ab250e5649063b6fa1b1c6da4ac322e42e04607dc8f87e74833907826facd69140f1e4e2e3002291a5b1f45c03ea135388cf82f07f7e921bbb96b11da9e16f5120dbbe76a0ae1053ac2e47b5e758bdd7a258fd5d5d6843709052c8ee4d20965c106255835f07b9d4109634947c89889a22b21ce56db7a33ba0444f5778bd08c8363ecfcbe22df978907658f236c73475d849ccee5ae93353f51e7ba0c3ceb9df24897fed0964a630606c78f37611b7d8b48d576ca13b0c9cd1803909d3f787b5c57f63ae2ef45ce013034558864eb055dacf4e945b792001b0449603418b0fe57faee964a6cbf81cf637ad2d8e056a5c0f4fdf1284bb6c3bb68751be8d6440112295d17186c6f61d6b46420f1e6e0b7d96b447c53cd22be32072c2077cc3462812c0ee00d9a619a2d49fdb4e9f3dac8186349d33af3ed0ed7354de195ef04dc2e00b97139ba3237d6336ee650abdb9b7026205d15b8ae9e91514ebffe29e0894bf2a6e61ca20e1e32269f8ae5778b7aa7fa5763748360951468e959f9b73c76b6721003f6ccd2ad9798f744b600636d67beecd16ade3d05757e7d76b9d09f57c4b9e4d9209685795592a7353ca908ea58c9164188bbdd3e35902aa1d6273d867ff842163c068d9653da4db6cf0eb7ef9e09c4ea5014b15ceccffb7039bc8b5339674668798b44c4b36d0b5fd188866be2eb96c96c51455a7853d5582f4e3c4cc195166517cc544d92ebe7cffdc30db202bf5d1df52b958995110fa1d276127dd93ffa179dc9585eb71e67976d1a9860cb9e432e55b7c1ec55ad324f1fb9d2fe3fb3d47ce7094b8b28ac0af647b25e123536f19c13ac5b189895cac63cdcdc364dc00b84ee796fa9baadbef26c3158236991fa8375a4895651c29ec584b3e09f8ac548869376ad7bf033aea9979aec7402aea118fadfed8e6602a9d2e3ccf5757a23a556dc4ce478c85afadbec45ad1a7d538fbab0a4ce8e7f82208c07450ec9f17d224b3104591f4899da726a6eb1dfb2a1c699f1b73a479b97cfc441a09a3a538a05830d2fab3a63525e1edcad04e8d7d5352c170cc183169b27179bbd2579b479ea675fb6b44b603fe20cb94bcbc794960ce179c7952265967b850e763f690af9fa400c3af996bac9669706bd7b6f2acd283fcf30c97362007f9baf1d18f05ab9348d9b1438914fd07f0b2f755f92f23ca5fdc89ecd07f49dc7f3cc8cb4713c934d0a09830d31cdfdb5bbac1d93b5a1913d5f521038a1b0e6cd36bea094da4f7771071dd73eb79f4f7787b95e7bf902d3998379818484b03d1543999b771b74bc1fdbd22d17c3c2d4e9f97dbe67669b9b81ba0f8aea76ca161af905cdcef80c2339ab5cbec300b41e0c060393c0b6c449e196ce91996d8732f2d329a6e56751c3a4bd65c464d2e092db85c4a50e02f83f5c70624b3521b9e1c817ef7c04c8a2bcae56c39c851715bed063c0a4a77e43caba73223df5e9dc8be1b834f6d24bbfd7ad48e7065ee8fcb34c4b94c565de73cfe44a55be97e665b5399f549210b5d67136a1cb13f47ce16d5f51243689fadbf183a0dee06eb1e42528af596bc2202709a1bcc91cec5ff2db6cc5b6d93fb7309ab142359e0da343dd9e8732bf9b6df49ca9da28aa6eefc0177d3b5157015f7893a6c7bedfc39464d29e96418b5dbbacd750808cc50dac31bb335df6f7aead51655933872e45af598c9b26d659f5b526a7206f347e33a5238908872b5ef0388a06a7af4fe61515c352e491bae4324a7c0ccf750d7c0d8aa136dc8a6e161be715f3db9f9d5353cbd58965be51ba1a89269e9638bd47c4fd7cb4bcb55d9c97811c31765efa912b0499364ad8a9cf6e99fc6615ec777b5c3d83b6fd4c27e5d685ed86719fff224ef97fcb778eeb2f00b9687952f17a01f9fb38c3d4164d597ae88a0c9d4eae8c970b170884fb0e49b03d74c559e356922ccff1c732e1fa253357b734ea1b845e3e52f56d617b3cf64349b02adbbe7d2f34c86ca974a545ae2fc53a1ddb790bf21ed1ef3fb32d5969475c19ad2142dbf7701264e3dece0ba01d4ff851d4181f59cd014af9ae00e9aa69eb419f7062b7956013ac0e4847436a0f97476406727f6c1fe48bf1c0c727bf3840b0fc0dc4868e9db5643ada9def36dd351e158f49f69101bdc8b6797526e6318fa435ceaeccb41715a0be83e27db920b624a759a5c3a8bd8e1496adc2822b95a3a555dcd21dbe91e023a63d4e6b6a8532e2ddfde47e11e9e46f768a27f30c4d27489243d76364f42e8c5a503c33fa31f9f8c4e9b53daf22b3dc01dbc39352211ca4396261eb33a4adc9e86c459fb6c8f4072f387b204b7c085ad28067d8cd71f32f657cd221e2463b0542b8f541a2d4b6189475307c1416997da649c9375663063771bfa68cff6fff3e4f90d764e263234e9d4e00224aa855388c93383acec145589a0e9d350bb9bfddb6bf65d929629a86f2e2a500c538a3f04b967a07ded70433f13f2e1cee5be0fc092c111e291fb1d357c3cba44922018803d01c284cf1890c6e951c0f033e3278fc136f6dd49483f5fd6955dc126470a23be5593c726e475d44168d24f74de0171c1dd92073641fa94c042cb832d354330737f7339eb5013eb2520a618b9c8a1a4b00f93e0ef4631a2431e02ab730c9b8f119a2f64d8357978ffda6fc01ad9e6799b6385f2ad33d4e1b985df216383ee414c015150d4fc45a1d1bb0f77d89ffbf581ea74dae535f79a0047cf470dcc5067cd0a424415b3c2f6b86ef31760f4e5d52bd9622b23eee12d4bf6d33240b8707c34b9e211520d8e8a780a4924f19991c6a6e8e5e6d25797943b592fc745daf2d3e32fb5b1d7212c461b05fd5348da44c65f0db2936a411220e6a4a213abf4b1faf37867a6685395ef5999fc3155c87e566d2dcbd459ce9dbe187b576dc05882b27fcfd1ad6c0d622655f21ea3c25117fea8329c44c09b6ab63b696fa44dcd8d2d7e4459859b3151cb7118bbb56e8388f0da5272d10d3d316cefc499b6248644093c126e06f9d9999e9d3fd9541ccd0883bd4965b1704a7fff034c04fb98fc135155b3964f5ce79932aeeb61b84f65be421622c809a4031a258029ac2e061f975498011b39ad69bf1bd7768e0e99f682057b9039e563a54011920c39e542aec50381550e844cee3277536aaa1d8d1d46f7308eb54e90927072123a1f00f58746b9cd1475bd06055def616d77542af63f1e634739d30d38ba73a922d74ebce0b4b962e28318c3ddb83e1b5f74a9039fd9baf879b68de89d3d6adf5bce96b6a9513789f0caa7f8af583e97ebcc02f9ce23fea8dd6267c7046c8040b60e623df165c15658b089b503ca7ea92d3845524d8e2ffe8026eb80a876ce083b6d5dd57703c5f2acd741e9ae042aceb0b4dd995c16154032ffb74f39296023eaf0ff9b26e0c6d951109ca5e61ec167e58b89c9aa6de53ee7cacc91577c69857a7e8efd929621c1896ca359c7ee3f46263255e6a7b447643be1fa8fdf1c0229ea21f11b2585a39f9b05121aed2e3ffc01cc44bf292850771757bbc821cfec0d229c1d916b5e830891df9a4ae644523d21a1e7a0f17cd8a431ef5ae2fdaf5e2720b475108b5e0c28a59b4f96d02f72e29c3a4833a2b5e082c51da707b4fb0424fe91b551741c1e64ea9b088b6717a5752880c030486008206fe7ad0f80439387c7a301edfc92071e6e8f3998f35a87963e09574c82c7b4df18ec2acad724b1134b30d44a1438819856368f3f1697c067f46cb31653dd70e3be813100875c1c96161e85262c0e95e511e06bb4a15f8f62429ec350a32599097595d13800ac5a3ac789c94746c7ec29887d560de312fd82312fdd1276837084345a69d09b34de03efec56ec3ab0f069c232ebd4197da932033e4ece23b932fd054c756c9adc318bf0fd6530d28a8e040d56b49361547ec76eeadb734fad74b5c0ab839d550bc47be95fb"}}) fcntl$notify(r5, 0x402, 0x80000028) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x20008000) file_setattr(0xffffffffffffff9c, 0x0, &(0x7f00000004c0)={0x80004000, 0x2, 0x80000001, 0xa1ef, 0x3}, 0x18, 0x1000) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000000224e0000", 0x58}], 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000648000000160a01010000000000000000010000000900020010000000000000000900010073797a30000000001c0003"], 0xd0}}, 0x0) 11m34.548424468s ago: executing program 3 (id=5501): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000000c0)={0x1c, r1, 0xb97534d5fe9704cf, 0x0, 0x1, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x8854) syz_genetlink_get_family_id$ethtool(0x0, r0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'ip6gre0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000340)=0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)}, 0x4) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000001480)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24004000) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000000)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x6, 0x86b}}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) 11m34.464375622s ago: executing program 3 (id=5503): openat$ptmx(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101800, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101800, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x7) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) (async) write(0xffffffffffffffff, 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)) (async) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1000000, 0x0, 0x10}]) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) setrlimit(0x7, &(0x7f0000000300)={0x2, 0x7fffffc0}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1f) socket$inet6(0xa, 0x5, 0x0) (async) r3 = socket$inet6(0xa, 0x5, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @val={@val={0x88a8, 0x4, 0x1, 0x2}, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x14, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @mcast2}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x40, 0x7fff0000}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x40, 0x7fff0000}]}) r4 = semget$private(0x0, 0x4, 0x292) semtimedop(r4, &(0x7f0000001400)=[{0x0, 0x6, 0x400}, {0x3, 0xfc01}], 0x2, &(0x7f0000001440)={0x0, 0x989680}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) (async) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200), 0x13f, 0x9}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r7, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x6, @empty, 0x88d}, r8}}, 0x30) (async) write$RDMA_USER_CM_CMD_BIND_IP(r7, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x6, @empty, 0x88d}, r8}}, 0x30) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffff, 0x4) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e24, 0x10000000, @dev={0xfe, 0x80, '\x00', 0x19}, 0x6}, 0x1c) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4cd80d00000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800c00230000000040000000000c0022000000000000000000"], 0x4c}}, 0x0) 11m33.280409597s ago: executing program 3 (id=5510): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x38, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x38}, 0x1, 0x0, 0x0, 0xc804}, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000c200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000100)={0x50, 0x0, r5, {0x7, 0x2b, 0x0, 0x50480240, 0x0, 0x61c6, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0xfffffffffffffffc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffff28, 0x3, 0x0, 0x0, 0x0, 0x100000, 0xc000, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000000)='./file0/file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000b00)='./file0\x00', 0x0, 0x1802020, 0x0) 11m33.083500022s ago: executing program 3 (id=5512): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000058c0)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00', 0x5}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b51", 0xb}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="f5fbfd4f1595317700ff55f1f960ff70fba64053ef1c952b8561071ccfbed96b7227eaaf92a1358afc148a8aafa58b2444561acf9a5114b207019da8518fea9fd189e3616ec0ad37f86f431d6f4f1fbe1b0e3e640ac2b1f7ff33cf28d27c4051", 0x60}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)}}, {{0x0, 0x0, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001600)="f296", 0x2}, {0x0}, {&(0x7f00000002c0)}, {&(0x7f0000000280)}], 0x7}}, {{0x0, 0x0, &(0x7f0000005380)=[{0x0}], 0x1, &(0x7f0000005400)=[@ip_retopts={{0x10}}], 0x10}}], 0x4, 0x4000000) 11m32.418328578s ago: executing program 34 (id=5512): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000058c0)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00', 0x5}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b51", 0xb}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="f5fbfd4f1595317700ff55f1f960ff70fba64053ef1c952b8561071ccfbed96b7227eaaf92a1358afc148a8aafa58b2444561acf9a5114b207019da8518fea9fd189e3616ec0ad37f86f431d6f4f1fbe1b0e3e640ac2b1f7ff33cf28d27c4051", 0x60}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)}}, {{0x0, 0x0, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001600)="f296", 0x2}, {0x0}, {&(0x7f00000002c0)}, {&(0x7f0000000280)}], 0x7}}, {{0x0, 0x0, &(0x7f0000005380)=[{0x0}], 0x1, &(0x7f0000005400)=[@ip_retopts={{0x10}}], 0x10}}], 0x4, 0x4000000) 13.468275595s ago: executing program 7 (id=8345): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00') pread64(r1, &(0x7f0000000300)=""/4092, 0xffc, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0xffff, 0x8000}, 0x4) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000000)=0x4, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000002, 0x5d032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000140)="290000001600190f00f43fff0800da060200000000e80003dd08000401000000000000000005000000", 0x29}], 0x1) socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SET_THP_DISABLE(0x51, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x40ead000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 11.672942052s ago: executing program 7 (id=8349): syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003000000206b1d010140000102030109025f0003010380f40904000000010100000a2401000000000201020904010000010200000904010101010200000905010900000000000025010000000009040200000102000009040201010102000009058209493802000000250100000000"], 0x0) r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902"], 0x0) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d010140010102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c2402000000030000000000092406000601000000092403000000000500092406050001"], 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x8d35) move_pages(0x0, 0x2, &(0x7f0000000000)=[&(0x7f0000000000/0x3000)=nil, &(0x7f0000001000/0x4000)=nil], &(0x7f0000001800)=[0x1], &(0x7f0000000100), 0x2) sendto$inet(r1, &(0x7f00000001c0)='l', 0x1, 0x24008015, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r1, &(0x7f0000000080)='<', 0x1, 0x1, 0x0, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000001000)=ANY=[], 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d7003101a08, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x33) ioctl$TUNSETOWNER(r3, 0x400454cc, 0x0) ioctl$TUNSETGROUP(r3, 0x400454ce, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1980, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) r6 = socket(0x40000000015, 0x5, 0x0) poll(&(0x7f0000000340)=[{r6, 0x80}], 0x1, 0x85) unshare(0x2a020400) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) syz_usb_control_io$hid(r2, &(0x7f0000000500)={0x24, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="cb00"/13], 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="73b5c0bdd5090538c83f200801000000d7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.492865463s ago: executing program 7 (id=8352): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x30, r1, 0x5, 0x8000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0x30}, 0x1, 0x0, 0x0, 0x20008801}, 0x808) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xc70, 0xf00e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0xea}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x0, 0xf, 0xa}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000000240)={@dev={0xfe, 0x80, '\x00', 0x2e}, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000124d5240e316e9f958000000000109021b00010000000009047800018fa68d000905", @ANYRES16, @ANYRES16], 0x0) openat$mice(0xffffff9c, &(0x7f0000000040), 0x167342) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r5, {0x7fff}}, './file0\x00'}) setns(r3, 0x64020080) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f00000001c0)={0x0, 0x9}, &(0x7f0000000280)=0x8) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x1b, 0x0, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) close_range(r9, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 5.981921075s ago: executing program 2 (id=8362): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = io_uring_setup(0x4dec, &(0x7f0000000100)={0x0, 0x54c4, 0x8, 0x0, 0x2ff}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) syz_open_dev$admmidi(&(0x7f0000000080), 0x6, 0x400000) 5.896490162s ago: executing program 2 (id=8363): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth0_to_bond\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007500)={0x20, 0x3e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x33}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc040) landlock_restrict_self(0xffffffffffffffff, 0x4) r4 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 5.406678124s ago: executing program 7 (id=8364): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000480)={'\x00', 0xa1, 0x80, 0x81, 0xefcd, 0x2, 0x0}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, r8, {0xffffffffffffffff}}, './file0\x00'}) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000540)={0x1, 0x6, {r7}, {r9}, 0x1000, 0x8000000000000000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x41000, 0x8, 0x6f, 0x3, 0x80, 0x40, 0x29, 0x0, 0x2e, 0x19}, {0xd000, 0x1, 0xc, 0x0, 0x40, 0x5, 0x7d, 0x8, 0x58, 0x3, 0x3, 0xc0}, {0xdddd1000, 0x7000, 0xe, 0x9, 0x3, 0x8, 0xfe, 0x9, 0x5, 0xab, 0x5, 0x81}, {0x3000, 0x26000, 0x3, 0x5d, 0x4, 0x42, 0x9, 0xff, 0x6, 0x7, 0xe}, {0x0, 0x9000, 0x9, 0x3, 0x7, 0x7, 0xab, 0x7f, 0x9e, 0x9, 0xf7, 0x83}, {0x1000, 0x80a0000, 0x10, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0x11, 0x40, 0xfd}, {0xeeed4004, 0x2, 0x0, 0x5, 0x7, 0x2, 0xb, 0x0, 0x5, 0x81, 0x4, 0x70}, {0x5000, 0x1000, 0x8, 0x5, 0xf, 0x7, 0xff, 0x18, 0x2, 0x3, 0x7, 0x9}, {0x4000, 0x30}, {0x10000, 0x86}, 0x80000031, 0x0, 0x3732cfff, 0x242101, 0xa, 0x0, 0xa000, [0x6840000000000000, 0x4, 0x5a, 0x100]}) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r10, 0xffffffffffffffff, 0x0) syz_usb_control_io$lan78xx(r3, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x40, 0x7, 0x75, {0x75, 0x11, "9837b7b4e23ff49f4b5a3adbc1687e28693b8048fd22c5f652618c55a2ebd958fab5726035535bf4bff30bcce2c806aec375ca75b70aa128bf0a9ac1dc90136dbcd4bbe03d6eca6a03d84c0854084f5134a6afb1fd06b43337d5db7a3ec057d6545756336d253b62afb1e1615634dad43d6630"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x429}}}, &(0x7f0000000440)={0x34, &(0x7f00000001c0)={0x0, 0x15, 0xe1, "05aeaad94d4cdf7f3d32f90f6e4c2a98e95c04109573f5087224e05f26a3cd754fbad1c9e8e07d047bffab717f4e548caaaea078d798deb8bf186d08e0785a6211606251d6cee31bf90f495ccc7fa7b86b4d4fe8c24887348b5e3fcbf54d51b5564fa44080fbb02ee8059c9fc9cac68ca15bb6e4371a3c988a6b1acfbac81b6c3d055d61017efe763b1ae3751b85b6dd8d0cc9e253999d0a853a2c31b840e921b12981d192b009e74aa8b78abd9c795054917c396f80be551c14b7ddb0d6998ac2af354b60a42a75612cf6b8eb244ee3a11d6497bd336a97599bc8d7da5afef872"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000340)={0xc0, 0xa1, 0x4, 0x3}, &(0x7f0000000380)={0x40, 0xa0, 0x4, 0x401}, &(0x7f0000000400)={0xc0, 0xa2, 0x2f, "e9f7e4837a2ae334c0d5a32df5bfe355fb763e126c647ad33e0e365c1cda57ed5aeb698347386b045688ed3306767e"}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x12, &(0x7f0000000040)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b", @ANYRES8=r3]) 4.664229485s ago: executing program 6 (id=8366): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x994, 0x800) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x3ff9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@call={0x85, 0x0, 0x0, 0x2d}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0xe3, &(0x7f00000001c0)=""/227, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x5, 0x6, 0x6}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000340)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000380)=[{0x2, 0x5, 0x2, 0xc}, {0x1, 0x5, 0x4, 0xc}, {0x5, 0x5, 0x6}, {0x3, 0x1, 0x8, 0x6}, {0x4, 0x1, 0x6, 0x3}, {0x4, 0x5, 0x10, 0x3}, {0x5, 0x1, 0x1, 0x8}, {0x1, 0x2, 0x3, 0xc}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x1c, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5ab}, {}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x28}, @map_val={0x18, 0xb}, @ldst={0x3, 0x0, 0x3, 0x8, 0x8, 0xffffffffffffffc0, 0x4}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x2}, @alu={0x7, 0x1, 0xa, 0x8, 0x0, 0x51c0b43f8964f540, 0x1}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='GPL\x00', 0x7, 0x72, &(0x7f0000000600)=""/114, 0x41000, 0x48, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x3, 0xe, 0xfffffffa, 0x8}, 0x10, 0xde76, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)=[0x1], &(0x7f0000000700)=[{0x3, 0x3, 0x0, 0x3}, {0x0, 0x1, 0x8, 0x4}, {0x1, 0x4, 0x10, 0x9}, {0x4, 0x1, 0x1, 0x7}, {0x5, 0x1, 0x9, 0xb}, {0x2, 0x5, 0x5, 0x8}, {0x4, 0x3, 0x9, 0x4}, {0x5, 0x2, 0x5, 0xb}], 0x10, 0x50}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000940)={@fallback=r0, 0x0, 0x1, 0x7, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000880)=[0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)=ANY=[@ANYBLOB="480000001000ffff27bd7000eedbdf250001000040dc24f0a8158b62c4fe1b4832eada42520973dd18a1595471378a00f2fed2b2b014ab0b8f47b308e1f2fe561a895c464db152681f033f5cc5803e542b6d84331d466f3081", @ANYRES32=0x0, @ANYBLOB="150c000000000000200012800b0001006d61637365630000100002800c000100060000000000000008000500", @ANYRES32=r3, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) socket$nl_generic(0x10, 0x3, 0x10) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000a00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x3c, 0x7, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xa01}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x14000040) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000a, 0x204031, 0xffffffffffffffff, 0xffffd000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) syz_open_dev$mouse(&(0x7f0000000000), 0x80000000, 0x20a040) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000100)) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYRESDEC=0x0]) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000007080)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={0x20, 0x0, 0x0, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000009080)={0x2020}, 0x2020) 4.552721335s ago: executing program 0 (id=8367): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x241c}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000280)) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)=0x1) 3.768774715s ago: executing program 6 (id=8369): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x20000000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x3c, r4, 0x1, 0x70ad2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x3c}}, 0x30000) 3.65991097s ago: executing program 6 (id=8370): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x10010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io(r2, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(r2, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) (async) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) (async) r3 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) read$FUSE(r3, &(0x7f00000000c0)={0x2020}, 0x2020) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) socket$unix(0x1, 0x5, 0x0) (async, rerun: 32) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 64) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r9, 0x80045105, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000680)=ANY=[@ANYBLOB="580000000000007005b09ef137a2770000000000", @ANYRES32=0x0, @ANYBLOB="4db20200305b0100140003006e657464657673696d3000000000000018001680140001801000060000100000deff0a0001"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x48041) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002780)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xffff, 0x5}, {}, {0xd, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x57f}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4e3, 0xca0b, 0x6, 0x3}, 0x3}}]}, {0x0, 0x6, "a0de6bff19ea2d4babe1b35d693207ea56ac71db08d119c71c43a9c215855d1dd594b51babe640ad5ced3d22df4c25816f3346e5dafaed06fdd1daa7d1a6772efd19ab3f7835e485d5f73e06d8448d7be3c8448db31404cc5f34dacf6b2933a0c077ea7e04c48386ba61ca3750f48ef4a698b1555d7b0533cb0fe1f7de93498d0a8cc559dfcaa0cefd5c4d7daf14c3f601a337e17b26e78e0ff61aa10382e0300000001000"/175}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) 3.659559125s ago: executing program 0 (id=8371): r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000103c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x0, {0x1, 0x2, 0x0, {0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, r4, 0x6b20}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x4001, 0x3, 0x438, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x3a0, 0x206, 0x240, 0x3a0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x2c8, 0x2f0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x1000}}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0xff, {0x9184}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x200008, 0x5, 0x7f, 0x1, 0x1, 0x3b}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)='6', &(0x7f0000000340), 0xca, r6}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f0000000140)=""/167, &(0x7f0000000040), &(0x7f0000000280), 0x1, r6}, 0x38) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) shutdown(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) close(r0) 3.655672777s ago: executing program 6 (id=8372): r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x0, 0x111, 0x4b4, 0x1f0, 0xd4feffff, 0x2b8, 0x20a, 0x278, 0x2b8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0xffffff00, 0xffffff00], [], 'ipvlan0\x00', 'caif0\x00', {}, {0xff}, 0x6, 0xfe}, 0x0, 0x190, 0x1f0, 0x0, {}, [@common=@hl={{0x28}, {0x8dde9cf0fcc298ce, 0x6}}, @common=@unspec=@string={{0xc0}, {0x0, 0xfffd, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x59, 0x0, {0xfff}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [0x0, 0xff, 0xff], 0x4e20, 0x4e23, 0x4e21, 0x4e24, 0x4917, 0x0, 0x4, 0x9, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000005c0)=0x8) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffffff, 0xffffffff, 0x210, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'wg2\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x60}, 0x0, 0xa8, 0xf0, 0x60030000, {0x0, 0xff000000}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0x8}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff000000, 0xffffff00, 0xffffff00, 0xff], [0xff, 0xff, 0xffffffff, 0xff000000], 'ip6gre0\x00', '\x00', {0xff}, {}, 0x84, 0x2, 0x4}, 0x0, 0xf0, 0x120, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x7, 0x0, [0x1, 0xa2e8, 0x4, 0x0, 0x9, 0xc, 0x7, 0x6f, 0x8, 0x489, 0x2c, 0x8, 0x8, 0xfffe, 0x5, 0x9], 0xb}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x6, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd88, r6, 0x1}, 0x80, 0x0}}], 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x0, 0x111, 0x4b4, 0x1f0, 0xd4feffff, 0x2b8, 0x20a, 0x278, 0x2b8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0xffffff00, 0xffffff00], [], 'ipvlan0\x00', 'caif0\x00', {}, {0xff}, 0x6, 0xfe}, 0x0, 0x190, 0x1f0, 0x0, {}, [@common=@hl={{0x28}, {0x8dde9cf0fcc298ce, 0x6}}, @common=@unspec=@string={{0xc0}, {0x0, 0xfffd, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x59, 0x0, {0xfff}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [0x0, 0xff, 0xff], 0x4e20, 0x4e23, 0x4e21, 0x4e24, 0x4917, 0x0, 0x4, 0x9, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) (async) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000005c0)=0x8) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffffff, 0xffffffff, 0x210, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'wg2\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x60}, 0x0, 0xa8, 0xf0, 0x60030000, {0x0, 0xff000000}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0x8}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff000000, 0xffffff00, 0xffffff00, 0xff], [0xff, 0xff, 0xffffffff, 0xff000000], 'ip6gre0\x00', '\x00', {0xff}, {}, 0x84, 0x2, 0x4}, 0x0, 0xf0, 0x120, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x7, 0x0, [0x1, 0xa2e8, 0x4, 0x0, 0x9, 0xc, 0x7, 0x6f, 0x8, 0x489, 0x2c, 0x8, 0x8, 0xfffe, 0x5, 0x9], 0xb}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x6, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) (async) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd88, r6, 0x1}, 0x80, 0x0}}], 0x1, 0x0) (async) 3.485141453s ago: executing program 0 (id=8373): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r0 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x800) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) shutdown(r2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000031000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3.418192693s ago: executing program 6 (id=8374): syz_open_dev$loop(0x0, 0x5, 0x3e3942) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_misc(r0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6766aac1000073fffe880000000000000000000000000101ff020000000000000000000000000001f2a26e1e85ee71ea4477581e833dd6c6d2ad69862f12ebc08985b764481a784b9514a222594c100d0629d1370f0c1015d47fe44418e199409d47317ed258822b07e442c7a49be802c998ef78f8798ddd43ad0e18cd8c09bf73c45c1ad1ab85f1a4"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e702008000040905", @ANYBLOB="b70795"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r2, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$ARCH_MAP_VDSO_64(0x1e, r4, 0xfffffffffffffff8, 0x2003) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0x503, 0xfffffffc, 0x40000, {0x0, 0x0, 0x0, 0x0, 0x25111, 0x31}, [@IFLA_EXT_MASK={0x8}, @IFLA_BROADCAST={0x58, 0x2, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x40850}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000100800010001"], 0x1c}}, 0xc000800) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x560, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x490, 0x2e8, 0x2e8, 0x490, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00', {0xff}}, 0x0, 0x2c0, 0x2f0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x3, 0x2}}, @common=@inet=@policy={{0x158}, {[{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xffffffff, 0xff000000, 0xffffff00], @ipv4=@rand_addr=0x64010102, [0x0, 0xffffffff, 0xffffffff, 0xff000000], 0x4d4, 0x3503, 0x3c, 0x0, 0x1, 0x4}, {@ipv4=@dev={0xac, 0x14, 0x14, 0x38}, [0x0, 0xffffff00, 0xffffff00, 0xff000000], @ipv6=@loopback, [0xffffff00, 0xff, 0xff000000, 0xff000000], 0x4d5, 0x0, 0x0, 0x0, 0x2, 0x2}, {@ipv6=@private1, [0x0, 0xff, 0xff, 0xff], @ipv6=@mcast2, [0xff, 0x0, 0xffffff00, 0xffffff00], 0x4d4, 0x3504, 0x2, 0x0, 0x14, 0x9}, {@ipv6=@local, [0xff, 0xffffffff, 0xffffffff], @ipv4=@empty, [0xffffff00, 0xff], 0x4d3, 0x3505, 0x62, 0x0, 0x7, 0x8}], 0xd9884bcd73343275, 0x1}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@mcast1, @loopback, [0xff, 0xffffff00, 0xffffff00, 0xffffff00], [0x0, 0x0, 0xff000000, 0xff], 'sit0\x00', 'caif0\x00', {}, {}, 0x67, 0x3, 0x0, 0x20}, 0x0, 0x138, 0x1a0, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'bond0\x00', 'veth1_virt_wifi\x00', 0x0, 0x1}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) sendmsg$nl_route(r3, 0x0, 0x840) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) r10 = dup(r9) ioctl$EVIOCGRAB(r9, 0x40044590, &(0x7f0000000040)) read(r10, &(0x7f0000006100)=""/102364, 0x18fdc) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000004c0)=[{0x6, 0x4, 0xa4, 0x7fff0003}]}) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000000)=0x6) close_range(r11, 0xffffffffffffffff, 0x0) 3.344282902s ago: executing program 0 (id=8375): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000040000000000000000600000018010000646c6c250000000000a02020731af8ff00000000bfa1000000000f4240010000f8ffffffb702000008000000b703000001000000850000000640000895"], &(0x7f0000000040)='GPL\x00', 0x6, 0x1f, &(0x7f0000000240)=""/31, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00)=ANY=[@ANYBLOB="00541f000000ccdd"], 0x0, 0x0, 0x0, 0x0}) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$uac3(r0, 0x0, 0x0) 2.74112313s ago: executing program 0 (id=8376): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000680)={0x9, [0x4, 0x9, 0x1d, 0x80, 0x120, 0x4f3b, 0x85, 0x5, 0x8, 0x0, 0x1a98, 0x401, 0x3, 0xd, 0x2, 0x8, 0xffff, 0x20, 0x4, 0x4, 0xf4a3, 0x8001, 0x1, 0x2, 0x2, 0x2f3, 0x52, 0x8, 0x2, 0x401, 0x9, 0x8, 0x4, 0x7, 0x724d, 0x3, 0xfff9, 0x0, 0x800, 0x1, 0x5, 0xfffd, 0x4f7, 0x82f8, 0x1, 0xfff6, 0x9, 0x8], 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0, r1}, 0x68) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000010025bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1028040003000000140003006970366772657461703000000000000008000d00"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x2f64, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x2, 0x23f}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x1, 0x40, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r4 = fsopen(&(0x7f0000000040)='omfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000480)={{r4, 0x0, 0x10000, &(0x7f0000000140)={@align=0x2, {0x9, 0x8ac, 0x81, 0x7}}, 0x9, &(0x7f00000001c0), &(0x7f0000000340)=0x9}, 0x1, &(0x7f0000000440)=[{0x1, 0x100, &(0x7f0000000380)='!-(}\x00', &(0x7f00000003c0)="bdfd08a31e6645b7413516cfafa1ce88cc8a5539b71e406a696f1ed57c4a8762951784beaa27a7eee7ece9502a1f5827bb918b95e7126d19b8c649eb1a24e08dec87fadc215105f00ffb5d41", 0x4c, 0x28}]}) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r5, 0x4004af77, &(0x7f0000000500)=0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) socket$packet(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff576", 0xcb}, {&(0x7f00000009c0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a8a9fa32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c505f1678a3165181261067977d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff23346e701f1c8cf9b6cd0d485c422d1c07b63988d3377dfe6634b1e184", 0xef}, {&(0x7f0000000ac0)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000000b80)="3b3d07b7091f697381965e2e7909f9f6f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910baf212596b2a4a23aab8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f63a26492042b663d8c955bfad12d47e8", 0x80}], 0x4}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d80)="d51927d7b27f39aa725cb19a990f66ac9aae2f7d92045a4c05e60f4dc5dc6c4e4ac8449b9915fb289bf1692a4c7d9440950ee716b680274b3c53048b6a2aeca47c5e6987db6b4fb364fa1e1709caa0696b9e02eabc8757ef2dd6a17f3efa", 0x5e}, {&(0x7f0000000280)="96bc7002a06addfa3b96a5e4de4cf18b08fa24022c9eb8cd8932ada8710619787de0065d8173252675ba187eaf42654146ec2aa6df89468afd222a853f38363f187b7fbc96f64004fa81182e6eae27df59655f4acab134d99a8bb6b9f7d6a7f0a652b6c6cd366bb5562bef203e119f2a9120a5b524adb8ee0927a0c463d7f29c5d441bf9c29d3f1c6133f911765f2493ed24571da986ec6cd145eca1e3e5d46b458f55720ab8bfa49914be4e38fad34699c2c022421fe730f012", 0xba}, {&(0x7f0000000e40)="1304235350b0171b15c5c7a6c9861daf", 0x10}, {&(0x7f0000000c00)="048dc9fb57afe301fd6f4184903098607627504035b7aa74e71b85eaa192907f44d18f5695718d3c3532f6ed73c2422e87d6d3032447f236426208000000000000009baf685a743e7e079b3ac4a1b592da8a23ea97a80da6ec7fb46355caf53ab8efe6d61dbb939c5f96f86c3d", 0x6d}, {&(0x7f0000000640)="68a55d6df108bed91373cc794c16187a680c0c711ae161400d400e28f7117e17fd75340a58f8d37231d4e7cd61719f501fd0d890485c98ee906e64fad259a1000000fc4d76dadbb000759cb2f693eff182746b249aa9483b11dade49bf97b853ae95b84f3eed14754fae6563f748000000007f8756cc1926bac0efdaf88b1e564330937dc7f3f7fc7068d78c6560db794529dbb68908107d29bc416fb4a8de77d47822236d092e91f1f88e8a83feb0f7f50a17fae8a172ac9d3defbec33c08a2c11ef021118bd13619ba412f9613bf26f1f7feaac135f0929c7996385e7eba0d372dedb1b8540847fc6c4270a553d0827ffe3a1b2853db84c44625869d153c8b80e54653ca024ce2bfeefcb5e049b456100013bd7718117839e1ab32c7dc129dc2228161cbdad00059e7fdd78cc49f23b1d57fbea4697e4d5998", 0x13a}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r6, &(0x7f0000002b80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000280)="690c359316fbdb6432bcf10243827027e023480d3f83ba04df310e8a3a3e1d58fc875d26167dd1125bcd941e39be8909d6e73e692bf985f6ef5d7143e7c53274ab3f0277016a34bf7c4f62f724923a035364f82cd23ac25cc2e5c4c0edfebeabf980ed87ef47ec75949daa24a6f3731117f992717c130c24395d7a4fb558549c84", 0x81}], 0x1}}], 0x2, 0x4404c880) 2.478348668s ago: executing program 0 (id=8378): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x46) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket(0x11, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x0, 0xea60}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, 0x0, 0x0) getpgid(0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f00000001c0)={@hyper}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r4, 0x7b2, &(0x7f00000000c0)={&(0x7f0000000f00)=[0x2, 0xe0, 0x20400000, 0xff, 0x7, 0x2, 0x9, 0x5, 0x80, 0x4, 0x2, 0x0, 0x5, 0x3a4d, 0x2800, 0x486, 0x5, 0x5a, 0x7, 0x7, 0xfffffff9, 0x4, 0x2, 0x0, 0xfff, 0x9, 0xffff0001, 0x3, 0x4, 0xb9b2, 0x441, 0x6, 0x3, 0x7, 0x8, 0xfffffff8, 0x0, 0xfffffffe, 0x9, 0x8, 0x3, 0x2, 0x1ff, 0x9, 0x2, 0x8, 0x1000, 0x7, 0x1, 0x5, 0x1, 0xf91, 0x0, 0x9, 0x9, 0x7, 0xb, 0x7, 0x7, 0x8000, 0xb80, 0x4, 0x9f, 0x1, 0x5, 0xc41, 0x8, 0x2, 0x1ff, 0x5, 0x7, 0xff76, 0x4, 0xf, 0x6, 0x7, 0x8, 0x3, 0x4, 0x6, 0x4, 0x7fffffff, 0x3, 0x47, 0x7, 0x8, 0x101, 0xfffff046, 0x9, 0x400, 0xfffffffa, 0x5, 0x0, 0x6, 0x4, 0x7, 0x36, 0x157, 0x7d1, 0x8b96, 0xf, 0x20005, 0x0, 0x7, 0x6, 0x2, 0x8, 0x925, 0x4, 0x9, 0x7, 0xb, 0x5a17cff6, 0x0, 0xb6, 0x2, 0x3, 0x2, 0x7f, 0xffffff7f, 0x7, 0x10000, 0x3, 0x1c2a, 0x3ff, 0x0, 0x10, 0x7f, 0x6, 0x3, 0x14, 0x80, 0x7, 0x4, 0x2, 0x0, 0x2f6, 0x5, 0x9, 0xa7, 0x0, 0x9, 0xc, 0x40, 0x8000006, 0x200, 0x1, 0x2, 0x1, 0x401, 0xaa0, 0x2, 0x6, 0x9, 0x400, 0xe, 0x0, 0xfffeffff, 0x5, 0x7fffffff, 0x7ff6, 0x3, 0x1, 0x4, 0x7, 0x400, 0x0, 0x6, 0x6, 0x101, 0x2, 0x5, 0xfffffff8, 0x3, 0x7fff, 0x6d, 0x7, 0x1, 0x8, 0x6, 0x10001, 0x0, 0xffffffff, 0x8, 0xd, 0x2, 0x200, 0x7bd, 0xa2, 0x2, 0x7, 0x9, 0x6, 0x2, 0x4ec, 0x3, 0x401, 0x5, 0xb, 0x1, 0x948, 0x7, 0x8001, 0xff, 0x200, 0xb67, 0x6, 0x5b, 0x2, 0x1, 0x8, 0x6, 0x2, 0x2, 0x1, 0x10, 0x7f, 0xa07, 0xc0bf, 0x40, 0xa4f, 0x8, 0x8001, 0x8, 0x6, 0x10000, 0x1000, 0x8, 0x1, 0x6, 0xab5, 0x4, 0x9da, 0x800000, 0x7, 0x4, 0xf8, 0x7, 0x7fffffff, 0xfffeffff, 0x401, 0x1, 0x101, 0x2, 0x3, 0xe, 0x6, 0x9, 0x401, 0x7, 0x0, 0x7, 0xfffffffc, 0x5, 0x4, 0x8, 0x3f39, 0xbaa, 0x2, 0x6, 0xcb7, 0x4, 0x8, 0x7f, 0x53b, 0xc, 0x1, 0x2, 0x8, 0xc, 0xfffffff8, 0x0, 0x2, 0x3, 0x5, 0x3, 0x400, 0x6b, 0x7ae, 0x1, 0x6f0, 0xffff, 0x7, 0x9, 0x4, 0xfff, 0x2, 0x7f, 0x3, 0x6, 0x544040be, 0x2, 0xc, 0x8, 0x9, 0x8, 0x7, 0x10001, 0xff, 0x7, 0x10000, 0x2, 0x818, 0x4, 0x3, 0x5af, 0x2, 0x5, 0x7, 0x2, 0xd, 0x2, 0x8d, 0xb8c5, 0xfffffffe, 0x202, 0x3, 0x2, 0xa0, 0x9, 0x7, 0x1, 0x4000000, 0xffffffff, 0x4, 0x40, 0x0, 0x1, 0x7, 0x6, 0x4, 0x8, 0x5, 0x6, 0x8, 0x8, 0x1, 0x5, 0x3, 0x9, 0xb1, 0x5, 0x7, 0xe, 0x9, 0x100, 0x3, 0x5, 0x6, 0x7, 0x2, 0x3, 0xec, 0x5, 0x7, 0xff, 0x5, 0x0, 0x9cf, 0xaef8, 0xffff, 0x5, 0x1, 0x5, 0xc, 0x18a, 0xc, 0x0, 0x0, 0x6, 0x7, 0x4, 0xf2ed, 0x6, 0x4, 0x1, 0x7, 0x5, 0x8, 0x10000, 0xb, 0x9, 0xec852fda, 0x2, 0x9, 0x2, 0x3620, 0x9, 0x3, 0x3, 0x7, 0x74, 0x0, 0x9, 0x0, 0x2, 0x7, 0x8, 0x3, 0x5, 0x21000000, 0x4, 0x5, 0x9, 0x356d28dc, 0x8, 0x999, 0x6, 0x24, 0x6, 0x3, 0x2772, 0x4, 0x1, 0x8, 0xffff, 0x8, 0x6, 0x0, 0x8001, 0x2, 0x2, 0x101, 0x9cf, 0x10001, 0xd1, 0x0, 0x5, 0x3, 0x6, 0x40004, 0x80000001, 0x2, 0x5, 0x9, 0xe, 0xfff, 0x7, 0x10000, 0xffff, 0x7, 0x9, 0xfffffff7, 0x6, 0xa8, 0x9, 0x7ff, 0xd8a, 0x5, 0x929, 0x0, 0x8, 0xfffffffe, 0x40, 0x4, 0x2, 0x6, 0x1, 0x7, 0x7, 0x7fffffff, 0x33, 0x5, 0xa7, 0x7d8e, 0x2, 0x5, 0x4, 0x5, 0x3, 0x4, 0x1, 0x5, 0x96, 0x80, 0x8000, 0x0, 0x7, 0xfffffffc, 0x3, 0x3, 0x5, 0x0, 0x4, 0x100000, 0x6, 0x1, 0x9, 0x2, 0x4, 0x5, 0x3ff, 0x9, 0x6, 0x4, 0x5, 0x40, 0x800, 0xfffffffb, 0x5, 0x0, 0x0, 0x80, 0x6, 0x10, 0x0, 0x0, 0x3, 0x4, 0x4, 0x80000001, 0x81, 0x1, 0x0, 0x6, 0x2, 0x7, 0xff, 0x7fff, 0x7, 0x0, 0x3, 0x1, 0x3, 0xb, 0x3, 0x6c, 0xffffffff, 0x8, 0x1ff, 0x10, 0xf, 0x81, 0x292e, 0x2ac9, 0x9, 0xb42, 0x7, 0xd015, 0x3, 0xff, 0x8001, 0x6, 0x0, 0xe, 0x5, 0xfffffffb, 0x6, 0x0, 0x9, 0x5, 0x80000000, 0x6, 0xfffffffb, 0x8, 0x6, 0x3, 0xd, 0x8001, 0x100, 0xffffffa1, 0xb, 0x1, 0x25fa, 0xd4, 0x2, 0xffffffd6, 0x976, 0x7, 0x4, 0x0, 0x5, 0xff, 0x3, 0xe6, 0x74c, 0x4, 0x7, 0xb0a, 0x6, 0x862d, 0x40, 0xffffffff, 0x5, 0x5, 0xd8c, 0x9, 0x7fffffff, 0x7, 0xe11, 0x4, 0x8, 0x1ff, 0x6, 0x10, 0x8001, 0x0, 0x8, 0xffffffff, 0x40, 0xe8, 0xb, 0x2, 0x9, 0x8, 0x5, 0x5, 0x80000001, 0xe, 0x4, 0x9, 0xb, 0x1, 0x3, 0x9, 0x9, 0xa0000000, 0xc390, 0x4, 0x791, 0xfff, 0x4, 0x54f, 0x4, 0x4, 0x80, 0x6, 0xfffffe00, 0xb, 0x5, 0x4, 0x7, 0x401, 0x4, 0x2, 0x8, 0x2, 0x3, 0xfffffff7, 0x9, 0x5, 0x6, 0x6, 0x4, 0x8, 0x0, 0x6f616b2e, 0x8, 0x101, 0x1ff, 0x2, 0x0, 0x4, 0xa25, 0x7, 0x8001, 0x9, 0xdd4, 0x4, 0x9, 0x7ff, 0x9, 0xffffffff, 0x80, 0x1, 0x4, 0x7, 0xfffffff7, 0x8, 0x2f69, 0x1, 0x7, 0x766b, 0x8, 0x1, 0xb, 0x8, 0xffffce7d, 0x6, 0x2, 0xffff349c, 0x9c1, 0x2, 0x1, 0x1, 0x2, 0x52, 0x9, 0x10000, 0x5, 0x4, 0x35, 0x9, 0x9088, 0xfff, 0x8, 0xb, 0x8000, 0x7, 0x80000001, 0x8, 0x800, 0x6, 0x5, 0x6, 0xd1, 0x8, 0x8000, 0x3, 0x6, 0x4, 0x5, 0x10000, 0x5, 0x7fff, 0xff, 0x607, 0x6, 0x3, 0x4, 0x7, 0x8, 0xc0000000, 0x9, 0xf035, 0x5aa8, 0x1, 0x7, 0x3, 0x3, 0x5, 0x5, 0x2, 0x20, 0x101, 0x6, 0xb, 0x5fa5, 0x8, 0x5, 0xfffffffd, 0x7fffffff, 0x4, 0x5, 0x8, 0x1000, 0x3, 0xd, 0x3, 0x9, 0x2, 0x9a5, 0x8, 0x8, 0xff, 0x7, 0x4, 0x7fffffff, 0x4b8, 0x3, 0x5, 0x2, 0x4, 0x6, 0x40, 0x1, 0xe07, 0x8, 0x340, 0x3, 0x5, 0x1, 0x7, 0xfb3f, 0x100000, 0x3, 0x9, 0x4, 0xa, 0x100, 0x1a, 0xfffffffa, 0x7, 0x39, 0x7ff, 0xe, 0x835, 0x7, 0x1, 0x2b, 0x2, 0x1d1c, 0x10, 0x6, 0x10000, 0x7, 0x7f, 0x4, 0x5, 0x5, 0x2, 0x4, 0xffffff00, 0xee5b, 0x1, 0x1, 0x0, 0x8, 0xfffffffc, 0x29f0, 0x6, 0x8, 0x7, 0x769, 0x0, 0x4, 0xe6f, 0x3, 0xf2a, 0x6, 0x93ad, 0x5, 0x9, 0x400, 0x8000, 0x7, 0x6, 0x5, 0x80000001, 0x4, 0x9, 0x1, 0xf4, 0x100, 0x7, 0x1, 0x400, 0x401, 0x4, 0x3, 0xb, 0x7, 0x10, 0x2, 0x2, 0x7f, 0x5, 0x7f, 0x54bf, 0x10, 0xd, 0x8, 0xff, 0x73a3, 0xdc, 0x3, 0x9, 0x3, 0x3b, 0x400000, 0x4, 0x2, 0xfaea, 0x3, 0x80000001, 0x6, 0x7, 0x4, 0x4b, 0x8, 0x6, 0x2, 0xffff, 0x8, 0x8, 0x2, 0xb, 0x9, 0x7fffffff, 0x80, 0x0, 0x1, 0x2, 0x9, 0x5b40000, 0x32bb, 0x200, 0x8, 0xffffffff, 0xf3d, 0x8a, 0x4, 0x3, 0x5, 0x5, 0x81, 0x5, 0xef, 0x6, 0x6, 0xac, 0x7, 0x4, 0x64, 0x6, 0x9, 0x8, 0x3, 0x300000, 0x3, 0x0, 0x4a1, 0xcd9, 0x3e77, 0x854, 0xee8, 0x3, 0x7fffffff, 0x400, 0x5, 0x3, 0x4, 0x2, 0x2, 0x81c, 0x3ff, 0x800, 0xe7d, 0x40, 0x1ff, 0x0, 0x4, 0x3, 0x400, 0xfffffffe, 0xffffffff, 0x800, 0x41c, 0x9, 0xfffffffc, 0x800009, 0x1bcb, 0x9, 0x4, 0x2, 0xf4a, 0x8, 0x1ff, 0x3, 0x401, 0x3, 0x9, 0x7, 0x2b4, 0x91, 0x7, 0x8c, 0x1, 0xffffffff, 0x2, 0xb, 0x9, 0x7, 0x3, 0x0, 0x9, 0xb, 0x3, 0x1f, 0x8, 0x9, 0x0, 0x4, 0x0, 0x7, 0x8, 0xd3, 0x5, 0xf, 0x3, 0x8, 0x7, 0x3, 0x7ff, 0x104, 0x6, 0x5, 0x2, 0x7, 0x8, 0x6ee5, 0xfffffffb, 0x401, 0x7, 0x7fffffff, 0x1, 0x0, 0x1, 0x5, 0xc0000000, 0x1, 0x2, 0x76ac8333, 0xe, 0xff, 0x3ff, 0x66680, 0x7ff, 0x9, 0x9, 0x2, 0x230c, 0x2, 0x51c4ea0d, 0xbd, 0x9c, 0xd, 0x401, 0x0, 0x0, 0x3, 0xe6, 0x2, 0x4], 0x2, 0x400, 0x38}) syz_usb_connect(0x0, 0x48, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000056544820e10508041125010207010902360001000000000904"], 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0c00000004000000040000000010000000000000", @ANYRES32=r0, @ANYBLOB="00e401b938b7f4ff3a5062ffffffffffff00000000005f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f0000000180), &(0x7f00000002c0)=r0}, 0x20) unshare(0x22020400) 2.478049902s ago: executing program 2 (id=8379): bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 2.311954085s ago: executing program 2 (id=8381): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) fchdir(r0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x8400) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) r1 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff2}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x18, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x56}}, @call={0x85, 0x0, 0x0, 0x1f}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0xf2}}}, &(0x7f0000000780)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef12}, 0x94) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4082}], 0x1, 0x40800) (async) recvmsg$qrtr(r5, &(0x7f0000003200)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000f00)=""/195, 0xc3}], 0x1, 0x0, 0x0, 0x12120}, 0x38, 0x1) (async) recvfrom$inet6(r0, &(0x7f0000001640)=""/4109, 0x100d, 0x2020, &(0x7f0000000040)={0xa, 0x4e24, 0x89, @dev={0xfe, 0x80, '\x00', 0x2c}, 0xfffffff9}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000043000100fefffffff8dbdf25027c000004004580280001801400d300000000000000000000000000000000010800de00", @ANYRES32, @ANYBLOB='\b\x00b\x00', @ANYRES32=0x0, @ANYBLOB="eb1b842fee85f84b5437e51891207cec4253a2e55fa2c0ee07bc079b8d547b2b534dd7a529d12824cf8f931d90e0b777131709972c6c8d777386762a9b32d20d75d8d4970d82f85dea4c75e8eb859165359f2e7c7fb1d888306e52a61413c00df51d8e73eebd"], 0x40}, 0x1, 0x0, 0x0, 0xc044}, 0xc000) 2.308336566s ago: executing program 7 (id=8382): epoll_create1(0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r2, {}, {0x9, 0xa}, {0xfff3, 0x9}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x800}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x4008014) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) (fail_nth: 59) 1.752421062s ago: executing program 7 (id=8384): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005f8bfa4099115268345701020301090212000100000000090499", @ANYRES16, @ANYBLOB="09efbaddab6f7813c1d64eaa4aff6f6a"], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/meminfo\x00', 0x41, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) r2 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0xa) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f00000000c0)='=relative', &(0x7f0000000140)='./cgroup\x00', r3) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r1, 0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x99f}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x82}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xd4}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6400}}}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 1.751303239s ago: executing program 2 (id=8385): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4f00, 0x4}, [@alu={0x4, 0x0, 0x3, 0x0, 0x9, 0x18, 0x10}]}, &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94) 1.636244165s ago: executing program 2 (id=8386): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000040000000000000000600000018010000646c6c250000000000a02020731af8ff00000000bfa1000000000f4240010000f8ffffffb702000008000000b703000001000000850000000640000895"], &(0x7f0000000040)='GPL\x00', 0x6, 0x1f, &(0x7f0000000240)=""/31, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00)=ANY=[@ANYBLOB="00541f000000ccdd"], 0x0, 0x0, 0x0, 0x0}) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$uac3(r0, 0x0, 0x0) 1.416100941s ago: executing program 5 (id=8388): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000680)={0x9, [0x4, 0x9, 0x1d, 0x80, 0x120, 0x4f3b, 0x85, 0x5, 0x8, 0x0, 0x1a98, 0x401, 0x3, 0xd, 0x2, 0x8, 0xffff, 0x20, 0x4, 0x4, 0xf4a3, 0x8001, 0x1, 0x2, 0x2, 0x2f3, 0x52, 0x8, 0x2, 0x401, 0x9, 0x8, 0x4, 0x7, 0x724d, 0x3, 0xfff9, 0x0, 0x800, 0x1, 0x5, 0xfffd, 0x4f7, 0x82f8, 0x1, 0xfff6, 0x9, 0x8], 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0, r1}, 0x68) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000010025bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1028040003000000140003006970366772657461703000000000000008000d00"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x2f64, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x2, 0x23f}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x1, 0x40, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r4 = fsopen(&(0x7f0000000040)='omfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000480)={{r4, 0x0, 0x10000, &(0x7f0000000140)={@align=0x2, {0x9, 0x8ac, 0x81, 0x7}}, 0x9, &(0x7f00000001c0), &(0x7f0000000340)=0x9}, 0x1, &(0x7f0000000440)=[{0x1, 0x100, &(0x7f0000000380)='!-(}\x00', &(0x7f00000003c0)="bdfd08a31e6645b7413516cfafa1ce88cc8a5539b71e406a696f1ed57c4a8762951784beaa27a7eee7ece9502a1f5827bb918b95e7126d19b8c649eb1a24e08dec87fadc215105f00ffb5d41", 0x4c, 0x28}]}) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r5, 0x4004af77, &(0x7f0000000500)=0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) socket$packet(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff576", 0xcb}, {&(0x7f00000009c0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a8a9fa32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c505f1678a3165181261067977d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff23346e701f1c8cf9b6cd0d485c422d1c07b63988d3377dfe6634b1e184", 0xef}, {&(0x7f0000000ac0)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000000b80)="3b3d07b7091f697381965e2e7909f9f6f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910baf212596b2a4a23aab8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f63a26492042b663d8c955bfad12d47e8", 0x80}], 0x4}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d80)="d51927d7b27f39aa725cb19a990f66ac9aae2f7d92045a4c05e60f4dc5dc6c4e4ac8449b9915fb289bf1692a4c7d9440950ee716b680274b3c53048b6a2aeca47c5e6987db6b4fb364fa1e1709caa0696b9e02eabc8757ef2dd6a17f3efa", 0x5e}, {&(0x7f0000000280)="96bc7002a06addfa3b96a5e4de4cf18b08fa24022c9eb8cd8932ada8710619787de0065d8173252675ba187eaf42654146ec2aa6df89468afd222a853f38363f187b7fbc96f64004fa81182e6eae27df59655f4acab134d99a8bb6b9f7d6a7f0a652b6c6cd366bb5562bef203e119f2a9120a5b524adb8ee0927a0c463d7f29c5d441bf9c29d3f1c6133f911765f2493ed24571da986ec6cd145eca1e3e5d46b458f55720ab8bfa49914be4e38fad34699c2c022421fe730f012", 0xba}, {&(0x7f0000000e40)="1304235350b0171b15c5c7a6c9861daf", 0x10}, {&(0x7f0000000c00)="048dc9fb57afe301fd6f4184903098607627504035b7aa74e71b85eaa192907f44d18f5695718d3c3532f6ed73c2422e87d6d3032447f236426208000000000000009baf685a743e7e079b3ac4a1b592da8a23ea97a80da6ec7fb46355caf53ab8efe6d61dbb939c5f96f86c3d", 0x6d}, {&(0x7f0000000640)="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", 0x13a}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r6, &(0x7f0000002b80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000280)="690c359316fbdb6432bcf10243827027e023480d3f83ba04df310e8a3a3e1d58fc875d26167dd1125bcd941e39be8909d6e73e692bf985f6ef5d7143e7c53274ab3f0277016a34bf7c4f62f724923a035364f82cd23ac25cc2e5c4c0edfebeabf980ed87ef47ec75949daa24a6f3731117f992717c130c24395d7a4fb558549c84", 0x81}], 0x1}}], 0x2, 0x4404c880) 1.051429557s ago: executing program 5 (id=8389): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000014"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) r2 = getpgid(0x0) unshare(0x20060400) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) fallocate(r3, 0x8, 0x7ffffffffffffffe, 0x5cfc) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) fcntl$setsig(r1, 0xa, 0x1c) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001400090527bd7000fddbdf25022000cb", @ANYRES32, @ANYRESHEX=r3], 0x40}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x220, 0x308, 0x220, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0xffffff00, 0x1, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x7, 0x2, 0x0, 0x800, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x180}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @broadcast, 0x6, 0xfffffffe}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 0x0, 0xfd, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x20058) 673.482343ms ago: executing program 5 (id=8390): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0, 0x20}], 0x1, 0x74, 0x0, 0x0) 420.288213ms ago: executing program 5 (id=8391): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0xfeffffff) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000340)={0xe939, r1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x0, r3}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x3000004, 0x12, r0, 0x100000000) 354.642018ms ago: executing program 6 (id=8392): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x30, r1, 0x10, 0x0, 0xffffffff, {{}, {@void, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x10, 0x10d}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000065}, 0x4008000) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, 0x0) syz_usb_connect$hid(0x3, 0x3f, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 229.496351ms ago: executing program 5 (id=8393): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x4, 0x7, 0x3, 0x180, 0x2, 0x10, 0xf1, 0x100000001, 0x1, 0x5, 0x0, 0x800029, 0x0, 0x6, 0x0, 0xbd9], 0xffff1001, 0x43100}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], 0x0}, 0x94) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x75, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0x0, 0xff, 0x0, 0x7, 0xe}, {0xf000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0xfa, 0x97}, {0xeeefa000, 0xdddd0000, 0xe, 0xa0, 0x1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xdddd0000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0x5, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0xa, 0x0, 0x100000, [0xe5b5, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0xf0ffffffffffff) 0s ago: executing program 5 (id=8394): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000029c0)={0x6, 0x8000005, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064d2, &(0x7f0000000080)={0x1, 0x80, 0x3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4401}) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000080)="0bacff", 0x3}, {&(0x7f0000000240)='\x00\x00\x00\x00\x00\x00\x00', 0x7}, {&(0x7f00000000c0)="2764ae4f", 0x4}], 0x3) getcwd(&(0x7f0000000040)=""/63, 0x3f) (async, rerun: 32) getsockopt(r0, 0x6, 0x6, &(0x7f0000000040)=""/54, &(0x7f0000000080)=0x36) (rerun: 32) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_tcp_TLS_TX(r5, 0x11e, 0x1, 0x0, 0x0) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000200), 0x101400, 0x0) (async) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r6, &(0x7f00000003c0)={0x9, 0x108, 0xfa00, {r7, 0x1, "f6d5ec", "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"}}, 0x110) (async, rerun: 32) setsockopt$inet_buf(r4, 0x0, 0x29, 0x0, 0x0) (rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) kernel console output (not intermixed with test programs): ] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2188.947685][ T5722] usb 3-1: new full-speed USB device number 107 using dummy_hcd [ 2189.099670][ T5722] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2189.110066][ T5722] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 2189.121741][ T5722] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2189.133072][ T5722] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 190, setting to 64 [ 2189.146056][ T5722] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 2189.155300][ T5722] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 2189.164030][ T5722] usb 3-1: Product: syz [ 2189.168519][ T5722] usb 3-1: Manufacturer: syz [ 2189.173166][ T5722] usb 3-1: SerialNumber: syz [ 2189.180757][ T5722] usb 3-1: config 0 descriptor?? [ 2189.186417][ T488] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 2189.249740][ T5722] rc_core: IR keymap rc-imon-rsc not found [ 2189.260244][ T5722] Registered IR keymap rc-empty [ 2189.266422][ T5722] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 2189.277619][ T5722] input: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input152 [ 2189.412648][T26756] usb 3-1: USB disconnect, device number 107 [ 2189.620682][ T501] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7940'. [ 2190.011878][ T519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2190.021842][ T519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2190.043753][ T519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2190.055603][ T519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2190.653562][ T528] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7951'. [ 2190.663970][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 2190.663987][ T29] audit: type=1326 audit(1777362926.419:6378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=525 comm="syz.0.7950" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a45d9cdd9 code=0x0 [ 2190.731102][ T530] netlink: 'syz.0.7950': attribute type 9 has an invalid length. [ 2191.347455][ T5722] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 2191.457785][T31849] net_ratelimit: 12 callbacks suppressed [ 2191.457802][T31849] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2191.478001][T31849] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2191.555775][ T5722] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2191.571743][ T5722] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 2191.580988][ T545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2191.590485][ T5722] usb 3-1: can't read configurations, error -71 [ 2191.597240][ T545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2192.017721][T31850] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2192.032621][T31850] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2192.239244][ T42] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 2192.274089][ T563] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7962'. [ 2192.410594][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2192.424350][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2192.434885][ T42] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 2192.444089][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2192.480688][ T42] usb 6-1: config 0 descriptor?? [ 2192.559112][T31844] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2192.573650][T31844] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2192.757736][ T29] audit: type=1326 audit(1777362928.519:6379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=574 comm="syz.7.7968" exe="/root/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7f92ae99cdd9 code=0x0 [ 2192.902059][ T549] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7959'. [ 2193.121625][ T588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2193.130265][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2193.144716][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2193.149035][ T588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2193.196996][ T588] netlink: 'syz.0.7969': attribute type 64 has an invalid length. [ 2193.217704][ T588] netlink: 5 bytes leftover after parsing attributes in process `syz.0.7969'. [ 2193.279085][ T588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2193.295223][ T588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2193.349323][ T591] FAULT_INJECTION: forcing a failure. [ 2193.349323][ T591] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2193.364553][ T591] CPU: 1 UID: 0 PID: 591 Comm: syz.2.7970 Tainted: G L syzkaller #0 PREEMPT(full) [ 2193.364575][ T591] Tainted: [L]=SOFTLOCKUP [ 2193.364580][ T591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2193.364591][ T591] Call Trace: [ 2193.364597][ T591] [ 2193.364603][ T591] dump_stack_lvl+0xe8/0x150 [ 2193.364624][ T591] should_fail_ex+0x412/0x560 [ 2193.364645][ T591] prepare_alloc_pages+0x22a/0x650 [ 2193.364670][ T591] __alloc_frozen_pages_noprof+0x12f/0x380 [ 2193.364694][ T591] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2193.364717][ T591] ? __pfx_policy_nodemask+0x10/0x10 [ 2193.364736][ T591] ? __folio_batch_add_and_move+0x11a/0xc50 [ 2193.364755][ T591] ? lock_acquire+0x106/0x350 [ 2193.364775][ T591] alloc_pages_mpol+0x235/0x490 [ 2193.364798][ T591] folio_alloc_mpol_noprof+0x39/0x160 [ 2193.364820][ T591] vma_alloc_folio_noprof+0xe1/0x1e0 [ 2193.364842][ T591] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 2193.364870][ T591] do_wp_page+0x118a/0x4cc0 [ 2193.364889][ T591] ? __pte_offset_map+0x29/0x240 [ 2193.364911][ T591] ? __pfx_do_wp_page+0x10/0x10 [ 2193.364925][ T591] ? do_raw_spin_lock+0x12b/0x2f0 [ 2193.364946][ T591] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2193.364971][ T591] handle_mm_fault+0x151d/0x3170 [ 2193.364996][ T591] ? handle_mm_fault+0xee/0x3170 [ 2193.365021][ T591] ? __pfx_handle_mm_fault+0x10/0x10 [ 2193.365038][ T591] ? follow_page_pte+0xbb7/0xe50 [ 2193.365059][ T591] ? __pfx_follow_page_pte+0x10/0x10 [ 2193.365082][ T591] __get_user_pages+0x1683/0x2720 [ 2193.365116][ T591] __gup_longterm_locked+0xdcf/0x1630 [ 2193.365139][ T591] ? sanity_check_pinned_pages+0x7af/0x870 [ 2193.365159][ T591] gup_fast_fallback+0x1d84/0x20d0 [ 2193.365193][ T591] ? __pfx_gup_fast_fallback+0x10/0x10 [ 2193.365207][ T591] ? ____sys_recvmsg+0x1e6/0x4a0 [ 2193.365224][ T591] ? __x64_sys_recvmsg+0x1ba/0x2a0 [ 2193.365240][ T591] ? do_syscall_64+0x15f/0xf80 [ 2193.365254][ T591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2193.365272][ T591] ? pin_user_pages_fast+0x4d/0xb0 [ 2193.365288][ T591] iov_iter_extract_pages+0x37b/0x5f0 [ 2193.365313][ T591] extract_iter_to_sg+0xefb/0x25d0 [ 2193.365362][ T591] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 2193.365384][ T591] ? rcu_is_watching+0x15/0xb0 [ 2193.365411][ T591] ? trace_kmalloc+0x2a/0xf0 [ 2193.365434][ T591] ? __kmalloc_noprof+0x1b8/0x760 [ 2193.365454][ T591] ? __asan_memset+0x22/0x50 [ 2193.365472][ T591] af_alg_get_rsgl+0x4b6/0x8e0 [ 2193.365499][ T591] skcipher_recvmsg+0x392/0x1140 [ 2193.365529][ T591] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 2193.365546][ T591] ? __lock_acquire+0x6b5/0x2cf0 [ 2193.365559][ T591] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2193.365578][ T591] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 2193.365595][ T591] ? security_socket_recvmsg+0x7e/0x2c0 [ 2193.365615][ T591] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 2193.365634][ T591] sock_recvmsg+0x172/0x1b0 [ 2193.365657][ T591] ____sys_recvmsg+0x1e6/0x4a0 [ 2193.365679][ T591] ? __pfx_____sys_recvmsg+0x10/0x10 [ 2193.365706][ T591] ? import_iovec+0x73/0xa0 [ 2193.365726][ T591] ___sys_recvmsg+0x215/0x590 [ 2193.365742][ T591] ? get_pid_task+0x20/0x1f0 [ 2193.365763][ T591] ? __pfx____sys_recvmsg+0x10/0x10 [ 2193.365783][ T591] ? __fget_files+0x2a/0x420 [ 2193.365809][ T591] ? __fget_files+0x3a0/0x420 [ 2193.365831][ T591] __x64_sys_recvmsg+0x1ba/0x2a0 [ 2193.365850][ T591] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 2193.365874][ T591] ? __pfx_ksys_write+0x10/0x10 [ 2193.365898][ T591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2193.365912][ T591] do_syscall_64+0x15f/0xf80 [ 2193.365927][ T591] ? trace_irq_disable+0x3b/0x140 [ 2193.365946][ T591] ? clear_bhb_loop+0x40/0x90 [ 2193.365962][ T591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2193.365975][ T591] RIP: 0033:0x7f8a7ff9cdd9 [ 2193.365988][ T591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2193.365999][ T591] RSP: 002b:00007f8a80e70028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 2193.366018][ T591] RAX: ffffffffffffffda RBX: 00007f8a80215fa0 RCX: 00007f8a7ff9cdd9 [ 2193.366028][ T591] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 2193.366036][ T591] RBP: 00007f8a80e70090 R08: 0000000000000000 R09: 0000000000000000 [ 2193.366045][ T591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2193.366052][ T591] R13: 00007f8a80216038 R14: 00007f8a80215fa0 R15: 00007f8a8033fa48 [ 2193.366073][ T591] [ 2193.817223][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2193.831750][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2194.059337][ T601] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7975'. [ 2194.158184][ T29] audit: type=1326 audit(1777362929.919:6380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=604 comm="syz.6.7977" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc205d9cdd9 code=0x0 [ 2194.181803][T21284] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 2194.224109][ T606] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7977'. [ 2194.235746][ T606] binder: 604:606 ioctl c018620c 200000000000 returned -1 [ 2194.337513][T21284] usb 3-1: Invalid ep0 maxpacket: 9 [ 2194.423270][ T611] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7979'. [ 2194.477463][T21284] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 2194.627481][T21284] usb 3-1: Invalid ep0 maxpacket: 9 [ 2194.633251][T21284] usb usb3-port1: attempt power cycle [ 2194.964668][ T42] usbhid 6-1:0.0: can't add hid device: -71 [ 2194.977465][ T42] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2194.977547][T21284] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 2195.004543][ T42] usb 6-1: USB disconnect, device number 13 [ 2195.030725][T21284] usb 3-1: Invalid ep0 maxpacket: 9 [ 2195.092619][ T616] fuse: Unknown parameter 'group_i00000000000000000000' [ 2195.141760][ T618] netlink: 'syz.5.7982': attribute type 1 has an invalid length. [ 2195.149946][ T618] netlink: 'syz.5.7982': attribute type 22 has an invalid length. [ 2195.177483][T21284] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 2195.212010][T21284] usb 3-1: Invalid ep0 maxpacket: 9 [ 2195.231331][T21284] usb usb3-port1: unable to enumerate USB device [ 2195.254030][ T29] audit: type=1326 audit(1777362931.009:6381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=621 comm="syz.5.7983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c059cdd9 code=0x7ffc0000 [ 2195.284761][ T29] audit: type=1326 audit(1777362931.009:6382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=621 comm="syz.5.7983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c059cdd9 code=0x7ffc0000 [ 2195.314979][ T625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2195.327739][ T29] audit: type=1326 audit(1777362931.009:6383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=621 comm="syz.5.7983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c059cdd9 code=0x7ffc0000 [ 2195.345075][ T625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2195.377837][ T29] audit: type=1326 audit(1777362931.009:6384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=621 comm="syz.5.7983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f42c059cdd9 code=0x7ffc0000 [ 2195.411431][ T29] audit: type=1326 audit(1777362931.009:6385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=621 comm="syz.5.7983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c059cdd9 code=0x7ffc0000 [ 2195.435174][ T29] audit: type=1326 audit(1777362931.009:6386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=621 comm="syz.5.7983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c059cdd9 code=0x7ffc0000 [ 2195.463553][ T29] audit: type=1326 audit(1777362931.039:6387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=621 comm="syz.5.7983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c059cdd9 code=0x7ffc0000 [ 2195.936263][ T643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2195.946568][ T643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2196.748103][ T654] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7994'. [ 2196.917715][ T579] net_ratelimit: 10 callbacks suppressed [ 2196.917736][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2196.937902][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2197.367553][T21284] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 2197.457680][ T584] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2197.472234][ T584] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2197.524024][T21284] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 2197.533558][T21284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2197.549094][T21284] usb 3-1: Product: syz [ 2197.553395][T21284] usb 3-1: Manufacturer: syz [ 2197.563027][T21284] usb 3-1: SerialNumber: syz [ 2197.604765][ T658] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7996'. [ 2197.715607][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 2197.715626][ T29] audit: type=1326 audit(1777362933.469:6399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=659 comm="syz.5.7997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c059cdd9 code=0x7ffc0000 [ 2197.747186][ T29] audit: type=1326 audit(1777362933.479:6400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=659 comm="syz.5.7997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c059cdd9 code=0x7ffc0000 [ 2197.770447][ T29] audit: type=1326 audit(1777362933.479:6401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=659 comm="syz.5.7997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c059cdd9 code=0x7ffc0000 [ 2197.799859][ T29] audit: type=1326 audit(1777362933.479:6402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=659 comm="syz.5.7997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f42c059cdd9 code=0x7ffc0000 [ 2197.825258][ T29] audit: type=1326 audit(1777362933.479:6403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=659 comm="syz.5.7997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c059cdd9 code=0x7ffc0000 [ 2197.850119][ T29] audit: type=1326 audit(1777362933.479:6404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=659 comm="syz.5.7997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c059cdd9 code=0x7ffc0000 [ 2197.874153][ T29] audit: type=1326 audit(1777362933.479:6405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=659 comm="syz.5.7997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c059cdd9 code=0x7ffc0000 [ 2197.901937][ T29] audit: type=1326 audit(1777362933.479:6407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=659 comm="syz.5.7997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c059cdd9 code=0x7ffc0000 [ 2197.925123][ T29] audit: type=1326 audit(1777362933.479:6406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=659 comm="syz.5.7997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f42c055d60e code=0x7ffc0000 [ 2197.952303][ T29] audit: type=1326 audit(1777362933.479:6408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=659 comm="syz.5.7997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c059cdd9 code=0x7ffc0000 [ 2197.997618][ T584] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2198.012440][ T584] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2198.029385][T21284] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 114 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 2198.567747][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2198.582264][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2198.968113][ T679] fuse: Bad value for 'fd' [ 2198.997428][ T42] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 2199.117518][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2199.132261][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2199.170252][ T42] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2199.181174][ T42] usb 6-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 2199.190745][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2199.199944][ T42] usb 6-1: Product: syz [ 2199.204256][ T42] usb 6-1: Manufacturer: syz [ 2199.209275][ T42] usb 6-1: SerialNumber: syz [ 2199.216514][ T689] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8006'. [ 2199.461740][ T42] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2199.469186][ T42] usb 6-1: MIDIStreaming interface descriptor not found [ 2199.510902][ T42] usb 6-1: USB disconnect, device number 14 [ 2199.540628][ T7903] udevd[7903]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2200.061429][T21284] usb 3-1: USB disconnect, device number 114 [ 2200.076580][T21284] usblp0: removed [ 2200.201928][ T699] fuse: Unknown parameter 'group_i00000000000000000000' [ 2200.209605][ T697] syzkaller0: entered promiscuous mode [ 2200.311061][ T702] netlink: 'syz.0.8007': attribute type 4 has an invalid length. [ 2201.318239][ T712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2201.331978][ T712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2201.929216][ T723] fuse: Bad value for 'fd' [ 2202.210366][ T584] net_ratelimit: 10 callbacks suppressed [ 2202.210379][ T584] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2202.230780][ T584] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2202.245401][ T731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2202.255457][ T731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2202.817558][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2202.832099][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2202.956883][ T739] batadv0: entered promiscuous mode [ 2202.966569][ T739] vlan1: entered promiscuous mode [ 2203.058734][ T742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2203.071058][ T742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2203.357509][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2203.372012][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2203.392771][ T746] tipc: Enabled bearer , priority 0 [ 2203.403761][ T746] syzkaller0: entered promiscuous mode [ 2203.410612][ T746] syzkaller0: entered allmulticast mode [ 2203.445590][ T746] tipc: Resetting bearer [ 2203.454781][ T745] tipc: Resetting bearer [ 2203.483124][ T745] tipc: Disabling bearer [ 2203.483953][ T808] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 2203.572208][ T748] fuse: Bad value for 'fd' [ 2203.649921][ T808] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2203.659639][ T808] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2203.672753][ T808] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2203.687299][ T808] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2203.700921][ T808] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2203.710399][ T808] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2203.718669][ T808] usb 3-1: Product: syz [ 2203.723025][ T808] usb 3-1: Manufacturer: syz [ 2203.746816][ T808] cdc_wdm 3-1:1.0: skipping garbage [ 2203.755667][ T808] cdc_wdm 3-1:1.0: skipping garbage [ 2203.763849][ T754] syz_tun: entered allmulticast mode [ 2203.766292][ T808] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 2203.779706][ T753] syz_tun: left allmulticast mode [ 2203.783134][ T808] cdc_wdm 3-1:1.0: Unknown control protocol [ 2203.892583][ T582] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2203.906975][ T582] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2203.927808][ T5722] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 2204.111863][ T5722] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2204.121649][ T5722] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2204.133365][ T5722] usb 6-1: Product: syz [ 2204.138610][ T5722] usb 6-1: Manufacturer: syz [ 2204.145394][ T5722] usb 6-1: SerialNumber: syz [ 2204.427679][ T582] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2204.442305][ T582] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2204.581587][ T5722] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2204.769855][ T808] usb 3-1: USB disconnect, device number 115 [ 2205.121735][ T776] fuse: Unknown parameter 'group_id00000000000000000000' [ 2207.101006][ T5722] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2207.141817][ T5722] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2207.166708][ T5722] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 2207.197986][ T5722] usb 6-1: USB disconnect, device number 15 [ 2207.321359][T15860] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2207.343551][T15860] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2207.353032][T15860] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2207.362745][T15860] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2207.374023][T15860] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2207.408419][T26227] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2207.421754][T26227] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2207.432522][T26227] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2207.442352][T26227] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2207.450614][T26227] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2207.518393][ T579] net_ratelimit: 14 callbacks suppressed [ 2207.518411][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2207.538636][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2207.821469][ T801] syzkaller1: entered promiscuous mode [ 2207.827086][ T801] syzkaller1: entered allmulticast mode [ 2208.107805][ T584] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2208.122355][ T584] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2208.168139][ T810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2208.218877][ T810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2208.239337][ T796] bridge0: port 1(bridge_slave_0) entered blocking state [ 2208.249742][ T796] bridge0: port 1(bridge_slave_0) entered disabled state [ 2208.257119][ T796] bridge_slave_0: entered allmulticast mode [ 2208.266196][ T796] bridge_slave_0: entered promiscuous mode [ 2208.275009][ T796] bridge0: port 2(bridge_slave_1) entered blocking state [ 2208.282322][ T796] bridge0: port 2(bridge_slave_1) entered disabled state [ 2208.284360][ T810] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8041'. [ 2208.290080][ T796] bridge_slave_1: entered allmulticast mode [ 2208.306766][ T796] bridge_slave_1: entered promiscuous mode [ 2208.343010][ T796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2208.355844][ T796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2208.423658][ T796] team0: Port device team_slave_0 added [ 2208.444654][ T796] team0: Port device team_slave_1 added [ 2208.578265][ T796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2208.591482][ T796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2208.621262][ T796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2208.686846][ T796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2208.695372][ T796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2208.722645][ T796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2208.740072][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2208.754469][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2208.891056][ T822] netlink: 'syz.2.8043': attribute type 4 has an invalid length. [ 2209.179880][ T579] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 2209.278235][T31852] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2209.292720][T31852] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2209.463943][ T579] bond0 (unregistering): (slave team0): Releasing backup interface [ 2209.487585][T26227] Bluetooth: hci4: command tx timeout [ 2209.530320][ T579] bond0 (unregistering): Released all slaves [ 2209.555893][ T579] bond1 (unregistering): Released all slaves [ 2209.749279][ T579] tipc: Disabling bearer [ 2209.755220][ T579] tipc: Left network mode [ 2209.817714][ T584] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2209.822574][ T796] hsr_slave_0: entered promiscuous mode [ 2209.833381][ T584] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2209.914420][ T796] hsr_slave_1: entered promiscuous mode [ 2209.928265][ T796] debugfs: 'hsr0' already exists in 'hsr' [ 2209.935873][ T796] Cannot create hsr debugfs directory [ 2210.276912][ T579] hsr_slave_0: left promiscuous mode [ 2210.294435][ T579] hsr_slave_1: left promiscuous mode [ 2211.338816][ T858] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2211.354586][ T579] IPVS: stop unused estimator thread 0... [ 2211.364267][ T858] netlink: 256 bytes leftover after parsing attributes in process `syz.2.8052'. [ 2211.374808][ T858] netlink: 256 bytes leftover after parsing attributes in process `syz.2.8052'. [ 2211.502288][ T5286] 8021q: adding VLAN 0 to HW filter on device eth9 [ 2211.569483][T26227] Bluetooth: hci4: command tx timeout [ 2212.125189][ T796] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2212.136272][ T796] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2212.144928][ T796] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2212.155890][ T796] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2212.164598][ T796] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2212.175449][ T796] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2212.185370][ T796] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2212.200283][ T796] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2212.227403][ T808] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 2212.330045][ T796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2212.369681][ T796] 8021q: adding VLAN 0 to HW filter on device team0 [ 2212.379294][ T808] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 2212.389979][ T808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2212.411408][ T580] bridge0: port 1(bridge_slave_0) entered blocking state [ 2212.418628][ T580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2212.431506][ T808] usb 3-1: config 0 descriptor?? [ 2212.453365][ T582] bridge0: port 2(bridge_slave_1) entered blocking state [ 2212.460600][ T582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2212.614328][ T796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2212.680892][ T808] hackrf 3-1:0.0: usb_control_msg() failed -71 request 0e [ 2212.713678][ T808] hackrf 3-1:0.0: Could not detect board [ 2212.730262][ T808] hackrf 3-1:0.0: probe with driver hackrf failed with error -71 [ 2212.754498][ T796] veth0_vlan: entered promiscuous mode [ 2212.763711][ T808] usb 3-1: USB disconnect, device number 116 [ 2212.780927][ T796] veth1_vlan: entered promiscuous mode [ 2212.856597][ T796] veth0_macvtap: entered promiscuous mode [ 2212.874155][ T796] veth1_macvtap: entered promiscuous mode [ 2212.911329][ T796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2212.939699][ T796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2212.947561][ T582] net_ratelimit: 10 callbacks suppressed [ 2212.947594][ T582] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2212.967982][ T582] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2213.005243][ T579] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2213.024396][ T579] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2213.041882][ T579] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2213.057143][ T579] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2213.285904][T31852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2213.310015][T31852] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2213.352560][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2213.362129][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2213.537543][ T149] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2213.552129][ T149] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2213.647707][T26227] Bluetooth: hci4: command tx timeout [ 2213.713605][ T907] syzkaller0: entered promiscuous mode [ 2213.734785][ T907] syzkaller0: entered allmulticast mode [ 2213.796533][ T909] netlink: 'syz.2.8060': attribute type 4 has an invalid length. [ 2213.848909][ T917] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8061'. [ 2213.859757][ T917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2213.892391][ T917] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2214.023442][ T922] input: syz0 as /devices/virtual/input/input153 [ 2214.077960][T31852] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2214.092534][T31852] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2214.628953][ T149] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2214.643414][ T149] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2215.153859][ T940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2215.180595][ T940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2215.253683][T31852] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2215.268215][T31852] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2215.727478][T26227] Bluetooth: hci4: command tx timeout [ 2218.440089][ T35] net_ratelimit: 10 callbacks suppressed [ 2218.440110][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2218.460477][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2218.705379][ T970] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8074'. [ 2218.708160][ T968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2218.738466][ T968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2218.992960][ T582] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2219.007461][ T582] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2219.544740][ T996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2219.559088][T31852] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2219.573536][T31852] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2219.591641][ T996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2219.894336][ T999] syz_tun: entered promiscuous mode [ 2219.917487][ T999] vlan4: entered promiscuous mode [ 2219.947448][ T5357] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 2220.138908][ T582] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2220.138967][ T582] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2220.141095][ T1003] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8085'. [ 2220.142131][ T5357] usb 6-1: config 0 has an invalid descriptor of length 167, skipping remainder of the config [ 2220.142176][ T5357] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 201, changing to 11 [ 2220.142204][ T5357] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 9543, setting to 1024 [ 2220.142232][ T5357] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2220.166612][ T5357] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 2220.166641][ T5357] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=192 [ 2220.166666][ T5357] usb 6-1: SerialNumber: syz [ 2220.171738][ T5357] usb 6-1: config 0 descriptor?? [ 2220.172874][ T994] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2220.335775][ T1006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8086'. [ 2220.424044][ T994] netlink: 'syz.5.8081': attribute type 11 has an invalid length. [ 2220.656266][ T582] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2220.656306][ T582] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2220.825095][ T1016] netlink: 820 bytes leftover after parsing attributes in process `syz.2.8088'. [ 2220.843256][ T1016] netlink: 820 bytes leftover after parsing attributes in process `syz.2.8088'. [ 2220.875811][ T1016] loop9: detected capacity change from 0 to 524287936 [ 2221.214736][ T1021] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8090'. [ 2221.249186][ T5357] ath6kl: Failed to submit usb control message: -110 [ 2221.279886][ T5357] ath6kl: unable to send the bmi data to the device: -110 [ 2221.306765][ T5357] ath6kl: Unable to send get target info: -110 [ 2221.353534][ T5357] ath6kl: Failed to init ath6kl core: -110 [ 2221.409737][ T5357] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 2221.581957][ T1027] syzkaller1: entered promiscuous mode [ 2221.599945][ T1027] syzkaller1: entered allmulticast mode [ 2221.809203][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.816341][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.592497][ T1038] vlan2: entered promiscuous mode [ 2222.827962][ T5694] usb 6-1: USB disconnect, device number 16 [ 2223.227665][ T1050] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8098'. [ 2223.277599][ T5694] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 2223.453411][ T5694] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2223.492223][ T5694] usb 6-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 2223.532385][ T5694] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2223.564666][ T5694] usb 6-1: Product: syz [ 2223.580955][ T5694] usb 6-1: Manufacturer: syz [ 2223.595890][ T5694] usb 6-1: SerialNumber: syz [ 2223.718222][ T582] net_ratelimit: 10 callbacks suppressed [ 2223.718240][ T582] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2223.738519][ T582] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2223.797783][ T42] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 2223.987487][ T42] usb 3-1: Using ep0 maxpacket: 8 [ 2224.002951][ T5694] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2224.011247][ T5694] usb 6-1: MIDIStreaming interface descriptor not found [ 2224.019034][ T42] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2224.051491][ T42] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2224.128457][ T42] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 2224.156137][ T42] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 2224.170530][ T42] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2224.201288][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2224.249145][ T42] hub 3-1:1.0: bad descriptor, ignoring hub [ 2224.249175][ T42] hub 3-1:1.0: probe with driver hub failed with error -5 [ 2224.253226][ T42] cdc_wdm 3-1:1.0: skipping garbage [ 2224.253245][ T42] cdc_wdm 3-1:1.0: skipping garbage [ 2224.257868][ T149] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2224.257895][ T149] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2224.273906][ T5694] usb 6-1: USB disconnect, device number 17 [ 2224.281812][ T42] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 2224.281834][ T42] cdc_wdm 3-1:1.0: Unknown control protocol [ 2224.347923][ T1080] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2224.474705][ T7903] udevd[7903]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2224.768890][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2224.768922][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2225.288902][ T584] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2225.303423][ T584] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2225.417880][T13592] usb 3-1: USB disconnect, device number 117 [ 2225.462005][ T1097] netlink: 'syz.2.8109': attribute type 1 has an invalid length. [ 2225.857531][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2227.523928][ T1132] fuse: Bad value for 'user_id' [ 2227.529086][ T1132] fuse: Bad value for 'user_id' [ 2227.675945][ T1137] input: syz1 as /devices/virtual/input/input154 [ 2227.686623][ T1136] vlan2: entered promiscuous mode [ 2228.457498][ T5694] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 2228.627705][ T5694] usb 3-1: Using ep0 maxpacket: 16 [ 2228.639616][ T5694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2228.653235][ T5694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2228.669135][ T5694] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2228.682614][ T5694] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2228.696654][ T5694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2228.719007][ T5694] usb 3-1: config 0 descriptor?? [ 2228.987581][ T579] net_ratelimit: 11 callbacks suppressed [ 2228.987599][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2229.008129][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2229.156754][ T5694] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0073/input/input155 [ 2229.241477][ T5694] microsoft 0003:045E:07DA.0073: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 2229.327624][T13592] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 2229.451150][ T895] usb 3-1: USB disconnect, device number 118 [ 2229.494982][T13592] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2229.505163][T13592] usb 6-1: config 63 has an invalid interface number: 66 but max is 0 [ 2229.516193][T13592] usb 6-1: config 63 has an invalid descriptor of length 47, skipping remainder of the config [ 2229.526953][T13592] usb 6-1: config 63 has no interface number 0 [ 2229.534691][T13592] usb 6-1: config 63 interface 66 has no altsetting 0 [ 2229.544202][T13592] usb 6-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2229.549035][ T580] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2229.553834][T13592] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2229.568477][ T580] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2229.590717][T13592] usb 6-1: Product: syz [ 2229.595011][T13592] usb 6-1: Manufacturer: syz [ 2229.601990][T13592] usb 6-1: SerialNumber: syz [ 2229.828329][T13592] uvcvideo 6-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 2229.836252][T13592] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 2229.846791][T13592] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 2229.857148][T13592] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 2229.869403][T13592] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 2229.879710][T13592] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 2229.894542][T13592] uvcvideo 6-1:63.66: No streaming interface found for terminal 29. [ 2229.902701][T13592] uvcvideo 6-1:63.66: Entity type for entity Output 32773 was not initialized! [ 2229.916573][T13592] usb 6-1: USB disconnect, device number 18 [ 2230.097564][ T584] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2230.111942][ T584] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2230.377613][T13592] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 2230.539794][T13592] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2230.550989][T13592] usb 6-1: not running at top speed; connect to a high speed hub [ 2230.561338][T13592] usb 6-1: config 63 has an invalid interface number: 66 but max is 0 [ 2230.569993][T13592] usb 6-1: config 63 has an invalid descriptor of length 47, skipping remainder of the config [ 2230.582710][T13592] usb 6-1: config 63 has no interface number 0 [ 2230.589069][T13592] usb 6-1: config 63 interface 66 has no altsetting 0 [ 2230.601077][T13592] usb 6-1: string descriptor 0 read error: -22 [ 2230.608046][T13592] usb 6-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2230.617218][T13592] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2230.640246][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2230.654790][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2230.680247][T13592] uvcvideo 6-1:63.66: Found UVC 0.07 device (174f:8acf) [ 2230.840280][T13592] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC error code control 6 on unit 1: 0 (exp. 1). [ 2230.894044][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 2230.894071][ T29] audit: type=1326 audit(1777362966.649:6462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1169 comm="syz.0.8132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a45d9cdd9 code=0x7ffc0000 [ 2230.932765][ T1170] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8132'. [ 2230.943037][ T29] audit: type=1326 audit(1777362966.649:6463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1169 comm="syz.0.8132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a45d9cdd9 code=0x7ffc0000 [ 2230.975231][ T29] audit: type=1326 audit(1777362966.679:6464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1169 comm="syz.0.8132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8a45d9cdd9 code=0x7ffc0000 [ 2231.035425][ T29] audit: type=1326 audit(1777362966.679:6465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1169 comm="syz.0.8132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a45d9cdd9 code=0x7ffc0000 [ 2231.061726][T13592] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 2231.092301][T13592] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 2231.136791][ T29] audit: type=1326 audit(1777362966.679:6466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1169 comm="syz.0.8132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f8a45d9cdd9 code=0x7ffc0000 [ 2231.173003][T13592] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 2231.207524][ T580] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2231.222087][ T580] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2231.240993][T13592] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 2231.251506][T13592] uvcvideo 6-1:63.66: No streaming interface found for terminal 29. [ 2231.254297][ T29] audit: type=1326 audit(1777362966.679:6467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1169 comm="syz.0.8132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a45d9cdd9 code=0x7ffc0000 [ 2231.353748][T13592] uvcvideo 6-1:63.66: Entity type for entity Output 32773 was not initialized! [ 2231.382050][ T29] audit: type=1326 audit(1777362966.679:6468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1169 comm="syz.0.8132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a45d9cdd9 code=0x7ffc0000 [ 2231.416345][ T1175] vlan4: entered promiscuous mode [ 2231.425696][T13592] usb 6-1: USB disconnect, device number 19 [ 2231.468628][ T29] audit: type=1326 audit(1777362966.679:6469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1169 comm="syz.0.8132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8a45d9cdd9 code=0x7ffc0000 [ 2231.510983][ T29] audit: type=1326 audit(1777362966.679:6470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1169 comm="syz.0.8132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a45d9cdd9 code=0x7ffc0000 [ 2231.545019][ T29] audit: type=1326 audit(1777362966.679:6471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1169 comm="syz.0.8132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a45d9cdd9 code=0x7ffc0000 [ 2232.036765][ T1195] fuse: Bad value for 'user_id' [ 2232.042696][ T1195] fuse: Bad value for 'user_id' [ 2232.107167][ T1190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2232.118352][ T1190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2232.128516][ T1190] xt_cgroup: invalid path, errno=-2 [ 2233.056573][ T1223] vlan1: entered promiscuous mode [ 2234.430742][ T35] net_ratelimit: 10 callbacks suppressed [ 2234.430760][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2234.451107][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2234.574012][ T1245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2234.594597][ T1245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2234.633005][ T1245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2234.652821][ T1245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2234.939973][ T1258] vlan3: entered promiscuous mode [ 2234.967606][ T149] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2234.982411][ T149] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2235.058128][T26756] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 2235.197725][T26756] usb 3-1: device descriptor read/64, error -71 [ 2235.437461][T26756] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 2235.509046][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2235.523448][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2235.597623][T26756] usb 3-1: device descriptor read/64, error -71 [ 2235.656335][ T1269] netlink: 'syz.5.8163': attribute type 4 has an invalid length. [ 2235.721013][T26756] usb usb3-port1: attempt power cycle [ 2235.728056][ T1271] syzkaller0: Caught tx_queue_len zero misconfig [ 2236.077470][T26756] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 2236.085344][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2236.099749][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2236.128142][T26756] usb 3-1: device descriptor read/8, error -71 [ 2236.367484][T26756] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 2236.388230][T26756] usb 3-1: device descriptor read/8, error -71 [ 2236.498155][T26756] usb usb3-port1: unable to enumerate USB device [ 2236.619739][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2236.634175][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2237.217730][T26756] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 2237.370613][T26756] usb 6-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 2237.384859][T26756] usb 6-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 2237.403534][T26756] usb 6-1: Product: syz [ 2237.416354][T26756] usb 6-1: config 0 descriptor?? [ 2237.435262][T26756] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 2237.449532][T26756] usb 6-1: Detected FT232H [ 2237.635918][T26756] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 2238.066704][T26756] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2238.681760][ T1296] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8174'. [ 2238.900381][ T1304] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 2238.928076][ T1304] PKCS7: Only support pkcs7_signedData type [ 2239.019315][ T5694] usb 6-1: USB disconnect, device number 20 [ 2239.060335][ T5694] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2239.073493][ T5694] ftdi_sio 6-1:0.0: device disconnected [ 2239.275035][ T1309] vlan1: entered promiscuous mode [ 2239.460506][ T1319] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8179'. [ 2239.741126][ T579] net_ratelimit: 10 callbacks suppressed [ 2239.741144][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2239.761777][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2239.907429][T26756] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 2240.027460][ T42] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 2240.059763][T26756] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0x22, changing to 0x2 [ 2240.071451][T26756] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 17587, setting to 64 [ 2240.082598][T26756] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 2240.091727][T26756] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2240.108167][T26756] aiptek 6-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 2240.187395][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 2240.194266][ T42] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 2240.206330][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 2240.218959][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 2240.229401][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 2240.240658][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 2240.254351][ T42] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 2240.266552][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2240.274723][ T42] usb 3-1: Product: syz [ 2240.279927][ T42] usb 3-1: Manufacturer: syz [ 2240.285458][ T42] usb 3-1: SerialNumber: syz [ 2240.291261][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2240.291291][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2240.328143][ T42] usb 3-1: config 0 descriptor?? [ 2240.742049][ T42] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 2240.757380][ T42] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 2240.766477][ T42] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 2240.799709][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2240.814111][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2240.981539][ T42] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 2240.990674][ T42] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 2240.997205][ T42] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 2241.013030][ T42] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 2241.034028][ T42] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 2241.047193][ T42] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 2241.062817][ T42] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 2241.070918][ T42] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 2241.085909][ T42] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 2241.103569][ T42] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 2241.110479][ T42] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 2241.118993][ T42] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 2241.125616][ T42] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 2241.134449][ T42] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 2241.145761][ T42] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 2241.152616][ T42] input input157: Timeout waiting for response from device. [ 2241.200182][ T42] usb 3-1: USB disconnect, device number 123 [ 2241.337439][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2241.352192][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2241.829641][T13592] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 2241.957741][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2241.972287][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2242.010067][T13592] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2242.019512][T13592] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2242.037194][T13592] usb 3-1: config 0 descriptor?? [ 2242.177851][ T1341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2242.188062][ T1341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2242.411212][ T1343] vlan2: entered promiscuous mode [ 2242.627546][ T1345] netlink: 76 bytes leftover after parsing attributes in process `syz.6.8190'. [ 2242.749694][T26756] usb 6-1: USB disconnect, device number 21 [ 2242.829676][ T1354] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8195'. [ 2242.890729][ T1354] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8195'. [ 2242.939434][ T1360] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8194'. [ 2243.085911][ T1366] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8200'. [ 2243.104338][ T1366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2243.131752][ T1366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2243.376539][ T1374] netlink: 830 bytes leftover after parsing attributes in process `syz.5.8202'. [ 2243.434634][ T1378] FAULT_INJECTION: forcing a failure. [ 2243.434634][ T1378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2243.454035][ T1378] CPU: 1 UID: 0 PID: 1378 Comm: syz.7.8204 Tainted: G L syzkaller #0 PREEMPT(full) [ 2243.454068][ T1378] Tainted: [L]=SOFTLOCKUP [ 2243.454075][ T1378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2243.454087][ T1378] Call Trace: [ 2243.454095][ T1378] [ 2243.454103][ T1378] dump_stack_lvl+0xe8/0x150 [ 2243.454130][ T1378] should_fail_ex+0x412/0x560 [ 2243.454159][ T1378] copy_folio_from_iter_atomic+0x44c/0x1ad0 [ 2243.454184][ T1378] ? __folio_batch_add_and_move+0x760/0xc50 [ 2243.454230][ T1378] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 2243.454264][ T1378] ? simple_write_begin+0x235/0x500 [ 2243.454290][ T1378] generic_perform_write+0x5d9/0x8f0 [ 2243.454330][ T1378] ? __pfx_generic_perform_write+0x10/0x10 [ 2243.454359][ T1378] ? file_update_time_flags+0x219/0x4a0 [ 2243.454397][ T1378] ? __generic_file_write_iter+0xf9/0x230 [ 2243.454425][ T1378] ? generic_file_write_iter+0x136/0x680 [ 2243.454455][ T1378] generic_file_write_iter+0x14a/0x680 [ 2243.454485][ T1378] ? __pfx_generic_file_write_iter+0x10/0x10 [ 2243.454516][ T1378] ? __lock_acquire+0x6b5/0x2cf0 [ 2243.454541][ T1378] ? stack_trace_save+0xa9/0x100 [ 2243.454570][ T1378] ? __pfx_stack_trace_save+0x10/0x10 [ 2243.454607][ T1378] ? io_submit_one+0x7bb/0x14c0 [ 2243.454645][ T1378] ? aio_write+0x547/0x870 [ 2243.454666][ T1378] aio_write+0x5cd/0x870 [ 2243.454690][ T1378] ? __pfx_aio_write+0x10/0x10 [ 2243.454718][ T1378] ? __might_fault+0xaf/0x130 [ 2243.454759][ T1378] io_submit_one+0x7bb/0x14c0 [ 2243.454789][ T1378] ? irqentry_exit+0x218/0x730 [ 2243.454819][ T1378] ? __pfx_io_submit_one+0x10/0x10 [ 2243.454849][ T1378] ? __might_fault+0xaf/0x130 [ 2243.454882][ T1378] ? __might_fault+0xaf/0x130 [ 2243.454909][ T1378] __se_sys_io_submit+0x195/0x340 [ 2243.454938][ T1378] ? __pfx___se_sys_io_submit+0x10/0x10 [ 2243.454963][ T1378] ? ksys_write+0x242/0x270 [ 2243.455001][ T1378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2243.455022][ T1378] do_syscall_64+0x15f/0xf80 [ 2243.455042][ T1378] ? trace_irq_disable+0x3b/0x140 [ 2243.455070][ T1378] ? clear_bhb_loop+0x40/0x90 [ 2243.455094][ T1378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2243.455113][ T1378] RIP: 0033:0x7f92ae99cdd9 [ 2243.455131][ T1378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2243.455147][ T1378] RSP: 002b:00007f92af934028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2243.455167][ T1378] RAX: ffffffffffffffda RBX: 00007f92aec15fa0 RCX: 00007f92ae99cdd9 [ 2243.455181][ T1378] RDX: 0000200000002680 RSI: 0000000000000601 RDI: 00007f92af913000 [ 2243.455194][ T1378] RBP: 00007f92af934090 R08: 0000000000000000 R09: 0000000000000000 [ 2243.455206][ T1378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2243.455217][ T1378] R13: 00007f92aec16038 R14: 00007f92aec15fa0 R15: 00007f92aed3fa48 [ 2243.455247][ T1378] [ 2243.905089][T13592] usb 3-1: Cannot set autoneg [ 2243.919457][T13592] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 2243.987909][T13592] usb 3-1: USB disconnect, device number 124 [ 2244.540216][ T1412] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8215'. [ 2244.560600][ T5694] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 2244.582900][ T1415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2244.593187][ T1415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2244.604706][ T1415] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8214'. [ 2244.727389][ T5694] usb 6-1: Using ep0 maxpacket: 16 [ 2244.734063][ T5694] usb 6-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 2244.748247][ T5694] usb 6-1: config 6 has 1 interface, different from the descriptor's value: 4 [ 2244.759742][ T5694] usb 6-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=e9.aa [ 2244.769318][ T5694] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2244.777623][ T5694] usb 6-1: Product: syz [ 2244.781908][ T5694] usb 6-1: Manufacturer: syz [ 2244.786524][ T5694] usb 6-1: SerialNumber: syz [ 2245.025239][T26756] usb 6-1: USB disconnect, device number 22 [ 2245.179709][ T579] net_ratelimit: 12 callbacks suppressed [ 2245.179724][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2245.200667][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2245.402290][ T1419] program syz.2.8217 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2245.521247][ T1423] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8218'. [ 2245.717646][ T149] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2245.732508][ T149] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2245.914174][ T1437] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8223'. [ 2245.934479][ T1437] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8223'. [ 2246.037719][T26756] usb 3-1: new full-speed USB device number 125 using dummy_hcd [ 2246.167469][ T5357] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 2246.167704][T26756] usb 3-1: device descriptor read/64, error -71 [ 2246.299763][ T149] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2246.314256][ T149] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2246.331576][ T5357] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2246.341515][ T5357] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2246.352379][ T5357] usb 6-1: config 0 descriptor?? [ 2246.417463][T26756] usb 3-1: new full-speed USB device number 126 using dummy_hcd [ 2246.547518][T26756] usb 3-1: device descriptor read/64, error -71 [ 2246.658413][T26756] usb usb3-port1: attempt power cycle [ 2246.776034][ T1443] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8226'. [ 2246.786984][ T1443] netlink: 104 bytes leftover after parsing attributes in process `syz.6.8226'. [ 2246.838688][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2246.853797][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2246.997504][T26756] usb 3-1: new full-speed USB device number 127 using dummy_hcd [ 2247.018207][T26756] usb 3-1: device descriptor read/8, error -71 [ 2247.041089][ T1447] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8227'. [ 2247.257618][T26756] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 2247.278138][T26756] usb 3-1: device descriptor read/8, error -71 [ 2247.387617][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2247.387774][T26756] usb usb3-port1: unable to enumerate USB device [ 2247.402047][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2247.623281][ T1451] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8229'. [ 2247.941548][ T1457] QAT: Device 7 not found [ 2247.997988][ T1457] netlink: 52 bytes leftover after parsing attributes in process `syz.6.8231'. [ 2248.176425][ T5357] usb 6-1: Cannot set autoneg [ 2248.183016][ T5357] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 2248.204293][ T5357] usb 6-1: USB disconnect, device number 23 [ 2248.426864][T15860] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2248.448250][T15860] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2248.463109][T15860] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2248.477210][T15860] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2248.485213][T15860] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2249.395561][ T149] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2249.434212][ T149] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2249.708050][ T1493] syzkaller0: entered promiscuous mode [ 2249.781502][ T149] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2249.792823][ T149] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2249.889512][ T1471] bridge0: port 1(bridge_slave_0) entered blocking state [ 2249.906195][ T1471] bridge0: port 1(bridge_slave_0) entered disabled state [ 2249.921895][ T1471] bridge_slave_0: entered allmulticast mode [ 2249.938477][ T1471] bridge_slave_0: entered promiscuous mode [ 2249.950910][ T1505] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8241'. [ 2250.065777][ T149] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2250.092210][ T149] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2250.164171][ T1471] bridge0: port 2(bridge_slave_1) entered blocking state [ 2250.183925][ T1471] bridge0: port 2(bridge_slave_1) entered disabled state [ 2250.199712][ T1471] bridge_slave_1: entered allmulticast mode [ 2250.224377][ T1471] bridge_slave_1: entered promiscuous mode [ 2250.322148][ T149] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2250.355943][ T149] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2250.479516][ T579] net_ratelimit: 10 callbacks suppressed [ 2250.479531][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2250.499670][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2250.533962][ T1471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2250.543648][T26227] Bluetooth: hci3: command tx timeout [ 2250.573723][ T1471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2250.658689][ T1471] team0: Port device team_slave_0 added [ 2250.691489][ T1471] team0: Port device team_slave_1 added [ 2250.896961][ T1471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2250.933802][ T1471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2251.021170][ T1471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2251.058662][ T1471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2251.082241][ T1471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2251.118562][ T42] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 2251.129575][ T1471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2251.149647][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2251.163962][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2251.326125][ T42] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2251.364370][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2251.410535][ T42] usb 6-1: config 0 descriptor?? [ 2251.453495][ T1471] hsr_slave_0: entered promiscuous mode [ 2251.472645][ T1471] hsr_slave_1: entered promiscuous mode [ 2251.480060][ T1471] debugfs: 'hsr0' already exists in 'hsr' [ 2251.489772][ T1471] Cannot create hsr debugfs directory [ 2251.693844][ T1526] binder: 1525:1526 ioctl c0306201 200000000280 returned -14 [ 2251.703744][ T1526] binder: 1525:1526 ioctl c00caee0 200000000100 returned -22 [ 2251.734254][ T1526] binder: 1525:1526 ioctl ae01 3e returned -22 [ 2251.748042][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2251.762631][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2252.016399][ T1535] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8251'. [ 2252.093968][ T1532] netlink: 'syz.2.8249': attribute type 4 has an invalid length. [ 2252.144871][ T149] bridge_slave_1: left allmulticast mode [ 2252.152437][ T149] bridge_slave_1: left promiscuous mode [ 2252.165863][ T149] bridge0: port 2(bridge_slave_1) entered disabled state [ 2252.198475][ T149] bridge_slave_0: left allmulticast mode [ 2252.208974][ T149] bridge_slave_0: left promiscuous mode [ 2252.214996][ T149] bridge0: port 1(bridge_slave_0) entered disabled state [ 2252.373474][ T584] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2252.388046][ T584] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2252.608202][T26227] Bluetooth: hci3: command tx timeout [ 2252.927775][ T582] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2252.942316][ T582] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2253.305091][ T42] usb 6-1: Cannot set autoneg [ 2253.311306][ T42] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 2253.341892][ T42] usb 6-1: USB disconnect, device number 24 [ 2253.397222][ T149] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 2253.412585][ T149] bridge2 (unregistering): left promiscuous mode [ 2253.613530][ T149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2253.624541][ T149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2253.635660][ T149] bond0 (unregistering): Released all slaves [ 2253.646555][ T149] bond1 (unregistering): Released all slaves [ 2253.731611][ T1553] erspan0: entered promiscuous mode [ 2253.800015][ T5286] 8021q: adding VLAN 0 to HW filter on device eth9 [ 2254.023681][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 2254.023726][ T29] audit: type=1326 audit(1777362989.779:6496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1563 comm="syz.5.8257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15319cdd9 code=0x7ffc0000 [ 2254.130873][ T29] audit: type=1326 audit(1777362989.829:6497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1563 comm="syz.5.8257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15319cdd9 code=0x7ffc0000 [ 2254.159861][ T29] audit: type=1326 audit(1777362989.829:6498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1563 comm="syz.5.8257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15319cdd9 code=0x7ffc0000 [ 2254.183604][ T29] audit: type=1326 audit(1777362989.829:6499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1563 comm="syz.5.8257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15319cdd9 code=0x7ffc0000 [ 2254.228290][ T29] audit: type=1326 audit(1777362989.829:6500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1563 comm="syz.5.8257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff15319cdd9 code=0x7ffc0000 [ 2254.251709][ T29] audit: type=1326 audit(1777362989.829:6501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1563 comm="syz.5.8257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15319cdd9 code=0x7ffc0000 [ 2254.284668][ T29] audit: type=1326 audit(1777362989.829:6502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1563 comm="syz.5.8257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15319cdd9 code=0x7ffc0000 [ 2254.309310][ T29] audit: type=1326 audit(1777362989.829:6503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1563 comm="syz.5.8257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15319cdd9 code=0x7ffc0000 [ 2254.332992][ T29] audit: type=1326 audit(1777362989.829:6504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1563 comm="syz.5.8257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15319cdd9 code=0x7ffc0000 [ 2254.355895][ T29] audit: type=1326 audit(1777362989.829:6505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1563 comm="syz.5.8257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff15319cdd9 code=0x7ffc0000 [ 2254.687500][T26227] Bluetooth: hci3: command tx timeout [ 2255.324526][ T149] batman_adv: batadv0: Interface deactivated: macsec1 [ 2255.387859][T20753] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 2255.435996][ T149] batman_adv: batadv0: Removing interface: macsec1 [ 2255.536426][ T579] net_ratelimit: 8 callbacks suppressed [ 2255.536442][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2255.557242][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2255.605705][T20753] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2255.621941][T20753] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2255.638900][T20753] usb 6-1: Product: syz [ 2255.655963][T20753] usb 6-1: Manufacturer: syz [ 2255.673175][T20753] usb 6-1: SerialNumber: syz [ 2255.708667][T20753] usb 6-1: config 0 descriptor?? [ 2255.934386][T20753] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2255.961128][ T149] hsr_slave_0: left promiscuous mode [ 2255.975234][ T149] hsr_slave_1: left promiscuous mode [ 2255.987152][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2256.004172][ T149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2256.012893][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2256.027728][ T149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2256.073103][ T149] veth1_macvtap: left promiscuous mode [ 2256.089113][ T149] veth0_macvtap: left promiscuous mode [ 2256.098402][T31852] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2256.098415][ T149] veth1_vlan: left promiscuous mode [ 2256.113073][T31852] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2256.191020][ T149] veth0_vlan: left promiscuous mode [ 2256.547859][ T1619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2256.568894][ T1619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2256.677826][T31852] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2256.692397][T31852] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2256.767542][T26227] Bluetooth: hci3: command tx timeout [ 2256.774763][ T149] team0 (unregistering): Port device vlan0 removed [ 2256.920900][ T149] team0 (unregistering): Port device team_slave_1 removed [ 2256.940488][ T149] team0 (unregistering): Port device team_slave_0 removed [ 2257.248240][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2257.262831][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2257.335744][ T1471] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2257.380482][ T1471] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2257.393836][ T1471] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2257.422301][ T1471] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2257.473358][ T1471] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2257.501549][ T895] IPVS: starting estimator thread 0... [ 2257.545187][ T1626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2257.559698][ T1626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2257.578289][ T1471] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2257.597481][ T1625] IPVS: using max 36 ests per chain, 86400 per kthread [ 2257.630805][ T1471] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2257.666486][T20753] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2257.698052][T20753] usb 6-1: USB disconnect, device number 25 [ 2257.771734][ T1471] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2257.829043][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2257.843468][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2258.287939][ T1647] fuse: Bad value for 'fd' [ 2258.519414][ T1471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2258.615412][ T1471] 8021q: adding VLAN 0 to HW filter on device team0 [ 2258.657446][ T895] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 2258.677835][ T149] bridge0: port 1(bridge_slave_0) entered blocking state [ 2258.684991][ T149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2258.709303][ T1654] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8272'. [ 2258.756354][ T579] bridge0: port 2(bridge_slave_1) entered blocking state [ 2258.763556][ T579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2258.870273][ T895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2258.894079][ T895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2258.932247][ T895] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 2258.982096][ T895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2259.054487][ T895] usb 6-1: config 0 descriptor?? [ 2259.080802][ T1471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2259.088262][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 2259.088279][ T29] audit: type=1326 audit(1777362994.839:6579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1651 comm="syz.5.8273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff15319ca6b code=0x7ffc0000 [ 2259.255632][ T29] audit: type=1326 audit(1777362994.839:6580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1651 comm="syz.5.8273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff15319ca6b code=0x7ffc0000 [ 2259.302519][ T1471] veth0_vlan: entered promiscuous mode [ 2259.325321][ T1471] veth1_vlan: entered promiscuous mode [ 2259.336406][ T29] audit: type=1326 audit(1777362994.839:6581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1651 comm="syz.5.8273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff15319ca6b code=0x7ffc0000 [ 2259.413472][ T1471] veth0_macvtap: entered promiscuous mode [ 2259.425992][ T29] audit: type=1326 audit(1777362994.839:6582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1651 comm="syz.5.8273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff15319ca6b code=0x7ffc0000 [ 2259.455447][ T1471] veth1_macvtap: entered promiscuous mode [ 2259.498435][ T29] audit: type=1326 audit(1777362994.849:6583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1651 comm="syz.5.8273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff15315d60e code=0x7ffc0000 [ 2259.533745][ T1471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2259.563667][ T895] hid-led 0003:27B8:01ED.0074: probe with driver hid-led failed with error -32 [ 2259.588740][ T1471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2259.608727][ T29] audit: type=1326 audit(1777362995.049:6584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1651 comm="syz.5.8273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15319cdd9 code=0x7ffc0000 [ 2259.647801][ T149] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2259.682135][ T149] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2259.706143][ T149] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2259.719438][ T29] audit: type=1326 audit(1777362995.049:6585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1651 comm="syz.5.8273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15319cdd9 code=0x7ffc0000 [ 2259.762999][ T149] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2259.835531][ T29] audit: type=1326 audit(1777362995.049:6586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1651 comm="syz.5.8273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15319cdd9 code=0x7ffc0000 [ 2259.964769][ T29] audit: type=1326 audit(1777362995.049:6587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1651 comm="syz.5.8273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff15319ca6b code=0x7ffc0000 [ 2260.042849][ T582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2260.059503][ T582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2260.105772][ T29] audit: type=1326 audit(1777362995.049:6588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1651 comm="syz.5.8273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15319cdd9 code=0x7ffc0000 [ 2260.191903][T21284] usb 6-1: USB disconnect, device number 26 [ 2260.210468][ T580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2260.273099][ T580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2260.961705][ T1689] FAULT_INJECTION: forcing a failure. [ 2260.961705][ T1689] name failslab, interval 1, probability 0, space 0, times 0 [ 2260.986939][ T1689] CPU: 0 UID: 0 PID: 1689 Comm: syz.5.8275 Tainted: G L syzkaller #0 PREEMPT(full) [ 2260.986969][ T1689] Tainted: [L]=SOFTLOCKUP [ 2260.986976][ T1689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2260.986993][ T1689] Call Trace: [ 2260.986999][ T1689] [ 2260.987005][ T1689] dump_stack_lvl+0xe8/0x150 [ 2260.987025][ T1689] should_fail_ex+0x412/0x560 [ 2260.987045][ T1689] should_failslab+0xa8/0x100 [ 2260.987068][ T1689] __kmalloc_noprof+0xe8/0x760 [ 2260.987086][ T1689] ? aa_label_asxprint+0x70/0x130 [ 2260.987107][ T1689] aa_label_asxprint+0x70/0x130 [ 2260.987122][ T1689] apparmor_lsmprop_to_secctx+0x9d/0x170 [ 2260.987143][ T1689] audit_log_subj_ctx+0x116/0x530 [ 2260.987162][ T1689] ? __pfx_audit_log_subj_ctx+0x10/0x10 [ 2260.987183][ T1689] ? apparmor_current_getlsmprop_subj+0xce/0x150 [ 2260.987201][ T1689] audit_log_task_context+0x94/0xe0 [ 2260.987218][ T1689] ? __pfx_audit_log_task_context+0x10/0x10 [ 2260.987235][ T1689] ? audit_log_start+0x7e9/0xa20 [ 2260.987254][ T1689] audit_log_task+0x19b/0x3d0 [ 2260.987269][ T1689] ? __pfx_audit_log_task+0x10/0x10 [ 2260.987312][ T1689] audit_seccomp+0x85/0x190 [ 2260.987337][ T1689] __seccomp_filter+0xd48/0x1ef0 [ 2260.987365][ T1689] ? __pfx___seccomp_filter+0x10/0x10 [ 2260.987387][ T1689] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2260.987413][ T1689] ? __fget_files+0x3a0/0x420 [ 2260.987441][ T1689] ? fput+0xa0/0xd0 [ 2260.987467][ T1689] ? __pfx_ksys_write+0x10/0x10 [ 2260.987497][ T1689] ? __secure_computing+0xe1/0x2a0 [ 2260.987517][ T1689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2260.987538][ T1689] do_syscall_64+0xf9/0xf80 [ 2260.987557][ T1689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2260.987576][ T1689] ? clear_bhb_loop+0x40/0x90 [ 2260.987599][ T1689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2260.987618][ T1689] RIP: 0033:0x7ff15319cdd9 [ 2260.987636][ T1689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2260.987652][ T1689] RSP: 002b:00007ff15412f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fb [ 2260.987672][ T1689] RAX: ffffffffffffffda RBX: 00007ff153415fa0 RCX: 00007ff15319cdd9 [ 2260.987686][ T1689] RDX: 0000000000006000 RSI: 0000000000000000 RDI: 0000000000000004 [ 2260.987697][ T1689] RBP: 00007ff15412f090 R08: 0000000000000000 R09: 0000000000000000 [ 2260.987709][ T1689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2260.987720][ T1689] R13: 00007ff153416038 R14: 00007ff153415fa0 R15: 00007ff15353fa48 [ 2260.987748][ T1689] [ 2261.256848][ T579] net_ratelimit: 10 callbacks suppressed [ 2261.256866][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2261.277585][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2261.847661][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2261.862179][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2261.904615][ T1700] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8278'. [ 2261.948834][ T1700] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8278'. [ 2262.023035][ T1706] vlan1: entered promiscuous mode [ 2262.417657][T21284] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 2262.457562][ T583] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2262.471963][ T583] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2262.577796][T21284] usb 3-1: Using ep0 maxpacket: 16 [ 2262.585852][T21284] usb 3-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 2262.596228][T21284] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 2262.611139][ T1733] fuse: Bad value for 'fd' [ 2262.627605][T21284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2262.649043][T21284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2262.673170][T21284] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 2262.684334][T21284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2262.705003][T21284] usb 3-1: Product: syz [ 2262.709962][T21284] usb 3-1: Manufacturer: syz [ 2262.725277][T21284] usb 3-1: SerialNumber: syz [ 2262.734826][T21284] usb 3-1: config 0 descriptor?? [ 2262.968911][T21284] appledisplay: Apple Cinema Display connected [ 2263.030534][ T583] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2263.045278][ T583] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2263.186292][ T1718] netlink: 4560 bytes leftover after parsing attributes in process `syz.2.8276'. [ 2263.653174][ T582] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2263.668494][ T582] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2265.082757][ T1781] netlink: 'syz.6.8291': attribute type 32 has an invalid length. [ 2265.194891][ T42] usb 3-1: USB disconnect, device number 3 [ 2265.195124][ C0] usb 3-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 2265.230744][ T42] appledisplay: Apple Cinema Display disconnected [ 2265.280703][ T1787] FAULT_INJECTION: forcing a failure. [ 2265.280703][ T1787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2265.295983][ T1787] CPU: 1 UID: 0 PID: 1787 Comm: syz.2.8293 Tainted: G L syzkaller #0 PREEMPT(full) [ 2265.296014][ T1787] Tainted: [L]=SOFTLOCKUP [ 2265.296022][ T1787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2265.296033][ T1787] Call Trace: [ 2265.296040][ T1787] [ 2265.296047][ T1787] dump_stack_lvl+0xe8/0x150 [ 2265.296074][ T1787] should_fail_ex+0x412/0x560 [ 2265.296102][ T1787] _copy_from_user+0x2d/0xb0 [ 2265.296129][ T1787] generic_map_update_batch+0x69a/0x990 [ 2265.296162][ T1787] ? __pfx_generic_map_update_batch+0x10/0x10 [ 2265.296187][ T1787] ? __fget_files+0x2a/0x420 [ 2265.296216][ T1787] ? __pfx_generic_map_update_batch+0x10/0x10 [ 2265.296238][ T1787] bpf_map_do_batch+0x39b/0x630 [ 2265.296261][ T1787] __sys_bpf+0x7c1/0x950 [ 2265.296298][ T1787] ? __pfx___sys_bpf+0x10/0x10 [ 2265.296338][ T1787] ? ksys_write+0x242/0x270 [ 2265.296367][ T1787] ? __pfx_ksys_write+0x10/0x10 [ 2265.296396][ T1787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2265.296415][ T1787] __x64_sys_bpf+0x7c/0x90 [ 2265.296439][ T1787] do_syscall_64+0x15f/0xf80 [ 2265.296460][ T1787] ? trace_irq_disable+0x3b/0x140 [ 2265.296486][ T1787] ? clear_bhb_loop+0x40/0x90 [ 2265.296510][ T1787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2265.296528][ T1787] RIP: 0033:0x7f8a7ff9cdd9 [ 2265.296546][ T1787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2265.296562][ T1787] RSP: 002b:00007f8a80e70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2265.296583][ T1787] RAX: ffffffffffffffda RBX: 00007f8a80215fa0 RCX: 00007f8a7ff9cdd9 [ 2265.296601][ T1787] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 2265.296610][ T1787] RBP: 00007f8a80e70090 R08: 0000000000000000 R09: 0000000000000000 [ 2265.296618][ T1787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2265.296626][ T1787] R13: 00007f8a80216038 R14: 00007f8a80215fa0 R15: 00007f8a8033fa48 [ 2265.296655][ T1787] [ 2265.729764][ T1792] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2265.741161][ T1792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2265.750562][ T1792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2266.500606][ T895] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 2266.527716][ T584] net_ratelimit: 8 callbacks suppressed [ 2266.527753][ T584] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2266.547693][ T584] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2266.670294][ T895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2266.685188][ T895] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 2266.703380][ T895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2266.719786][ T895] usb 3-1: config 0 descriptor?? [ 2267.102049][ T582] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2267.116896][ T582] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2267.147634][ T1799] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8297'. [ 2267.443827][ T1814] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.8302'. [ 2267.507692][ T42] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 2267.667609][ T149] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2267.669258][ T42] usb 6-1: too many configurations: 53, using maximum allowed: 8 [ 2267.682076][ T149] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2267.721273][ T42] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2267.725768][ T1819] fuse: Bad value for 'fd' [ 2267.735536][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2267.744195][ T42] usb 6-1: Product: syz [ 2267.748773][ T42] usb 6-1: Manufacturer: syz [ 2267.755917][ T42] usb 6-1: SerialNumber: syz [ 2267.781673][ T1819] fuse: Bad value for 'fd' [ 2267.982407][ T42] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 2267.996077][ T42] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 2268.006863][ T42] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2268.018815][ T42] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 2268.034523][ T42] usb 6-1: USB disconnect, device number 27 [ 2268.188467][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2268.202965][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2268.382782][ T1825] fuse: Invalid rootmode [ 2268.729364][ T582] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2268.788811][ T1836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2268.825502][ T1836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2268.938114][ T580] wlan0: Trigger new scan to find an IBSS to join [ 2268.960811][ T1842] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8309'. [ 2269.013709][ T1836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8308'. [ 2269.162012][ T895] usbhid 3-1:0.0: can't add hid device: -71 [ 2269.196100][ T895] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2269.235935][ T895] usb 3-1: USB disconnect, device number 4 [ 2269.377392][T20753] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 2269.554043][T20753] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 2269.577259][T20753] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2269.586065][T20753] usb 6-1: Product: syz [ 2269.601219][T20753] usb 6-1: Manufacturer: syz [ 2269.606758][T20753] usb 6-1: SerialNumber: syz [ 2269.616625][T20753] usb 6-1: config 0 descriptor?? [ 2269.625416][T20753] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 2269.826167][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 2269.826202][ T29] audit: type=1326 audit(1777363005.579:6711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1863 comm="syz.6.8319" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25c319cdd9 code=0x0 [ 2269.940865][ T584] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2270.062871][ T29] audit: type=1326 audit(1777363005.819:6712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1845 comm="syz.5.8312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15319cdd9 code=0x7ffc0000 [ 2270.089384][ T1846] netlink: 'syz.5.8312': attribute type 4 has an invalid length. [ 2270.117467][ T29] audit: type=1326 audit(1777363005.819:6713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1845 comm="syz.5.8312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15319cdd9 code=0x7ffc0000 [ 2270.140791][ T29] audit: type=1326 audit(1777363005.819:6714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1845 comm="syz.5.8312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15319cdd9 code=0x7ffc0000 [ 2270.165738][ T29] audit: type=1326 audit(1777363005.819:6715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1845 comm="syz.5.8312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15319cdd9 code=0x7ffc0000 [ 2270.190971][ T29] audit: type=1326 audit(1777363005.819:6716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1845 comm="syz.5.8312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff15319cdd9 code=0x7ffc0000 [ 2270.215716][ T29] audit: type=1326 audit(1777363005.819:6717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1845 comm="syz.5.8312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15319cdd9 code=0x7ffc0000 [ 2270.241668][ T29] audit: type=1326 audit(1777363005.819:6718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1845 comm="syz.5.8312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15319cdd9 code=0x7ffc0000 [ 2270.264998][ T29] audit: type=1326 audit(1777363005.819:6719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1845 comm="syz.5.8312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15319cdd9 code=0x7ffc0000 [ 2270.288622][ T29] audit: type=1326 audit(1777363005.819:6720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1845 comm="syz.5.8312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff15319cdd9 code=0x7ffc0000 [ 2270.393702][ T1875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2270.408229][ T1875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2270.549055][ T895] usb 6-1: USB disconnect, device number 28 [ 2270.796130][ T1884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8321'. [ 2271.860208][ T149] net_ratelimit: 13 callbacks suppressed [ 2271.860224][ T149] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2271.880355][ T149] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2271.896866][ T583] wlan0: Trigger new scan to find an IBSS to join [ 2272.042139][ T1905] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8330'. [ 2272.048144][T20753] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 2272.239521][T20753] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2272.249228][T20753] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2272.295032][ T1909] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 2272.298256][T20753] usb 6-1: config 0 descriptor?? [ 2272.384170][ T1909] loop9: detected capacity change from 0 to 524287936 [ 2272.489856][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2272.504258][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2272.770547][ T1912] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8332'. [ 2273.079880][ T583] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2273.094407][ T583] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2273.322871][T26227] Bluetooth: hci3: Unknown advertising packet type: 0x19 [ 2273.322924][T26227] Bluetooth: hci3: Unknown advertising packet type: 0x1f [ 2273.344369][T26227] Bluetooth: hci3: Unknown advertising packet type: 0x31 [ 2273.351695][T26227] Bluetooth: hci3: Malformed LE Event: 0x0d [ 2273.420894][ T1919] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8334'. [ 2273.651570][ T583] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2273.666546][ T583] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2273.750888][ T1927] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 2273.778866][ T1933] fuse: Bad value for 'fd' [ 2273.791721][ T1927] bond1 (unregistering): Released all slaves [ 2273.887598][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2274.205316][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2274.220551][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2274.781159][ T1942] syzkaller0: entered promiscuous mode [ 2274.797694][ T1942] syzkaller0: entered allmulticast mode [ 2274.847830][ T583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2275.036936][T20753] usb 6-1: Cannot set autoneg [ 2275.042877][T20753] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 2275.091475][T20753] usb 6-1: USB disconnect, device number 29 [ 2275.402594][ T1958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2275.447754][ T1958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2275.772482][ T1965] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8343'. [ 2275.820734][T26756] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 2276.066403][T26756] usb 3-1: Using ep0 maxpacket: 8 [ 2276.092688][T26756] usb 3-1: config 8 has an invalid interface number: 188 but max is 0 [ 2276.141924][T26756] usb 3-1: config 8 has no interface number 0 [ 2276.193000][T26756] usb 3-1: config 8 interface 188 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 2276.220583][ T1967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2276.260287][T26756] usb 3-1: config 8 interface 188 altsetting 0 endpoint 0x8D has an invalid bInterval 55, changing to 9 [ 2276.276623][ T1967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2276.285691][T26756] usb 3-1: config 8 interface 188 altsetting 0 endpoint 0x8D has invalid maxpacket 8496, setting to 1024 [ 2276.365531][T26756] usb 3-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 2276.376438][T26756] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2276.385995][T26756] usb 3-1: Product: syz [ 2276.390488][T26756] usb 3-1: Manufacturer: syz [ 2276.395137][T26756] usb 3-1: SerialNumber: syz [ 2277.020761][ T1977] vivid-000: disconnect [ 2277.295741][ T1983] nvme_fabrics: missing parameter 'transport=%s' [ 2277.302645][ T1983] nvme_fabrics: missing parameter 'nqn=%s' [ 2277.358155][ T579] net_ratelimit: 10 callbacks suppressed [ 2277.358175][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2277.378287][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2277.588602][ T1974] vivid-000: reconnect [ 2277.994276][ T583] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2278.009078][ T583] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2278.549026][ T583] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2278.563466][ T583] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2279.189980][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2279.204804][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2279.779899][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2279.794315][ T579] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2279.889233][ T1992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2279.898604][ T1992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2280.064046][ T1994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2280.074730][ T1994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2280.086294][ T1994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2280.095298][ T1994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2281.308473][ T1976] macsec0: entered promiscuous mode [ 2281.323416][ T1976] macsec0: entered allmulticast mode [ 2281.343953][ T1976] veth1_macvtap: entered allmulticast mode [ 2281.477132][T26756] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'. [ 2281.519668][T26756] usb 3-1: USB disconnect, device number 5 [ 2281.715444][ T2008] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8356'. [ 2281.942429][ T2013] fuse: Bad value for 'fd' [ 2281.967900][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2282.060141][ T2016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2282.081041][ T2016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2282.219677][ T2020] netlink: 84 bytes leftover after parsing attributes in process `syz.0.8359'. [ 2282.407595][T20753] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 2282.524532][ T2023] fuse: Invalid rootmode [ 2282.577458][T20753] usb 3-1: Using ep0 maxpacket: 16 [ 2282.584976][T20753] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2282.594302][T20753] usb 3-1: config 9 has an invalid interface number: 88 but max is 0 [ 2282.602518][T20753] usb 3-1: config 9 has no interface number 0 [ 2282.614323][T20753] usb 3-1: config 9 interface 88 has no altsetting 0 [ 2282.623147][T20753] usb 3-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=52.b8 [ 2282.635160][T20753] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2282.644263][T20753] usb 3-1: Product: syz [ 2282.648505][T20753] usb 3-1: Manufacturer: syz [ 2282.653139][T20753] usb 3-1: SerialNumber: syz [ 2282.867614][ T35] net_ratelimit: 10 callbacks suppressed [ 2282.867634][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2282.888018][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2282.998748][ T2019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2283.013718][ T2019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2283.091420][T20753] ums-datafab 3-1:9.88: USB Mass Storage device detected [ 2283.157429][T20753] ums-sddr55 3-1:9.88: USB Mass Storage device detected [ 2283.232602][T20753] usb 3-1: USB disconnect, device number 6 [ 2283.250069][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.257105][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.408867][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2283.423494][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2283.948140][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2283.962729][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2283.987465][T20753] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 2284.139668][T20753] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 2284.148975][T20753] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2284.159472][T20753] usb 3-1: config 0 descriptor?? [ 2284.178012][T20753] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 2284.487651][ T149] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2284.502138][ T149] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2284.895391][ T2045] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2284.971200][ T2048] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8366'. [ 2285.018881][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2285.033458][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2285.711889][ T2054] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8368'. [ 2285.957382][T26756] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 2286.001545][ T2065] xt_hl: Unknown Hop Limit match mode: 206 [ 2286.130695][T26756] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2286.144152][T26756] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2286.167722][T26756] usb 6-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 2286.181809][T26756] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2286.198492][T26756] usb 6-1: Product: syz [ 2286.202880][T26756] usb 6-1: Manufacturer: syz [ 2286.209447][T26756] usb 6-1: SerialNumber: syz [ 2286.302729][ T2076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2286.313543][ T2076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2286.432807][T26756] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2286.440664][T26756] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2286.491100][T26756] usb 6-1: USB disconnect, device number 30 [ 2286.520870][ T7268] udevd[7268]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2286.893879][ T2078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8376'. [ 2287.112863][ T2081] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8377'. [ 2287.140664][T20753] usb 3-1: USB disconnect, device number 7 [ 2287.395906][ T2095] FAULT_INJECTION: forcing a failure. [ 2287.395906][ T2095] name failslab, interval 1, probability 0, space 0, times 0 [ 2287.444420][ T2095] CPU: 1 UID: 0 PID: 2095 Comm: syz.7.8382 Tainted: G L syzkaller #0 PREEMPT(full) [ 2287.444450][ T2095] Tainted: [L]=SOFTLOCKUP [ 2287.444458][ T2095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2287.444469][ T2095] Call Trace: [ 2287.444477][ T2095] [ 2287.444485][ T2095] dump_stack_lvl+0xe8/0x150 [ 2287.444512][ T2095] should_fail_ex+0x412/0x560 [ 2287.444541][ T2095] should_failslab+0xa8/0x100 [ 2287.444570][ T2095] __kmalloc_cache_noprof+0x88/0x660 [ 2287.444600][ T2095] ? sctp_add_bind_addr+0x8c/0x370 [ 2287.444628][ T2095] sctp_add_bind_addr+0x8c/0x370 [ 2287.444652][ T2095] sctp_copy_local_addr_list+0x314/0x4f0 [ 2287.444678][ T2095] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 2287.444699][ T2095] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 2287.444730][ T2095] ? sctp_v6_is_any+0x64/0x80 [ 2287.444754][ T2095] ? sctp_copy_one_addr+0x93/0x360 [ 2287.444778][ T2095] sctp_bind_addr_copy+0xb3/0x3c0 [ 2287.444801][ T2095] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 2287.444832][ T2095] sctp_connect_new_asoc+0x2ff/0x6b0 [ 2287.444862][ T2095] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 2287.444893][ T2095] ? sctp_get_af_specific+0x29/0x80 [ 2287.444914][ T2095] ? sctp_inet6_send_verify+0x80/0x300 [ 2287.444933][ T2095] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 2287.444961][ T2095] __sctp_connect+0x5cb/0xdc0 [ 2287.444997][ T2095] ? __pfx___sctp_connect+0x10/0x10 [ 2287.445023][ T2095] ? security_sctp_bind_connect+0x7e/0x2c0 [ 2287.445046][ T2095] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 2287.445068][ T2095] sctp_getsockopt_connectx3+0x227/0x360 [ 2287.445090][ T2095] ? lock_sock_nested+0x6a/0x100 [ 2287.445110][ T2095] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 2287.445136][ T2095] ? sctp_getsockopt+0x12f/0xb90 [ 2287.445164][ T2095] ? __local_bh_enable_ip+0xd0/0x130 [ 2287.445187][ T2095] sctp_getsockopt+0x984/0xb90 [ 2287.445212][ T2095] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 2287.445231][ T2095] do_sock_getsockopt+0x51d/0x7e0 [ 2287.445260][ T2095] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 2287.445297][ T2095] ? __fget_files+0x3a0/0x420 [ 2287.445318][ T2095] ? __fget_files+0x2a/0x420 [ 2287.445346][ T2095] __x64_sys_getsockopt+0x1a4/0x240 [ 2287.445376][ T2095] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2287.445396][ T2095] do_syscall_64+0x15f/0xf80 [ 2287.445416][ T2095] ? trace_irq_disable+0x3b/0x140 [ 2287.445444][ T2095] ? clear_bhb_loop+0x40/0x90 [ 2287.445467][ T2095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2287.445485][ T2095] RIP: 0033:0x7f92ae99cdd9 [ 2287.445503][ T2095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2287.445520][ T2095] RSP: 002b:00007f92af934028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 2287.445541][ T2095] RAX: ffffffffffffffda RBX: 00007f92aec15fa0 RCX: 00007f92ae99cdd9 [ 2287.445555][ T2095] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000009 [ 2287.445566][ T2095] RBP: 00007f92af934090 R08: 0000200000000440 R09: 0000000000000000 [ 2287.445578][ T2095] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2287.445590][ T2095] R13: 00007f92aec16038 R14: 00007f92aec15fa0 R15: 00007f92aed3fa48 [ 2287.445620][ T2095] [ 2287.873415][ T2100] netlink: 'syz.5.8383': attribute type 29 has an invalid length. [ 2288.104952][ T2091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2288.135933][ T2091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2288.180168][ T2109] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8388'. [ 2288.277455][ T583] net_ratelimit: 10 callbacks suppressed [ 2288.277474][ T583] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2288.297783][ T583] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2288.317808][ T5694] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 2288.502786][ T5694] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2288.521355][ T5694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2288.560391][ T5694] usb 3-1: config 0 descriptor?? [ 2288.848430][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2288.863375][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2289.209786][ T5694] usb 3-1: Cannot set autoneg [ 2289.221197][ T5694] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 2289.270986][ T5694] usb 3-1: USB disconnect, device number 8 [ 2289.461611][ T584] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2289.476217][ T584] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2289.643397][ T2123] netlink: 5 bytes leftover after parsing attributes in process `syz.5.8394'. [ 2289.654647][ T2123] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8394'. [ 2289.719380][ T2122] ================================================================== [ 2289.727497][ T2122] BUG: KASAN: slab-use-after-free in drm_gem_object_release_handle+0x4b/0x1e0 [ 2289.736350][ T2122] Read of size 8 at addr ffff888081aa4278 by task syz.5.8394/2122 [ 2289.744149][ T2122] [ 2289.746514][ T2122] CPU: 0 UID: 0 PID: 2122 Comm: syz.5.8394 Tainted: G L syzkaller #0 PREEMPT(full) [ 2289.746534][ T2122] Tainted: [L]=SOFTLOCKUP [ 2289.746540][ T2122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2289.746549][ T2122] Call Trace: [ 2289.746555][ T2122] [ 2289.746561][ T2122] dump_stack_lvl+0xe8/0x150 [ 2289.746579][ T2122] print_address_description+0x55/0x1e0 [ 2289.746593][ T2122] ? drm_gem_object_release_handle+0x4b/0x1e0 [ 2289.746613][ T2122] print_report+0x58/0x70 [ 2289.746624][ T2122] kasan_report+0x117/0x150 [ 2289.746644][ T2122] ? drm_gem_object_release_handle+0x4b/0x1e0 [ 2289.746666][ T2122] drm_gem_object_release_handle+0x4b/0x1e0 [ 2289.746687][ T2122] idr_for_each+0x1c6/0x2a0 [ 2289.746702][ T2122] ? __pfx_drm_fb_release+0x10/0x10 [ 2289.746719][ T2122] ? __pfx_drm_gem_object_release_handle+0x10/0x10 [ 2289.746739][ T2122] ? __pfx_idr_for_each+0x10/0x10 [ 2289.746757][ T2122] drm_gem_release+0x28/0x40 [ 2289.746776][ T2122] drm_file_free+0x729/0xa00 [ 2289.746794][ T2122] drm_release+0x2de/0x3f0 [ 2289.746808][ T2122] ? __pfx_drm_release+0x10/0x10 [ 2289.746822][ T2122] __fput+0x44f/0xa60 [ 2289.746841][ T2122] task_work_run+0x1d9/0x270 [ 2289.746861][ T2122] ? __pfx_task_work_run+0x10/0x10 [ 2289.746881][ T2122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2289.746894][ T2122] exit_to_user_mode_loop+0xed/0x480 [ 2289.746907][ T2122] ? rcu_is_watching+0x15/0xb0 [ 2289.746923][ T2122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2289.746936][ T2122] do_syscall_64+0x33e/0xf80 [ 2289.746951][ T2122] ? clear_bhb_loop+0x40/0x90 [ 2289.746966][ T2122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2289.746980][ T2122] RIP: 0033:0x7ff15319cdd9 [ 2289.746993][ T2122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2289.747004][ T2122] RSP: 002b:00007ff15353fba8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 2289.747018][ T2122] RAX: 0000000000000000 RBX: 00007ff15353fc90 RCX: 00007ff15319cdd9 [ 2289.747028][ T2122] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 2289.747036][ T2122] RBP: 000000000022efae R08: 0000000000000001 R09: 0000000000000000 [ 2289.747044][ T2122] R10: 0000001b2d820000 R11: 0000000000000246 R12: 00007ff15353fcd0 [ 2289.747053][ T2122] R13: 00007ff153415fac R14: 000000000022eff7 R15: 00007ff153415fa0 [ 2289.747068][ T2122] [ 2289.747073][ T2122] [ 2289.983766][ T2122] Allocated by task 2123: [ 2289.988115][ T2122] kasan_save_track+0x3e/0x80 [ 2289.992816][ T2122] __kasan_kmalloc+0x93/0xb0 [ 2289.997431][ T2122] __kmalloc_cache_noprof+0x31c/0x660 [ 2290.002809][ T2122] __drm_gem_shmem_create+0xc4/0x2e0 [ 2290.008112][ T2122] drm_gem_shmem_dumb_create+0x72/0x120 [ 2290.013675][ T2122] drm_mode_create_dumb_ioctl+0x2bd/0x340 [ 2290.019437][ T2122] drm_ioctl_kernel+0x2df/0x3b0 [ 2290.024316][ T2122] drm_ioctl+0x6ba/0xb80 [ 2290.028563][ T2122] __se_sys_ioctl+0xfc/0x170 [ 2290.033164][ T2122] do_syscall_64+0x15f/0xf80 [ 2290.037769][ T2122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2290.043671][ T2122] [ 2290.045999][ T2122] Freed by task 2124: [ 2290.049980][ T2122] kasan_save_track+0x3e/0x80 [ 2290.054673][ T2122] kasan_save_free_info+0x46/0x50 [ 2290.059715][ T2122] __kasan_slab_free+0x5c/0x80 [ 2290.064492][ T2122] kfree+0x1c5/0x640 [ 2290.068401][ T2122] drm_gem_object_release_handle+0xc2/0x1e0 [ 2290.074318][ T2122] drm_gem_handle_delete+0x7b/0xb0 [ 2290.079462][ T2122] drm_ioctl_kernel+0x2df/0x3b0 [ 2290.084320][ T2122] drm_ioctl+0x6ba/0xb80 [ 2290.088568][ T2122] __se_sys_ioctl+0xfc/0x170 [ 2290.093173][ T2122] do_syscall_64+0x15f/0xf80 [ 2290.097769][ T2122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2290.103670][ T2122] [ 2290.105999][ T2122] The buggy address belongs to the object at ffff888081aa4000 [ 2290.105999][ T2122] which belongs to the cache kmalloc-1k of size 1024 [ 2290.120071][ T2122] The buggy address is located 632 bytes inside of [ 2290.120071][ T2122] freed 1024-byte region [ffff888081aa4000, ffff888081aa4400) [ 2290.133985][ T2122] [ 2290.136321][ T2122] The buggy address belongs to the physical page: [ 2290.142754][ T2122] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x81aa0 [ 2290.151527][ T2122] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2290.160105][ T2122] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 2290.167682][ T2122] page_type: f5(slab) [ 2290.171684][ T2122] raw: 00fff00000000040 ffff88813fe19dc0 dead000000000100 dead000000000122 [ 2290.180278][ T2122] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 2290.188869][ T2122] head: 00fff00000000040 ffff88813fe19dc0 dead000000000100 dead000000000122 [ 2290.197546][ T2122] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 2290.206222][ T2122] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 2290.214906][ T2122] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 2290.223581][ T2122] page dumped because: kasan: bad access detected [ 2290.229997][ T2122] page_owner tracks the page as allocated [ 2290.235743][ T2122] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 15, tgid 15 (ksoftirqd/0), ts 989426638637, free_ts 948611922101 [ 2290.256248][ T2122] post_alloc_hook+0x231/0x280 [ 2290.261040][ T2122] get_page_from_freelist+0x24ba/0x2540 [ 2290.266597][ T2122] __alloc_frozen_pages_noprof+0x18d/0x380 [ 2290.272420][ T2122] allocate_slab+0x77/0x660 [ 2290.276932][ T2122] refill_objects+0x339/0x3d0 [ 2290.281611][ T2122] __pcs_replace_empty_main+0x321/0x720 [ 2290.287166][ T2122] __kmalloc_noprof+0x474/0x760 [ 2290.292028][ T2122] ieee802_11_parse_elems_full+0x159/0x2ab0 [ 2290.297946][ T2122] ieee80211_inform_bss+0x161/0x1160 [ 2290.303284][ T2122] cfg80211_inform_single_bss_data+0xcf9/0x1af0 [ 2290.309534][ T2122] cfg80211_inform_bss_data+0x266/0x3c40 [ 2290.315189][ T2122] cfg80211_inform_bss_frame_data+0x3c7/0x730 [ 2290.321266][ T2122] ieee80211_bss_info_update+0x794/0xa40 [ 2290.326940][ T2122] ieee80211_scan_rx+0x552/0xa40 [ 2290.331892][ T2122] ieee80211_rx_list+0x29e9/0x3730 [ 2290.337038][ T2122] ieee80211_rx_napi+0x1b1/0x3e0 [ 2290.342032][ T2122] page last free pid 15884 tgid 15884 stack trace: [ 2290.348551][ T2122] __free_pages_ok+0xa7f/0xbe0 [ 2290.353327][ T2122] vhost_vsock_dev_release+0x5d6/0x6d0 [ 2290.358795][ T2122] __fput+0x44f/0xa60 [ 2290.362784][ T2122] task_work_run+0x1d9/0x270 [ 2290.367384][ T2122] exit_to_user_mode_loop+0xed/0x480 [ 2290.372718][ T2122] do_syscall_64+0x33e/0xf80 [ 2290.377323][ T2122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2290.383226][ T2122] [ 2290.385550][ T2122] Memory state around the buggy address: [ 2290.391181][ T2122] ffff888081aa4100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2290.399256][ T2122] ffff888081aa4180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2290.407330][ T2122] >ffff888081aa4200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2290.415418][ T2122] ^ [ 2290.423399][ T2122] ffff888081aa4280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2290.431471][ T2122] ffff888081aa4300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2290.439534][ T2122] ================================================================== [ 2290.455889][ T149] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2290.470905][ T149] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2290.496484][ T2122] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2290.503735][ T2122] CPU: 1 UID: 0 PID: 2122 Comm: syz.5.8394 Tainted: G L syzkaller #0 PREEMPT(full) [ 2290.514575][ T2122] Tainted: [L]=SOFTLOCKUP [ 2290.518898][ T2122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2290.528960][ T2122] Call Trace: [ 2290.532240][ T2122] [ 2290.535165][ T2122] vpanic+0x56c/0xa60 [ 2290.539149][ T2122] ? __pfx_vpanic+0x10/0x10 [ 2290.543649][ T2122] ? __pfx___schedule+0x10/0x10 [ 2290.548525][ T2122] panic+0xc5/0xd0 [ 2290.552238][ T2122] ? __pfx_panic+0x10/0x10 [ 2290.556650][ T2122] ? preempt_schedule_common+0x82/0xd0 [ 2290.562109][ T2122] ? drm_gem_object_release_handle+0x4b/0x1e0 [ 2290.568186][ T2122] check_panic_on_warn+0x89/0xb0 [ 2290.573138][ T2122] ? drm_gem_object_release_handle+0x4b/0x1e0 [ 2290.579216][ T2122] end_report+0x73/0x170 [ 2290.583472][ T2122] ? drm_gem_object_release_handle+0x4b/0x1e0 [ 2290.589547][ T2122] kasan_report+0x128/0x150 [ 2290.594056][ T2122] ? drm_gem_object_release_handle+0x4b/0x1e0 [ 2290.600150][ T2122] drm_gem_object_release_handle+0x4b/0x1e0 [ 2290.606056][ T2122] idr_for_each+0x1c6/0x2a0 [ 2290.610563][ T2122] ? __pfx_drm_fb_release+0x10/0x10 [ 2290.615766][ T2122] ? __pfx_drm_gem_object_release_handle+0x10/0x10 [ 2290.622275][ T2122] ? __pfx_idr_for_each+0x10/0x10 [ 2290.627332][ T2122] drm_gem_release+0x28/0x40 [ 2290.631955][ T2122] drm_file_free+0x729/0xa00 [ 2290.636547][ T2122] drm_release+0x2de/0x3f0 [ 2290.640963][ T2122] ? __pfx_drm_release+0x10/0x10 [ 2290.645901][ T2122] __fput+0x44f/0xa60 [ 2290.649884][ T2122] task_work_run+0x1d9/0x270 [ 2290.654478][ T2122] ? __pfx_task_work_run+0x10/0x10 [ 2290.659612][ T2122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2290.665688][ T2122] exit_to_user_mode_loop+0xed/0x480 [ 2290.670992][ T2122] ? rcu_is_watching+0x15/0xb0 [ 2290.675845][ T2122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2290.681905][ T2122] do_syscall_64+0x33e/0xf80 [ 2290.686512][ T2122] ? clear_bhb_loop+0x40/0x90 [ 2290.691186][ T2122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2290.697080][ T2122] RIP: 0033:0x7ff15319cdd9 [ 2290.701500][ T2122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2290.721121][ T2122] RSP: 002b:00007ff15353fba8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 2290.729537][ T2122] RAX: 0000000000000000 RBX: 00007ff15353fc90 RCX: 00007ff15319cdd9 [ 2290.737505][ T2122] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 2290.745471][ T2122] RBP: 000000000022efae R08: 0000000000000001 R09: 0000000000000000 [ 2290.753439][ T2122] R10: 0000001b2d820000 R11: 0000000000000246 R12: 00007ff15353fcd0 [ 2290.761403][ T2122] R13: 00007ff153415fac R14: 000000000022eff7 R15: 00007ff153415fa0 [ 2290.769378][ T2122] [ 2290.773106][ T2122] Kernel Offset: disabled [ 2290.777438][ T2122] Rebooting in 86400 seconds..