last executing test programs: 21m31.777286003s ago: executing program 2 (id=1016): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00a1ff13006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800190003000200060018c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x1000000) 21m31.263529863s ago: executing program 2 (id=1017): write$dsp(0xffffffffffffffff, &(0x7f0000000040)="7634738073f3bf6829ee8f160c2f7adab1397ba6914f62fec6a4c92f6883fac870f78e9748cf26a2ce41e106a9291c7188b298af24d5056bfbf5a4256e01", 0x3e) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000400)) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000180)={0x2, 0x7, 0x4, 0x7, 0x0, "e60db03a6d566b05012e783649ba44b1c9f47e", 0x1, 0x3ff}) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x28, 0x5a, 0x200, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x28}}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYBLOB="7a8f79ec9c7af53798f1422b70d1c68c0028809f73869968bc4c260f06f3562365e0de87eb3b72835b0b856d902c0442ff648adfb890e6dd8ad5084784356610c30176f747033bc96685f26045e39cf7921767791953", @ANYRES16=r0, @ANYRES64=r0, @ANYRESOCT=r1], 0x0) 21m27.839713908s ago: executing program 2 (id=1023): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7}, 0x1c) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket(0x2b, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x3) r5 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r5, 0x10000009) listen(0xffffffffffffffff, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89004001120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 21m26.83525683s ago: executing program 2 (id=1027): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) chroot(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') r2 = openat$udambuf(0xffffff9c, &(0x7f0000000240), 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x100, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x0, 0x7}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x4}, @TCA_CODEL_TARGET={0x8, 0x1, 0x7fff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="6771a1ead8641c2a210012800a00010076786c616e", @ANYRES32=0x0, @ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRESOCT=r2, @ANYRES8=r4], 0x3}, 0x1, 0x0, 0x0, 0x20008801}, 0xc0c0) r5 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) r6 = socket$pptp(0x18, 0x1, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r6, 0x40806685, &(0x7f0000000540)={0x1, 0x2, 0x1000, 0xfd, &(0x7f0000000380)="ed89614370eb1fb2c614d79e67d42e770b7287d1aa5540d7a7104c362faa5db711805467342b8eef820eea90a74384ec9527a71a5af5bb52c12793b1d0786252b328fe199420b05be97e2e1c4d6b604857b9812dc51d6afc959133c83e6b7a631242760077497a1eb7336b75ceb866aceb7a794bda365f49e95041172e3d2363cccc4c5f5052c40f476314010c47865f1468cd26871542ee324e89786f5e23a1894239d052ba5b03979766bb97a0648585d72c7fa29624e0284d4b8f8bde7e572d394576142985bc740d1699d7b9e2d3a6abb55bef7ae5a1e53ed742dcbb80cfe54108419e0c2bf2ce4e81d6e2de957f86628b29a48987235dc737fb5a", 0x90, 0x0, &(0x7f0000000480)="2816c23dbd32d050aba4b14f52ada361d4950def5c3fbed9933a51ae9073ce7417858f06e9d0b719fb159362d2ab56d7165227fa33dd7ba6ce294089f7e4efeaa5983944c43333da4bcd9dd406104f95f54be26dd16479af405662d0507d4f695b2c140382583686196de73f2ede70e1baed9ad702b548ece63c34a0844431bb5b00d930b98c661ee201e30b934d54c4"}) splice(r3, 0x0, r5, 0x0, 0x4ffe6, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, 0x0) 21m25.799926104s ago: executing program 2 (id=1033): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, 0x0, 0x93020007) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$snapshot(r4, &(0x7f0000000040), 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x0, 0x18, 0x3, "edd722"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, 0x0, &(0x7f00000010c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800), 0x0}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x7, @mcast2}, {0xa, 0x0, 0xb, @mcast1}}}, 0x48) syz_open_procfs(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x110}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000003c0)={{0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40585414, &(0x7f0000000400)={0x0, 0x6, 0x40081, 0x0, 0x5}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x4, 0xfffff034}, {0x20, 0xe, 0x0, 0x46}, {0x6}]}, 0x8) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYRES8=r0, @ANYRESOCT=r7, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303034303030302c757365725f69643dfe95e4dfd5a924422bef8600cb3f9f29134531b8cf428f8974aefd4d154133a31aa3d154c62d516161c17bd47f5b2bd2b6c939d44c86e9ae634195e8b5ea6d555236f9790fa6e5ef12a545fdc590ede09d36401fd23f32aa131b40", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) 21m25.239338801s ago: executing program 2 (id=1034): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r3 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r4 = shmat(r3, &(0x7f0000ff1000/0x3000)=nil, 0x400c) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) r6 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB='+rdma +cguset '], 0xe) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmdt(r4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24000040) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x14}}, 0x8811) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x6) r9 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/softnet_stat\x00') r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000ffff00000b00000001000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000ecff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r10, 0x0, 0x41}, 0x38) read$FUSE(r9, &(0x7f0000002d80)={0x2020}, 0x2025) 21m24.331734582s ago: executing program 32 (id=1034): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r3 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r4 = shmat(r3, &(0x7f0000ff1000/0x3000)=nil, 0x400c) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) r6 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB='+rdma +cguset '], 0xe) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmdt(r4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24000040) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x14}}, 0x8811) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x6) r9 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/softnet_stat\x00') r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000ffff00000b00000001000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000ecff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r10, 0x0, 0x41}, 0x38) read$FUSE(r9, &(0x7f0000002d80)={0x2020}, 0x2025) 20m18.614359316s ago: executing program 4 (id=1210): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca249435, &(0x7f0000001200)={0x2, 0x7, @status={[0xfffffffffffffff2, 0x6, 0x691, 0x40, 0x8, 0x4]}, [0x34b61aeb, 0x9, 0x2, 0xd, 0xec, 0x80000001, 0x5, 0x8, 0x6d27, 0x0, 0x1, 0x80, 0x8000, 0x3, 0xffffffffffffff01, 0xffffffff, 0x9, 0xfffffffffffffffb, 0x4, 0x9, 0x1, 0x3, 0x9, 0x6, 0x2, 0xad19, 0x5, 0x1, 0x3, 0xc5, 0xe8, 0x1000, 0xf, 0xfffffffffffffffe, 0x72, 0x6e5, 0x7, 0x3, 0x8, 0xd8a8, 0x1, 0x2, 0xfffffffffffffff8, 0xd3, 0x3, 0xff, 0x7, 0x816, 0x3ff, 0xfffffffffffffff4, 0x100, 0x9, 0xffffffffffff8000, 0x100, 0x5, 0x8, 0x2, 0x1ff, 0xfffffffffffff645, 0x7, 0x7f, 0x0, 0x9, 0xfffffffffffffffa]}) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x8010) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40000001ed602, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r7, 0x2000000000000153, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x20, 0x1, 0x0, r6, 0x0, 0xfe00}]) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x7}, 0x8) sendmmsg$inet(r4, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000100)={0xb, 0x1, 0x9, 0x0, 0x7, 0xd, 0x5, 0x5, 0x1, 0x1, 0x3, 0x7, 0x8, 0x9}, 0xe) r8 = timerfd_create(0x0, 0x80800) ioctl$TFD_IOC_SET_TICKS(r3, 0x40085400, &(0x7f0000000080)=0x7) timerfd_settime(r8, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) lseek(r3, 0x4, 0x4) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) 20m17.774090123s ago: executing program 4 (id=1212): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2, 0x2}, 0x18, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) landlock_restrict_self(r2, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xc622, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r4 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r4, 0x0) shutdown(r4, 0x2) getsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x20, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00'}) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16=0x0], 0xd0}, 0x1, 0x0, 0x0, 0x8081}, 0xc243daee1b27c24c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_merged\x00', 0x0, 0x0) preadv2(r6, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x77}], 0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) 20m14.552174162s ago: executing program 4 (id=1221): r0 = socket$inet(0xa, 0x1, 0x84) listen(r0, 0x8) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) r2 = socket$inet(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r3, 0x100) listen(r2, 0x8) r4 = socket$inet(0xa, 0x801, 0x84) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) listen(r4, 0x1) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000601ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 20m14.523369887s ago: executing program 4 (id=1222): r0 = socket$inet6(0xa, 0x5, 0x0) listen(r0, 0xaab) r1 = socket(0x10, 0x803, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fstat(r1, &(0x7f0000000880)) listen(r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x42, 0x80) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[], 0x14}}, 0x40050) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) shutdown(r4, 0x1) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @empty, 0x6}, 0x1c) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r6, r6, &(0x7f0000000000)=0x2eb4, 0x2000007ff) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000540)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000fbdbdf2513"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000400)={r8}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000340)={r8, 0x80, 0xfffb}, 0x8) 20m13.542285134s ago: executing program 4 (id=1225): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000001640)={&(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x1, 0x4}}, 0x10, &(0x7f0000001540)=[{&(0x7f00000002c0)="d68ab35204c42a508fbb2742577598749f0ccc5902fb884322b7a6e538e489d9af8ccbb75acd866713ebba6c314e41612e6ab56f43c30c23309fcaccd2bf4d11e42d1ab5164e0338f79b10ab29", 0x4d}, {&(0x7f0000000340)="54d9ddc04602d6b5271d4327065b056a682432daa9b79875c8ab309a0964cc3ff063b712b2ca0dd68156a9504d5d1c05181a5a840672766eee9d8226d5438ef9c2d5ea9b92204f0a5529f415aae7068441b697a32a11905e6b34062a37abc0be50dd84b8b2ee28680561dbb8b63ec116d60e3b6696bc8c76ada7338efb5aec", 0x7f}, {&(0x7f00000003c0)="60e66b66b74e03ad96f429296e6046a2cea123982264e1fa1e2894f7300c1533523761cf7d60cb1baf343744304ef7a5b93976d435d77bfe7d4afbb39aae3ea7b6781b4ad0546b8ab669e7586d0f38c45d9ee7ce272c5f226b39d57fb8e8993d7cbe31c4982baaaa6e4a3a651a1aa4e2b7ef580cb36b46482c8d798d4499892160015fe5631ef33b9191e7eda0782857e59add79b7c24b0b811d9c", 0x9b}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="0b32acd1030df23336da910baa69e8edc896fa406d3d2742956a55ad5c9dd68d57db08993792a7fe3981ae076d762602ce80c0cce30dc1fa2ed9bbda0f2261af4d44136b64b91b50be4ed4dc803b7474d653404b7179279875bcd4b7b421c9ecec6c62953d06ffd2c977a47d542d57ebe0f93089af8c16bc68eaa0a504c622c5ba9cca616148936c31b476e93364a32acde133858af1e0e130c6112014c80e307e003ea81378403746dbf1", 0xab}], 0x5, &(0x7f0000001580)="aba7e91ae78742db83aba60212edf9de31b6aee2fd61a7551e82a95384d32b9e3cdcabac3bc778b18bafe7990cf9d05241296ca7538edbb638341181e57253a9c970e24547ed6b866ad6ca3a37ef94f72b70275fc4f02fbf2b5376bf4759a4a3570e98f3986bf5cbe5201fd84ddd14dd4c7a82b21ec3e5a44dc265f358de0efa88", 0x81, 0x20040030}, 0xc0894) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000100)={{&(0x7f00001a4000/0x1000)=nil, 0x1000}, 0x5, 0x2}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) (async) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x500}) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000200)={0x29, 0xa, 0x0, "00000000000000000300000000000000ffa7b600"}) (async) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) (async) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x3000}) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffff5, &(0x7f0000000240)={&(0x7f0000000040)=@getnetconf={0x14, 0x52, 0x800, 0x70bd2e, 0x25dfcbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40c0}, 0x8080) 20m13.230217866s ago: executing program 4 (id=1227): r0 = syz_usb_connect(0x0, 0x120, &(0x7f0000000000)=ANY=[@ANYBLOB="120101007cde0440720c130049b30000000109020e0101000000000904"], 0x0) (async) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_CONTROLLER=0xfe}) (async) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000800)={0x1c, &(0x7f0000000700)={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000440)='batadv_slave_1\x00', 0x10) syz_emit_ethernet(0x86, &(0x7f0000000140)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x4400, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x1, "93c9691928972925723d55c712e63c92b492a3c50c9c3d27093a79585e8b73b3", "8aa4c506a2ba17a29171ce08a1e0f09d", {"c952a7f1f0443ce3114cee3518bfb345"}}}}}}}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) execve(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x19f4}}, './file0\x00'}) io_uring_register$IORING_REGISTER_PBUF_STATUS(r3, 0x1a, &(0x7f0000000100)={0x1000}, 0x1) (async) faccessat2(0xffffffffffffff9c, 0x0, 0x5f, 0x1100) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) 20m12.791404975s ago: executing program 33 (id=1227): r0 = syz_usb_connect(0x0, 0x120, &(0x7f0000000000)=ANY=[@ANYBLOB="120101007cde0440720c130049b30000000109020e0101000000000904"], 0x0) (async) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_CONTROLLER=0xfe}) (async) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000800)={0x1c, &(0x7f0000000700)={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000440)='batadv_slave_1\x00', 0x10) syz_emit_ethernet(0x86, &(0x7f0000000140)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x4400, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x1, "93c9691928972925723d55c712e63c92b492a3c50c9c3d27093a79585e8b73b3", "8aa4c506a2ba17a29171ce08a1e0f09d", {"c952a7f1f0443ce3114cee3518bfb345"}}}}}}}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) execve(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x19f4}}, './file0\x00'}) io_uring_register$IORING_REGISTER_PBUF_STATUS(r3, 0x1a, &(0x7f0000000100)={0x1000}, 0x1) (async) faccessat2(0xffffffffffffff9c, 0x0, 0x5f, 0x1100) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) 15m42.218820225s ago: executing program 5 (id=2278): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x3f, 0x800, 0xbbba, 0x0, 0x18, 0x0, {0x8000, 0x2000}, {0x63cd, 0xfffffffd, 0xfffffffe}, {0xf8e, 0xffff0000}, {0xfff}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffd, 0x0, 0x0, 0x0, 0x4}) 15m41.706542695s ago: executing program 5 (id=2280): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r3 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r4 = shmat(r3, &(0x7f0000ff1000/0x3000)=nil, 0x400c) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) r6 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[], 0xe) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmdt(r4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24000040) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x14}}, 0x8811) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x6) r9 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/softnet_stat\x00') r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000ffff00000b00000001000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000ecff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r10, 0x0, 0x41}, 0x38) read$FUSE(r9, &(0x7f0000002d80)={0x2020}, 0x2025) 15m39.885205623s ago: executing program 5 (id=2286): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) syz_emit_ethernet(0x6f, &(0x7f0000003580)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x39, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x5, '\x00', @dev={0xfe, 0x80, '\x00', 0x2a}, [{0x2, 0x3, "21c1e05659ae3f48e9296b2beda7add700385601f891"}, {0x2, 0x1, "fef4b66989e619"}]}}}}}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffff4, 0x65, &(0x7f00000000c0)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x7, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1, {[@ssrr={0x89, 0x3, 0xbd}, @ra={0x94, 0x4}]}}}}}}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000180)={[0x5, 0x0, 0x7, 0x7c, 0x9, 0x9, 0x1, 0x100000001, 0xa427, 0x9, 0x8000000000000001, 0x3, 0x1, 0x81, 0x80000001, 0x9], 0xeeee0000, 0x80}) ioctl$KVM_RUN(r2, 0xae80, 0x0) close(0x5) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) openat$binder_debug(0xffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9) clock_gettime(0x0, &(0x7f0000000000)) 15m38.615809996s ago: executing program 5 (id=2289): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0xfffffffffffffeed, &(0x7f0000000000)={0x5, 0x200, 0x80000000006, 0x6, 0xfffffffffffffff7, 0xe, 0x9, 0x6}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') chroot(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x4e, 0x9f, 0xe6, 0x10, 0x4e8, 0x6889, 0x9b5e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xba, 0xbe, 0x64}}]}}]}}, 0x0) r3 = socket(0x10, 0x3, 0x0) mknodat$loop(r1, &(0x7f0000000200)='./file1\x00', 0x20, 0x1) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGDEV(r4, 0x80045432, &(0x7f00000001c0)) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x9c, 0x4, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0xffff}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0xbe}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x4ca}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20004083}, 0x4088) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000840)='%/,:\x85X\\\x03\xa6\xd7}\xcd\xeb*\xb1\xa8\xb7\x81\xc8\xcbR\xa8?\x97 \xcbz&\x17\xa4\xfd^\xe1I\x11X\x90\x03\xb7W\x05\xb0\x99\x10F0\xb5YP9\xc3\xe2M\xaa\x81\xfev:\xe40\x9e\xdb\x98\xb4\xd0\xdcE\x14\x910\x1b.G\xab\x86\xdfy\xe6\xde11_H]\xe2\xc3\xb2fa\x7f\x8c\xf3\xc6\x85\xc9\xd6j\xff\xaa\xdbWD\x87\xe3\\mUSy\x0f\x82qW\fE\xd15ec>:D+', 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 15m36.935160593s ago: executing program 5 (id=2300): r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x1000334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r3, &(0x7f00000001c0)="96a9f3a70b3391fbed8d11252984cf256deb6b6620a8916740e5b2353ea5e5dc32336562787b5752fdf8d00b841d776a05a938c1d3babb8b59cb1595cda8936e91bdbf7e3be9c183703064116f752d255f7165bee1434120e49e409e76b0c51933ee9df890fcf8448b0ad9b373856cad49d3fdc44d022a2730e90e56dd8d6d6b3599bfe3b7ac574e5f68c78d466420e2d5b154fe223075937e905d31972db22c263dfc33322478db11", 0xa9) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2, 0x2}, 0x18, 0x0) symlink(&(0x7f0000000040)='.\x00', 0x0) r5 = landlock_create_ruleset(&(0x7f0000000000)={0xe028, 0x0, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x5) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0) 15m36.06815347s ago: executing program 5 (id=2302): socket$inet_tcp(0x2, 0x1, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000380)='./bus\x00', 0x0, 0x0) r2 = dup(r0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="2800000004"], 0x28) sendfile(0xffffffffffffffff, r1, 0x0, 0x4000000053d2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r3) truncate(&(0x7f0000000200)='./bus\x00', 0x4) socket(0xb, 0x3, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x8, 0x8000, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xffffff64, 0xb55}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="080096040a000200aaaaaaaaaa0c00000600050001000000"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, 0x0, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0x5}, {0xf, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x7}}]}}]}, 0x48}}, 0x800) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r13, {0x0, 0x4}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8018000a80140007000000000000000000000000000000000214003500776731000000000000000000000000007a082876d137eb69741742adfbc7161f35"], 0x50}}, 0x0) 15m35.618908627s ago: executing program 34 (id=2302): socket$inet_tcp(0x2, 0x1, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000380)='./bus\x00', 0x0, 0x0) r2 = dup(r0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="2800000004"], 0x28) sendfile(0xffffffffffffffff, r1, 0x0, 0x4000000053d2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r3) truncate(&(0x7f0000000200)='./bus\x00', 0x4) socket(0xb, 0x3, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x8, 0x8000, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xffffff64, 0xb55}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="080096040a000200aaaaaaaaaa0c00000600050001000000"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, 0x0, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0x5}, {0xf, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x7}}]}}]}, 0x48}}, 0x800) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r13, {0x0, 0x4}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8018000a80140007000000000000000000000000000000000214003500776731000000000000000000000000007a082876d137eb69741742adfbc7161f35"], 0x50}}, 0x0) 14.015557203s ago: executing program 1 (id=5583): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000040)=""/71, 0x47}], 0x1) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b000101000000090400000302060000052406000005240000000d240f010000000000000000000905820240000000000905"], 0x0) syz_open_dev$sg(0x0, 0x40, 0x88101) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x1, @loopback}, 0xb) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYBLOB], 0xc) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109301) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@base={0x5, 0x7fff, 0x5, 0x7}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'erspan0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x1, 0x80, 0x2e1, 0x5, {{0x28, 0x4, 0x3, 0x2, 0xa0, 0x67, 0x0, 0x8, 0x29, 0x0, @broadcast, @remote, {[@generic={0x7, 0xd, "b0e461cc4d97756c5e8c5b"}, @ssrr={0x89, 0xf, 0xfe, [@multicast1, @dev={0xac, 0x14, 0x14, 0x3c}, @loopback]}, @timestamp={0x44, 0x28, 0xfc, 0x0, 0x7, [0x8001, 0xfe90, 0x5, 0x91, 0x7, 0x7f4d6521, 0x2, 0x6, 0x6]}, @end, @end, @end, @lsrr={0x83, 0xb, 0x39, [@broadcast, @multicast2]}, @timestamp_addr={0x44, 0x14, 0x39, 0x1, 0x9, [{@multicast2, 0x6}, {@private=0xa010100, 0x4}]}, @timestamp={0x44, 0x20, 0x34, 0x0, 0x2, [0x3, 0xf4e, 0x8, 0x2, 0x2, 0x8, 0x4]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc01cf509, &(0x7f0000000580)={r3, 0x9, 0x5, 0xc0000}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0xd4, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x35}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20008051}, 0x4fab8740f9776bfe) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9, r5}, 0x38) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2b, 0x0, 0x0) ioctl$USBDEVFS_RESET(r4, 0x5514) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x17b, 0x4c801}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xfffffffffffffdfd, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6, 0x6, 0x7c}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0x0, 0x23, 0x3}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x23e}, @IFLA_BR_MAX_AGE={0x0, 0x3, 0x1d}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040844) 10.971296441s ago: executing program 1 (id=5596): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) add_key$keyring(&(0x7f00000085c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0x6, 0xfffffffffffffffd) pipe2(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00') connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x1, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x6e6bb2, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x0, 0x3}}, 0xe4) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast2, @in6=@loopback, 0x3, 0x7, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x3, 0x0, 0x80000, 0x9, 0x3}}, 0xe8) close(r4) syz_open_dev$vim2m(&(0x7f0000000200), 0x2000000f5, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x10, 0x0, @val=@iter={&(0x7f0000001a40)=@cgroup, 0x10}}, 0x40) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010725bd7000fcdbdfb303003f316e527b3320eaafaf14594c5880a94509e5e92a67b19a8d396b5bdfbaa49ba388f4b42f7edd09d51e5fdcde"], 0x14}, 0x1, 0x0, 0x0, 0x20045091}, 0x24048880) write(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) mprotect(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0xb) 10.241798083s ago: executing program 0 (id=5597): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x93020007) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$snapshot(r4, &(0x7f0000000040), 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e4010223010902"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x0, 0x18, 0x3, "edd722"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, 0x0, &(0x7f00000010c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800), 0x0}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x7, @mcast2}, {0xa, 0x0, 0xb, @mcast1}}}, 0x48) syz_open_procfs(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x110}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000003c0)={{0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40585414, &(0x7f0000000400)={0x0, 0x6, 0x40081, 0x0, 0x5}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x4, 0xfffff034}, {0x20, 0xe, 0x0, 0x46}, {0x6}]}, 0x8) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYRES8=r0, @ANYRESOCT=r7, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303034303030302c757365725f69643dfe95e4dfd5a924422bef8600cb3f9f29134531b8cf428f8974aefd4d154133a31aa3d154c62d516161c17bd47f5b2bd2b6c939d44c86e9ae634195e8b5ea6d555236f9790fa6e5ef12a545fdc590ede09d36401fd23f32aa131b40", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 9.754755234s ago: executing program 1 (id=5599): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) keyctl$set_reqkey_keyring(0x6, 0xfffffffffffffffd) pipe2(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00') connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x1, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x6e6bb2, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x0, 0x3}}, 0xe4) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast2, @in6=@loopback, 0x3, 0x7, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x3, 0x0, 0x80000, 0x9, 0x3}}, 0xe8) close(r3) syz_open_dev$vim2m(&(0x7f0000000200), 0x2000000f5, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x10, 0x0, @val=@iter={&(0x7f0000001a40)=@cgroup, 0x10}}, 0x40) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010725bd7000fcdbdfb303003f316e527b3320eaafaf14594c5880a94509e5e92a67b19a8d396b5bdfbaa49ba388f4b42f7edd09d51e5fdcde"], 0x14}, 0x1, 0x0, 0x0, 0x20045091}, 0x24048880) write(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) mprotect(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0xb) 8.753476028s ago: executing program 7 (id=5602): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) keyctl$set_reqkey_keyring(0x6, 0xfffffffffffffffd) pipe2(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00') connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x1, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x6e6bb2, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x0, 0x3}}, 0xe4) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast2, @in6=@loopback, 0x3, 0x7, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x3, 0x0, 0x80000, 0x9, 0x3}}, 0xe8) close(r4) syz_open_dev$vim2m(&(0x7f0000000200), 0x2000000f5, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x10, 0x0, @val=@iter={&(0x7f0000001a40)=@cgroup, 0x10}}, 0x40) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010725bd7000fcdbdfb303003f316e527b3320eaafaf14594c5880a94509e5e92a67b19a8d396b5bdfbaa49ba388f4b42f7edd09d51e5fdcde"], 0x14}, 0x1, 0x0, 0x0, 0x20045091}, 0x24048880) write(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) mprotect(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0xb) 8.593090356s ago: executing program 1 (id=5603): syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000118c0)=[{{&(0x7f0000000440)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000780)=[{&(0x7f00000004c0)="5d0e8567ed9389492c8679978c6af24f2a393b0c65bd860e6d9afae42f33003f9c2deee76b6c1a1ac91932e6955f1167889ba061676895641edc1c55b465c70eae055d1af59ceafc5fe37c5ce5d9c8638251886e8cc10780624337038cf7483424cdce597d338b24e2326406c83925b8a303f35c66b60e1ae2e4fd0743e94c231074260dccfd", 0x86}, {&(0x7f00000003c0)="77c70b33f78f22ed78bf820ddbe56c3c67d8865516c19fda5269f66eae35b969d38f715b946f56657e8be0f12588b1aa6c3df2e62816c35a0ec0c0", 0x3b}, {&(0x7f0000000580)="e637b5a6d385cc0f4250f9150a30424bcd14c465b5a8c637b957a216d66cc8688f9cb3fc3ed0399d5d16225d383b34b6784bf1eb6036085d9e8d8b98874f702d660d8bad3716b7fa8cb67b4239c847f34c24ae9ccaa8e6f169c00cd7e8089b70ae7c80c5cec02cea117473aa6fb044767d972030f6eb1016c7c34ae66e6558287ee6653004bda1bf75bb99ef0c9ff56fe21a618b1ca6f3ac7246a670f6f708b09d9dcfe2099d4792e3bcb2dbf621f6395b73ccaebb7302d94466821f73538da4e65e4f321d2d3072b5ab8b3897785b4b49f37ffc261055f202", 0xd9}, {&(0x7f0000000680)="f149891c96a19d04ca3d0988b9f6d66ce9ba0e63a04d49414782bc468748cd39b45db99b8081d29a24813f5310f43e24569fab9b29551fe8ceb6f8b4b977be3cc8617eca6b49d2ff177b9b78891d1ea5c210d035a9b711964705909e2a6ebe10bbd8b06e45256a0d07f56c489bffd3c2f245ee0dcd886fe9aa6c079e83fa9603b6467a9ae1677d6e2417c585cbfa62f8fe752fa30fecf8246cdc586bff9fb5aa51753e4e18bb517d4eb86e49b47ce5c9644ee1ccc6b47fbcfbdc07271c844100dd9f283e9c6993f917879843d7ab82b2d5b37e161e3898b3113c9d872e11aa9947623b110375a6b3441b856961e007e387dce8", 0xf3}], 0x4, &(0x7f0000000900)=[@cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [r1]}}, @cred={{0x18}}], 0x40, 0x2004c010}}, {{0x0, 0x0, &(0x7f000000c4c0)=[{&(0x7f000000c3c0)="5b7bad56ef56deb43710e3128feba75850b88c1df290e62a5a025f62a42a3741dffb03a79987a843a460e4d66d3f92d4b1bb8326a4485a197632457a820ae4fd130c514729d06f77fd01a8abca03a374db55822119fbdfe8bb81da608c76b001b4150ba2bafb751ece5a148ef6306380761314ad9da77310aa1ab9d66dec7c8aced4556fe5c0c867f2b64eea7a74d1854b96eeed589c30ef1b6e614386c5617fda705dcb36b1424166cabe9dec35833d83bb9a4c00e6b347f5ae85a85730abcd99af38463f333c3876fd235a9da65f193c1a36", 0xd3}], 0x1, &(0x7f000000c6c0)=[@cred={{0x18}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x18}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r2, 0xffffffffffffffff, r2, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r0]}}, @cred={{0x18}}], 0xcc, 0x40000}}, {{0x0, 0x0, &(0x7f0000010440)=[{&(0x7f00000102c0)="946e9a63290d7319058629143cd179106aabc02e7790caa1c6d1761e3b6e241246b5557578aeeb13008ad99a9ff5f10e0e3d1cc96b642ed438474a15d42dad8a5d487921e0", 0x45}, {&(0x7f0000010340)="ccb2a42f8ef49bb8f468fbbe886ac6a02794728117ebd4674028e8eaed3fef5b0ca6dadd4969d3b51f5a2850f9383c0ab5ede9a5858b49ce74e6002ddc766684091f140bcfe018fddbaf5d85508137c9ef086e0a0a7cbbf0875df81fa26a84c00298eda97128284379f17954288562fb8fd947bdeea56c3b7dbf5686d31b8227dc1379cf7a29d34479ed93de2fa1b9ef7cecbbf5399a4f6893373c851709a90e13d71e22e5fca42c17", 0xa9}], 0x2, 0x0, 0x0, 0x80}}, {{&(0x7f0000010480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000011640)=[{&(0x7f0000010580)="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", 0x1000}, {&(0x7f0000011580)="87eb53d3e71fe22b8e09547b20fa1b9dec0dfdbc9c42c9c8d282e1e932e8d7b074121ba27c76f28d1c7acbb516f2375f8373c768a688f05bb568cc89b6d2efd09ccf10ed88946a6a84f9174c18cd4425be30d98669560bbb7d10677eafb58e763961cff1eeb9ef88e069dfb6737d516564837ba1ea524a661dc2258979479bcc80384b7b0c88a9feb4affd56baeb6ae62934759c4f5fbb38f4a6731c197ad5d96b84080342e36ac7", 0xa8}], 0x2, &(0x7f00000117c0)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}], 0xec, 0x20008001}}], 0x4, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, 0x1810, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x84}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4800) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001848128008000100"], 0x38}, 0x1, 0x0, 0x0, 0x58840}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000140)={0x1, 'ip6tnl0\x00', {}, 0x7ff}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f907, 0x0, '\x00', @p_u8=&(0x7f0000000180)}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x101, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@RTM_NEWNSID={0x24, 0x58, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NETNSA_NSID={0x8}, @NETNSA_FD={0x8}]}, 0x24}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = dup(r7) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r7, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="80", 0x1}], 0x1}, 0x4048043) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r8, 0x84, 0x23, 0x0, 0x0) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, 'lo\x00'}}, 0x1e) syz_emit_ethernet(0x4e, &(0x7f00000002c0)=ANY=[@ANYRES64, @ANYRESOCT], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 7.341181189s ago: executing program 7 (id=5607): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = add_key$keyring(&(0x7f00000085c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r1, 0x1) keyctl$set_reqkey_keyring(0x6, 0xfffffffffffffffd) pipe2(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00') connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x1, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x6e6bb2, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x0, 0x3}}, 0xe4) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast2, @in6=@loopback, 0x3, 0x7, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x3, 0x0, 0x80000, 0x9, 0x3}}, 0xe8) close(r5) syz_open_dev$vim2m(&(0x7f0000000200), 0x2000000f5, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x178, 0x8, 0xfa04, 0x178, 0x6c02, 0x278, 0x194, 0x194, 0x278, 0x194, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x0, 0x74020000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x39d, 0x3, 0xfff, 'netbios-ns\x00', {0x2}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x2c}, 0x0, 0xffffff00, 'macvlan1\x00', 'sit0\x00', {}, {}, 0x0, 0x0, 0x24}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xef, 0xa, {0x9}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x10, 0x0, @val=@iter={&(0x7f0000001a40)=@cgroup, 0x10}}, 0x40) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="010725bd7000fcdbdfb303003f316e527b3320eaafaf14594c5880a94509e5e92a67b19a8d396b5bdfbaa49ba388f4b42f7edd09d51e5fdcde"], 0x14}, 0x1, 0x0, 0x0, 0x20045091}, 0x24048880) write(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) mprotect(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0xb) 7.181020593s ago: executing program 3 (id=5608): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, &(0x7f00000039c0)={0x2, 0x0, {&(0x7f0000000680)=""/184, 0xfffffefd, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000001f00)={0x2, 0x0, {&(0x7f0000000080)=""/134, 0x86, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000300)={0x2, 0x0, {&(0x7f0000000040)=""/25, 0x19, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000200)=""/213, 0xd5, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000e40)=""/187, 0xbb, 0x0, 0x2, 0x3}}, 0x48) getpgid(0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r2, &(0x7f0000000000)=[{&(0x7f0000000180)=""/136, 0x88}], 0x1, 0x5, 0x1, 0x0) socket(0x2d, 0xa, 0x0) socket(0x10, 0x3, 0x0) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) 6.585911768s ago: executing program 0 (id=5609): unshare(0x6a040000) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000240)='./file0\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x18014) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r7, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r8, 0xc0383e04, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, 0x0) write$uinput_user_dev(r5, &(0x7f0000000980)={'syz0\x00', {}, 0x22, [0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x4, 0xfffffffc, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x2, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x3fffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e81, 0x3, 0x1, 0x0, 0x0, 0x9, 0x800, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x5, 0x0, 0xffffffff, 0x55f8, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x2, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7930, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) ioctl$UI_GET_SYSNAME(r5, 0x8040552c, &(0x7f0000006480)) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) 6.389737639s ago: executing program 7 (id=5610): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x12) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x4010, r0, 0x3a59f000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x0, 0x1036, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0xe38, 0x9, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{}, 0x0, &(0x7f0000000880)=r4}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0d0000000400d3753adb0000070000000000000082a9128ebe64c2b7e2ea185ef928839f2d24994e048c29ac301dcc4188540b0502c9d1e28a51b2c9373a328efd72b5c0b9f8661092c6340c424b538eddefc34a0718c514b0378826d8f65adac4a5f67c74fc801f5ec68d007dc1d437787daf86e2279ae5c587a00c612a21b3a97111ed4e9d4378252e8058cf51765df6e7743afba9e9a73ad0c1ec77cdc8d11f20eb5a1598cc70dc203f1a606654b0f1b19573ca1ebc96d36c2e5347bcd99f065883eca93d595fde178e2b1a1d8d585071b240813c420915549a8fa0b971779797abd736", @ANYRES32=r3, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000880), 0xde9, r5}, 0x38) r6 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r7 = syz_open_dev$radio(&(0x7f0000001c40), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r7, 0x402c5639, &(0x7f0000001c80)={0x6, 0x1, 0x8}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4f21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfa}}, 0x9}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r8 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x8201) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_misc(r9, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000002c0)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) splice(r1, 0x0, r8, 0x0, 0x9, 0x2) 5.968902351s ago: executing program 7 (id=5611): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xa0c00, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x0, 0x272}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r2, 0x6, &(0x7f0000000440)=""/217, 0xd9, 0x2}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) 5.547853908s ago: executing program 3 (id=5612): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) add_key$keyring(&(0x7f00000085c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0x6, 0xfffffffffffffffd) pipe2(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00') connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x1, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x6e6bb2, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x0, 0x3}}, 0xe4) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast2, @in6=@loopback, 0x3, 0x7, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x3, 0x0, 0x80000, 0x9, 0x3}}, 0xe8) close(r4) syz_open_dev$vim2m(&(0x7f0000000200), 0x2000000f5, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x178, 0x8, 0xfa04, 0x178, 0x6c02, 0x278, 0x194, 0x194, 0x278, 0x194, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x0, 0x74020000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x39d, 0x3, 0xfff, 'netbios-ns\x00', {0x2}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x2c}, 0x0, 0xffffff00, 'macvlan1\x00', 'sit0\x00', {}, {}, 0x0, 0x0, 0x24}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xef, 0xa, {0x9}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x10, 0x0, @val=@iter={&(0x7f0000001a40)=@cgroup, 0x10}}, 0x40) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010725bd7000fcdbdfb303003f316e527b3320eaafaf14594c5880a94509e5e92a67b19a8d396b5bdfbaa49ba388f4b42f7edd09d51e5fdcde"], 0x14}, 0x1, 0x0, 0x0, 0x20045091}, 0x24048880) write(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) mprotect(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0xb) 4.212177372s ago: executing program 7 (id=5614): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x95, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x5f, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, [{0x0, 0x9, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b"}, {0x1}]}}}}}}, 0x0) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r2) socketpair(0x18, 0x0, 0x0, &(0x7f0000000000)) close(0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000002140)={0x0, 0xae, 0x3ff, 0x30315559, 0x2, [], [0x0, 0x0, 0xfffffffe, 0x4], [], [0x8000000000000000, 0x0, 0x4000]}) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000080)={0x9, 0x1, 0x3, "dbbc845dd6dbd100ecd796caa3f9f8e303660bef490daa61c2dd72c605a0d432", 0x30385056}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000240)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x9, 0x2, 0xffffffffffffff7f], 0x10}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r2, 0xc01864cd, &(0x7f0000000400)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x84], 0x4, 0x1}) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') preadv(r4, &(0x7f0000000600)=[{&(0x7f0000000380)=""/116, 0x74}], 0x1, 0x82000001, 0xff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@ipv6_deladdr={0x60, 0x15, 0x100, 0x70bd27, 0x25dfdbfd, {0xa, 0x20, 0x4, 0xff}, [@IFA_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFA_FLAGS={0x8}, @IFA_FLAGS={0x8, 0x8, 0x244}, @IFA_LOCAL={0x14, 0x2, @local}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8000}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000d80c}, 0x0) 4.080067268s ago: executing program 1 (id=5615): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r3 = socket(0x1e, 0x4, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x22, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x20008040) read$FUSE(r0, &(0x7f0000001180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280448c, &(0x7f0000000380)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r9 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) move_mount(r9, 0x0, r9, 0x0, 0x276) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB="2c72a9d0ed06cc7166aae8de6f6f746d6f64653d30303030303030303030303030303030e2062ea18ec6c0e5a1932d303034fd64", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r7, &(0x7f00000083c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000080)={0x8d, 0x0, r10, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x21}}}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004084}, 0x20000000) syz_fuse_handle_req(r6, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r9, 0x40bc5311, &(0x7f00000005c0)={0x80000000, 0x1, 'client1\x00', 0x5, "6bd1c046b4f07b60", "5b1d2f6331627613164754f8e3a3a3134e9c3483bc04579cb304d42bf59ed12a", 0x4, 0xfaf5}) syz_fuse_handle_req(r6, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x5, 0x2, 0x3, 0x2, 0x5, 0x8, {0x6, 0x9, 0x0, 0xff, 0x3, 0x0, 0x7fffffff, 0x57, 0x3, 0x8000, 0x3ff, 0x0, r11, 0x4, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0x9, ':-(\\\xc9\x80\x00\x00\x00\xc3\x00\x00\xf39}\xd8mM\x92\x8d$\xd3\xa4a\xb6\x02E\x89\x85V\xc6\x00\x00\x00\x00\x00\x00+\x13;\x00\x00\x00'}}]}, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r13 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r13, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r13, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x40800, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r11}, 0x2c, {[{@blksize}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions}, {@default_permissions}, {@default_permissions}, {@blksize}, {@max_read={'max_read', 0x3d, 0x7}}, {@blksize={'blksize', 0x3d, 0x1800}}], [{@euid_lt={'euid<', r12}}]}}) 3.988062468s ago: executing program 3 (id=5616): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0x74, r2, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x58, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}]}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 3.081152729s ago: executing program 6 (id=5617): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}], 0x3}, 0x2}], 0x2, 0x22, 0x0) 2.934839979s ago: executing program 6 (id=5618): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb2b, 0x20}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x9}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x2075ba2647d82362) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$vicodec1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = openat$vicodec1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_EDID(r2, 0xc0245628, &(0x7f0000000140)={0x3, 0x0, 0xf3, '\x00', &(0x7f0000000040)=0x5}) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000000c0)=0xffff, 0x4) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110014a696d4003041060410100f602010902240001000000820904"], 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110014a696d4003041060410100f602010902240001000000820904"], 0x0) r3 = openat$mice(0xffffff9c, &(0x7f0000000040), 0x12900) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x8, r5}) ioctl$DMA_BUF_SET_NAME_A(r7, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1d) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x300, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080), &(0x7f0000000100)=0x14) 2.545909812s ago: executing program 7 (id=5619): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x93020007) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$snapshot(r4, &(0x7f0000000040), 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e4010223010902"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x0, 0x18, 0x3, "edd722"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, 0x0, &(0x7f00000010c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800), 0x0}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x7, @mcast2}, {0xa, 0x0, 0xb, @mcast1}}}, 0x48) syz_open_procfs(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x110}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000003c0)={{0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40585414, &(0x7f0000000400)={0x0, 0x6, 0x40081, 0x0, 0x5}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x4, 0xfffff034}, {0x20, 0xe, 0x0, 0x46}, {0x6}]}, 0x8) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYRES8=r0, @ANYRESOCT=r7, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303034303030302c757365725f69643dfe95e4dfd5a924422bef8600cb3f9f29134531b8cf428f8974aefd4d154133a31aa3d154c62d516161c17bd47f5b2bd2b6c939d44c86e9ae634195e8b5ea6d555236f9790fa6e5ef12a545fdc590ede09d36401fd23f32aa131b40", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 2.368289268s ago: executing program 3 (id=5620): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80010000, 0x8, 0xc2, 0x9, 0x3d, 0x0, 0x80, 0x1, 0x3, 0x44, 0x8, 0x2, 0x8}, {0xb, 0xaff2, 0x8, 0x8, 0x9, 0xff, 0x4, 0x3, 0xa, 0x13, 0x7, 0x6, 0x1}, {0x21ff, 0x7, 0xd, 0x10, 0x25, 0x9, 0x0, 0xfb, 0x4, 0x15, 0x0, 0x2, 0x4}], 0x9}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x100, 0x8a, 0x9, 0x1, 0x3, 0xfffffffffffffffe, 0x4002004c4, 0x3, 0x6, 0x100, 0x800000010, 0x2, 0x3, 0x7ffffffffffdffff, 0x3], 0x3000, 0x1011c4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x6, 0x9}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r7) r8 = syz_io_uring_setup(0x23f9, &(0x7f0000000280)={0x0, 0xaddd, 0x4, 0x1, 0xdc}, &(0x7f0000000140), &(0x7f0000000300)) syz_io_uring_setup(0x5974, &(0x7f0000000400)={0x0, 0xdde, 0x20, 0x1, 0x2cf, 0x0, r8}, &(0x7f0000000340), &(0x7f0000000500)) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x22020600) recvmsg$unix(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}], 0x12, 0x0, 0x0, 0x406}, 0x40020000) sendmsg$inet(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) r11 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.315910677s ago: executing program 6 (id=5621): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = add_key$keyring(&(0x7f00000085c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r1, 0x1) keyctl$set_reqkey_keyring(0x6, 0xfffffffffffffffd) pipe2(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00') connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x1, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x6e6bb2, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x0, 0x3}}, 0xe4) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast2, @in6=@loopback, 0x3, 0x7, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x3, 0x0, 0x80000, 0x9, 0x3}}, 0xe8) close(r3) syz_open_dev$vim2m(&(0x7f0000000200), 0x2000000f5, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x178, 0x8, 0xfa04, 0x178, 0x6c02, 0x278, 0x194, 0x194, 0x278, 0x194, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x0, 0x74020000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x39d, 0x3, 0xfff, 'netbios-ns\x00', {0x2}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x2c}, 0x0, 0xffffff00, 'macvlan1\x00', 'sit0\x00', {}, {}, 0x0, 0x0, 0x24}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xef, 0xa, {0x9}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x10, 0x0, @val=@iter={&(0x7f0000001a40)=@cgroup, 0x10}}, 0x40) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010725bd7000fcdbdfb303003f316e527b3320eaafaf14594c5880a94509e5e92a67b19a8d396b5bdfbaa49ba388f4b42f7edd09d51e5fdcde"], 0x14}, 0x1, 0x0, 0x0, 0x20045091}, 0x24048880) write(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) mprotect(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0xb) 2.242290271s ago: executing program 6 (id=5622): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0205710, &(0x7f0000000a40)={0x1, 0x34d, 0x10, 0x0, 0x3}) utimensat(r2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{0x0, 0xea60}, {0x77359400}}, 0x100) recvfrom$l2tp6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) 2.189319901s ago: executing program 1 (id=5623): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) readv(r1, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b000101000000090400000302060000052406000005240000000d240f010000000000000000000905820240000000000905"], 0x0) syz_open_dev$sg(0x0, 0x40, 0x88101) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x1, @loopback}, 0xb) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYBLOB], 0xc) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109301) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@base={0x5, 0x7fff, 0x5, 0x7}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'erspan0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x1, 0x80, 0x2e1, 0x5, {{0x28, 0x4, 0x3, 0x2, 0xa0, 0x67, 0x0, 0x8, 0x29, 0x0, @broadcast, @remote, {[@generic={0x7, 0xd, "b0e461cc4d97756c5e8c5b"}, @ssrr={0x89, 0xf, 0xfe, [@multicast1, @dev={0xac, 0x14, 0x14, 0x3c}, @loopback]}, @timestamp={0x44, 0x28, 0xfc, 0x0, 0x7, [0x8001, 0xfe90, 0x5, 0x91, 0x7, 0x7f4d6521, 0x2, 0x6, 0x6]}, @end, @end, @end, @lsrr={0x83, 0xb, 0x39, [@broadcast, @multicast2]}, @timestamp_addr={0x44, 0x14, 0x39, 0x1, 0x9, [{@multicast2, 0x6}, {@private=0xa010100, 0x4}]}, @timestamp={0x44, 0x20, 0x34, 0x0, 0x2, [0x3, 0xf4e, 0x8, 0x2, 0x2, 0x8, 0x4]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc01cf509, &(0x7f0000000580)={r3, 0x9, 0x5, 0xc0000}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0xd4, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x35}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20008051}, 0x4fab8740f9776bfe) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9, r5}, 0x38) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2b, 0x0, 0x0) ioctl$USBDEVFS_RESET(r4, 0x5514) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x17b, 0x4c801}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xfffffffffffffdfd, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6, 0x6, 0x7c}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0x0, 0x23, 0x3}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x23e}, @IFLA_BR_MAX_AGE={0x0, 0x3, 0x1d}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040844) 1.959843442s ago: executing program 0 (id=5624): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x24004000, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0x40, 0xfffffffc, {0xa, 0x3f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xfffff001, 0x0, 0x6}}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x3f}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000a80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000ac0)={0x6c4, r5, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x53c, 0x11d, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xbd}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd7}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xf2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4c}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x49}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa6}]}, {0x298, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x76}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x40}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x260, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6c6, 0x7fff, 0x100, 0x1, 0x7, 0x80, 0x1]}}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x1000, 0x7, 0x71, 0x100, 0x8, 0x6, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x39, 0x19, 0x36, 0x3, 0xb, 0x0, 0x3, 0xc, 0x48, 0x2, 0x0, 0xb, 0x18, 0x12, 0x1, 0x2]}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x7, 0x5}, {0x5, 0x6}, {0x1, 0x8}, {0x5, 0x6}, {0x4, 0x8}, {}, {0x5, 0x2}, {0x7, 0x4}, {0x1, 0x2}, {0x4, 0x1}, {0x0, 0x6}, {0x3, 0x3}, {0x6, 0x2}, {0x3, 0x5}, {0x4, 0x1}, {0x1, 0x6}, {0x2, 0x6}, {0x6, 0x5}, {0x4, 0x8}, {0x1, 0x2}, {0x7, 0x9}, {0x3, 0x5}, {0x7, 0x4}, {0x0, 0x2}, {0x2, 0x1}, {0x2, 0x5}, {0x6, 0x2}, {}, {0x7, 0x7}, {0x2, 0x5}, {0x0, 0x8}, {0x0, 0x4}, {0x4, 0x2}, {0x2, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0xa, 0x6, 0x6, 0x7ff, 0xf001, 0x10, 0x8000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x5df, 0x101, 0x9, 0x3, 0x7f, 0x3, 0x4]}}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x16, 0x18, 0x4, 0x48, 0x6c, 0xb, 0x48, 0x30, 0x5, 0x16, 0x9, 0xb, 0x12, 0x4, 0x24, 0x30, 0x12]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0xc, 0x1]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x48, 0x24, 0x16, 0x6, 0x60, 0xb, 0x60, 0x1b, 0x16, 0x12, 0xb, 0x1, 0x4, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x1, 0xc, 0x7, 0x9, 0x2, 0xd, 0xfffe]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x1, 0x7, 0x6, 0x80, 0x0, 0x94f3, 0xff]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x0, 0x9}, {0x7}, {0x0, 0xa}, {0x1, 0xa}]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xb, 0x16, 0x48, 0x1b, 0x60, 0x16, 0x5, 0x6, 0x6, 0x12, 0x0, 0x16, 0x9, 0x12, 0x48, 0x1b, 0x18, 0x60, 0x3, 0x3, 0x29, 0xb, 0x18, 0x5, 0x6]}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3636, 0x2, 0x40e, 0x7f, 0x6, 0x7fff, 0x8, 0xc]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xb, 0x2, 0x8, 0x9, 0xa34, 0x0, 0x5]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x6e, 0x0, 0x1b, 0xc, 0x12, 0x3, 0x24, 0x4]}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x8, 0x40, 0xfffa, 0x7f00, 0x7f, 0x9, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2ed8, 0x12, 0x0, 0x1, 0x80, 0x2e, 0xe, 0x8]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1, 0x18, 0x1b, 0x12, 0x48, 0x5, 0x1b, 0x4, 0x3, 0x36, 0x36]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x2, 0x2}, {0x4, 0x2}, {0x1}, {0x1, 0x8}, {0x4, 0x5}, {0x3, 0x1}, {0x3, 0x9}, {0x1, 0x6}, {0x2}, {}, {0x1, 0x1}, {0x4, 0x3}, {0x7, 0x2}, {0x0, 0x9}, {0x4}, {0x3, 0x2}, {0x6, 0x9}, {0x7, 0x4}, {0x4}, {0x4, 0x2}, {0x1, 0x4}, {0x2, 0x4}, {0x0, 0x7}, {0x3, 0x4}, {0x3, 0x6}, {0x4, 0x4}, {0x3, 0x4}, {0x1}, {0x5, 0x1}, {0x0, 0x4}, {0x7, 0x9}, {0x4, 0x1}, {0x6, 0x8}, {0x6}, {0x4, 0x7}, {0x1, 0x6}, {0x3, 0x5}, {0x1, 0x7}, {0x1, 0xa}, {0x5, 0x5}, {0x2, 0x5}, {0x1, 0x3}, {0x3, 0x5}, {0x5, 0x3}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xc61}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1a8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x190, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xdadc, 0x9, 0x8, 0x58f, 0x45d, 0x9, 0xff49, 0x1]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x24, 0x60, 0x18, 0x9, 0x1b, 0x48, 0x5, 0x60]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x44, 0x2, [{}, {0x7, 0xa}, {0x4, 0x1}, {0x5}, {0x5, 0x8}, {0x5, 0x8}, {0x1, 0x2}, {0x1, 0x3}, {0x4, 0xa}, {0x7, 0x1}, {0x0, 0xa}, {0x0, 0x3}, {0x0, 0xa}, {0x1}, {0x5}, {0x1, 0x3}, {0x1, 0x1}, {0x2, 0xa}, {0x2, 0x1}, {0x7, 0x9}, {0x3, 0x4}, {0x7, 0x4}, {0x5, 0x6}, {0x3, 0x6}, {0x1, 0x9}, {0x3, 0x2}, {0x6, 0x7}, {0x5, 0x7}, {0x5, 0xa}, {0x2, 0x7}, {0x1, 0x6}, {0x0, 0x8}, {0x4, 0x3}, {0x6, 0x6}, {0x1}, {0x5, 0x3}, {0x5, 0x4}, {0x5, 0x4}, {0x2, 0x9}, {0x4, 0x1}, {0x4, 0x2}, {0x6, 0x4}, {0x3, 0x1}, {0x2}, {0x6, 0x3}, {0x3, 0x9}, {0x6, 0x8}, {0x6, 0x5}, {0x3, 0x2}, {0x7, 0x9}, {0x1, 0x1}, {0x1}, {0x1, 0x4}, {0x0, 0x2}, {0x6, 0x7}, {0x4, 0x6}, {0x5, 0x7}, {0x4, 0x6}, {0x5, 0xa}, {0x6, 0x2}, {0x3, 0xa}, {0x0, 0xa}, {0x7, 0x1}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x5, 0x5}, {0x0, 0x2}, {0x2, 0x5}, {0x5, 0x5}, {0x7, 0x6}, {0x2}, {0x0, 0x2}, {0x3, 0x1}, {0x2, 0x9}, {0x4, 0x3}, {0x4, 0x9}, {0x2, 0x5}, {0x2, 0x8}, {0x6, 0x6}, {0x6, 0x9}, {0x4, 0x4}, {0x2, 0x7}, {0x2, 0x7}, {0x5, 0x4}, {0x5, 0x3}, {0x2}, {0x0, 0x5}, {0x7, 0x2}, {0x1, 0x4}, {0x0, 0x2}, {0x4, 0x5}, {0x4, 0x5}, {0x5, 0x9}, {0x5, 0xa}, {0x6, 0x1}, {0x0, 0x6}, {0x6, 0x9}, {0x1, 0x7}, {0x6, 0x9}, {0x7, 0xa}, {0x4, 0x5}, {0x3}, {0x3, 0x6}, {0x0, 0x9}, {0x4, 0x9}, {0x7}, {0x5, 0x7}, {0x6, 0x3}, {0x2, 0x8}, {0x0, 0x6}, {0x7, 0x9}, {0x4, 0x1}, {0x6, 0x8}, {0x1, 0x3}, {0x0, 0x9}, {0x1}, {0x2, 0x6}, {0x1, 0x9}, {0x5, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x18, 0x6, 0x36, 0x9, 0x2, 0x16, 0x12, 0x30, 0x12, 0xc, 0x16, 0x1, 0x3, 0x1, 0x16, 0x4, 0x24, 0x4, 0x9, 0xc, 0x1, 0x4, 0x47, 0x9, 0x60, 0x5, 0x60, 0x6c, 0x5, 0x36, 0x6c, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x1, 0xa}, {0x4, 0x6}, {0x5, 0x9}, {0x2, 0xa}, {0x2, 0x3}, {}, {0x3, 0x1}, {0x5, 0x8}, {0x4, 0x9}, {0x0, 0x2}, {0x7, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x9, 0x1, 0xfffb, 0x3ed9, 0x6e0, 0x3, 0x6]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x2, 0x6, 0x5, 0x9, 0x60, 0x6, 0x6]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3a5, 0xf, 0x7, 0x0, 0x1, 0x6, 0x645, 0xbd8e]}}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7fff, 0x0, 0xaee, 0x2, 0x2, 0x4]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x67}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x30}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x16}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffff00000001}]}]}, @NL80211_ATTR_TID_CONFIG={0x16c, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x120, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa7}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf4, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xd4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x47, 0x2, [{0x6, 0x8}, {0x4, 0x7}, {0x1, 0x5}, {0x7}, {0x4, 0x6}, {0x0, 0x1}, {0x0, 0x2}, {0x3, 0x3}, {0x2, 0x2}, {0x1, 0x9}, {0x5, 0x7}, {0x5, 0x7}, {0x1, 0x8}, {0x1, 0x3}, {0x1, 0x5}, {0x6, 0x9}, {0x3, 0x4}, {0x1, 0x1}, {0x5, 0xa}, {0x0, 0x3}, {0x6, 0x9}, {0x0, 0x3}, {0x7, 0x2}, {0x3, 0x1}, {0x3, 0x6}, {0x4, 0x2}, {0x0, 0x3}, {0x6}, {0x6, 0x1}, {0x3}, {0x5, 0x8}, {0x1, 0x5}, {0x7, 0x9}, {0x4, 0x9}, {0x0, 0x6}, {0x3, 0x6}, {0x1, 0x4}, {0x0, 0x4}, {0x6, 0x3}, {0x1, 0x3}, {0x1, 0x5}, {0x0, 0x4}, {0x6, 0x1}, {0x3, 0xa}, {0x2, 0x3}, {0x5}, {0x5, 0x9}, {0x0, 0x8}, {0x0, 0x9}, {0x5, 0x8}, {0x1, 0x2}, {0x5, 0x2}, {0x1, 0xa}, {0x3, 0x1}, {0x3, 0x5}, {0x0, 0x8}, {0x4, 0x3}, {0x1, 0x3}, {0x6, 0x9}, {0x4, 0xa}, {0x2, 0x7}, {0x0, 0x8}, {0x7, 0x8}, {0x7, 0x7}, {0x6, 0xa}, {0x5, 0x5}, {0x5, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x16, 0x2, 0x60, 0x3, 0xb, 0xac, 0x9, 0x0, 0x36, 0x6, 0x48, 0x60, 0x3, 0x5, 0x60]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x7}, {0x4, 0x4}, {0x2, 0x7}, {0x0, 0x5}, {0x4, 0x7}, {0x4, 0x6}, {0x4, 0x5}, {0x7, 0x8}, {0x4, 0x5}, {0x1, 0xa}, {0x1, 0x5}, {0x2, 0x1}, {0x3, 0x6}, {0x1, 0x7}, {0x0, 0x7}, {0x1, 0x4}, {0x3, 0x6}, {0x2, 0x6}, {0x2}, {0x4}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x60, 0x1b, 0x12, 0x30, 0x30, 0x24, 0x16, 0x16, 0x48, 0xb, 0x6, 0x12, 0x48, 0x9, 0x0, 0x30, 0x1, 0xb, 0x4, 0x5, 0x4, 0x9, 0x4, 0x16, 0x60, 0x5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0xa, 0x7, 0x8000, 0x70, 0xd696, 0xfff7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80000000}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}]}]}]}, 0x6c4}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x210183, 0x0) sendfile(r6, r6, 0x0, 0x2000fb) r7 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x1ff, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121081, 0x0) writev(r8, &(0x7f0000000080)=[{&(0x7f00000000c0)="5bffd08307d80c79b1cb7b5f0c5b4d719c69c8513f748fbe425a7bc388c9019bef114779f7a10dc03a883d6e16a0a704f74297f381ff1db75098a9b38bb67206a7ff22e6ca46dc760bdad8a79d5951988c55a368dd1132ba7f129c2e65441eaa27492c069488df0881f123ca01ae873f5b36eb0fddb8f07420f5484d81cabde167c87ffbab6a94b24b5537bb1a08d56469f516fd4b7c66e2ac50d5ff4e52c628d0a89e53d0e78582a5ab2a2c714f66", 0xfe7c}], 0x1) 1.879747079s ago: executing program 3 (id=5625): syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000118c0)=[{{&(0x7f0000000440)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000780)=[{&(0x7f00000004c0)="5d0e8567ed9389492c8679978c6af24f2a393b0c65bd860e6d9afae42f33003f9c2deee76b6c1a1ac91932e6955f1167889ba061676895641edc1c55b465c70eae055d1af59ceafc5fe37c5ce5d9c8638251886e8cc10780624337038cf7483424cdce597d338b24e2326406c83925b8a303f35c66b60e1ae2e4fd0743e94c231074260dccfd", 0x86}, {&(0x7f00000003c0)="77c70b33f78f22ed78bf820ddbe56c3c67d8865516c19fda5269f66eae35b969d38f715b946f56657e8be0f12588b1aa6c3df2e62816c35a0ec0c0", 0x3b}, {&(0x7f0000000580)="e637b5a6d385cc0f4250f9150a30424bcd14c465b5a8c637b957a216d66cc8688f9cb3fc3ed0399d5d16225d383b34b6784bf1eb6036085d9e8d8b98874f702d660d8bad3716b7fa8cb67b4239c847f34c24ae9ccaa8e6f169c00cd7e8089b70ae7c80c5cec02cea117473aa6fb044767d972030f6eb1016c7c34ae66e6558287ee6653004bda1bf75bb99ef0c9ff56fe21a618b1ca6f3ac7246a670f6f708b09d9dcfe2099d4792e3bcb2dbf621f6395b73ccaebb7302d94466821f73538da4e65e4f321d2d3072b5ab8b3897785b4b49f37ffc261055f202", 0xd9}, {&(0x7f0000000680)="f149891c96a19d04ca3d0988b9f6d66ce9ba0e63a04d49414782bc468748cd39b45db99b8081d29a24813f5310f43e24569fab9b29551fe8ceb6f8b4b977be3cc8617eca6b49d2ff177b9b78891d1ea5c210d035a9b711964705909e2a6ebe10bbd8b06e45256a0d07f56c489bffd3c2f245ee0dcd886fe9aa6c079e83fa9603b6467a9ae1677d6e2417c585cbfa62f8fe752fa30fecf8246cdc586bff9fb5aa51753e4e18bb517d4eb86e49b47ce5c9644ee1ccc6b47fbcfbdc07271c844100dd9f283e9c6993f917879843d7ab82b2d5b37e161e3898b3113c9d872e11aa9947623b110375a6b3441b856961e007e387dce8", 0xf3}], 0x4, &(0x7f0000000900)=[@cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [r1]}}, @cred={{0x18}}], 0x40, 0x2004c010}}, {{0x0, 0x0, &(0x7f000000c4c0)=[{&(0x7f000000c3c0)="5b7bad56ef56deb43710e3128feba75850b88c1df290e62a5a025f62a42a3741dffb03a79987a843a460e4d66d3f92d4b1bb8326a4485a197632457a820ae4fd130c514729d06f77fd01a8abca03a374db55822119fbdfe8bb81da608c76b001b4150ba2bafb751ece5a148ef6306380761314ad9da77310aa1ab9d66dec7c8aced4556fe5c0c867f2b64eea7a74d1854b96eeed589c30ef1b6e614386c5617fda705dcb36b1424166cabe9dec35833d83bb9a4c00e6b347f5ae85a85730abcd99af38463f333c3876fd235a9da65f193c1a36", 0xd3}], 0x1, &(0x7f000000c6c0)=[@cred={{0x18}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x18}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r2, 0xffffffffffffffff, r2, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r0]}}, @cred={{0x18}}], 0xcc, 0x40000}}, {{0x0, 0x0, &(0x7f0000010440)=[{&(0x7f00000102c0)="946e9a63290d7319058629143cd179106aabc02e7790caa1c6d1761e3b6e241246b5557578aeeb13008ad99a9ff5f10e0e3d1cc96b642ed438474a15d42dad8a5d487921e0", 0x45}, {&(0x7f0000010340)="ccb2a42f8ef49bb8f468fbbe886ac6a02794728117ebd4674028e8eaed3fef5b0ca6dadd4969d3b51f5a2850f9383c0ab5ede9a5858b49ce74e6002ddc766684091f140bcfe018fddbaf5d85508137c9ef086e0a0a7cbbf0875df81fa26a84c00298eda97128284379f17954288562fb8fd947bdeea56c3b7dbf5686d31b8227dc1379cf7a29d34479ed93de2fa1b9ef7cecbbf5399a4f6893373c851709a90e13d71e22e5fca42c17", 0xa9}], 0x2, 0x0, 0x0, 0x80}}, {{&(0x7f0000010480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000011640)=[{&(0x7f0000010580)="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", 0x1000}, {&(0x7f0000011580)="87eb53d3e71fe22b8e09547b20fa1b9dec0dfdbc9c42c9c8d282e1e932e8d7b074121ba27c76f28d1c7acbb516f2375f8373c768a688f05bb568cc89b6d2efd09ccf10ed88946a6a84f9174c18cd4425be30d98669560bbb7d10677eafb58e763961cff1eeb9ef88e069dfb6737d516564837ba1ea524a661dc2258979479bcc80384b7b0c88a9feb4affd56baeb6ae62934759c4f5fbb38f4a6731c197ad5d96b84080342e36ac7", 0xa8}], 0x2, &(0x7f00000117c0)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}], 0xec, 0x20008001}}], 0x4, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, 0x1810, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x84}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4800) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001848128008000100"], 0x38}, 0x1, 0x0, 0x0, 0x58840}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000140)={0x1, 'ip6tnl0\x00', {}, 0x7ff}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f907, 0x0, '\x00', @p_u8=&(0x7f0000000180)}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x101, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@RTM_NEWNSID={0x24, 0x58, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NETNSA_NSID={0x8}, @NETNSA_FD={0x8}]}, 0x24}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = dup(r7) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r7, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="80", 0x1}], 0x1}, 0x4048043) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r8, 0x84, 0x23, 0x0, 0x0) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, 'lo\x00'}}, 0x1e) syz_emit_ethernet(0x4e, &(0x7f00000002c0)=ANY=[@ANYRES64, @ANYRESOCT], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.697450892s ago: executing program 0 (id=5626): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) keyctl$set_reqkey_keyring(0x6, 0xfffffffffffffffd) pipe2(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00') connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x1, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x6e6bb2, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x0, 0x3}}, 0xe4) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast2, @in6=@loopback, 0x3, 0x7, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x3, 0x0, 0x80000, 0x9, 0x3}}, 0xe8) close(r4) syz_open_dev$vim2m(&(0x7f0000000200), 0x2000000f5, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x10, 0x0, @val=@iter={&(0x7f0000001a40)=@cgroup, 0x10}}, 0x40) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010725bd7000fcdbdfb303003f316e527b3320eaafaf14594c5880a94509e5e92a67b19a8d396b5bdfbaa49ba388f4b42f7edd09d51e5fdcde"], 0x14}, 0x1, 0x0, 0x0, 0x20045091}, 0x24048880) write(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) mprotect(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0xb) 1.314600202s ago: executing program 6 (id=5627): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x98, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x62, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af"}, {0x1}]}}}}}}, 0x0) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r2) socketpair(0x18, 0x0, 0x0, &(0x7f0000000000)) close(0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000002140)={0x0, 0xae, 0x3ff, 0x30315559, 0x2, [], [0x0, 0x0, 0xfffffffe, 0x4], [], [0x8000000000000000, 0x0, 0x4000]}) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000080)={0x9, 0x1, 0x3, "dbbc845dd6dbd100ecd796caa3f9f8e303660bef490daa61c2dd72c605a0d432", 0x30385056}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000240)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x9, 0x2, 0xffffffffffffff7f], 0x10}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r2, 0xc01864cd, &(0x7f0000000400)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x84], 0x4, 0x1}) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') preadv(r4, &(0x7f0000000600)=[{&(0x7f0000000380)=""/116, 0x74}], 0x1, 0x82000001, 0xff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@ipv6_deladdr={0x60, 0x15, 0x100, 0x70bd27, 0x25dfdbfd, {0xa, 0x20, 0x4, 0xff}, [@IFA_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFA_FLAGS={0x8}, @IFA_FLAGS={0x8, 0x8, 0x244}, @IFA_LOCAL={0x14, 0x2, @local}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8000}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000d80c}, 0x0) 554.693123ms ago: executing program 0 (id=5628): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r0, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x109e8, 0x805, 0x0, 0x6) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}], 0x3}, 0x2}], 0x2, 0x22, 0x0) 33.579839ms ago: executing program 3 (id=5629): creat(0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010800000000000000000100000a11000300686173683a69702c6d61726b00000000050001000700000005000500020000000900020073797a300000000005000400000000001400078008000840000000d308000b"], 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setlease(r2, 0x400, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) close(0x3) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') fcntl$setlease(r2, 0x400, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300121e07002c0012800e000100697036677265746170000000cbf80e9bea96c188feffffffffffffffffffffffffffdefe"], 0x4c}, 0x1, 0x0, 0x0, 0x14044080}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x20044885) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1f, 0x0, {0x0, 0x0, 0x74, r6, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000000000)={0x4}, 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, &(0x7f0000000100)=ANY=[@ANYBLOB="620000000000f0015b210000"], 0x8) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r8, &(0x7f00000000c0)={&(0x7f0000000180)={0xa, 0x4e21, 0x4080000, @dev={0xfe, 0x80, '\x00', 0x1a}}, 0x1c, 0x0}, 0x40c0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGWINSZ(r9, 0x5413, 0x0) 32.658533ms ago: executing program 0 (id=5639): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}], 0x3}, 0x2}], 0x2, 0x22, 0x0) 0s ago: executing program 6 (id=5630): epoll_create1(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002500)=[{{&(0x7f0000000300)=@nfc, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000380)=""/244, 0xf4}, 0x5}, {{&(0x7f0000000480)=@nfc, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000500)=""/189, 0xbd}, {&(0x7f00000005c0)=""/231, 0xe7}, {&(0x7f00000006c0)=""/227, 0xe3}, {&(0x7f00000007c0)=""/167, 0xa7}, {&(0x7f0000000880)=""/104, 0x68}, {&(0x7f0000000900)=""/15, 0xf}, {&(0x7f0000000940)=""/242, 0xf2}], 0x7}}, {{&(0x7f0000000a80)=@nfc, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000b00)=""/5, 0x5}, {&(0x7f0000000b40)=""/214, 0xd6}, {&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/30, 0x1e}, {&(0x7f0000001c80)=""/134, 0x86}], 0x5}, 0x7fffffff}, {{&(0x7f0000001d80)=@x25={0x9, @remote}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001e00)=""/8, 0x8}, {&(0x7f0000001e40)=""/66, 0x42}, {&(0x7f0000001ec0)=""/233, 0xe9}], 0x3, &(0x7f0000002000)=""/190, 0xbe}, 0xe2e3}, {{&(0x7f00000020c0)=@llc, 0x80, &(0x7f0000002380)=[{&(0x7f0000002140)=""/114, 0x72}, {&(0x7f00000021c0)=""/28, 0x1c}, {&(0x7f0000002240)=""/15, 0xf}, {&(0x7f0000002280)=""/254, 0xfe}], 0x4}, 0x7}, {{&(0x7f00000023c0)=@rc, 0x80, &(0x7f00000024c0)=[{&(0x7f0000002440)=""/68, 0x44}], 0x1}, 0x81}], 0x6, 0x2041, &(0x7f00000025c0)={0x77359400}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r2, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Mfr=1, Product=2, SerialNumber=3 [ 1532.986742][T12089] usb 2-1: Product: syz [ 1532.996570][T12089] usb 2-1: Manufacturer: syz [ 1533.008146][T12089] usb 2-1: SerialNumber: syz [ 1533.025645][T12089] usb 2-1: config 0 descriptor?? [ 1533.060349][T26519] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5242'. [ 1533.072652][T12089] dvb-usb: found a 'TeVii S662' in warm state. [ 1533.079310][T12089] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1533.079959][T18761] dvb_usb_m920x 7-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1533.133010][T12089] dvb-usb: bulk message failed: -22 (2/0) [ 1533.184250][T18761] usb 7-1: USB disconnect, device number 62 [ 1533.197909][T12089] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1533.262854][T12089] dvb-usb: TeVii S662 error while loading driver (-19) [ 1533.263668][T26522] FAULT_INJECTION: forcing a failure. [ 1533.263668][T26522] name failslab, interval 1, probability 0, space 0, times 0 [ 1533.327937][T12089] usb 2-1: USB disconnect, device number 110 [ 1533.343561][T26522] CPU: 0 UID: 0 PID: 26522 Comm: syz.6.5243 Tainted: G L syzkaller #0 PREEMPT(full) [ 1533.343587][T26522] Tainted: [L]=SOFTLOCKUP [ 1533.343594][T26522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1533.343604][T26522] Call Trace: [ 1533.343611][T26522] [ 1533.343619][T26522] dump_stack_lvl+0x189/0x250 [ 1533.343645][T26522] ? __pfx____ratelimit+0x10/0x10 [ 1533.343671][T26522] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1533.343692][T26522] ? __pfx__printk+0x10/0x10 [ 1533.343719][T26522] ? __pfx___might_resched+0x10/0x10 [ 1533.343740][T26522] ? fs_reclaim_acquire+0x7d/0x100 [ 1533.343765][T26522] should_fail_ex+0x414/0x560 [ 1533.343797][T26522] should_failslab+0xa8/0x100 [ 1533.343820][T26522] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 1533.343848][T26522] ? __alloc_skb+0x255/0x430 [ 1533.343868][T26522] ? napi_skb_cache_get+0x4a5/0x780 [ 1533.343884][T26522] ? napi_skb_cache_get+0x151/0x780 [ 1533.343907][T26522] __alloc_skb+0x255/0x430 [ 1533.343929][T26522] ? __pfx___alloc_skb+0x10/0x10 [ 1533.343949][T26522] ? inet_diag_handler_cmd+0x1e6/0x290 [ 1533.344078][T26522] ? netlink_ack_tlv_len+0x6c/0x210 [ 1533.344102][T26522] netlink_ack+0x146/0xa50 [ 1533.344120][T26522] ? sock_diag_lock_handler+0x19/0x290 [ 1533.344138][T26522] ? sock_diag_lock_handler+0x19/0x290 [ 1533.344157][T26522] ? sock_diag_rcv_msg+0x4ed/0x600 [ 1533.344177][T26522] netlink_rcv_skb+0x28c/0x470 [ 1533.344197][T26522] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 1533.344215][T26522] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1533.344244][T26522] ? netlink_deliver_tap+0x2e/0x1b0 [ 1533.344271][T26522] netlink_unicast+0x82f/0x9e0 [ 1533.344298][T26522] ? __pfx_netlink_unicast+0x10/0x10 [ 1533.344318][T26522] ? netlink_sendmsg+0x642/0xb30 [ 1533.344338][T26522] ? skb_put+0x11b/0x210 [ 1533.344365][T26522] netlink_sendmsg+0x805/0xb30 [ 1533.344393][T26522] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1533.344415][T26522] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1533.344438][T26522] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1533.344454][T26522] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1533.344474][T26522] __sock_sendmsg+0x21c/0x270 [ 1533.344499][T26522] sock_write_iter+0x279/0x360 [ 1533.344526][T26522] ? __pfx_sock_write_iter+0x10/0x10 [ 1533.344554][T26522] ? kstrtoull+0x12f/0x1d0 [ 1533.344583][T26522] do_iter_readv_writev+0x623/0x8c0 [ 1533.344607][T26522] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1533.344622][T26522] ? common_file_perm+0x1b5/0x220 [ 1533.344644][T26522] ? bpf_lsm_file_permission+0x9/0x20 [ 1533.344662][T26522] ? security_file_permission+0x75/0x290 [ 1533.344682][T26522] ? rw_verify_area+0x255/0x4d0 [ 1533.344703][T26522] vfs_writev+0x31a/0x960 [ 1533.344724][T26522] ? vfs_write+0x956/0xb30 [ 1533.344748][T26522] ? __pfx_vfs_writev+0x10/0x10 [ 1533.344784][T26522] ? __fget_files+0x2a/0x420 [ 1533.344807][T26522] ? __fget_files+0x3a0/0x420 [ 1533.344824][T26522] ? __fget_files+0x2a/0x420 [ 1533.344852][T26522] do_writev+0x14d/0x2d0 [ 1533.344872][T26522] ? __pfx_do_writev+0x10/0x10 [ 1533.344893][T26522] ? __do_fast_syscall_32+0xbe/0x590 [ 1533.344916][T26522] __do_fast_syscall_32+0x1f7/0x590 [ 1533.344933][T26522] ? rcu_is_watching+0x15/0xb0 [ 1533.344950][T26522] ? do_fast_syscall_32+0x34/0x80 [ 1533.344972][T26522] do_fast_syscall_32+0x34/0x80 [ 1533.344992][T26522] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1533.345012][T26522] RIP: 0023:0xf70ad539 [ 1533.345029][T26522] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1533.345043][T26522] RSP: 002b:00000000f549d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 1533.345062][T26522] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001200 [ 1533.345074][T26522] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1533.345085][T26522] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1533.345115][T26522] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1533.345125][T26522] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1533.345153][T26522] [ 1534.274701][T18761] usb 7-1: new full-speed USB device number 63 using dummy_hcd [ 1534.426334][T18761] usb 7-1: config 0 has an invalid interface number: 217 but max is 0 [ 1534.442010][T18761] usb 7-1: config 0 has no interface number 0 [ 1534.459324][T18761] usb 7-1: config 0 interface 217 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1534.475137][T12089] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1534.502288][T18761] usb 7-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=17.d2 [ 1534.528842][T18761] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1534.554245][T18761] usb 7-1: Product: syz [ 1534.570415][T18761] usb 7-1: Manufacturer: syz [ 1534.586273][T18761] usb 7-1: SerialNumber: syz [ 1534.609432][T18761] usb 7-1: config 0 descriptor?? [ 1534.641117][T18761] dvb-usb: found a 'TeVii S662' in warm state. [ 1534.668026][T18761] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1534.674145][T18761] dvb-usb: bulk message failed: -22 (2/0) [ 1534.734645][T12089] usb 4-1: Using ep0 maxpacket: 8 [ 1534.812983][T18761] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1534.815909][T12089] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1534.833814][T12089] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1534.872307][T12089] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1534.886360][T12089] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1534.895056][T12089] usb 4-1: Product: syz [ 1534.900130][T12089] usb 4-1: Manufacturer: syz [ 1534.907240][T12089] usb 4-1: SerialNumber: syz [ 1534.957099][T12089] usb 4-1: bad CDC descriptors [ 1534.966599][T18761] dvb-usb: TeVii S662 error while loading driver (-19) [ 1534.988624][T12089] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 1535.010123][T12089] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 1535.028093][T18761] usb 7-1: USB disconnect, device number 63 [ 1535.101032][T26553] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5249'. [ 1535.133616][T26553] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5249'. [ 1535.202440][T26537] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5245'. [ 1535.714884][ T5924] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1535.874717][ T5924] usb 7-1: Using ep0 maxpacket: 32 [ 1535.892166][ T5924] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 1535.934672][ T5924] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1535.962802][ T5924] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1535.974685][T12089] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1536.011555][ T5924] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1536.037158][ T5924] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1536.054780][ T5924] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1536.087712][ T5924] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1536.111878][ T5924] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1536.142617][ T5924] usb 7-1: config 0 descriptor?? [ 1536.148006][T12089] usb 1-1: Using ep0 maxpacket: 8 [ 1536.221366][T12089] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1536.258094][T12089] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1536.289439][T12089] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1536.384000][ T5924] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 64 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1536.430248][ T5924] usb 7-1: USB disconnect, device number 64 [ 1536.454428][ T5924] usblp0: removed [ 1536.492149][T12089] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1536.501736][T12089] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.510910][T12089] usb 1-1: Product: syz [ 1536.515439][T12089] usb 1-1: Manufacturer: syz [ 1536.520277][T12089] usb 1-1: SerialNumber: syz [ 1536.526917][T26567] loop6: detected capacity change from 0 to 7 [ 1536.547285][T26567] loop6: [ 1536.549654][T26565] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1536.559531][T26567] loop6: partition table partially beyond EOD, truncated [ 1536.710143][T26570] lo: Caught tx_queue_len zero misconfig [ 1536.894739][ T5924] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1537.054691][ T5924] usb 7-1: Using ep0 maxpacket: 32 [ 1537.077170][ T5924] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 1537.098598][ T5924] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1537.109469][ T5924] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1537.124419][ T5924] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1537.166158][ T5924] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1537.188578][ T5924] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1537.204084][ T5924] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1537.217396][ T5924] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1537.232243][ T5924] usb 7-1: config 0 descriptor?? [ 1537.279061][T12089] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 1537.295971][T12089] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 1537.306027][T12089] usbtest 1-1:1.0: probe with driver usbtest failed with error -22 [ 1537.352414][T12089] usb 4-1: USB disconnect, device number 78 [ 1537.442849][ T5924] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 65 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1537.536325][T26564] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5252'. [ 1537.579941][ T30] audit: type=1326 audit(1765989708.357:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26575 comm="syz.3.5255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1537.620326][ T30] audit: type=1326 audit(1765989708.357:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26575 comm="syz.3.5255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1537.671578][T12089] usb 7-1: USB disconnect, device number 65 [ 1537.693281][ T30] audit: type=1326 audit(1765989708.447:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26575 comm="syz.3.5255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1537.695005][T26581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5255'. [ 1537.728640][T12089] usblp0: removed [ 1537.763446][ T30] audit: type=1326 audit(1765989708.447:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26575 comm="syz.3.5255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1537.823944][ T30] audit: type=1326 audit(1765989708.447:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26575 comm="syz.3.5255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1537.898840][ T30] audit: type=1326 audit(1765989708.447:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26575 comm="syz.3.5255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1537.925076][T12838] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1537.966184][ T30] audit: type=1326 audit(1765989708.447:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26575 comm="syz.3.5255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1538.043432][ T30] audit: type=1326 audit(1765989708.447:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26575 comm="syz.3.5255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1538.096030][T12838] usb 2-1: Using ep0 maxpacket: 8 [ 1538.105443][T12838] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1538.122616][T12838] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1538.136435][ T30] audit: type=1326 audit(1765989708.447:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26575 comm="syz.3.5255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1538.205877][T12838] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1538.236583][T12838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.288654][ T30] audit: type=1326 audit(1765989708.447:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26575 comm="syz.3.5255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1538.331719][T12838] usb 2-1: Product: syz [ 1538.343880][T12838] usb 2-1: Manufacturer: syz [ 1538.370437][T12838] usb 2-1: SerialNumber: syz [ 1538.423373][T12838] usb 2-1: bad CDC descriptors [ 1538.443666][T12838] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 1538.477516][T12838] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 1540.292692][ T5924] usb 1-1: USB disconnect, device number 110 [ 1540.335641][T26610] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5263'. [ 1540.374967][T17314] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 1540.537106][T17314] usb 7-1: config 0 has an invalid interface number: 185 but max is 0 [ 1540.550399][T17314] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1540.565821][T17314] usb 7-1: config 0 has no interface number 0 [ 1540.573697][T17314] usb 7-1: config 0 interface 185 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 1540.591522][T17314] usb 7-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=d2.82 [ 1540.600984][T17314] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1540.609349][T17314] usb 7-1: Product: syz [ 1540.613693][T17314] usb 7-1: Manufacturer: syz [ 1540.618589][T17314] usb 7-1: SerialNumber: syz [ 1540.643365][T17314] usb 7-1: config 0 descriptor?? [ 1540.690490][T17314] usb 7-1: bad CDC descriptors [ 1540.699338][T17314] usb 7-1: unsupported MDLM descriptors [ 1541.104945][T18761] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 1541.347154][T18761] usb 4-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1541.376263][T18761] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1542.544781][T12089] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1542.567489][T18761] usb 4-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.40 [ 1542.579195][T18761] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1542.588351][T18761] usb 4-1: Product: Ѓ [ 1542.592445][T18761] usb 4-1: Manufacturer: è™æ¡ç²’듕쬇៣↬ꢅ싣䩦癛ﳲ윩å„蹄Ꟍ妖éœâ©ê­¦Óªë²¨æ’„淈턺⴨匙⅔緓 [ 1542.609287][T18761] usb 4-1: SerialNumber: à ¯ [ 1542.680192][ T5924] usb 2-1: USB disconnect, device number 111 [ 1542.705622][T12089] usb 1-1: Using ep0 maxpacket: 32 [ 1542.705754][T26624] FAULT_INJECTION: forcing a failure. [ 1542.705754][T26624] name failslab, interval 1, probability 0, space 0, times 0 [ 1542.712981][T12089] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1542.723605][T26624] CPU: 0 UID: 0 PID: 26624 Comm: syz.7.5268 Tainted: G L syzkaller #0 PREEMPT(full) [ 1542.723641][T26624] Tainted: [L]=SOFTLOCKUP [ 1542.723649][T26624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1542.723659][T26624] Call Trace: [ 1542.723670][T26624] [ 1542.723679][T26624] dump_stack_lvl+0x189/0x250 [ 1542.723712][T26624] ? __pfx____ratelimit+0x10/0x10 [ 1542.723740][T26624] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1542.723761][T26624] ? __pfx__printk+0x10/0x10 [ 1542.723795][T26624] should_fail_ex+0x414/0x560 [ 1542.723822][T26624] should_failslab+0xa8/0x100 [ 1542.723842][T26624] __kmalloc_cache_noprof+0x84/0x700 [ 1542.723863][T26624] ? sctp_add_bind_addr+0x8c/0x370 [ 1542.723892][T26624] sctp_add_bind_addr+0x8c/0x370 [ 1542.723919][T26624] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1542.723945][T26624] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1542.723968][T26624] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1542.723995][T26624] ? sctp_v4_is_any+0x35/0x60 [ 1542.724016][T26624] ? sctp_copy_one_addr+0x93/0x360 [ 1542.724041][T26624] sctp_bind_addr_copy+0xb3/0x3c0 [ 1542.724065][T26624] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1542.724089][T26624] sctp_connect_new_asoc+0x2e0/0x690 [ 1542.724110][T26624] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1542.724125][T26624] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1542.724152][T26624] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1542.724170][T26624] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1542.724191][T26624] sctp_sendmsg+0x155c/0x2840 [ 1542.724220][T26624] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1542.724235][T26624] ? aa_sk_perm+0x15f/0x920 [ 1542.724257][T26624] ? aa_sk_perm+0x7ee/0x920 [ 1542.724281][T26624] ? __pfx_aa_sk_perm+0x10/0x10 [ 1542.724304][T26624] ? sock_rps_record_flow+0x19/0x410 [ 1542.724329][T26624] ? inet_sendmsg+0x2f4/0x370 [ 1542.724354][T26624] __sock_sendmsg+0x19c/0x270 [ 1542.724402][T26624] ____sys_sendmsg+0x52d/0x820 [ 1542.724428][T26624] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1542.724463][T26624] ___sys_sendmsg+0x21f/0x2a0 [ 1542.724486][T26624] ? __pfx____sys_sendmsg+0x10/0x10 [ 1542.724507][T26624] ? kstrtoull+0x12f/0x1d0 [ 1542.724560][T26624] ? __fget_files+0x2a/0x420 [ 1542.724579][T26624] ? __fget_files+0x3a0/0x420 [ 1542.724609][T26624] __sys_sendmmsg+0x28e/0x430 [ 1542.724635][T26624] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1542.724664][T26624] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1542.724704][T26624] ? ksys_write+0x22a/0x250 [ 1542.724720][T26624] ? exc_page_fault+0x82/0x100 [ 1542.724737][T26624] ? __pfx_ksys_write+0x10/0x10 [ 1542.724759][T26624] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1542.724785][T26624] __do_fast_syscall_32+0x1f7/0x590 [ 1542.724805][T26624] ? rcu_is_watching+0x15/0xb0 [ 1542.724823][T26624] ? do_fast_syscall_32+0x34/0x80 [ 1542.724846][T26624] do_fast_syscall_32+0x34/0x80 [ 1542.724865][T26624] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1542.724886][T26624] RIP: 0023:0xf70dd539 [ 1542.724902][T26624] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1542.724916][T26624] RSP: 002b:00000000f54cd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 1542.724934][T26624] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800003c0 [ 1542.724946][T26624] RDX: 0000000000000002 RSI: 0000000062f461ca RDI: 0000000000000000 [ 1542.724957][T26624] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1542.724967][T26624] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1542.724977][T26624] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1542.725005][T26624] [ 1543.094698][T12089] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1543.103330][T12089] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1543.112634][T12089] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1543.124911][T12089] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1543.150422][T12089] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1543.163731][T12089] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1543.173877][T12089] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1543.184684][T12089] usb 1-1: config 0 descriptor?? [ 1543.272169][T26617] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1543.284417][ T5936] usb 7-1: USB disconnect, device number 66 [ 1543.408003][T12089] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 111 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1543.448356][T12089] usb 1-1: USB disconnect, device number 111 [ 1543.467814][T12089] usblp0: removed [ 1543.924776][T12838] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1543.955862][ T5936] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1544.038024][T26640] IPVS: length: 149 != 17667290688 [ 1544.085114][T12838] usb 1-1: Using ep0 maxpacket: 32 [ 1544.109387][T12838] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1544.119202][ T5936] usb 7-1: Using ep0 maxpacket: 16 [ 1544.131125][ T5936] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1544.146578][T12838] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1544.173262][ T5936] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1544.190318][T12838] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1544.224029][T12838] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1544.243008][ T5936] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1544.257052][T12838] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1544.275356][ T5936] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.293936][T12838] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1544.314739][ T5936] usb 7-1: Product: syz [ 1544.319084][ T5936] usb 7-1: Manufacturer: syz [ 1544.325959][ T5936] usb 7-1: SerialNumber: syz [ 1544.338316][T12838] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1544.372412][T12838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.399234][T12838] usb 1-1: config 0 descriptor?? [ 1544.568543][T26635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1544.589148][T26635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1544.643740][T12838] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 112 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1544.751020][T18761] usbhid 4-1:1.0: can't add hid device: -71 [ 1544.759862][ T5936] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1544.778224][T18761] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 1544.824000][T18761] usb 4-1: USB disconnect, device number 79 [ 1544.860363][T12838] usb 1-1: USB disconnect, device number 112 [ 1544.869574][ T5936] usb 7-1: USB disconnect, device number 67 [ 1544.885731][T12838] usblp0: removed [ 1544.958971][T17070] udevd[17070]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1544.979906][T12089] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1544.989006][T26651] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.5276'. [ 1545.164817][T12089] usb 2-1: Using ep0 maxpacket: 8 [ 1545.289093][T12089] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1545.316088][T12089] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xC7, changing to 0x87 [ 1545.333728][T12089] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 10717, setting to 1024 [ 1545.350053][T12089] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 1545.364723][T12089] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1545.656530][T26665] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5279'. [ 1545.838107][T26667] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5279'. [ 1545.994959][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.001307][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.143083][T12089] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1546.178515][T12089] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.217750][T12089] usb 2-1: Product: syz [ 1546.242759][T12089] usb 2-1: Manufacturer: syz [ 1546.262051][T12089] usb 2-1: SerialNumber: syz [ 1546.336299][T26648] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 1546.394832][T26648] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 1546.590297][T26678] bridge0: port 2(bridge_slave_1) entered disabled state [ 1546.597959][T26678] bridge0: port 1(bridge_slave_0) entered disabled state [ 1546.784844][T17314] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1546.811514][T26678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1546.843192][T26678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1546.994638][T17314] usb 4-1: Using ep0 maxpacket: 8 [ 1547.019818][T17314] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1547.038392][T17314] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1547.072318][T17314] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1547.085914][T17314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1547.099735][T17314] usb 4-1: Product: syz [ 1547.104077][T17314] usb 4-1: Manufacturer: syz [ 1547.109227][T17314] usb 4-1: SerialNumber: syz [ 1547.180689][T17314] usb 4-1: bad CDC descriptors [ 1547.202155][T17314] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 1547.209244][T17314] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 1547.265464][ T6000] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1547.319783][ T6000] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1547.336705][ T6000] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1547.346152][ T6000] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1547.660682][T26688] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1547.865016][T12089] usb 2-1: can't set config #1, error -71 [ 1548.029630][T12089] usb 2-1: USB disconnect, device number 112 [ 1548.669435][T26699] program syz.1.5287 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1549.015595][T26704] netlink: 'syz.1.5288': attribute type 13 has an invalid length. [ 1549.429760][T17314] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1549.585081][T17314] usb 7-1: Using ep0 maxpacket: 32 [ 1549.604879][T17314] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 1549.617612][T17314] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1549.634674][T17314] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1549.657160][T17314] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1549.678243][T17314] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1549.704586][T17314] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1549.727800][T17314] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1549.744586][T17314] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1549.764362][T17314] usb 7-1: config 0 descriptor?? [ 1549.844874][T12089] usb 4-1: USB disconnect, device number 80 [ 1550.027861][T17314] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 68 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1550.043211][T17314] usb 7-1: USB disconnect, device number 68 [ 1550.055321][T17314] usblp0: removed [ 1550.184793][ T5924] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1550.355021][ T5924] usb 1-1: Using ep0 maxpacket: 32 [ 1550.377894][ T5924] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1550.388176][ T5924] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1550.414565][ T5924] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1550.436514][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1550.458845][ T5924] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1550.478212][ T5924] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1550.492059][ T5924] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1550.502141][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.515671][ T5924] usb 1-1: config 0 descriptor?? [ 1550.555691][T17314] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1550.734760][T17314] usb 7-1: Using ep0 maxpacket: 32 [ 1550.745037][ T5924] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 113 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1550.766944][T17314] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 1550.777180][T17314] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1550.792856][ T5924] usb 1-1: USB disconnect, device number 113 [ 1550.799093][T17314] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1550.810937][T17314] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1550.821565][ T5924] usblp0: removed [ 1550.830683][T17314] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1550.853439][T17314] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1550.874051][T17314] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1550.885119][T17314] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.903532][T17314] usb 7-1: config 0 descriptor?? [ 1550.995044][T12089] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1551.119231][T17314] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 69 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1551.144676][T12089] usb 2-1: Using ep0 maxpacket: 8 [ 1551.155350][T12089] usb 2-1: config 1 has an invalid descriptor of length 198, skipping remainder of the config [ 1551.183354][T12089] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 52544, setting to 1024 [ 1551.205413][T12089] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1551.215510][T12089] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1551.294739][ T5924] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1551.323689][T12089] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1551.334880][T12089] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.343792][T17314] usb 7-1: USB disconnect, device number 69 [ 1551.347098][T26730] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.5297'. [ 1551.356914][T12089] usb 2-1: Product: syz [ 1551.364384][T17314] usblp0: removed [ 1551.375639][T12089] usb 2-1: Manufacturer: syz [ 1551.380276][T12089] usb 2-1: SerialNumber: syz [ 1551.405932][T26726] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1551.445906][T12089] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 1551.454889][ T5924] usb 1-1: Using ep0 maxpacket: 32 [ 1551.481380][ T5924] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1551.485676][T26731] binder: 26729:26731 ioctl c0306201 80000080 returned -14 [ 1551.491452][T12089] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 1551.503671][ T5924] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1551.513565][ T5924] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1551.522773][T12089] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 1551.531557][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1551.551249][ T5924] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1551.561130][ T5924] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1551.575627][ T5924] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1551.585107][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1551.602273][ T5924] usb 1-1: config 0 descriptor?? [ 1551.649309][T26725] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5296'. [ 1551.821629][ T5924] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 114 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1552.091373][T18761] usb 1-1: USB disconnect, device number 114 [ 1552.113490][T18761] usblp0: removed [ 1552.171524][T26742] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5301'. [ 1552.208646][T17314] usb 2-1: USB disconnect, device number 113 [ 1552.407063][T26745] binder: 26744:26745 unknown command 0 [ 1552.429411][T26745] binder: 26744:26745 ioctl c0306201 80000080 returned -22 [ 1554.356620][T26773] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5310'. [ 1554.674768][T18761] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1554.778035][T26794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5316'. [ 1554.836475][T18761] usb 2-1: Using ep0 maxpacket: 8 [ 1554.843428][T18761] usb 2-1: config 1 has an invalid descriptor of length 252, skipping remainder of the config [ 1554.853880][T18761] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 58432, setting to 1024 [ 1554.884658][T18761] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1554.904892][T18761] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1554.941779][T18761] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1554.956967][T18761] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.965112][T18761] usb 2-1: Product: syz [ 1554.969317][T18761] usb 2-1: Manufacturer: syz [ 1554.973901][T18761] usb 2-1: SerialNumber: syz [ 1554.980954][T26780] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1554.989854][T17314] usb 1-1: new full-speed USB device number 115 using dummy_hcd [ 1555.017859][T18761] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 1555.049900][T18761] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 1555.065725][T18761] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 1555.155437][T17314] usb 1-1: device descriptor read/64, error -71 [ 1555.265161][T18761] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1555.414834][T17314] usb 1-1: new full-speed USB device number 116 using dummy_hcd [ 1555.444868][T18761] usb 4-1: Using ep0 maxpacket: 8 [ 1555.454778][T26774] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5312'. [ 1555.500350][T18761] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1555.510326][T18761] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1555.524073][T18761] usb 4-1: Product: syz [ 1555.534769][T18761] usb 4-1: Manufacturer: syz [ 1555.544156][T18761] usb 4-1: SerialNumber: syz [ 1555.565209][T17314] usb 1-1: device descriptor read/64, error -71 [ 1555.589013][T18761] usb 4-1: config 0 descriptor?? [ 1555.685385][T17314] usb usb1-port1: attempt power cycle [ 1555.814468][ T5924] usb 4-1: USB disconnect, device number 81 [ 1556.044850][T18761] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1556.044924][T17314] usb 1-1: new full-speed USB device number 117 using dummy_hcd [ 1556.075951][T17314] usb 1-1: device descriptor read/8, error -71 [ 1556.206126][T18761] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1556.217561][T18761] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1556.234807][T18761] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1556.244323][T18761] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.276235][T18761] usb 7-1: config 0 descriptor?? [ 1556.324924][T17314] usb 1-1: new full-speed USB device number 118 using dummy_hcd [ 1556.367247][T17314] usb 1-1: device descriptor read/8, error -71 [ 1556.374451][T12089] usb 2-1: USB disconnect, device number 114 [ 1556.441588][T26807] FAULT_INJECTION: forcing a failure. [ 1556.441588][T26807] name failslab, interval 1, probability 0, space 0, times 0 [ 1556.455626][T26807] CPU: 1 UID: 0 PID: 26807 Comm: syz.3.5322 Tainted: G L syzkaller #0 PREEMPT(full) [ 1556.455651][T26807] Tainted: [L]=SOFTLOCKUP [ 1556.455658][T26807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1556.455667][T26807] Call Trace: [ 1556.455674][T26807] [ 1556.455682][T26807] dump_stack_lvl+0x189/0x250 [ 1556.455708][T26807] ? __pfx____ratelimit+0x10/0x10 [ 1556.455733][T26807] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1556.455753][T26807] ? __pfx__printk+0x10/0x10 [ 1556.455774][T26807] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1556.455804][T26807] should_fail_ex+0x414/0x560 [ 1556.455831][T26807] should_failslab+0xa8/0x100 [ 1556.455853][T26807] kmem_cache_alloc_noprof+0x88/0x710 [ 1556.455876][T26807] ? sk_filter_trim_cap+0x1e1/0xd60 [ 1556.455900][T26807] ? skb_clone+0x212/0x3a0 [ 1556.455920][T26807] skb_clone+0x212/0x3a0 [ 1556.455942][T26807] __netlink_deliver_tap+0x404/0x850 [ 1556.455975][T26807] ? netlink_deliver_tap+0x2e/0x1b0 [ 1556.455998][T26807] netlink_deliver_tap+0x19c/0x1b0 [ 1556.456020][T26807] netlink_dump+0x92b/0xe90 [ 1556.456052][T26807] ? __pfx_netlink_dump+0x10/0x10 [ 1556.456089][T26807] ? kmem_cache_free+0x197/0x620 [ 1556.456106][T26807] ? netlink_recvmsg+0x5b2/0xa30 [ 1556.456132][T26807] netlink_recvmsg+0x676/0xa30 [ 1556.456162][T26807] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1556.456182][T26807] ? __do_fast_syscall_32+0x1f7/0x590 [ 1556.456200][T26807] ? do_fast_syscall_32+0x34/0x80 [ 1556.456230][T26807] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1556.456252][T26807] sock_recvmsg_nosec+0x186/0x1c0 [ 1556.456280][T26807] ____sys_recvmsg+0x3aa/0x460 [ 1556.456309][T26807] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1556.456336][T26807] ? get_compat_msghdr+0x37e/0x4a0 [ 1556.456379][T26807] ___sys_recvmsg+0x1b5/0x510 [ 1556.456405][T26807] ? __pfx____sys_recvmsg+0x10/0x10 [ 1556.456450][T26807] ? __pfx_set_normalized_timespec64+0x10/0x10 [ 1556.456480][T26807] do_recvmmsg+0x36a/0x770 [ 1556.456506][T26807] ? __pfx_do_recvmmsg+0x10/0x10 [ 1556.456536][T26807] ? _copy_from_user+0x94/0xb0 [ 1556.456572][T26807] __sys_recvmmsg+0x127/0x280 [ 1556.456596][T26807] ? __pfx___sys_recvmmsg+0x10/0x10 [ 1556.456614][T26807] ? ksys_write+0x22a/0x250 [ 1556.456634][T26807] ? __pfx_ksys_write+0x10/0x10 [ 1556.456656][T26807] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 1556.456692][T26807] __do_fast_syscall_32+0x1f7/0x590 [ 1556.456712][T26807] ? rcu_is_watching+0x15/0xb0 [ 1556.456730][T26807] ? do_fast_syscall_32+0x34/0x80 [ 1556.456754][T26807] do_fast_syscall_32+0x34/0x80 [ 1556.456773][T26807] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1556.456794][T26807] RIP: 0023:0xf70ad539 [ 1556.456809][T26807] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1556.456823][T26807] RSP: 002b:00000000f549d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 1556.456842][T26807] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800037c0 [ 1556.456855][T26807] RDX: 00000000000003b4 RSI: 0000000002040000 RDI: 0000000080003700 [ 1556.456865][T26807] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1556.456874][T26807] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1556.456885][T26807] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1556.456915][T26807] [ 1556.880044][T17314] usb usb1-port1: unable to enumerate USB device [ 1557.027904][T26813] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5324'. [ 1557.069312][T26813] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5324'. [ 1557.097635][T18761] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 1557.128743][T18761] cp2112 0003:10C4:EA90.002C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 1557.304263][T18761] cp2112 0003:10C4:EA90.002C: Part Number: 0x82 Device Version: 0xFE [ 1557.927170][T18761] cp2112 0003:10C4:EA90.002C: error reading lock byte: -32 [ 1557.935876][T26805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1557.958934][T26805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1558.190180][T26805] i2c i2c-1: Invalid block write size 92 [ 1558.196944][T18761] usb 7-1: USB disconnect, device number 70 [ 1558.540421][T26836] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5328'. [ 1558.903116][T26838] random: crng reseeded on system resumption [ 1559.214012][T26846] netlink: 'syz.1.5333': attribute type 1 has an invalid length. [ 1559.222227][T18761] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1559.394689][T18761] usb 7-1: Using ep0 maxpacket: 8 [ 1559.408651][T18761] usb 7-1: config 0 has no interfaces? [ 1559.437251][T18761] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1559.466959][T18761] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1559.529679][T18761] usb 7-1: Product: syz [ 1559.555722][T18761] usb 7-1: Manufacturer: syz [ 1559.570274][T18761] usb 7-1: SerialNumber: syz [ 1559.620322][T18761] usb 7-1: config 0 descriptor?? [ 1559.786669][T26858] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5337'. [ 1559.809583][T26858] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5337'. [ 1559.945252][T12089] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1560.141867][T12089] usb 4-1: Using ep0 maxpacket: 32 [ 1560.166400][T12089] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1560.175082][T12089] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1560.183683][T12089] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1560.215536][T12089] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1560.244726][T12089] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1560.270108][T12089] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1560.320019][T12089] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1560.357873][T12089] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1560.400633][T12089] usb 4-1: config 0 descriptor?? [ 1560.487975][T26864] loop6: detected capacity change from 0 to 7 [ 1560.510718][T17070] loop6: [ 1560.516491][T17070] loop6: partition table partially beyond EOD, truncated [ 1560.560833][T26864] loop6: [ 1560.577713][T26864] loop6: partition table partially beyond EOD, truncated [ 1560.633593][T12089] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 82 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1560.655906][T26870] fuse: Unknown parameter '00000000000000000000013' [ 1560.716983][T12089] usb 4-1: USB disconnect, device number 82 [ 1560.804361][T12089] usblp0: removed [ 1560.944779][T23831] wlan0: Trigger new scan to find an IBSS to join [ 1561.174799][T12089] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1561.345068][T12089] usb 4-1: Using ep0 maxpacket: 32 [ 1561.367822][T12089] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1561.396661][T12089] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1561.426892][T12089] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1561.449081][T12089] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1561.475750][T12089] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1561.496712][T12089] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1561.524951][T12089] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1561.543882][T12089] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1561.576395][T12089] usb 4-1: config 0 descriptor?? [ 1561.804383][T12089] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 83 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1561.934159][T12089] usb 7-1: USB disconnect, device number 71 [ 1562.011830][ T5924] usb 4-1: USB disconnect, device number 83 [ 1562.084130][ T5924] usblp0: removed [ 1562.218866][T26905] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5345'. [ 1562.364920][T12089] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1562.569032][T12089] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1562.603264][T12089] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1562.680522][T12089] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1562.735923][T12089] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1562.764600][T12089] usb 7-1: Product: syz [ 1562.794874][T12089] usb 7-1: Manufacturer: syz [ 1562.819015][T12089] usb 7-1: SerialNumber: syz [ 1562.866762][T12089] rtl8150 7-1:1.0: couldn't find required endpoints [ 1562.893384][T12089] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 1563.036402][T26914] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5351'. [ 1563.085848][T26914] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5351'. [ 1563.167172][T26899] syzkaller0: entered promiscuous mode [ 1563.177070][T26899] syzkaller0: entered allmulticast mode [ 1563.227616][T12838] usb 7-1: USB disconnect, device number 72 [ 1563.807049][T26925] bond0: (slave bond_slave_0): Releasing backup interface [ 1563.907828][T26925] bond0: (slave bond_slave_1): Releasing backup interface [ 1564.064153][T26925] team0: Port device team_slave_0 removed [ 1564.113762][T26925] team0: Port device team_slave_1 removed [ 1564.124156][T26925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1564.150161][T26925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1564.176146][T26925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1564.213520][T26925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1564.306505][T26925] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1564.375653][T26927] ip6gre0: entered promiscuous mode [ 1564.408006][T26927] team0: Port device ip6gre0 added [ 1564.669032][T26938] random: crng reseeded on system resumption [ 1564.951100][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1564.951116][ T30] audit: type=1326 audit(1765989735.727:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26941 comm="syz.6.5359" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x0 [ 1565.624780][T26641] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1565.785411][T26641] usb 1-1: Using ep0 maxpacket: 32 [ 1565.807252][T26641] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1565.828755][T26641] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1565.907274][ T50] wlan0: Trigger new scan to find an IBSS to join [ 1565.976523][T26641] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1566.006292][T26641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1566.016919][T26641] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1566.027067][T26641] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1566.040643][T26641] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1566.055030][T26641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1566.076691][T26641] usb 1-1: config 0 descriptor?? [ 1566.261399][T26958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5363'. [ 1566.339194][T26641] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 119 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1566.373359][T26641] usb 1-1: USB disconnect, device number 119 [ 1566.387093][T26641] usblp0: removed [ 1566.514717][T12089] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1566.664663][T12089] usb 4-1: Using ep0 maxpacket: 32 [ 1566.673751][T12089] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1566.686841][T12089] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1566.701055][T12089] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1566.715362][T12089] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1566.731683][T12089] usb 4-1: config 0 descriptor?? [ 1566.744843][T17314] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1566.760938][T12089] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1566.805193][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1566.895940][T26641] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1566.924853][T17314] usb 2-1: Using ep0 maxpacket: 8 [ 1566.936052][T17314] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1566.962554][T26959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1566.974653][T17314] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1567.010988][T26959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1567.032111][T26959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1567.049052][T26959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1567.057034][T26641] usb 1-1: Using ep0 maxpacket: 32 [ 1567.065360][T26641] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1567.075470][T26959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1567.089450][T26641] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1567.106358][T26959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1567.114775][T26641] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1567.127022][T26959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1567.140769][T26641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1567.152380][T26959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1567.164986][T26641] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1567.176053][T26959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1567.187056][T26641] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1567.201219][T26959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1567.221151][T26641] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1567.234198][T26641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1567.258903][T26641] usb 1-1: config 0 descriptor?? [ 1567.264266][T17314] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1567.304382][T17314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1567.315057][T12089] usb 4-1: USB disconnect, device number 84 [ 1567.333182][T17314] usb 2-1: Product: syz [ 1567.358103][T17314] usb 2-1: Manufacturer: syz [ 1567.368228][T17314] usb 2-1: SerialNumber: syz [ 1567.432864][T17314] usb 2-1: bad CDC descriptors [ 1567.456365][T17314] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 1567.484716][T17314] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 1567.534126][T26641] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 120 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1567.681866][T26963] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5364'. [ 1567.775994][T26641] usb 1-1: USB disconnect, device number 120 [ 1567.802636][T26641] usblp0: removed [ 1567.907170][T26981] netlink: 'syz.6.5367': attribute type 13 has an invalid length. [ 1568.370265][T26992] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5373'. [ 1568.403818][T26992] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5373'. [ 1571.129945][T27010] random: crng reseeded on system resumption [ 1571.215016][T26641] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1571.378282][T26641] usb 7-1: Using ep0 maxpacket: 16 [ 1571.386291][T26641] usb 7-1: config 252 has an invalid interface number: 15 but max is 0 [ 1571.403639][T26641] usb 7-1: config 252 has no interface number 0 [ 1571.410265][T12838] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1571.431023][T26641] usb 7-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 1571.446354][T26641] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 1571.456011][T26641] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.464077][T26641] usb 7-1: Product: syz [ 1571.469179][T26641] usb 7-1: Manufacturer: syz [ 1571.473844][T26641] usb 7-1: SerialNumber: syz [ 1571.514964][T26641] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1571.574980][T12838] usb 4-1: Using ep0 maxpacket: 8 [ 1571.582988][T12838] usb 4-1: config 0 has no interfaces? [ 1571.605328][T12838] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1571.615834][T12838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1571.623936][T12838] usb 4-1: Product: syz [ 1571.628748][T12838] usb 4-1: Manufacturer: syz [ 1571.633348][T12838] usb 4-1: SerialNumber: syz [ 1571.640217][T12838] usb 4-1: config 0 descriptor?? [ 1571.653562][T12838] usb 2-1: USB disconnect, device number 115 [ 1572.548515][ T50] usb 7-1: Failed to submit usb control message: -110 [ 1572.565015][ T50] usb 7-1: unable to send the bmi data to the device: -110 [ 1572.572444][ T50] usb 7-1: unable to get target info from device [ 1572.585294][ T50] usb 7-1: could not get target info (-110) [ 1572.591541][ T50] usb 7-1: could not probe fw (-110) [ 1572.929463][T27018] fuse: Unknown parameter '00000000000000000000013' [ 1573.279427][T27027] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.5382'. [ 1573.974143][T12838] usb 7-1: USB disconnect, device number 73 [ 1574.186068][T18761] usb 4-1: USB disconnect, device number 85 [ 1574.613606][T27044] netlink: 'syz.1.5388': attribute type 13 has an invalid length. [ 1575.091468][T27041] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5387'. [ 1575.384632][ T5924] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1575.554916][ T5924] usb 7-1: Using ep0 maxpacket: 32 [ 1575.579677][ T5924] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 1575.589402][ T5924] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1575.647698][ T5924] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1575.690803][ T5924] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1575.717491][ T5924] usb 7-1: config 1 has no interface number 0 [ 1575.732564][ T5924] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1575.756103][ T5924] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1575.795185][ T5924] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 1575.993992][T27041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1576.035037][T27041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1576.080921][ T5924] snd_usb_pod 7-1:1.1: set_interface failed [ 1576.128898][ T5924] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 1576.151003][ T5924] snd_usb_pod 7-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 1576.192303][ T5924] usb 7-1: USB disconnect, device number 74 [ 1576.278795][T27069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1576.302658][T27069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1576.331493][T27069] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 1576.354690][T12089] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1576.373708][T27069] batman_adv: batadv0: Removing interface: ipvlan2 [ 1576.707412][T12089] usb 4-1: Using ep0 maxpacket: 8 [ 1576.747663][T12089] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1576.769460][T12089] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1577.231491][T12089] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1577.282071][T12089] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.302445][T12089] usb 4-1: Product: syz [ 1577.330824][T12089] usb 4-1: Manufacturer: syz [ 1577.348012][T12089] usb 4-1: SerialNumber: syz [ 1577.353429][T27083] random: crng reseeded on system resumption [ 1577.516067][T12089] usb 4-1: bad CDC descriptors [ 1577.522916][T12089] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 1577.554238][T12089] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 1577.665187][T12838] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1577.864909][T12838] usb 1-1: Using ep0 maxpacket: 8 [ 1577.884151][T12838] usb 1-1: config 0 has no interfaces? [ 1577.921738][T12838] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1577.956305][T12838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1577.966283][T18761] usb 2-1: new full-speed USB device number 116 using dummy_hcd [ 1578.000333][T12838] usb 1-1: Product: syz [ 1578.013580][T12838] usb 1-1: Manufacturer: syz [ 1578.022282][T12838] usb 1-1: SerialNumber: syz [ 1578.076319][T12838] usb 1-1: config 0 descriptor?? [ 1578.124836][T18761] usb 2-1: device descriptor read/64, error -71 [ 1578.137656][T27100] Invalid logical block size (33423360) [ 1578.205972][T27070] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5394'. [ 1578.222108][T27102] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5404'. [ 1578.305622][T12838] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 1578.374918][T18761] usb 2-1: new full-speed USB device number 117 using dummy_hcd [ 1578.474934][T12838] usb 7-1: Using ep0 maxpacket: 8 [ 1578.482022][T12838] usb 7-1: config 1 has an invalid descriptor of length 79, skipping remainder of the config [ 1578.492844][T12838] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 32320, setting to 1024 [ 1578.504283][T12838] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1578.514709][T18761] usb 2-1: device descriptor read/64, error -71 [ 1578.522542][T12838] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1578.537746][T12838] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1578.546971][T12838] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1578.555090][T12838] usb 7-1: Product: syz [ 1578.559349][T12838] usb 7-1: Manufacturer: syz [ 1578.563943][T12838] usb 7-1: SerialNumber: syz [ 1578.576478][T27097] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 1578.589708][T12838] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1578.598970][T12838] usbtest 7-1:1.0: couldn't get endpoints, -22 [ 1578.605341][T12838] usbtest 7-1:1.0: probe with driver usbtest failed with error -22 [ 1578.645024][T18761] usb usb2-port1: attempt power cycle [ 1578.795760][T27094] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5401'. [ 1578.984641][T18761] usb 2-1: new full-speed USB device number 118 using dummy_hcd [ 1579.005537][T18761] usb 2-1: device descriptor read/8, error -71 [ 1579.244636][T18761] usb 2-1: new full-speed USB device number 119 using dummy_hcd [ 1579.267707][T18761] usb 2-1: device descriptor read/8, error -71 [ 1579.286677][T12838] usb 4-1: USB disconnect, device number 86 [ 1579.384988][T18761] usb usb2-port1: unable to enumerate USB device [ 1580.331238][T12089] usb 1-1: USB disconnect, device number 121 [ 1580.870810][T27124] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5409'. [ 1580.979871][T12838] usb 7-1: USB disconnect, device number 75 [ 1581.181513][T27128] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5411'. [ 1581.409338][T27126] netlink: 'syz.1.5410': attribute type 13 has an invalid length. [ 1582.234626][T17314] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1582.369335][T27151] random: crng reseeded on system resumption [ 1582.384866][T17314] usb 1-1: Using ep0 maxpacket: 8 [ 1582.396827][T17314] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1582.423790][T17314] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1582.474670][T17314] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1582.485147][T17314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.493361][T17314] usb 1-1: Product: syz [ 1582.500472][T17314] usb 1-1: Manufacturer: syz [ 1582.511842][T17314] usb 1-1: SerialNumber: syz [ 1582.550584][T17314] usb 1-1: bad CDC descriptors [ 1582.566621][T17314] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 1582.575657][T17314] usbtest 1-1:1.0: probe with driver usbtest failed with error -22 [ 1582.764140][T27143] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5416'. [ 1583.419273][T27155] loop6: detected capacity change from 0 to 7 [ 1583.428279][T27155] loop6: [ 1583.431426][T27155] loop6: partition table partially beyond EOD, truncated [ 1583.578292][T27161] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.5421'. [ 1583.656681][T27162] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5420'. [ 1586.050915][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1586.063809][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1586.073322][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1586.091736][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1586.102010][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1586.284104][T27198] loop6: detected capacity change from 0 to 7 [ 1586.292376][T17070] loop6: [ 1586.324960][T17070] loop6: partition table partially beyond EOD, truncated [ 1586.355369][T27198] loop6: [ 1586.361935][T27198] loop6: partition table partially beyond EOD, truncated [ 1586.382384][ T5200] loop6: [ 1586.395449][ T5200] loop6: partition table partially beyond EOD, truncated [ 1586.417834][T26641] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 1586.600629][T27206] FAULT_INJECTION: forcing a failure. [ 1586.600629][T27206] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1586.630404][T27206] CPU: 0 UID: 0 PID: 27206 Comm: syz.3.5433 Tainted: G L syzkaller #0 PREEMPT(full) [ 1586.630433][T27206] Tainted: [L]=SOFTLOCKUP [ 1586.630440][T27206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1586.630450][T27206] Call Trace: [ 1586.630458][T27206] [ 1586.630467][T27206] dump_stack_lvl+0x189/0x250 [ 1586.630496][T27206] ? __pfx____ratelimit+0x10/0x10 [ 1586.630520][T27206] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1586.630537][T27206] ? __pfx__printk+0x10/0x10 [ 1586.630560][T27206] ? __might_fault+0xb0/0x130 [ 1586.630593][T27206] should_fail_ex+0x414/0x560 [ 1586.630622][T27206] _copy_from_user+0x2d/0xb0 [ 1586.630643][T27206] get_compat_msghdr+0xad/0x4a0 [ 1586.630664][T27206] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1586.630678][T27206] ? rcu_is_watching+0x15/0xb0 [ 1586.630691][T27206] ? ___sys_recvmsg+0x1c4/0x510 [ 1586.630708][T27206] ___sys_recvmsg+0x17f/0x510 [ 1586.630722][T27206] ? __pfx____sys_recvmsg+0x10/0x10 [ 1586.630746][T27206] ? __fget_files+0x3a0/0x420 [ 1586.630764][T27206] do_recvmmsg+0x36a/0x770 [ 1586.630780][T27206] ? __pfx_do_recvmmsg+0x10/0x10 [ 1586.630797][T27206] ? __pfx_vfs_write+0x10/0x10 [ 1586.630815][T27206] __sys_recvmmsg+0x19d/0x280 [ 1586.630828][T27206] ? __pfx___sys_recvmmsg+0x10/0x10 [ 1586.630839][T27206] ? ksys_write+0x22a/0x250 [ 1586.630849][T27206] ? __pfx_ksys_write+0x10/0x10 [ 1586.630861][T27206] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 1586.630876][T27206] __do_fast_syscall_32+0x1f7/0x590 [ 1586.630888][T27206] ? rcu_is_watching+0x15/0xb0 [ 1586.630898][T27206] ? do_fast_syscall_32+0x34/0x80 [ 1586.630911][T27206] do_fast_syscall_32+0x34/0x80 [ 1586.630922][T27206] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1586.630935][T27206] RIP: 0023:0xf70ad539 [ 1586.630945][T27206] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1586.630953][T27206] RSP: 002b:00000000f547c55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 1586.630965][T27206] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000340 [ 1586.630972][T27206] RDX: 00000000000003d5 RSI: 000000002e4b38ff RDI: 0000000000000000 [ 1586.630979][T27206] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1586.630985][T27206] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1586.630991][T27206] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1586.631006][T27206] [ 1586.906148][T26641] usb 7-1: Using ep0 maxpacket: 32 [ 1586.930385][T26641] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 1586.939979][T26641] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1586.973975][T26641] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1586.983137][T26641] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1586.993111][T26641] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1587.013308][T26641] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1587.034733][T26641] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1587.044022][T26641] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.057171][T26641] usb 7-1: config 0 descriptor?? [ 1587.153175][T27196] chnl_net:caif_netlink_parms(): no params data found [ 1587.273733][T26641] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 76 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1587.344547][T26641] usb 7-1: USB disconnect, device number 76 [ 1587.384364][T26641] usblp0: removed [ 1587.529647][T27196] bridge0: port 1(bridge_slave_0) entered blocking state [ 1587.545260][T27196] bridge0: port 1(bridge_slave_0) entered disabled state [ 1587.552711][T27196] bridge_slave_0: entered allmulticast mode [ 1587.562752][T27196] bridge_slave_0: entered promiscuous mode [ 1587.580098][T27196] bridge0: port 2(bridge_slave_1) entered blocking state [ 1587.587835][T27196] bridge0: port 2(bridge_slave_1) entered disabled state [ 1587.597607][T27196] bridge_slave_1: entered allmulticast mode [ 1587.605707][T27196] bridge_slave_1: entered promiscuous mode [ 1587.641015][T27196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1587.653256][T27196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1587.714852][T27196] team0: Port device team_slave_0 added [ 1587.726021][T27196] team0: Port device team_slave_1 added [ 1587.780294][T27196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1587.796587][T27196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1587.824943][T26641] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 1587.845096][T27196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1587.867337][T27196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1587.874316][T27196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1587.918432][T27196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1587.966686][T27196] hsr_slave_0: entered promiscuous mode [ 1587.973103][T27196] hsr_slave_1: entered promiscuous mode [ 1587.979843][T27196] debugfs: 'hsr0' already exists in 'hsr' [ 1587.987586][T27196] Cannot create hsr debugfs directory [ 1588.074737][T26641] usb 7-1: Using ep0 maxpacket: 32 [ 1588.081994][T26641] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 1588.122642][T26641] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1588.145743][ T5842] Bluetooth: hci3: command tx timeout [ 1588.173444][T26641] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1588.203190][T26641] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1588.233680][T26641] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1588.274589][T26641] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1588.295992][T26641] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1588.320581][T26641] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1588.376993][T26641] usb 7-1: config 0 descriptor?? [ 1588.405948][T18761] usb 1-1: USB disconnect, device number 122 [ 1588.421861][T27196] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.597472][T27229] random: crng reseeded on system resumption [ 1588.614307][T26641] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 77 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1588.699197][T27196] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.811827][T17314] usb 7-1: USB disconnect, device number 77 [ 1588.847723][T17314] usblp0: removed [ 1588.879331][T27196] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.904815][ T5924] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1588.924216][T27237] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5437'. [ 1589.018890][T27196] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.094825][ T5924] usb 1-1: Using ep0 maxpacket: 8 [ 1589.107460][ T5924] usb 1-1: config 0 has no interfaces? [ 1589.125087][ T5924] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1589.136674][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1589.152590][ T5924] usb 1-1: Product: syz [ 1589.161746][ T5924] usb 1-1: Manufacturer: syz [ 1589.166673][ T5924] usb 1-1: SerialNumber: syz [ 1589.209693][ T5924] usb 1-1: config 0 descriptor?? [ 1589.482495][T27196] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1589.538666][T27196] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1589.572349][T27196] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1589.613534][T27196] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1589.671282][T27242] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5440'. [ 1589.744265][T27242] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5440'. [ 1589.956974][T27196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1589.983603][T27196] 8021q: adding VLAN 0 to HW filter on device team0 [ 1589.999788][T22843] bridge0: port 1(bridge_slave_0) entered blocking state [ 1590.006973][T22843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1590.052190][T26248] bridge0: port 2(bridge_slave_1) entered blocking state [ 1590.059395][T26248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1590.210411][T27196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1590.225484][ T5842] Bluetooth: hci3: command tx timeout [ 1590.318502][T27196] veth0_vlan: entered promiscuous mode [ 1590.344452][T27259] loop6: detected capacity change from 0 to 7 [ 1590.363200][T27196] veth1_vlan: entered promiscuous mode [ 1590.372982][T27259] loop6: [ 1590.378027][T27259] loop6: partition table partially beyond EOD, truncated [ 1590.491553][T27196] veth0_macvtap: entered promiscuous mode [ 1590.559212][T27196] veth1_macvtap: entered promiscuous mode [ 1590.635189][T27196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1590.661964][T27196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1590.688463][ T50] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1590.714214][ T50] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1590.762355][ T50] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1590.772548][ T50] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1590.869545][T26243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1590.894922][T26243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1590.982695][T26243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1590.995292][T26243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1591.637657][T12089] usb 1-1: USB disconnect, device number 123 [ 1592.189654][T27295] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5449'. [ 1592.305250][ T5842] Bluetooth: hci3: command tx timeout [ 1592.833443][T27307] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5451'. [ 1592.938339][ T5924] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1593.134755][ T5924] usb 2-1: Using ep0 maxpacket: 8 [ 1593.165363][ T5924] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1593.184317][T27309] loop6: detected capacity change from 0 to 7 [ 1593.222012][T27309] loop6: [ 1593.227501][ T5924] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1593.247836][T27309] loop6: partition table partially beyond EOD, truncated [ 1593.321854][ T5924] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1593.394055][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.484182][ T5924] usb 2-1: Product: syz [ 1593.520545][ T5924] usb 2-1: Manufacturer: syz [ 1593.554293][ T5924] usb 2-1: SerialNumber: syz [ 1593.616723][ T5924] usb 2-1: bad CDC descriptors [ 1593.646443][ T5924] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 1593.686621][ T5924] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 1593.846592][T27302] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5450'. [ 1593.887984][T26641] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1593.944113][T27314] loop6: detected capacity change from 0 to 7 [ 1593.954463][T27314] loop6: [ 1593.958721][T27314] loop6: partition table partially beyond EOD, truncated [ 1594.114766][T26641] usb 4-1: Using ep0 maxpacket: 32 [ 1594.121837][T26641] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1594.133182][T26641] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1594.149014][T26641] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1594.159065][T26641] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1594.180101][T26641] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1594.197327][T27319] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5454'. [ 1594.211088][T26641] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1594.250933][T27319] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5454'. [ 1594.264700][T26641] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1594.282792][T26641] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.299309][T26641] usb 4-1: config 0 descriptor?? [ 1594.396348][ T5842] Bluetooth: hci3: command tx timeout [ 1594.575386][T26641] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 87 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1594.631468][T27325] random: crng reseeded on system resumption [ 1594.678393][T26641] usb 4-1: USB disconnect, device number 87 [ 1594.748772][T26641] usblp0: removed [ 1594.914932][ T5924] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1595.105102][ T5924] usb 1-1: Using ep0 maxpacket: 8 [ 1595.111592][ T5924] usb 1-1: config 0 has no interfaces? [ 1595.123722][ T5924] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1595.143589][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1595.154700][T26641] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1595.178694][ T5924] usb 1-1: Product: syz [ 1595.187282][ T5924] usb 1-1: Manufacturer: syz [ 1595.198191][ T5924] usb 1-1: SerialNumber: syz [ 1595.213278][ T5924] usb 1-1: config 0 descriptor?? [ 1595.334750][T26641] usb 4-1: Using ep0 maxpacket: 32 [ 1595.342597][T26641] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1595.352278][T26641] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1595.363416][T26641] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1595.374091][T26641] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1595.387997][T26641] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1595.398419][T26641] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1595.428431][T26641] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1595.448927][T26641] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1595.475214][T26641] usb 4-1: config 0 descriptor?? [ 1595.689902][T26641] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 88 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1595.913469][T17314] usb 4-1: USB disconnect, device number 88 [ 1595.931573][T17314] usblp0: removed [ 1596.245597][T27341] fuse: Unknown parameter '01777777777777777777777' [ 1596.505886][T27344] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5463'. [ 1596.857083][T27352] tipc: Enabled bearer , priority 0 [ 1596.893199][T27352] tipc: Disabling bearer [ 1596.993071][T27355] loop6: detected capacity change from 0 to 7 [ 1597.007664][T17070] loop6: [ 1597.010634][T17070] loop6: partition table partially beyond EOD, truncated [ 1597.030169][T27355] loop6: [ 1597.035165][T27355] loop6: partition table partially beyond EOD, truncated [ 1597.063548][ T7446] usb 2-1: USB disconnect, device number 120 [ 1597.191642][T27360] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5469'. [ 1597.363438][T27368] netlink: 'syz.1.5471': attribute type 7 has an invalid length. [ 1597.388337][T27368] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5471'. [ 1597.401269][T27368] lo: Caught tx_queue_len zero misconfig [ 1597.568947][T27369] input: syz0 as /devices/virtual/input/input89 [ 1597.756486][T26641] usb 1-1: USB disconnect, device number 124 [ 1598.443851][T27391] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5475'. [ 1598.851129][T27394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5476'. [ 1599.007196][T27394] syz_tun: entered promiscuous mode [ 1599.066895][T27394] macvtap1: entered promiscuous mode [ 1599.109241][T27394] macvtap1: entered allmulticast mode [ 1599.116109][T11638] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1599.158754][T27394] syz_tun: entered allmulticast mode [ 1599.199606][T27396] syz_tun: left allmulticast mode [ 1599.223132][T27396] syz_tun: left promiscuous mode [ 1599.878886][T27411] loop6: detected capacity change from 0 to 7 [ 1599.894480][T27411] loop6: [ 1599.904042][T27411] loop6: partition table partially beyond EOD, truncated [ 1600.437782][T27423] random: crng reseeded on system resumption [ 1600.504623][ T5924] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1600.543009][ T30] audit: type=1326 audit(1765989771.297:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27415 comm="syz.6.5482" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1600.566317][ T30] audit: type=1326 audit(1765989771.297:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27415 comm="syz.6.5482" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1600.593608][ T30] audit: type=1326 audit(1765989771.307:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27415 comm="syz.6.5482" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1600.644068][ T30] audit: type=1326 audit(1765989771.307:2469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27415 comm="syz.6.5482" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1600.676464][ T5924] usb 1-1: Using ep0 maxpacket: 8 [ 1600.676556][ T30] audit: type=1326 audit(1765989771.307:2470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27415 comm="syz.6.5482" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1600.744755][ T5924] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1600.780631][ T5924] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1600.827887][ T5924] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1600.851779][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.875916][ T5924] usb 1-1: Product: syz [ 1600.884729][ T5924] usb 1-1: Manufacturer: syz [ 1600.897228][ T5924] usb 1-1: SerialNumber: syz [ 1600.924317][ T5924] usb 1-1: bad CDC descriptors [ 1600.956026][ T5924] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 1600.984662][ T5924] usbtest 1-1:1.0: probe with driver usbtest failed with error -22 [ 1601.065946][T18761] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1601.138521][T27417] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5481'. [ 1601.265187][T18761] usb 2-1: Using ep0 maxpacket: 32 [ 1601.277449][T18761] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1601.289931][T18761] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1601.311689][T18761] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1601.334935][T18761] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1601.355028][T18761] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1601.381800][T18761] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1601.419449][T18761] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1601.454893][T18761] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1601.508942][T18761] usb 2-1: config 0 descriptor?? [ 1601.767664][T18761] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 121 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1601.821999][T18761] usb 2-1: USB disconnect, device number 121 [ 1601.856759][T18761] usblp0: removed [ 1602.374784][T18761] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1602.549844][T27440] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5488'. [ 1602.554772][T18761] usb 2-1: Using ep0 maxpacket: 32 [ 1602.571174][T18761] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1602.586427][T27440] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5488'. [ 1602.590326][T18761] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1602.624275][T27441] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5489'. [ 1602.633858][T18761] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1602.633916][T18761] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1602.633937][T18761] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1602.633959][T18761] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1602.726560][T18761] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1602.747932][T18761] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1602.768879][T18761] usb 2-1: config 0 descriptor?? [ 1602.991232][T18761] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 122 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1603.308963][T18761] usb 2-1: USB disconnect, device number 122 [ 1603.322702][T18761] usblp0: removed [ 1603.487678][T27447] mac80211_hwsim hwsim38 ..ãc¤±: renamed from wlan1 (while UP) [ 1603.516960][T27447] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5490'. [ 1603.790589][T27451] loop6: detected capacity change from 0 to 7 [ 1603.797584][T27451] loop6: [ 1603.800567][T27451] loop6: partition table partially beyond EOD, truncated [ 1604.324617][T12089] usb 2-1: new full-speed USB device number 123 using dummy_hcd [ 1604.484701][T12089] usb 2-1: too many configurations: 180, using maximum allowed: 8 [ 1604.535486][T12089] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1604.543128][T12089] usb 2-1: can't read configurations, error -61 [ 1604.699495][T12089] usb 2-1: new full-speed USB device number 124 using dummy_hcd [ 1604.877000][T12089] usb 2-1: too many configurations: 180, using maximum allowed: 8 [ 1604.891407][T12089] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1604.909658][T12089] usb 2-1: can't read configurations, error -61 [ 1604.926655][T12089] usb usb2-port1: attempt power cycle [ 1605.128100][ T5924] usb 1-1: USB disconnect, device number 125 [ 1605.294816][T12089] usb 2-1: new full-speed USB device number 125 using dummy_hcd [ 1605.326361][T12089] usb 2-1: too many configurations: 180, using maximum allowed: 8 [ 1605.358461][T12089] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1605.379337][T12089] usb 2-1: can't read configurations, error -61 [ 1605.524769][T12089] usb 2-1: new full-speed USB device number 126 using dummy_hcd [ 1605.612441][T12089] usb 2-1: too many configurations: 180, using maximum allowed: 8 [ 1605.636764][T27477] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5509'. [ 1605.662327][T12089] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1605.717794][T12089] usb 2-1: can't read configurations, error -61 [ 1605.854765][T12089] usb usb2-port1: unable to enumerate USB device [ 1606.358135][ T30] audit: type=1326 audit(1765989777.137:2471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27486 comm="syz.3.5501" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1606.367257][T27490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5501'. [ 1606.542335][ T30] audit: type=1326 audit(1765989777.137:2472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27486 comm="syz.3.5501" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1606.689250][ T30] audit: type=1326 audit(1765989777.137:2473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27486 comm="syz.3.5501" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1606.799165][ T30] audit: type=1326 audit(1765989777.137:2474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27486 comm="syz.3.5501" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1606.873286][ T30] audit: type=1326 audit(1765989777.137:2475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27486 comm="syz.3.5501" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1606.895698][ T30] audit: type=1326 audit(1765989777.137:2476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27486 comm="syz.3.5501" exe="/root/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1606.917866][ T30] audit: type=1326 audit(1765989777.137:2477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27486 comm="syz.3.5501" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1606.946558][ T30] audit: type=1326 audit(1765989777.137:2478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27486 comm="syz.3.5501" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1606.970083][ T30] audit: type=1326 audit(1765989777.137:2479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27486 comm="syz.3.5501" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1606.992283][ T30] audit: type=1326 audit(1765989777.137:2480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27486 comm="syz.3.5501" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1607.455310][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.462322][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.674999][T27498] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5502'. [ 1608.052322][T27511] random: crng reseeded on system resumption [ 1608.240110][T27513] netlink: 'syz.0.5503': attribute type 13 has an invalid length. [ 1608.995045][T12089] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1609.205402][T12089] usb 4-1: Using ep0 maxpacket: 8 [ 1609.229408][T12089] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1609.254041][T12089] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1609.284889][T12089] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1609.355535][T12089] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1609.368596][T12089] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.388096][T12089] usb 4-1: Product: syz [ 1609.399963][T12089] usb 4-1: Manufacturer: syz [ 1609.410127][T12089] usb 4-1: SerialNumber: syz [ 1609.439176][T27521] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1609.461069][T12089] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 1609.480201][T12089] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 1609.492024][T12089] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 1609.825630][T27521] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5505'. [ 1609.966916][T27525] netlink: 'syz.1.5506': attribute type 13 has an invalid length. [ 1611.020733][T27531] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5507'. [ 1611.044078][T27531] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5507'. [ 1611.331204][T27539] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5508'. [ 1611.480713][T27544] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5512'. [ 1611.579906][T17314] usb 4-1: USB disconnect, device number 89 [ 1611.982272][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 1611.982289][ T30] audit: type=1326 audit(1765989782.757:2503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27549 comm="syz.6.5514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1612.053285][T27557] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1612.070260][T27556] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5514'. [ 1612.087955][ T30] audit: type=1326 audit(1765989782.787:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27549 comm="syz.6.5514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1612.148282][T27560] ip6gre0: entered promiscuous mode [ 1612.160218][ T30] audit: type=1326 audit(1765989782.787:2505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27549 comm="syz.6.5514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1612.258475][ T30] audit: type=1326 audit(1765989782.787:2506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27549 comm="syz.6.5514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1612.366438][ T30] audit: type=1326 audit(1765989782.787:2507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27549 comm="syz.6.5514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1612.534751][ T30] audit: type=1326 audit(1765989782.787:2508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27549 comm="syz.6.5514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1612.682538][ T30] audit: type=1326 audit(1765989782.787:2509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27549 comm="syz.6.5514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1612.820599][ T30] audit: type=1326 audit(1765989782.787:2510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27549 comm="syz.6.5514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1612.981931][ T30] audit: type=1326 audit(1765989782.787:2511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27549 comm="syz.6.5514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1613.097623][ T30] audit: type=1326 audit(1765989782.797:2512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27549 comm="syz.6.5514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1613.540573][T27575] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5527'. [ 1613.598082][T27576] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5517'. [ 1615.527492][T27606] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5525'. [ 1615.640894][T27606] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5525'. [ 1615.886802][ T5926] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1616.084704][ T5926] usb 4-1: Using ep0 maxpacket: 8 [ 1616.150904][ T5926] usb 4-1: config 1 has an invalid descriptor of length 245, skipping remainder of the config [ 1616.209894][ T5926] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 65344, setting to 1024 [ 1616.250206][ T5926] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1616.301199][ T5926] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1616.479284][ T5926] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1616.504935][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1616.604652][ T5926] usb 4-1: Product: syz [ 1616.634597][ T5926] usb 4-1: Manufacturer: syz [ 1616.652956][ T5926] usb 4-1: SerialNumber: syz [ 1616.703748][T27615] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5528'. [ 1616.760889][T27611] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1616.844602][ T5926] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 1616.887243][ T5926] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 1616.904945][ T5926] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 1617.065280][T26641] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1617.135777][T27611] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5526'. [ 1617.225151][T26641] usb 1-1: Using ep0 maxpacket: 32 [ 1617.241830][T26641] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1617.279993][T26641] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1617.308306][T26641] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1617.352515][T26641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1617.392339][T26641] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1617.438601][T26641] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1617.497817][T26641] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1617.541116][T26641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1617.586375][T26641] usb 1-1: config 0 descriptor?? [ 1617.835158][T26641] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 126 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1617.915230][T26641] usb 1-1: USB disconnect, device number 126 [ 1617.945193][T26641] usblp0: removed [ 1618.334727][T26641] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1618.535965][T26641] usb 1-1: Using ep0 maxpacket: 32 [ 1618.589064][T26641] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1618.598509][T26641] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1618.608748][T26641] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1618.618126][T26641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1618.633538][T26641] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1618.655396][T26641] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1618.669646][T26641] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1618.679093][T26641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1618.700809][T26641] usb 1-1: config 0 descriptor?? [ 1618.742085][T27275] usb 4-1: USB disconnect, device number 90 [ 1619.870626][T26641] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 127 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1619.934307][T26641] usb 1-1: USB disconnect, device number 127 [ 1619.984234][T26641] usblp0: removed [ 1619.993583][T27651] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5536'. [ 1620.374884][ T5926] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 1620.554707][ T5926] usb 7-1: Using ep0 maxpacket: 8 [ 1620.596323][ T5926] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1620.650735][ T5926] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1620.699694][T27659] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5541'. [ 1620.728026][ T5926] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1620.754926][ T5926] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1620.793837][ T5926] usb 7-1: Product: syz [ 1620.817587][ T5926] usb 7-1: Manufacturer: syz [ 1620.837721][ T5926] usb 7-1: SerialNumber: syz [ 1620.920034][ T5926] usb 7-1: bad CDC descriptors [ 1620.976886][ T5926] usbtest 7-1:1.0: couldn't get endpoints, -22 [ 1621.074874][ T5926] usbtest 7-1:1.0: probe with driver usbtest failed with error -22 [ 1621.622345][T27678] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5545'. [ 1621.623606][T27678] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5545'. [ 1622.693471][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 1622.693483][ T30] audit: type=1326 audit(1765989793.467:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27687 comm="syz.3.5547" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x0 [ 1623.114721][T18761] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1623.265745][T18761] usb 1-1: Using ep0 maxpacket: 32 [ 1623.287112][T18761] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1623.313277][T18761] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1623.339951][T18761] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1623.363439][T18761] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1623.397568][T18761] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1623.434019][T18761] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1623.471116][T18761] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1623.494341][T18761] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1623.537738][T18761] usb 1-1: config 0 descriptor?? [ 1623.798836][T18761] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1623.822637][T27706] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5552'. [ 1623.889034][T18761] usb 1-1: USB disconnect, device number 2 [ 1623.960158][T18761] usblp0: removed [ 1624.306799][T18761] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1624.475705][T18761] usb 1-1: Using ep0 maxpacket: 32 [ 1624.527978][T18761] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1624.543430][T18761] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1624.573535][T18761] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1624.584735][T18761] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1624.620441][T18761] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1624.650824][T18761] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1624.692387][T18761] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1624.725551][T18761] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1624.758926][T18761] usb 1-1: config 0 descriptor?? [ 1625.004164][T18761] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1625.226567][T18761] usb 1-1: USB disconnect, device number 3 [ 1625.246840][T18761] usblp0: removed [ 1625.500680][T27275] usb 7-1: USB disconnect, device number 78 [ 1625.929535][T27731] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5560'. [ 1625.964395][T27731] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5560'. [ 1626.098610][T27720] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5557'. [ 1626.134893][T18761] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1626.277754][T27736] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5557'. [ 1626.374692][T18761] usb 4-1: Using ep0 maxpacket: 8 [ 1626.382306][T18761] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1626.420714][T18761] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x58, changing to 0x8 [ 1626.479781][T18761] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 1372, setting to 1024 [ 1626.533847][T27742] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5562'. [ 1626.580856][T27744] loop6: detected capacity change from 0 to 7 [ 1626.598902][T27744] loop6: [ 1626.603442][T27744] loop6: partition table partially beyond EOD, truncated [ 1626.636490][ T5200] loop6: [ 1626.639461][ T5200] loop6: partition table partially beyond EOD, truncated [ 1626.648065][T27742] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5562'. [ 1626.703082][T18761] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1024 [ 1626.747422][T18761] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1626.825910][T18761] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1626.849860][T18761] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.889029][T18761] usb 4-1: Product: syz [ 1626.913346][T18761] usb 4-1: Manufacturer: syz [ 1626.933040][T18761] usb 4-1: SerialNumber: syz [ 1626.976376][T27727] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1626.992474][T27727] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1627.032838][T18761] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 1627.060070][T18761] usbtest 4-1:1.0: Linux user mode ISO test driver [ 1627.095084][T18761] usbtest 4-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 1627.277352][ T30] audit: type=1326 audit(1765989798.037:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27750 comm="syz.0.5566" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 1627.350116][T27727] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5558'. [ 1627.371796][T27753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5566'. [ 1627.384242][ T30] audit: type=1326 audit(1765989798.047:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27750 comm="syz.0.5566" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 1627.445998][ T30] audit: type=1326 audit(1765989798.047:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27750 comm="syz.0.5566" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 1627.468342][ T30] audit: type=1326 audit(1765989798.047:2539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27750 comm="syz.0.5566" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 1627.490702][ T30] audit: type=1326 audit(1765989798.047:2540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27750 comm="syz.0.5566" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 1627.531566][ T30] audit: type=1326 audit(1765989798.047:2541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27750 comm="syz.0.5566" exe="/root/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 1627.638218][ T30] audit: type=1326 audit(1765989798.047:2542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27750 comm="syz.0.5566" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 1627.738258][ T30] audit: type=1326 audit(1765989798.047:2543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27750 comm="syz.0.5566" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 1627.807971][ T30] audit: type=1326 audit(1765989798.047:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27750 comm="syz.0.5566" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 1627.846136][ T30] audit: type=1326 audit(1765989798.137:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27750 comm="syz.0.5566" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 1627.895203][ T30] audit: type=1326 audit(1765989798.137:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27750 comm="syz.0.5566" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 1627.941584][ T30] audit: type=1326 audit(1765989798.137:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27750 comm="syz.0.5566" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 1627.991448][ T30] audit: type=1326 audit(1765989798.147:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27750 comm="syz.0.5566" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 1628.048060][ T30] audit: type=1326 audit(1765989798.197:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27750 comm="syz.0.5566" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 1628.100819][ T30] audit: type=1326 audit(1765989798.197:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27750 comm="syz.0.5566" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 1628.160065][ T30] audit: type=1326 audit(1765989798.197:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27750 comm="syz.0.5566" exe="/root/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 1628.188228][T27757] netlink: 'syz.6.5567': attribute type 13 has an invalid length. [ 1628.206586][ T30] audit: type=1326 audit(1765989798.197:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27750 comm="syz.0.5566" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 1628.648543][T27769] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5569'. [ 1629.396962][T18761] usb 4-1: USB disconnect, device number 91 [ 1629.771957][T27789] loop6: detected capacity change from 0 to 7 [ 1629.794986][T27789] loop6: [ 1629.797993][T27789] loop6: partition table partially beyond EOD, truncated [ 1630.131732][T27796] FAULT_INJECTION: forcing a failure. [ 1630.131732][T27796] name failslab, interval 1, probability 0, space 0, times 0 [ 1630.174843][T27796] CPU: 0 UID: 0 PID: 27796 Comm: syz.1.5576 Tainted: G L syzkaller #0 PREEMPT(full) [ 1630.174872][T27796] Tainted: [L]=SOFTLOCKUP [ 1630.174877][T27796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1630.174887][T27796] Call Trace: [ 1630.174892][T27796] [ 1630.174898][T27796] dump_stack_lvl+0x189/0x250 [ 1630.174916][T27796] ? __pfx____ratelimit+0x10/0x10 [ 1630.174947][T27796] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1630.174958][T27796] ? __pfx__printk+0x10/0x10 [ 1630.174975][T27796] ? __pfx___might_resched+0x10/0x10 [ 1630.174988][T27796] ? fs_reclaim_acquire+0x7d/0x100 [ 1630.175007][T27796] should_fail_ex+0x414/0x560 [ 1630.175031][T27796] should_failslab+0xa8/0x100 [ 1630.175045][T27796] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 1630.175061][T27796] ? __alloc_skb+0x255/0x430 [ 1630.175071][T27796] ? napi_skb_cache_get+0x4a5/0x780 [ 1630.175081][T27796] ? napi_skb_cache_get+0x151/0x780 [ 1630.175093][T27796] __alloc_skb+0x255/0x430 [ 1630.175104][T27796] ? __pfx___alloc_skb+0x10/0x10 [ 1630.175114][T27796] ? __lock_acquire+0x6b6/0x2cf0 [ 1630.175128][T27796] alloc_skb_with_frags+0xca/0x890 [ 1630.175210][T27796] ? __might_fault+0xb0/0x130 [ 1630.175235][T27796] sock_alloc_send_pskb+0x84d/0x980 [ 1630.175260][T27796] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1630.175275][T27796] ? dev_get_by_index+0x22/0x2e0 [ 1630.175289][T27796] ? dev_get_by_index+0x22/0x2e0 [ 1630.175304][T27796] packet_sendmsg+0x33a0/0x5080 [ 1630.175325][T27796] ? aa_label_match+0xd10/0x1be0 [ 1630.175345][T27796] ? __pfx___might_resched+0x10/0x10 [ 1630.175361][T27796] ? aa_sk_perm+0x15f/0x920 [ 1630.175373][T27796] ? __pfx_packet_sendmsg+0x10/0x10 [ 1630.175384][T27796] ? aa_sk_perm+0x7ee/0x920 [ 1630.175398][T27796] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 1630.175418][T27796] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1630.175431][T27796] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1630.175441][T27796] ? __pfx_packet_sendmsg+0x10/0x10 [ 1630.175458][T27796] __sock_sendmsg+0x21c/0x270 [ 1630.175478][T27796] __sys_sendto+0x3bd/0x520 [ 1630.175490][T27796] ? __pfx___sys_sendto+0x10/0x10 [ 1630.175499][T27796] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1630.175516][T27796] ? __fget_files+0x3a0/0x420 [ 1630.175540][T27796] ? ksys_write+0x22a/0x250 [ 1630.175552][T27796] ? exc_page_fault+0x82/0x100 [ 1630.175563][T27796] ? __pfx_ksys_write+0x10/0x10 [ 1630.175575][T27796] __ia32_sys_sendto+0xdd/0x100 [ 1630.175587][T27796] __do_fast_syscall_32+0x1f7/0x590 [ 1630.175602][T27796] ? rcu_is_watching+0x15/0xb0 [ 1630.175614][T27796] ? do_fast_syscall_32+0x34/0x80 [ 1630.175627][T27796] do_fast_syscall_32+0x34/0x80 [ 1630.175638][T27796] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1630.175651][T27796] RIP: 0023:0xf704d539 [ 1630.175661][T27796] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1630.175670][T27796] RSP: 002b:00000000f543d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 1630.175682][T27796] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 1630.175690][T27796] RDX: 0000000000010300 RSI: 0000000000000000 RDI: 0000000080000140 [ 1630.175696][T27796] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 1630.175702][T27796] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1630.175708][T27796] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1630.175728][T27796] [ 1631.035085][T27804] openvswitch: netlink: Flow key attr not present in new flow. [ 1631.105233][ T3518] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1631.140933][T27802] mac80211_hwsim hwsim27 wlan0: entered promiscuous mode [ 1631.157533][T27802] mac80211_hwsim hwsim27 wlan0: entered allmulticast mode [ 1631.182217][T27808] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5580'. [ 1631.745092][T18761] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1631.805583][T27820] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5584'. [ 1631.905009][T27820] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5584'. [ 1631.914812][T18761] usb 2-1: Using ep0 maxpacket: 8 [ 1631.930157][T18761] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1631.948208][T27825] loop6: detected capacity change from 0 to 7 [ 1631.963647][T27825] loop6: [ 1631.967267][T18761] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xED, changing to 0x8D [ 1631.979006][T18761] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 22520, setting to 1024 [ 1631.991182][T18761] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 1024 [ 1632.002996][T18761] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1632.018889][T27825] loop6: partition table partially beyond EOD, truncated [ 1632.018908][T18761] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1632.036639][T18761] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1632.044995][T18761] usb 2-1: Product: syz [ 1632.049292][T18761] usb 2-1: Manufacturer: syz [ 1632.053981][T18761] usb 2-1: SerialNumber: syz [ 1632.061564][T27816] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1632.090156][T27816] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1632.111503][T18761] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 1632.126864][T18761] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 1632.133229][T18761] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 1632.377217][T27816] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5583'. [ 1633.011650][T27837] input: syz0 as /devices/virtual/input/input90 [ 1633.691417][T27846] netlink: 'syz.7.5590': attribute type 13 has an invalid length. [ 1633.816137][T27850] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.5592'. [ 1634.419188][T12089] usb 2-1: USB disconnect, device number 127 [ 1634.832312][T27859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1635.226334][T27867] random: crng reseeded on system resumption [ 1635.504682][T27859] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1635.524677][T18761] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1635.695201][T27870] loop6: detected capacity change from 0 to 7 [ 1635.703450][T17070] loop6: [ 1635.724939][T17070] loop6: partition table partially beyond EOD, truncated [ 1635.734188][T27870] loop6: [ 1635.740519][T27870] loop6: partition table partially beyond EOD, truncated [ 1635.774632][T18761] usb 1-1: Using ep0 maxpacket: 8 [ 1635.781518][T18761] usb 1-1: config 0 has no interfaces? [ 1635.803149][T18761] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1635.817108][T18761] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1635.841299][T18761] usb 1-1: Product: syz [ 1635.854573][T18761] usb 1-1: Manufacturer: syz [ 1635.869997][T18761] usb 1-1: SerialNumber: syz [ 1635.894065][T18761] usb 1-1: config 0 descriptor?? [ 1635.993000][T27877] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5600'. [ 1636.254599][ T5926] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1636.426706][ T5926] usb 4-1: Using ep0 maxpacket: 32 [ 1636.466759][ T5926] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1636.503925][ T5926] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1636.546902][ T5926] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1636.578022][ T5926] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1636.603603][ T5926] usb 4-1: config 1 has no interface number 0 [ 1636.638795][ T5926] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1636.736170][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1636.814467][ T5926] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1637.015075][T27877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1637.031386][T27896] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5603'. [ 1637.052151][T27877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1637.097747][T27893] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5603'. [ 1637.157980][ T5926] snd_usb_pod 4-1:1.1: set_interface failed [ 1637.178877][ T5926] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1637.195262][ T5926] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 1637.209918][ T5926] usb 4-1: USB disconnect, device number 92 [ 1637.508002][T27900] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.5604'. [ 1638.334719][T18761] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 1638.504629][T18761] usb 7-1: Using ep0 maxpacket: 8 [ 1638.518395][T18761] usb 7-1: config 1 has an invalid descriptor of length 59, skipping remainder of the config [ 1638.545440][T18761] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 17728, setting to 1024 [ 1638.568883][T18761] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1638.596697][T18761] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1638.631422][T18761] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1638.656544][T18761] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1638.677923][T18761] usb 7-1: Product: syz [ 1638.688515][T18761] usb 7-1: Manufacturer: syz [ 1638.699577][T18761] usb 7-1: SerialNumber: syz [ 1638.720237][T27907] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1638.733925][T18761] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1638.757073][T18761] usbtest 7-1:1.0: couldn't get endpoints, -22 [ 1638.771361][T18761] usbtest 7-1:1.0: probe with driver usbtest failed with error -22 [ 1638.816148][T18761] usb 1-1: USB disconnect, device number 4 [ 1638.953552][T27906] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5606'. [ 1639.180012][T27923] loop6: detected capacity change from 0 to 7 [ 1639.213316][T17070] loop6: [ 1639.232760][T17070] loop6: partition table partially beyond EOD, truncated [ 1639.285472][T27923] loop6: [ 1639.319419][T27923] loop6: partition table partially beyond EOD, truncated [ 1639.399360][T27926] input: syz0 as /devices/virtual/input/input91 [ 1640.922206][T18761] usb 7-1: USB disconnect, device number 79 [ 1641.386468][T27947] mac80211_hwsim hwsim29 wlan0: entered promiscuous mode [ 1641.394125][T27947] macvtap2: entered allmulticast mode [ 1641.400981][T27947] mac80211_hwsim hwsim29 wlan0: entered allmulticast mode [ 1641.432522][T27950] fuse: Unknown parameter 'r©ÐíÌqfªèÞootmode' [ 1642.883472][T27962] random: crng reseeded on system resumption [ 1642.900881][T27947] mac80211_hwsim hwsim29 wlan0: left allmulticast mode [ 1642.911382][T27947] mac80211_hwsim hwsim29 wlan0: left promiscuous mode [ 1643.555872][T27976] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5624'. [ 1643.692096][T27979] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5625'. [ 1643.756250][T27275] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1643.772177][T27979] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5625'. [ 1643.955225][T27275] usb 2-1: Using ep0 maxpacket: 8 [ 1643.962979][T27275] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1643.976355][T27275] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1643.987951][T27275] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1644.111280][T27275] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1644.135001][T27275] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1644.176527][T27275] usb 2-1: Product: syz [ 1644.214976][T27275] usb 2-1: Manufacturer: syz [ 1644.244854][T27275] usb 2-1: SerialNumber: syz [ 1644.295186][T27975] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1644.309718][T27275] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 1644.347878][T27275] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 1644.366148][T27275] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 1644.599410][T27975] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5623'. [ 1645.487931][T27996] team0: Port device ip6gre0 removed [ 1645.503042][T27996] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1645.528297][T27276] skbuff: skb_under_panic: text:ffffffff8a27dba8 len:136 put:40 head:ffff88805977a000 data:ffff888059779fe8 tail:0x70 end:0x6c0 dev:team0 [ 1645.545775][T27276] ------------[ cut here ]------------ [ 1645.551264][T27276] kernel BUG at net/core/skbuff.c:213! [ 1645.557872][T27276] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 1645.564143][T27276] CPU: 1 UID: 0 PID: 27276 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1645.575180][T27276] Tainted: [L]=SOFTLOCKUP [ 1645.579510][T27276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1645.589585][T27276] Workqueue: mld mld_ifc_work [ 1645.594303][T27276] RIP: 0010:skb_panic+0x157/0x160 [ 1645.599324][T27276] Code: c7 20 98 6f 8c 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 2e 6a f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1645.618922][T27276] RSP: 0018:ffffc9001032f2c0 EFLAGS: 00010286 [ 1645.624977][T27276] RAX: 0000000000000087 RBX: dffffc0000000000 RCX: bb1609c613229400 [ 1645.632941][T27276] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 1645.640916][T27276] RBP: 00000000000006c0 R08: ffffc9001032efc7 R09: 1ffff92002065df8 [ 1645.648907][T27276] R10: dffffc0000000000 R11: fffff52002065df9 R12: ffff88803e2e5c90 [ 1645.656875][T27276] R13: ffff88805977a000 R14: ffff888059779fe8 R15: 0000000000000070 [ 1645.664848][T27276] FS: 0000000000000000(0000) GS:ffff888125f35000(0000) knlGS:0000000000000000 [ 1645.673770][T27276] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1645.680337][T27276] CR2: 00000000f53abda4 CR3: 0000000059550000 CR4: 00000000003526f0 [ 1645.688296][T27276] Call Trace: [ 1645.691559][T27276] [ 1645.694487][T27276] ? ip6gre_header+0xc8/0x790 [ 1645.699252][T27276] ? ip6gre_header+0xc8/0x790 [ 1645.703910][T27276] skb_push+0xc3/0xe0 [ 1645.707879][T27276] ip6gre_header+0xc8/0x790 [ 1645.712363][T27276] ? __pfx_ip6gre_header+0x10/0x10 [ 1645.717455][T27276] ? read_seqbegin+0x1ac/0x250 [ 1645.722202][T27276] ? __pfx_read_seqbegin+0x10/0x10 [ 1645.727292][T27276] ? ___neigh_create+0x1c5f/0x2230 [ 1645.732394][T27276] ? __pfx_ip6gre_header+0x10/0x10 [ 1645.737502][T27276] neigh_connected_output+0x286/0x460 [ 1645.742878][T27276] ip6_finish_output2+0xfb3/0x1480 [ 1645.748069][T27276] ? __pfx_ip6_finish_output2+0x10/0x10 [ 1645.753609][T27276] ? ip6_mtu+0x7d/0x490 [ 1645.757810][T27276] ? ip6_mtu+0x38c/0x490 [ 1645.762033][T27276] ? ip6_finish_output+0x2ef/0x4e0 [ 1645.767126][T27276] ? ip6_output+0x126/0x550 [ 1645.771608][T27276] ip6_output+0x340/0x550 [ 1645.775916][T27276] NF_HOOK+0x9e/0x380 [ 1645.779880][T27276] ? NF_HOOK+0x101/0x380 [ 1645.784100][T27276] ? __pfx_NF_HOOK+0x10/0x10 [ 1645.788671][T27276] ? __pfx_dst_output+0x10/0x10 [ 1645.793501][T27276] ? icmp6_dst_alloc+0x3a5/0x420 [ 1645.798463][T27276] ? icmp6_dst_alloc+0x3a5/0x420 [ 1645.803411][T27276] mld_sendpack+0x8d4/0xe60 [ 1645.807907][T27276] ? mld_sendpack+0x1e7/0xe60 [ 1645.812562][T27276] ? __pfx_mld_sendpack+0x10/0x10 [ 1645.817599][T27276] mld_ifc_work+0x83e/0xd60 [ 1645.822088][T27276] ? _raw_spin_unlock_irq+0x23/0x50 [ 1645.827341][T27276] ? process_scheduled_works+0x9ef/0x1770 [ 1645.833040][T27276] process_scheduled_works+0xad1/0x1770 [ 1645.838571][T27276] ? __pfx_process_scheduled_works+0x10/0x10 [ 1645.844541][T27276] worker_thread+0x8a0/0xda0 [ 1645.849110][T27276] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1645.855388][T28005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5629'. [ 1645.855428][T27276] ? __kthread_parkme+0x7b/0x200 [ 1645.869176][T27276] kthread+0x711/0x8a0 [ 1645.873248][T27276] ? __pfx_worker_thread+0x10/0x10 [ 1645.878358][T27276] ? __pfx_kthread+0x10/0x10 [ 1645.882947][T27276] ? _raw_spin_unlock_irq+0x23/0x50 [ 1645.888147][T27276] ? lockdep_hardirqs_on+0x98/0x140 [ 1645.893333][T27276] ? __pfx_kthread+0x10/0x10 [ 1645.897907][T27276] ret_from_fork+0x599/0xb30 [ 1645.902484][T27276] ? __pfx_ret_from_fork+0x10/0x10 [ 1645.907585][T27276] ? __switch_to_asm+0x39/0x70 [ 1645.912337][T27276] ? __switch_to_asm+0x33/0x70 [ 1645.917261][T27276] ? __pfx_kthread+0x10/0x10 [ 1645.921839][T27276] ret_from_fork_asm+0x1a/0x30 [ 1645.926595][T27276] [ 1645.929610][T27276] Modules linked in: [ 1645.935933][T27276] ---[ end trace 0000000000000000 ]--- [ 1645.951234][T27276] RIP: 0010:skb_panic+0x157/0x160 [ 1645.956984][T27276] Code: c7 20 98 6f 8c 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 2e 6a f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1645.965889][T27961] PM: hibernation: Basic memory bitmaps freed [ 1645.980620][T27276] RSP: 0018:ffffc9001032f2c0 EFLAGS: 00010286 [ 1645.990632][T27276] RAX: 0000000000000087 RBX: dffffc0000000000 RCX: bb1609c613229400 [ 1646.013425][T27276] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 1646.022542][T27276] RBP: 00000000000006c0 R08: ffffc9001032efc7 R09: 1ffff92002065df8 [ 1646.031171][T27276] R10: dffffc0000000000 R11: fffff52002065df9 R12: ffff88803e2e5c90 [ 1646.039560][T27276] R13: ffff88805977a000 R14: ffff888059779fe8 R15: 0000000000000070 [ 1646.047737][T27276] FS: 0000000000000000(0000) GS:ffff888125f35000(0000) knlGS:0000000000000000 [ 1646.057879][T27276] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1646.064742][T27276] CR2: 0000000000000000 CR3: 000000003b012000 CR4: 00000000003526f0 [ 1646.072837][T27276] Kernel panic - not syncing: Fatal exception [ 1646.079363][T27276] Kernel Offset: disabled [ 1646.083675][T27276] Rebooting in 86400 seconds..