last executing test programs: 18m24.084371042s ago: executing program 2 (id=1582): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = eventfd(0xff7ffff7) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000000)={r5, 0x7, 0x2, r2}) sendmsg$nl_route(r0, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0xffffff00}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 18m23.915021675s ago: executing program 2 (id=1584): socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) 18m22.00093358s ago: executing program 2 (id=1591): bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) (async) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x2000084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000000100001082abd7000002008", @ANYBLOB="008000006400000008001b00000000000c002b80080001"], 0x34}}, 0x40) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000000ffffffff"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000003b80)={0x3, 0x0, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @mcast2}], 0x1c) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000080)) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r4 = socket(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x6, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x121, 0x78bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {0x7, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x24041080) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0xd8, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_STAB={0xb4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x8, 0x10, 0x3, 0x1, 0x1000, 0x9, 0x7}}, {0x12, 0x2, [0x8, 0x8, 0x1, 0x56f, 0x7446, 0xf3, 0x3]}}, {{0x1c, 0x1, {0x7, 0x9, 0x7, 0x4, 0x0, 0x62a47366, 0x9, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x40, 0x0, 0x4000, 0x5, 0x1, 0x5, 0x9, 0x7}}, {0x12, 0x2, [0x9a8, 0x5, 0xcc, 0x8, 0x1, 0x8001, 0xfff]}}, {{0x1c, 0x1, {0x6c, 0x7, 0x401, 0x9, 0x0, 0xaf9, 0x9, 0x6}}, {0x10, 0x2, [0x80, 0xdf, 0x5ac, 0x400, 0x7, 0x2]}}]}]}, 0xd8}}, 0x24040) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e040000000000003f00000000000000b604000001ed0a002500000017ffffffcc140000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9e104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f1300010000949b3aab06b1e042ff2164d80c8ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1e0600bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee6330000000000000000000000000000000000004000000000000000038600008fb854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8265e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb66701f4578ba4cb9b706e605a88c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f6a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cf026657a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2cccb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400090300000021911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a8f01bc4b73cc31df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21c24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a3c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68000000000099347593f67da85d1c962bfb320d1553a74ec3bf003ba62b1784dbf0168a7e85f28b77bdebce96bf386a6dd5df162a16f2b7e8a4de0ffc464a87f91f81866d2ef0af71ebb07a739c3cb1b7000000000000"], &(0x7f00000001c0)='GPL\x00'}, 0x48) (async) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) 18m21.167213385s ago: executing program 2 (id=1593): mkdir(&(0x7f00000022c0)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@mpls_delroute={0x24, 0x18, 0x9, 0x0, 0x25dfdbfd, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x400}}]}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x19, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) r1 = socket(0x10, 0x3, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x27, 0x1, 0x20840044, 0x66d, 0x0, 0x0, 0x404, 0x0, 0x0, 0x40, 0x9}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="796b1688da7f63b44c80a8ab8d7cf791dd94280cb0fa54946ab833cdb149a7742b41418e35c5b8e840f60a7c53258defb0277fdd445375aa4721ae603c656f35a751830d2f0e72884c26f8ad2f98eddc52e5455d3863370052ef5387562edc2db46773f04aedacada7e4894b2f6059b05cd4049b1ec1bad230ec04b1a62e2ac1f519f5a07de98acb2aa0ab8206b42e69f29137d05736c2728cde12906e98c48ba54bf2565bf668fc0f054a4979a1c4485aa7f1827e3fb476fa5b192f3097aa0e2f31d70f1a33c5326e8857a80f51667a3bd86f9a84bd16d0b826bbbc4642e918cce802185479aa0147718108299c39ed656182b87643337faf51c3d81d03429b36835bfad63c18b8350e7c7961eefcae018cfed67870ea84ed3a2078b0e73fc3c191d83a4f85ff5f6fcc5ad5f0d6158d0984a5c9c8fcd0417d343dee908a48ca8212b23d8b9e6d63037387c1a9a6587c740c6745737cead807a40d9f1c3cfaad19f157243d0308284b043c26bbd0dfa2e29fbf26f6bdb4ecc305a83f0b4975e8b2575ecd919e270bccd723330f3afe8f22d49a7ecf5e08a080cc0bcf4ad7e1752ab4f4fba8f73838ca929e4008a4bfa7c887f79cad1a27988df0edd5f586b9d84e85b4c05190e84a21203c7e620d90ce43db9468c088b92fb496ef1216c089bcbe11baabc0199c5af2be05523dffd661d263b4a77b0c93994731237b2c76102376caed3bc194d839e5192fe166cd48b98146e9624941e7bbc8162320420dac1c3217384bc18ac42abf209be1c46d082cabebae261cbee03308a8637b2ab457eb7073c9cf893d33ccc330ee61fc41724eb9304c276e995815463220ab162fabd1e78b9541c4d6313658af4f9a1b13cdd74241fe081f929872e07ed2ee7063440ae3242df5ecaea5f4e3cd81fc64993826103235a22007486e2c7a375f987f6fa6e1a6e2ca8c42e754c679793b6838b4345a6f122c5edff88b281e1af46fe5d1740f3b7841895ac7cf7c173b1d364f3715ad5320d3810c62193625d2e2ad8dce85e7387b12524a54e4cf5f18f5c7452a7c4df6e212e2838c2939054e74ea018a7cacc5ba0f9ee409a29e927a9d1df1be6bcb674d6b7b750bd395ff485f7811db78ea595604950e73554420be3272a887e7f4a2b1bd08d75b7d507bdce124ad85d515ae04039fc6bf28a589b18c1864a2bd4cf22b4012bdbce21d86090c653edca8d2142b236487518d23c3ac819a12dead5ee6610db2af5a1e70792800825bd68f691a7c4e8d1ef2083f3b53c3c585f14e8f89edf5f2bdf0222920bb1286ad63bb38c270c0418e6a4be2b33ce106f0fbe4b348eb5546771aeef9d419957862e6cd26b2944f30660843906545d6c44e87b313ce616eff3d478ad425564766ab37ea6d0b20b271a9172ef05958e11dac1cf15a81b74b705aead5b0db2f63cda9ba553142f18a0a1bbc57bbd7465718a9a95203a3616729c57d97938c676f23d6c90df07f279efb63c02cf4d17eaa6d09df1f537ec1168d4f3d27ec3332d5f3fb6546f8af4d72d7a5314e3b56cd19e1fb0e5839c956800f33600759c905dd0328871887392eecd5ebf7a2fc4c6870d9adf75eefbc7674644b431aa446e3ef8e462f10c59632229776d91a3e0c5bec6d8b88827b1841980c6e52fab1a3b67e781c7061c1595877332589b3531782b853f9fb1cec85eade599aa3b17e035f5211b2c2e3704889b02c77ae739e486e34a9463a280f24bab3e1c9d9e9c16353b53909596bd741c44e1ca5312a585522bbe09fd1471ca2ae41b9b91843a928b9f1608d52fd983d4b448d57aeb14f2a16989b81dd15c4436f4f6902a7e475d6cbb53ce91eb88d7be5ebc2f194f9afcfaa9dbf5bec77601152a9aa5e7df652c6b42b373c8fc757ce901361e1330d870529f91a1d77b33cdac130f664ce6a538acab81b6c77bb1ef3d9f46419d6ff99d36722cfc293527fd4a5a962e0be8ca244ace081b526e2b745c00b82d8a1873a62795698152e23b276543bfaf3f32a951bee7f9af3609d307f1be05fcc96f8846230cee31ad9bd53ec996b34f008a63a5d23e8f730a1ce3017a84e66ab27c7742b84fa65ef5f20cad2553c5f87961eedc649f19080d5a4438b7348d2d3d219241526183a2b57e8f4c437b60b0dc85b4b1467a869435a090a8c62efcf2405fbf7e50ac0e25c720545849292bba845a78668c08efb814e03c85992a0b672463749baac8f03c49c3187efeae529097c681f05161049f645598281c3c352c18c6d50aaa8d1d7542dea480e19016e4cb7e4e9b768f7a2d572a8f62d65cc4bb2bb8a4299e2e262c5bf7b5f7f5b03bae1b1698c01438bf898d084d2a773a10d220db25d20ef19ea61d47961795c4d5bc0008dbb6c386c51fd5b27d300e92ce02b412f806335cf7ba94c9a6787002b14bfd4efc2894033f76a3361f782d96f562b9304f3a2cdfc96ef8e918aa78b0c9aa9c5cc0d581a1240940025b7fcf5edb339a1d52b48b2b77c180251bc842380b625cd83bcdb939f35ab8c18424c3c6bdb95c01c72cecdbba1655f468ff46bbb8973d583fe56381b72a440e24ecf34bf09691be3f0f49d69d536aa5d28820c746a905b079b9d6fe6985c2f73734c3d068a5b34d5be41c1f6b01a3e62fb30c27d7c6b0535960a9b095e2951c6279453a6591cfe060e004f037880eb37ec667ccfcef29630610d4e1ecb807e4df7456b1ef54fdb6039369e02e6e50f319524501dff8a195f79114b27567a282b47f28dbd2f8fce8793e466538ac9b197029531df90af9694ba4a1c513bf3646a8e407b6544ebbe6ec329ab0ff68bbdb2369c2b3b5015b83548a0834fb2bcd146d64bb20ee43b30ff2f87aeb2286fb8b39b0c37efe1a76337f01ac84daaddb533d1d765824d4d1d51e6ecaa76ba0f68e005dcb8705ce43cfb7996b6c4ec4333905e3743d167b13a4aaf82519d0ad2c50ab4a30b9446a08809aa39e62de9aadaede89ccbde473ca9801dc2b5aa11f0452338aa02491352b67fe926ea2a3a0a2448ee5d1f92a18266fc1ba0ca7d65d02f974aba270e4e9ec4846ecf8f4a85c783b3907e063341152adfeb0e9d52e368b2063ce12a942771b8fb664f47e7f92b3e92b258e7a3df8cf86a0a22e3237b8364713a61f3fb0ae673b73efbdc0929fd72a8c567617c914b3ad82e9c2d7e17fa6ec3eaea443547f6544a6f07b4a4a8c60f8f59a93e395e5dc8165638b96eb1863532bf33980ecfe4c9ec6b67f400b084968bb38538181a22d6e39b26ea44f6f7771cbad1027a41213de0db2620a1e1ed706063de4b0f9cefe82f9d47934cb37ad4be37ea44dd7b2c7d48a3c99592310af77c06a991becee875b3525df16245ecfb96720c1c810315c0665bb161eb559e0887707416dedfd46e284eb6e28b8f9a51b33c5a19a9057705645353bb3d22a5b37d667f7931776a82b5790b3864802f25ac369df270c39c1dc67d5bf436af12db26527ae8b4f05b46763d2846f702378d39c274d6640ee4c28e74a52b414ccd4a8c068d084c1808ec82b78eff548914355e0e4136306f277c9ce67dbaf8ff954766085508398422568e810d099b89b8f7a4b4aac73dc478bd4228a15f0fe8d9b17d244cf1c79d9d6c5cd1d2ba7ec9621c9920e564c8c7b1b7902eb77825375a61055d36364765ff8f000a8635172c9fa0a6fd8f1a9b24542531cf2196450884c1ab09eaf82919ab2baccf517cbd01e9be93883d997265312066ce1baa9b3ffb1fcd6dd78e69ce2167a65305271bfabe7f0d6428e572c21bd0e7be057bcecfc32aafeb7f2c805b3fc2b5e7a4f0c610e7af67217214bfd1ff732cef5f39220f5a1c0e49017b3aac6d1d3a8833060626f43614d154c4fc06a6db309d2752800227807c97e20778e674e1de2f3f2390127c6595462d9c57ebdc8d5b5147d8841c0dc8c6dd147578459a0768aa84cf9d61b29b844833ea2fab3c1ebdddc8f503c6c74aaafd9c4da6cabce2c8640bc4db934d4becdf1848fbae1055ab58addbe37c3c0ae1008161f513028ae52c5b368f20a61e4cefa26c7d3dba4afe07be2adede3c2ffa503bc878f9ed6b7b69899048cb3eb780dea2f8c70ee2979714c3522d4298757218c055b3953c15bb8cb85fa092b718da9e7051d08b0c0142cc74a709086b1fe2ecaf388162ab4b6e2f51512e49a38261992f5da7add887657e7c3622d10863b611b330e2a846b3c68ae0c17e0f0bf18e1a65837e506dd378ebe91e5ba42f7ca689e733a3d174cf29e77fb3e21a53dbbdd7b18c0cf0ecd93431eb7c4536c5facb14bf5e13c26e92066789ab59b441b9fe63d0853815626084c39eba7eb03dd8eeff30e7da8bf2b35be524c0f83a54010d1fd4005b8b8c4b566e8f4d11a8ded9527ae76460049b920c39580164f8b29b182337b1d11d909e7062e7543525680c27a2f8dcf1a09448cb0c115ab496d6e0e3a417798cf1b72f931dc99978227dbbdbcdd06a95657a3f696acf421c8f5e3195577d891d654ccd447304de96fbf4bd7510d4b7b7cf1a0d0bc8028bd3a8a8121c71064b5dd687dd1a8fc5975ab30a4f8b4b91587653d98557b7fb3a370c8f9cecf4aa269613c9ac82e1347b01792fd85e66a9cf52a0b713277e1304191a243ce0cf6e59f6bea15c8e2e624d82a64502c63d0432e74cb2a1c0d822b18d2de62d1b3d287f3013369b8166a0acbab4d14f0200df0a32a6329ce8b7c9a5e173e651a942c32cee816622518238a5c220bad099ef264ce7d06c6a7a9691205f8e0d731f7f163f503d92f6e35412dd1d71c179782d98aff76b25f848f53285b5e7c0ed545a8c27872ebe5225940214207ce180de7ff2bd4348d37f939ee2a42dc66d699af415cc18a6ba26981645b3bf5899403217b8729c20f031fa9faa94ff3d1940ad187c52f5711a1815caf3e06a0fd7a362573a7f444a420347a41f0e62996a8a2e2d44596659eb719a1a09287dd08101b4ac495ebbd22984393a40d40eb8910976cfb8795b5ea1f9df9b251c0d853906288f07f0bba1090f8ce08091962628a79cf69aabdfbfd418203d0f458395909c3fcf6e0a2776c7fc2561271fbbc5a5606a68835e5a9f79aa88d1d6254a10ef8cda907667fd6350900ad0361bc015fc77a84a7b333cd4a9a09c6513d7562588d987dede2a01becf985e6dff6c915f2bc0dc48b2d1c459cba9bbe7afb136f2c0aeec854267b379e11a374a54fa4f757dee9fb2804d49d0932aed22ebf44d0b9fbfe4825875d0b339c760f017a9ab71f3b2636ac989902dbe6094e1f4e0b9674a41e2a5f46df28ab9e6252624a87740f0bb477ad0c670fb79d520103e9830df544657fe98dabee19854db695d25b7dc021758323567c4079f6df83e18d7cf0276071a4b866f49756badc2e227f9c5b69856782fdb64c7437f249e5177db44a175b4f32d4f10ffb9452bcf1c78465113317c90e9f5041ef02349dd59dd2999ea9d04c61338d6fe12b2a0289bd6f0406e4dd05c49ea6c259fbfdebf6c1eb8c10518c3b5ac7c627fef766a79bf17a0043d53a417b05e0e3e375951feff1ab92062ae2ec0bc53e577f6f6b461858c91241c4469f1b0b230e81a9c339d70ef161b0a4516dec6ff671eb53b0ec07f434b825a7ebe3ffac1a9b363aa1d1b73cd351b6dea6be0fc1ac0f5b5250756c767a9c87a559e9b6fcd7c9bb1dcdf7a273b452459c0cf3a3938140f437b0d7303b46b5e9d49ef3a6dcab0817807316a201c1c7e511c352f11a4d287b439990da2d21714e9432320969d7ce0638e8078b6c391099d59fbadb2ae1faf0947c6c9be5fd974af2ba3e23787b569eb2ae046d944f517d314e629da48b1d747755c841e2eece22bf413d37f8c9334a00c923c4db8e4757a7576606439a60e2fae4bbe40feb5deeaacb4b94f585c22530797a888049a3695d9927386ba868505337eb2261fd67fc5c21997441aad84f1a17e8638abd6a114a91ffa6817af9339aba603d38baf2b1782ee615af93c3cc856d773d35699710b34059d1d24c26782fb098a1adf5f95462dc7b493cddf1ac15fe1ee05789d9c88294124ddd780f67dcb1429ce228bbaa1476082ba8781e4a36e68305ff70176fe5d2d7193e29b64ba40682182cac88e7104809ff89b35004615ce7b01838c7f5e2a25c915049007994ab3a79c5e3ad1f958a1757e781e1b29de67d6075790b9c9f583a27a124697023f0649a3fffcd119eb6d185f420cb977b56e9b9cf5feef58330e5f5aeed509a04dce7463467e9a0dd0eda53bc901e98d544d9d361c4256539e9fe2085f5715687ed7b320cf55ad67126a7b698bd977a84f11d89050b8c01cc9892ccf1a19c03792ca1a5c28eb44eee40569e4d43d4f53186a13228b4db444da379addbd782bb233d0968b745bd7c4af4cb6fc2c62fac1d3fa09a4d400c14375ed84077844d51175c1667b969dbae1f11bf2d60dbf9a92b0698518e53d9500b826268122a53720b12ee773ab7a5cf4bd9c27333c95fe0fd75bdbefb8e63578dde47dbab990ea254e6b96e3ab4b06d4fdc69596919f42e479c4dbe2e2839392c993dbad9388629736526b8a72b52d02b830f16d2b93bf9f33aa2766c07d4eee4f1a7ebd32cac0f311c2116db40ae7327c53a5fcd6cf399720c58537f44f1cf4087e9f535b780a31531d0bfd0f91f282f780d769bec9423f48c5b0f816e629c24e3c45c41a6221ed05d32f067c32e4b5309c08b8634fbaccc9ce17d2419e65ba64456aa38ae26cfd9fd7ab11d86a3761f89386f239dfcb324adb599a26aaf0b05623d27082b1682d408621287a54c5845d0c329fb5fd367790fbf9125138b26300eb830986a1f94539b43c10c7115418ee198020bd5f6e8ef725023e0d1c8691fa5aba4cf5a418fa196276bb4e4d2d624091774a99d35149063c700f8147d32f1622a36c16871d0df9a293fd6e9c25dbf24b4e622f782bd0ff66b2638ce9b38a302ac3d408904dff07552df12e4eef526eee121af23210d6c18cc494f9336911584569a98dde69834bc762e472c54974967efd187277a1e9992924638dc85ae7069afbe9b055cc82459268aff5e700142f679b87d1d3d9d65ba07025056b8b18c390f7f68e6cef079b3e315e51dcab36a70a8033a4746fc04a3c0dc7542fbed600da9ce64a4f484a0afdfc28f0d412031bd28c5d4af95ab83e181672e13b708f0d89db4db87534c841aa5822fd9627966969d05746d5f411b04cd7c85d7c552f4f88f73d98e811a15f8eb17699e4e036ddb156e6afef65ecf522074abb0f91a250c499ef8f6fe5c70b6db807ac3b29c54a08f8b12cb11acd777eba793b039cdd0119cc71086698ddffe7da5ddde8de7027575d006a079f245ae344e6d864c7cc36eba8ccaadd585e4158706fdf000767d8eddbfa49cfc2e24727aa446706581208712b90a1d40ed83c04b39718bbcb1318f707267c6ff4ff2d6cf8292d43d64f2eae25ce5292c6ea996d0e2430ec9d076b698ccec6c7040fcd207625ae6dd0b4b4475ddbabafa5c2dd563a1c5946b1b556d8445ab08d8e910fbaf6120f1a96603f6196a6bf6be65f8b6e1f93a5c5f1a12c15423f9c7241fd96597d99c063518bdcd40c5b3ab3d293e85c5eaf3295dd4dc2d67b301d641b5c7cb829d7208a953759af21d997171da572174b819e8094eeae83634eedc5e675c204800a405e9f29b1cd127e5325f75382b38e818a901c8bf781398ad076f590030225e77a6479d9cbe1a453a58202b987d09e923405c7075eae36429ffc275e9bb267f1b7b32f1e897c59f28266ddbb84db2518e18ce24a5e57d45a09cca50d3fee674080cc46fb3edccb10b6ca6efc545b5e27771c95443e41c81700626888775e0108579afef64dd4121aac2f4a50d73005e8ebf8e26632b160d0524d983eeb02b9c8e5b32eb85052c1f4b07c10d423786aebfa102fc6c8dae9687a99424200fb9424ff30deb531230cd0ab8b7add3cc7b8ce756c99f8955c07b1cfa9741dd0f524b3def06bde275fbdc57f65ae255978e11aab328db109e60c6cd2f2cf5cbe89892cbd0f10a1788ad01cc4218d271f1a277da167f50993812559544737a7a0597becfddfbf6c14eebfd273e217541fb478becc5a9a568a22c853430a6ef7db8e1b59a2c5a817cbf89ec6b185c332cc54ba142de0787a26822e85a39d34543a3e54601c7e6ae3642bc8dcc1a1aaa5f4194c45285e3d6d539bdc351756efc9df9941378c3ee9cc30e70d73f558c1a9e0e8cde1085f01d6e328cf5be96f11927782746cef430bead85e4201a56026d5439f99d284b1c746b057793e63a47c3d411ca1972ed0605e75eda93bfa4184dbaf0f20c4119d38491ebef1d297b09a48feb2ed673b45214e40f338b360756c52740b127dfa90a6c1b66bba6e530ef6bee04f8bf1344293cc12a08dccd7b8515bcbde1d2ef2afb13db6bbca6c8e061f24819db3e7e1f2f2d1dda0dc5f0c26da1f03ff09ad81db2d8243901fdc368f3e940c488c99496191f306acfb5f6b61b0e10e2610bada36b4579a2f468b8b97fa86374c5efa72cd0a2948390181ab9af0b607c8c0dff1380961659eb59853b632aea71a01c6a9a237094ff8ef81b81910769a7d2b763c5346487a6729ad701cb75d5c48d98594387d8b523c1b52c2c72b956d9c9a55f9d18e6941acb84bce4a6e65c3aadf199fcaad05227c673008d2a1d099a04419b4c4159e9f3d05a99e62c9fc3ab118775e0f93851e31d89e01e2007278039bd95f1dac53ffa0c38b01f9b358542ed3f8302849f614785f6aea63e31a364a3b850163095ba7fb08076619fb52575f031c5ed064e360c38b76f709e35bec396b28547beb882ee552ac098044aa1527b3e89eecb955e100559f42e5b5980cee6238ccd6129bd91318ce513abd6f6b9853cdcaead72de26a4b0aac19bf1aa05ecaff6168d69dab6d9255c8e242911083b4bebfb0a51e4f2570297b6a0a516220d9cd2143f9c12b174b328c2711ec04b6d6ce3ce46a1240182dda32344e84b1165c07650db3a40e81c2beeff71b65d4c2fdb7d464b5f3950a8979ec78f0637e10ef0878dc3801a1ffb27f87f79b806adbd7d0589d904686adb0fa025f0caae4079321d760e676adee8dc20d137477f4ec708a1d6b0785b141a168ec27cef6f7ed0057aaf86ff94e8db6c30f66a02537d8e2695561c27e4950360248ebf5aa61772314b9971a83a1529523269251e10ed9a0a66e75c92b7c6698b22175d2b8b528a4ad7845ae70c19b6ea9ad39a495e898df977b5fa2243b66e0ef87a395884d88c6457d7b278ee8acd7da10cc3d40b75446acf2543ab43e87cd9e7ca302469119313699ec33e8ae6e01a7b8b9ff1799eeb9222eb337ff6e2777b6933d0920131470b005f13b054187a4b9722dba85d11010cfd46f36fbdd0f026d59e0ad232d94a1eef0ddc51a914aa2dc2f1e26977d80d698abb0e588f990816a99976d36fd955114249ee60aadaf5b2016babd68f2be8c285955ec39b3c8404f8938a9e2148f42695babd449316a8c70b35b8c92a1d7079f2257fd9275b5bdbf95b0373ac57cf1962d6b0061bc4efad46512e72f5c7aef82244c1c39b47af097052604c9e4a9b300c41bc8c8cc3ff299acd5cd27e68920d5d5c13bc2e82006590c9153dae0231de0fb84bb4a20446e460982f6ece751a52516e15e88517422cee3f4282979237d9a27dddc68999033d61fc04e186d4401cf22534115e8040d438c6d520c05fc2785f8414e101386f5c9f151ad74b866e23a9bdd1e1e708d9151d231485be39c107137ab0de1686f64cb509c71bea7e253609f95fc153f02741e473a7089b7564df8dca471119f44c30e92aa8372ecd3648df98eb02623da8a8e54653f6f7e4fc5f2350cf9faba75872f46a59d7da4114617ce119f6953bae479e9a3be0ba391e07f7c5b589e91273444b63030a1159d4d4934beb1860f6c49fd3471bccb37ef9bc6e20ac3ca27413dfdaa7a9ef8b65433d06bcca07a0a6ea8dfc07bccc515e7e1cbce45bb89509fe415bfadb68bb3c38d7342bd03059a5646b731ff2d58640b655ebc306400dae798486035d536031acaeb0ff00959cf3243554bf279044012f17a14d1c302b157adbb7c30033aa4e494a2e59b668a77f3767d6c87d9fbfd7fac5fb6c36b07ca4767a21d107200af294802c671604c69350ee06e52e203d8d819ec4dd27daa8441a92cd746510a7871797cab13a4e03816fb574c9bca96865c84697e3594f2adc793fcbb0fea107f8f1e9a626c07d709bde3e10ff4c8cb1246ff36f4942c30b4f69614980f3b3c8b7a2a8b2f61e3512f1392cddb24662d3766b171e81ac95e356a8d5fb7f2d9af89c417f51bcf4476936890c635535cb287f9be8f7c4015d1e597de5c3a4d0e6d9d1c870422cbd7313f0d5e79c5f7e77c08a45abadf421fbf53952babc9192f89d2538d89abd96a187aca7f9d6f65febadfb71a8e07d8b9d599c1cbf02a191a608d61e8c73c5093ac23b7b1b94dd00be35dc2c59027a1e586cee53a7fff6373c14ca2a4c241154cbd7bec164b96453aeb232cc470e0a3daf9dd9d0c2ea0bc6a5047daa83b408ee766ae9285369a295257069ff671bdf924b7662ee0eca8f90f83fc689720469d5304803f19662e046acead90015545704d70476d88337d81b26fad65a79ecbf0a96c332814dd4e0899f293d9720630a1728296f22124785f9653019cf4ab009841ec39c0f8e2c4f66158fe4fb74d0115c9ffeb1b97d76bd3d101c3ce108da01caa698cc911c7fff958b1ff7d9c035f7a6a6858735215aaf699fc1a55ee8e7990c92f2c9c92601d86e467796d1970946ea3915ab7c829180d5eb50f1388855aa752c44441a18c6bf7de2f476f2cb60cf7dae34b07cc7066045cbfa6ea35084d2aa67fdd159d6c7f2cbbd7ccb20161f3a51526a5133576806c7b3e06ee18d361e9fca92c21f258211ac1ab623954bd0c039198bd5b4e01679d64f63b9b42dc0c23839babdcab4d7382f50d02a9c84ee4b2a41d4ce7e23677a0041af8f592c7c7a5bcb7a6564ef6865f848b48c752f471489b2eaddd55ec24a01212630c551d19d481ab9992496ebf43f51db0860572e0958befb4cdbcb4f2af07e1e71ce919b909edd3bccffca7cb349ee347c3040521cd4d5f6023dda9d73a35e42b2909cc6442cc9a7ceb412d3a1123d063ccc7d6a942efff99bafc4952f6366e2b9162353fd9e536faea7efe7d74bfe6aecea205c67079375c229ddbd97a647b4bce734e82e32819f1aa8192684e80646400a5144b6de9fa1508c16685aeb68d2b593bac3a5dbe90f124b1a4dc7f265af5207c20ab1bbf956bf7111c713b7a4e0c4b00900da0b0b54f6e159bd27380c2b9012b697df1a95281e55cabb0e74341afa66b09633070200a6233797cb18c2847bc66726aa19f9a54b284efb3f0b0cc65f002928358ae49c03214f01676f719b15a7e12163d8ce8d9797ff267cfc6f28647a74c10339a0b2ecd33ebb95c7db471e9722e8a077a3441440279287ea44c49ee62d0f5ca39808874012cb2712dc9bd9e2f3a6dd7c4638c9e0fba8dd164256c5777c86feb2e28bf929d", 0x2000, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x90, 0x0, 0x8, {0x2, 0x0, 0x8001, 0x576, 0x101, 0x7, {0x5, 0x9, 0x1, 0x8, 0x7f, 0x2, 0xffff, 0x7fffffff, 0x6, 0xa000, 0x6, 0x0, 0x0, 0x3, 0x8001}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x1, 0xc18da8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x0, {0x0, 0x2, 0x0, {0x0, 0x4000000, 0x0, 0x100, 0x0, 0x0, 0x8000000, 0x8000, 0x200, 0x8000, 0x582, r4, r5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f00000009c0)='./file0\x00', 0x100, 0x1, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = geteuid() stat(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000c80)={{{@in6=@mcast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @local}}, 0x0, @in6=@private2}}, &(0x7f0000000d80)=0xe8) stat(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000011c0)='./file0\x00', &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r13 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r13, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r13, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r13, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x9, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0xd, 0xffffffffffffffff, 0x102, 0xed3, 0x2, 0x5, 0xc000, 0xfffffffc, r14, 0x0, 0x7, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001380)='./file0\x00', &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002300)="0258889cfed42af14fe54a086937b838dcb05fdf8c9e5fcbae16fc1c5dcb7d871efcf6b651b444ac0390d4796645c2099af20819766c9e9e99a57cf9b2734d687a73c02d0035561a5c72e458de1ae0f86024900b3f58ccaa6cac0acadfaf721b62aba2588c0e580ca2a9827be81ebd97df8668fbe7716e4ac6064d0c1d7f06d8bbd82eb3fea59883ef4d78284c2e5dedb0c40108ae2e31670fe981181f5a76cc97834a63f239eaad30591eea7b5c0660ed23ce4613252dea388e4a7db8ba6e8a0e5904f918ef5ee1306f8d13e8c9a3199511748b205eac00bed5aead05c234be7624068b7834c5b7368a2904b06e33ee86021b502ab3a912dc14d3206741fbe957476ae675d17cbe00b622162e2f1f3e162df8adff6b63b9a0434a71e76e298c336a548ec87f3335eed4aa0f0408c5679f3fc0070f2d81ef35bc25298086fdff42f63a08082e4cb016a5ad3038baa659772564c7831ebfedd10c04ec2408d6f968640d3629db541e44e3fd01638bdb6411ff687aa1f6b86c953213b6296c9527e8d9d97b4128ec4c981ac62ebecdcc188ffba6c4a7713ad94ecd10f94a724134ebfb02405e7de9d38d24cd565fe34eb06cc26ca5cd0afa815c98409188debd5d30632399b365a3dc5dc0b88acf0aaca44edc68d29672766b63efe60bbf91d110a86d1791fedbadbad3d7d92d8b7955309c04da16ae7a9a73b53fc6025515fa6ae3772b19b1d8c8a6835d1471801d76562e225b80c888f369a96e895fd6c6f755e93dd441572c4ee51d2927547ce912216da111871d9d8e414ba94f1fa9b2e489bb78b11ad5f742e7e1bede82e55162ff9231d7472fa6650c60b2d33e2a30f2a8b100c2629cad100fd21c156e23dc40b3a9c7439ad589a7023540ff5bcde013fa6007b5ba2fe5a3bbfc6aab7afbec752f19f1f350e8e0c685f2141378a20b35468c4f29a7f9fd8b974c3225ef132a6aa1597c0742982b27567f97eead05d1feb15b0e1bf8b425169c2ade1428b045759de4995f0a0b21af6ae3abccd50ad6e2677d7c8f66772ff666b8db18323a1d7f82d4a976c5bf3042bda354eff9870246ecb3e667cc4f9828cacdd32a425e5b76e78eb2be3f3fdfc30134cddacd2beea885b0321b7370276a24d8368271287adf8c675ec9f49f032d0cbbccd72d17b1a78946742c8abce355c5cc75aeff8edda16b8bd6c9dbcd7f0a1ffcb4de45c3e13bb946fc184d19ab6466c383c9026e4a6f09d6a9adc1ceff66b0521d8dfddd4d68731dfe560b1909be96d7df5004649348b23a200fc5e8b0d5d97722932b00f8ebb82554f9fb7f3491dc2a9f444b334865ac6cf117acc5b9eb5da4501f49f7ea23d30567b3301dec496b397d995238e1350fb0c489bcef6c92abce3e953e94456c5e76be14a133f76e4884a9d98ba2d6ef7263234037d7b2084533c8d562a57b526b7dd7e9d442a803cfe171ab4fdcd6b2b2af1f8c34d64a1a85630e64b2201cb8a74bb24c71a4e3bc20c1ec58aad7d893f6611804b2e6e792ce13bf424203fa8a87fa7eefc7d04dbe00e495fa62a76ce1438d208bda0557570a0592770315884785e3b6f07bb395258e7c11265f633a3769dba17de0d50d140ed44ce2a0c866a05946aaea05ee1ce584d97a710ae6ef6fd6152f8673a9a84a0a4026fefab6481c042aeb3ae4bd2b98b69756a4797d63f77eeafd9b28a1e441f18ffede6f7c25f116ad2e53b459d6c8bd79b9bf4225379dcd9a480188b9c5ef7eac38d966334bdc9617657eb8a192288f167ab8902a0a75864f690efd82f97c615c97227c97d71d7bc28ccb39356349547859b7e88c101cabe7841982ff69fe8266d01eb020da870dc1ca18415aede64463783615f895b99d40aabc5793544d9fcc8ec26281ba401073f17f7ce1dc4d4ba92bf27c5f827c5f317044aff7130a6254d38e8165ed59942af4ecdb732d2225dd2fd5d65e8b70d537a1f52f5a76975a5c57de524e0cbfe89bf714ed084031ed4557bd0b1aa8f307b8109f8a091b29a151b1a789bb8d78b54b41ba4357fe6e177fee268dd758b4a8daf3c60863c74a956b769c685ab81c3e7b024ab4d4064a047559014db9ec2ec7c05bef22b4bf861bda07b79c8f8eabbbccf1541b91785cc75efc3d3dfa7cfe16b7262b6768766ba0b1a9a6b98916c39bda49648e3113d6a700a1e355c5fc84896cda3891f320c1eea597a3afd2b0e321139ab5376f49d53800ff23579256ea37d24a8707aded99b583f8b6cb5a65f32f5b554cf04f029cd249a6196439702da434b329572fe92181147f8e97f8b1eef9371b458757fae2ecd3ff226a5717a009b4b629c3258db2853342e2f5f21732bb8783139a1217975847b401b62be1022101a0a9fad59a0e45ac8799c105a530ed86a7d770d7c81b0d364b144ef69dd105d5d71bc09aae0973aaf6f13b151edd975fcb6f7a9e8955c7a691d600a29221f8dff8e320c2e8141f5057f9cab359457572ab60de3e994460954c129d8bff65c0eb5365fec4dc829ced5df7f38617802901f20ae892012d03f65623231c8195ad9876720672720466a6df105f7bb61332b8c08e9167bbdd3aa864d9c9e76f7d7e6a15236ffd5fc88270d96657a36eec019d50022899d67caf303b89e0d6d0ec43996a52ceeacc63f96a6c22b13c56ecef30ffed5eba793e99dbcc671aa7145dd57e519d45f1567d49bcf2b04345df2561d4ccf784b10cd216fe6957db8babb4726644dba7ef60b763e6091783706bf27513801c8ad723e6b8719e04f9438104625dca56ce83e12a70e1c4cd793c5031fbfac2b28feebcd3e6a37fcd50c685f4143955facaf035e3b11e84e4240c627abcf0f4e6eb60f3d659770e631472a660fd8512356af9683a95113dd6ce2b04b4b002a596bcfc33f3028a13eace4b3ac05b1dc7fa6eafdc96987993be7edb39bf10afe32b460cbd7779bfa72cc94caa7ed38da7e24351edd6b8425f006958922b496fbe30b4e75926267fae1661d4a184a327c9b76b9e05762d59d6f513f7996cc78dfef883e1c173649a4dc2e7adc0e059ca6990e17e7b67e3317f7b3aca8a36707034880d8fc68e7d49e04a43992f17f8ac5bd3a5714ac2550fb434b2417fdb10c8b3352ba98c320009006d51f39d1026293cd84c74f9a4fa37ff36fcab317b3c7da251aec866cefe70032e2591dc59e5b22485d81ca04206298574bf67f8417c984cef0de1888d2b66203a0f060e837c5c99efbc866e3882e111cf68b9a394e7a55d820d32157570e1258bcc6bfd0a8a871d65306a06a69df97c4fffed29d21f268c4198f704a43c2a50936111fc329e099203ed2f21ddc7d1b971df239120f17eed8621dc954e6c0555fc8c68bd53169dd4bdf5906af5148376a19c7955cb869532b14a6ccc086d847dfa11948c46053dff056bf6e6271a43aaad3d9ec0f2981959fbf89c5cb60f480a4862a94808a08593a3866c5748ff56b038eeb28630b548ae836d7bedfaf29199950a832dc2757a1a811ff70c859d6c2cb1a9a7e08d4025179a93c5b29380c69e19dd110907f98d1ae8420546af8bf120477404b73e2db2aaa936e5eeb7406f8061ff6b1b6ba7c174f3de6e98ec74347da3ab7bf88496fc7924c6df6c27a921e60b13e9be05f1b1fc2b05ef5c865635ae9ec81c9df8044c3aac54ed3dec491cc6cc1584e13d0b74215632cddbb6c2c10f74a0c38cb92293f07e63e0057b54d634cee486848fa603b4587f89172b5fa9db2327901d6d55bb3390b929836c80276e44edd739b1e84e90a060270264810142fbd64b549df5e8684612296d60e7c27074f9e81c947f40fc9c4ce57314f96e4974a1f5d492775fb6478be0927ec7ad6d110c90372a587e001a2272f21b53c986ac8ca4eff44f73739e63e06b701fea2e135f6a883957aab6f8180e2d96c4ff42d8e4684879782d1627770994c3f96b3b64e1a31bafea88854f1b81a744c7f4a433a27e472b335af69f9d6aa199f675a2ce97498b1eaed2d4c698bf84675ea858e3b64564fb829403abf46cbd5bf65a64d32fa47682ab29d112c9f42f4416cf9186330ec55ed658632f37bb5b061ce2fc1e7baf470816bc82ac05d219885c65a59d88871a6b340386c18a95ff880c8535a78e249aa7f5732164fbc0cf2165fd766d3216a958d77490289865cb3f8fd294a40cd27ef3a688ec557533063532a1344f978b080e136dc61e78e234df194e6bd5dd5e49eb2f4c1cacd8f5d6a6023e4f0a8a625bbdc08b2f4b86ee7a5f9fd0c3984119eaf5314f79df94490785b4ca986cb1205d2052b0a5ae9574c53cdfcf48a5822d70e8ff0bd19d94ce52941aa9a4291668d4d1f8990cf2cb097b9ad5608aafb6cf41bda64edc1597a9f03e0622274c7677d6cc44c66d678c4b52042efdc235f4bf4c5e889d7c45b13a1b484c17a1d8d8e7e3a33455d308f7b7ac70b4973090f14f796d1f4b4c429dd0a7cf3b9a86a79a7433dd0590e1488b72f9c3aa4270b987478d0c1c312e8cb0e71b55bdba23fdc32b1d9ff32f20755138ad193e2cca8cf21454b5ccf9cac2f5731b8d009e463468998ca18696074f367bae5b0b676f18d61b1aae11c7c646a7900d9389f4729366facb9fa662ddd6d55c6256ce70823de1c313430b502c90728953fc60e2cc9ae495b6e0dd9a958b0802aaef48243e9254ceb4dc614f4df1940889bfab2843e99a57bfe848b5535c7d264d194288bbb0b94d922d4ff8b32e65bd24cf635c0d1653a6c491301aec3ff5021a1028353586b6ffb02e76fabe8676b9e2170470d6a79d3c39c58c9fc5f34e45fe15b4877c837bf496cd2cbaa5ee899ffc746558cad20f397badc815ebe9ad3e699d44dd691df02593e2b0d9567a080fd9586c022527feec420fa11fdc23f86d4212af218e53a239aec9c9c541e96a807cc3e8cfb2fe9ab8722b0e3028017e507a3770fcbdc2e3afa1a35d08430c2250040bc0b104f8a0f1864fb1988850dba7181a18be9b00b801a1c012c8c6d896a57dc85445deb5548b1cebb79b78c4f53dc8e3cef587d96d62885c68c9f00bbe0e37dc907c74d51d5cdcc74a276dc5d4c8e8a20d16fe2147e442ee3565622b5253cd505892924613140a52b87e43391ddf1dc4a027f54e2f3e9bf6e0aaf98188fd88cedac1a1e7a6131f02df1ba954fb3cf6c2e64d1558d40e2538d05e3c59c2a0da18be58b192eb4fc58e6639ad70f70539d2d4ef0881a250f622fca42a82939e7c70bf6b29e094c7f2d7a81e41e2c65b1407552e381ae74b4acbad1d658d5d14b68e2a51f9663a85dde31e9cce39a117f1315a1960a34d142591765b73c6d22620b5d2f6a45736178da6333f51cf7f1c13ae4d316a8b3f2efda380e0243938f7fcd5d53cbc5f2cd6a194f0333e181043bebbf41ed1d0c9a841e8e4815e6e3810cbc981152af072f9030ef3701926876d69434300954af1380bee8f106d1555e25c71977faa651b1383e951123b3787b4aa9cc0dbcf7409265716a3e40eb6c370dc7ea76cc1dae3e51e78907635028433edd0f21953f6b55bf081522c0d3d5c84fba1eb2a36b0b094f76eee23bbb98010ba1da07a096bdf7d7c14871a68122e1cd49c2ee2065c2767e2273de8e32084adaea5a5f5f2e0df44f568d267a4b89ba97218782bd6d6562010d76a7211b4d35b296a16a6d4745ad1530a9ec38a58d89d8b568a25ec6fddc9c1eda7614421043cc365923b13947ccafa3e8089b959de58757fb173596977823e9ec25c031ca67a0aacf663905e99db9f6a5a311ca9998d07a68aa61d6c883bd34f190d83dcbfb2483bc63ed70e9f149c6117377d3c778b782af547f9363b7787bc86176149bc6dfc753033806267bdd495b218ead2dc047dfee19e90230026110eb11ba904f38b54ab742f462e3c6c4287428082f310bc0f7d4d66ef705391233ba8bff2e106452709b8ea4b7e94f3832cd3504f0d0c4e6013af33c01c7fead03593cb5385f24ce074c42430359ac25dc2d1376a6c1e0c7c886747dc99f3ff47d5837bbba0f4916b58658d84abe47c58e135a7cbd455ad74e8c2c738bfc4205fba434b34825d1170604592a68ec0d3ecbd92d2e3d8bf81ac83d1bc1ba85c6ea2a25cc16c7fb4f360caaee98d40b5c24debbc28ea60315d0934fef0cacbe477bfbd07286bbec08abe61bfea4a6b80aecc4aaa8cd35502df671b326a960e252dbacfa06806fc588a3ac55c60d23864391a079caa519941b843d2b1ec92ad380852c4c8f030fb169ac0711db36f59cc410ff690108ae115be55d5c09e1fb828407a36f75ba709607a00527ee2b1e0a85e80b24b16d448c462b6be89624f669217ddd43f0e88d6c2b6ea21ee7fa8ca42d700731aa28116f6ceca88e186fe141bb83bed390639ef9f0bdd6ea2ba3d92f4e480990291b91824f03356829c3d353fdcea4705f0604ce510cb1562cc32183d4134e6d4ab5e629e32ae9f424beecef6a2fa29a675f268866d275279c39cfaec52d7740a017a0828260bd9f684bfe461c699b85dcedcbdbc5ac71fdbd264259c37815d819280435c4ce04886ac5a2734419c73acefaed891c645fa5646fe13d81f6c3b595ac1e555ce0aec38b6c94abba2d8dd649fc7f7144c653936424b2c89d873acf6e59ac9891d414a183a1ff794a091280413ed49945efa1b1498acbecdc4a1916d74981e95d9a5f59a7719ed57301a06caad6091b6c0d7e7f209c5b62367ad8fed29e164db3fb5cbc07ea2a8f054e6b28ec3a774a24a793fb727b43b805e3f7e6ebbfa4aabaf892ad5912b9024181f2859f473bf5d4cfaec40cd1ad228c209bd9754fe6d9a45237a4822e8b2030d77c8b1273151ae7fa672c3738189905365cc6011e2117502f68e99565d8ff934275bf0c5a16e99947f71667b2fa460b9a7cf5f29a3316b31438ae713922945fbf2c5a9b514de54ccac26db2d3a1bfb20ff2e458fc86d5a3e4a16b672ee5a827bc2c8fdc5d976d8b698b8d5c6f67f0c088e95054e00f8551e80632a000d30a348957ad461a45a54477e013562a59fa661ea3bb5d768f029fb792c85aba7d2ec879442f97371f1a9d09e01556db07d267237b6b01b47a24af99389d485b7febe752b76801d24f7ff9cb0d27e2fd76feaff4b76c219a5bc33f7203addd6e0dd7cfb9437da15c45bc4ab01080d8671d4eea4cb6b3f2d3c3721130b834e9034ade9059748cc1f2bc023846711f9f0ec2b8a0380916b323e281f790788f9c2889d42cc419ed29a00821c52719849d6e8517479ce29ecaaddc65fcdea020da4b06f804b01acc0c07588413646a5561a2ccf6b7ae1c6710718b210036bee72cafb31bdf64aa6a438f84eda8190c3da526ddbad59efccca77ce029de48f8f3d95aa5745a6c1eb63e20cbd531c3d5c368e26a96825a6170d55a500a6349005ad908adae142d5972b63b0fab66ef5d07384be80f258c3ee9cbb58c6bfb3bcd7b71eb76b20ff4f9c5678135beeaf33c9cb1fb140d63222225c1ae7ad1441e7c80c9d276b0f7b284f8aaf62391a2e1235d28a95ada21d8c01ac72345a346aa09b802673c90409aa95189fbef2f8f9fbfd8d1446581497958471ae8407ffd84f278f9c99dc7f70b60f5512a7e17399b8bfafaefe08fb824aaf59cce4ac31a67d462974670c6a93a2271d5f693a1259b92bcf2876d93189099800be2d0fce64b18fc73ecd2fdce24393eea258c732b7752f62f4538c8423c2aab786496d51d010291937e26610d4b5e0916be568971c55f60b6d3a0b11ec752014071377ee96a62570c8b86ca55aea50cd2133f9cd535b6c32e8ab85fae0711b26f3d00a380184ac4261df40fbb421c0b47632307c586b929eae9ec474ae9455ea567068796f135dc9d84f55896cacf68400753bf593421c2bb23dcdcdfab6dd27f3a08c35935b98e0795c8235366086741d63dd2ad36bf50930a39a3b3cbf5bb15f4208eb8b82cf82441205ce400d15a295a584a3b0abce56660c83dccbe77828facedad893d496968f8b7a0490b924c41e27a95733ae8acd9b4856b035fee2545a968b4e1edc08bb04d560dfc8d1d6b82c7f51933575aa80b46a57335c74aec52ccb78403a3f6ff2ea919658c5c19444b80966bfc3695900028956e0defea18a6f314535811e639bbcdcba56129935e18a8f55ae353bfd409c9724e787205c57e5d443fc3842cd372e19697b448715541f42ab8cc8c45ffeaf3d8c99eb80eb378279cf140be7a8274806e36a3599f837f614c485b7cb49ecf082b77a2f83b94c29011b708698f0acb58c1e10a291e241d7ed56fa2b64ce1c9efa4edaf825fc42cde32290e6aa2314c09cc4998bd816d3c5bb30b81f544dee3485e837f0626a2f8a43b9c58a79b86c7ed21bfe041a71288a34e908ebc9a7202b3d2d9891916597f8795b13f8cf2eb040644c5f5acb1782134c8f84491b691c025ceaf8744d43843c337f29e35c04471991eac7e96cc9c06d0e3e12f9f9ef1df0f38d18a3741b6128643a0c3c0a92cd670ef3e983051b01f4a9449eeeadee8c12950d4460ab9af40e995eb95fc4033c0dcc74062a1a0efeb0ac06fa7268a4c18aba9e8c3eef3e9c9e8c947c9cf1de96e0164d604ecb12571dea10ec6a01f315615418cfe056aeff4b6e035a2cdd3b12a55c2712657f50db7f23ce6ecbf3cbd8583b87ff81beb8d512e226587fd7a630fbdef503fcb8d97374fd5f7afb7848d2b28411722ee1c26d442d359fcb7c1e263e890e55e4e7e76aa4c5394d07a7a46aaa4c9f16b5e24265c8166a7d6483a9217dad7264f8180683fad5a32e7eeed85f54da9f891fb67c77c41c381a07189eae2f082a2a0589efd929c0d62fd4b2b36b539d6db5af6294c48f47e7d2e7908f7ea86bf71dd1c8393a89d2bb6dbbc7d72e16bebf29e8655a76987ff8627bf769f3617275d6163663c6735f2c932f0a45b8a664ffd17ad9e03bca29ed413ae25a8f532113634dd334f6a5044c57e5f5f2e01f37f72b5ef0568189621f920bcd9caff21caa2b681637388fa01c3896291dd7aac943ae32c1d736b0c32007b0982af9f2c1b6cc869712d718be6eee1dded6566d8778e083e7ef5cec43126b62a4a091d896ef470c2619b98108b3ed6a14680ea9f6043ed89e33116bc036bfe5f8545af7c85c42a7972319531f1195e1329f481bcc886a8af55ad3661d668ad9a20399fc19742b6135894232f4d4576e5507d234183f1b8d70b9791ce38661a98d1e313d6f9c71d0218b1ff87850d39b8eb0bbbcd60389af375f32b3e5e5b43de9781892621d1af4ffe76dc22704417ee5136b504b6ae92359baa0f9f28910f034515f49902ce83d449a4d49083ce73a29ff4b82e039b6d869345d5be011896278c25aef13207a307af24a2bcd010e3ffa59ae44ff610bd6030a46d1ed5a7bfd9a652aa31ecf6ec940c088e2b7bd936f5559b5b4904df5bbc534b064ac3a0ae0fb75b66dbbe8c7ab963f0c46fc307c6c55ba02e5f065cf9eba2664288463dfcba6260d6bd0086abe2979b3343a2f01b3b1d0ac957ec8de01606d36fc7977906d88629b2710cf84226469cfd0c69861032274b51d0e8ba20c24a3ce706893a0d48d7b465c436d240274da5e3f56308e084ef7c87ddd8551541286533662f5b45645af2e682e3bfca1b5ba5a08571464a21549cdf332ec3dd07177ab8afb410b5a1c9442737a7670731232e361d0225ec2a39fa4fcb646db4bd208299530db2477c9a8a8b67afe0a7e12a3be2f164ecc503aa6d818ae3c09e08af08ac923307c06a9edbb21bad677413ac97ea5fe818a8542520b8fa3f04a47a97c8bb2d0f8f775cae4add6c7f49bc8efbcdab5b00420ffd2dc94ed64e646b80218c86e668e3b4a0904ac1e901bcee5d6f3b60544bcfa08e87dd0d6af7f3b2c966029765541e09addabc26d4c4b4e76133786f46a67946f43ded022a0f0526c11c05513e331fa06a4b44d4b0d5597c825dd24d72356feb53c9c243d608146c23585461e751616865ca8ef91da202ce9772cd97347f8d7e7f68dcbfaf198c5f2fb8821786ee1ee07a5ae45e6675d4d725ab3aaa05f52b06061efc85bb39503e12d8c4fc7e832ccebe1d5dc14982816fdd6f100a2e50476b22884647eba03ad42de4557a314ca8bb6c953393b35c83009c8f8b3b2ce65af6219143d078ca3f9d1fbdbc3702e0f71bed7a19b9cbb8b2d8ee1f7c594efb732207516678d0f7dcc04fc4c17bac7396698c22ccca70edf17c1aa4c43967075ce35a4b849ac7f9bf2d1ef1cc5a460c0ba946d1321efa61d497bed1f42e033e8b135f4925f52ba410614aac49b322f744890e4fa4b8b0a679ce9ab1e0751435f9e50c0a6993eb1dcf352ef8a06a93a0221a4dc4a07f546cb40703be8ba804d77c9c756083e6e59b9218c57ae2852ebd8665f4991b4dbc975bb295bcb59e710d0e5117b5bcc54710a6a711528231234ff273edca74b0bc8d79877bb8bcca5f7763b1ae3aa52ba99ea7c28832a2763989a5abc6256ed92b9b7a563fd394daeb7786da10096466b277299a1807382aef4d9bfccf65c88b87efd170c03df3d94938cd1145e7c9e52e297d7ff960b8cf66f132efcc81dcce18c1afcdfa8bb7b2e09938aa13f9b447ae418bfa2b2351667c6ed7b772360da0382f7dd2c9b6dc1c425ea46fce679a3c4dff065f3f778d213d82b5e7b19a16826465509f6d084794c374f741a6d79e8b07251209e01738d6ee07faaa8556dc52a5a80c1c946a5904a66350b0922ac21b77581f7d7d0655f0fc22d11a67219758ab9a82f34c4dda292ba8048aa3d1ab454cc1ce2cde9b0de3c190bd689c5c9a7d9a909d3904f3a00476833b464da01e5ac8d0e99cefd02a941bb0dfc97c2d23c2ddac6d3f4555d9d6f5c6f81514a2d50df2a7fa9a1ec1eb1bc90a57f124f457caec975e5f3552a14e101a53a20bbbeb73c4e81de449953a625c65f77b3e93b90367af894adf197ae72fae6c656812d9c87e53a5cdb24ff5e90f9954a53f478d77a431422879a65e8e4cc764f958c606766a77cc8d8085edef0d397a91e9e81155e500d7f47eabd0cc1cb0b4cd391802f77a4135a0642e83e40859ee836473921f68f8913cbeb4409fde3aeb44e609e1945c64c52b1e60c49f00b20c9781d449cc8d4befde4f6134693f773630538d16c30ccbfbdd9f96010d20702112ca489a5bfbc68058debf002219cb75b972f5f0759b59d5cc21a55e43b498ad790aee2f72b78cd7ed5b7b783f7b884d553a0014095e6fb532ba27db08948c2cecbe3fe091a55e6a8056c4506c18c76b6fb6d1c99eeb834e6fb1c793d48e128e316c807c98014e6f99acf65f89e9b01795b5d3cf52920f72118d719fa460d55a229ad6fbf553e8b9d5a1471ae160966364ae93be4ffeddcb6a2fb1d13dcbd8b4245f21418e564bf89ccb845f3727ca5ab079a3cd4f8f6270d155276b47bd5f90715f05e62bb92a1f202c1be1648d4103f28d18cb4050f4e2bc50001acd0ea5f25d7ae3aa29c3ca379ee1fa7d06fdb521daff2c0097cb93ab1f55cc8261fbe56ef7ca7a1f8b386d6b68d5d73ac47217b1d7ea68c391711dd070601785ee2a04660b004f48961d97767a368aaa0", 0x2000, &(0x7f0000001580)={&(0x7f0000000380)={0x50, 0xfffffffffffffff5, 0x1, {0x7, 0x2b, 0x100, 0x40810000, 0x80b, 0x0, 0x4, 0x3, 0x0, 0x0, 0x1, 0x7}}, &(0x7f0000000400)={0x18, 0x0, 0xb, {0x3}}, &(0x7f0000000440)={0x18, 0xfffffffffffffff5, 0x0, {0xf}}, &(0x7f0000000480)={0x18, 0x0, 0xfffffffe000}, &(0x7f00000004c0)={0x18, 0x0, 0x4, {0xd4c6}}, &(0x7f0000000500)={0x28, 0x0, 0x0, {{0xe08b, 0x8, 0x1, 0xffffffffffffffff}}}, &(0x7f0000000540)={0x60, 0x0, 0x4, {{0x1ff, 0x9, 0x3, 0x6ff, 0x5, 0x5, 0x9, 0x5}}}, &(0x7f00000005c0)={0x18, 0x0, 0x5, {0xfffffff7}}, &(0x7f0000001640)=ANY=[@ANYBLOB="110000004107c5e0ae078b776516f55a00fde8e5fa142bd29ebb7021dee37cbb8e710162a9b62d1cda72b88e0047d0ac234861d06f902e82ea7b1df73efc75bcf0f1e5000f7421b71af24920ff2e4388689eef56e52a86bdd29d8bf1447ba2b4896883f3d99a9fd1d7629a62cbe63b14ba5f7d9795fb2472e1435d30b389317bd2adf6f3b6ff373d910a11a1917f35a992c209adffa02f4b379f469493b5238f6f38eb8a52515959bfdd6c54d331f567a423e4b1d9c0cdc9434b9c1af8"], &(0x7f0000000780)={0x20, 0x0, 0x400000}, &(0x7f00000007c0)={0x78, 0x0, 0x9, {0x9, 0x6, 0x0, {0x1, 0x6, 0x3, 0xdbb, 0x400, 0x0, 0x400, 0x0, 0xfffff800, 0xe000, 0x5, 0x0, 0x0, 0x85, 0x5ae0000}}}, &(0x7f0000000840)={0x90, 0x0, 0x2, {0x4, 0x0, 0x800, 0x4, 0x80000001, 0xb, {0x3, 0x800, 0x3, 0x4, 0x9, 0xdd, 0xa0b, 0x257, 0x6, 0x1000, 0x7, 0xee01, 0x0, 0xf, 0x4}}}, &(0x7f0000000900)={0x98, 0x0, 0x7, [{0x1, 0xfffffffffffffc01, 0x9, 0xc1, '$-0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000100)={0x38, 0x5, 0x49, 0x1, 0x1, 0x800, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket$netlink(0x10, 0x3, 0xa) r5 = dup(r2) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRESOCT=r0, @ANYBLOB="05002abdb1c2bbacdf2501000000d281c9b79189cbaf11c463d56b07ebc0400008803c0000803e000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff1400040002004e21e0000002000000000000000008000100", @ANYRES32=r4, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r5, @ANYRES32=r11, @ANYRES8=r10, @ANYRES8=0x0, @ANYRES64=r7], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) 17m33.717591669s ago: executing program 0 (id=1758): socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f00000000c0)='./file0\x00', 0x143) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) socket$alg(0x26, 0x5, 0x0) r1 = syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc382, 0x800, 0x2, 0x36a}, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x38fe, &(0x7f0000000380)={0x0, 0x1fffff, 0x10100, 0x80000, 0xfffffffc, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}) io_uring_enter(r4, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0xfffffffffffffffe, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r7 = getpid() r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r10 = syz_pidfd_open(r7, 0x0) setns(r10, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x8100, &(0x7f0000000200)={0x87, 0x1, 0x80000}, 0x20) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x22000, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) dup(r13) 17m32.471300668s ago: executing program 0 (id=1761): r0 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRES32=r0], 0xbc}}, 0x6000880) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0xa0000) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/101) 17m31.991610849s ago: executing program 0 (id=1763): openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x2, 0x0) (async, rerun: 64) ptrace(0x10, 0x1) (rerun: 64) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x5, 0x13, 0x1, 0x0, 0x5f, 0x3, 0x0, 0xa6, 0x2, 0x5, 0x6}, {0xfffffff9, 0x4004, 0x0, 0x0, 0x0, 0xf6, 0x1, 0x8, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x5, 0x7, 0xfe, 0x5, 0x2, 0x0, 0x4}]}) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async, rerun: 64) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000002400)={[{0x3, 0xce, 0xfa, 0x5, 0x3, 0x96, 0x9, 0x6, 0x75, 0x0, 0x2, 0x6, 0xffffffff}, {0x15, 0x1, 0x6, 0x2, 0x1, 0x6, 0x2, 0x6, 0xb, 0x5, 0x4, 0x9, 0x1}, {0x2, 0x1000, 0x8, 0x52, 0x1, 0x2a, 0x7f, 0x8, 0xb, 0x40, 0xf4, 0x4, 0x200}], 0xfffffffe}) (rerun: 64) r5 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r6 = dup(r5) write$binfmt_elf32(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c464a030103ff0700000400000002000300040000003e03000038000000d600000097700000fe03200001000700080007000000000003000000ffffff7f02000000000400000d000000010000800900000007000000"], 0x58) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x8001021, r6, 0x0) (async) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) (async) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') read$FUSE(r8, &(0x7f00000016c0)={0x2020}, 0xfffffce3) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 17m31.384398669s ago: executing program 33 (id=1763): openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x2, 0x0) (async, rerun: 64) ptrace(0x10, 0x1) (rerun: 64) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x5, 0x13, 0x1, 0x0, 0x5f, 0x3, 0x0, 0xa6, 0x2, 0x5, 0x6}, {0xfffffff9, 0x4004, 0x0, 0x0, 0x0, 0xf6, 0x1, 0x8, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x5, 0x7, 0xfe, 0x5, 0x2, 0x0, 0x4}]}) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async, rerun: 64) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000002400)={[{0x3, 0xce, 0xfa, 0x5, 0x3, 0x96, 0x9, 0x6, 0x75, 0x0, 0x2, 0x6, 0xffffffff}, {0x15, 0x1, 0x6, 0x2, 0x1, 0x6, 0x2, 0x6, 0xb, 0x5, 0x4, 0x9, 0x1}, {0x2, 0x1000, 0x8, 0x52, 0x1, 0x2a, 0x7f, 0x8, 0xb, 0x40, 0xf4, 0x4, 0x200}], 0xfffffffe}) (rerun: 64) r5 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r6 = dup(r5) write$binfmt_elf32(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c464a030103ff0700000400000002000300040000003e03000038000000d600000097700000fe03200001000700080007000000000003000000ffffff7f02000000000400000d000000010000800900000007000000"], 0x58) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x8001021, r6, 0x0) (async) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) (async) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') read$FUSE(r8, &(0x7f00000016c0)={0x2020}, 0xfffffce3) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 14m20.692145763s ago: executing program 4 (id=2468): arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x0) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x6) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x11) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0xd) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x10) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0xd) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x10) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0xe) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x3) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0xb) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x8) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0xf) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x12) r0 = io_uring_setup(0x4a18, &(0x7f0000000000)={0x0, 0x2, 0x1080, 0x1, 0x1e5}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = syz_open_dev$hiddev(&(0x7f0000000080), 0x18f1e787, 0x10000) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x413c2, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x5, &(0x7f0000000100)=[{0x3c2, 0xd1, 0xf4, 0x3ff}, {0x0, 0x9, 0x40, 0x5}, {0x7, 0x5, 0x1, 0x6}, {0x7e4, 0x4, 0xf, 0x2}, {0x7, 0x8, 0x3, 0x7}]}) r7 = syz_open_dev$ptys(0xc, 0x3, 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000001c0)={0x8000, 0x0, &(0x7f0000000180)=[r1, r2, r3, r4, r5, r6, r7]}, 0x7) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x9) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000200)={0x0, "d704d9967ca951b4cd4f6808f5355eb7"}) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001200)={r8, "ad72647386d651ec4b57669c6f137187"}) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000002200), 0x127881, 0x0) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0xb) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0xc) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x10) 14m20.572898124s ago: executing program 4 (id=2471): setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) r0 = socket(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0xf00) (fail_nth: 24) 14m20.176510576s ago: executing program 4 (id=2473): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001080)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xe04, @dev={0xfe, 0x80, '\x00', 0x10}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x30}}], 0x1, 0x18c0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x11, 0x4, 0xf}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) 14m19.995440243s ago: executing program 4 (id=2474): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000300)=@x86={0xff, 0x0, 0x9, 0x0, 0x8, 0x3, 0x1, 0x6, 0x7, 0x1, 0xd, 0x0, 0x0, 0x3, 0x0, 0x6, 0x7, 0x6, 0x80, '\x00', 0xc9, 0x6}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000200)={0x3, 0xfffffffa, 0x9, 0x1, 0x2, 0x10000}) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x2641) ioctl$LOOP_SET_FD(r6, 0x4c00, r5) dup2(r5, r0) 14m19.431840379s ago: executing program 4 (id=2478): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) syz_open_dev$vcsu(&(0x7f0000000040), 0x2, 0xa400) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0xc], 0x80a0000, 0x2010d3}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000380)={0x8, r1}) 14m19.248213564s ago: executing program 4 (id=2479): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) add_key$fscrypt_provisioning(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)={0x2, 0x0, @d}, 0x18, 0xfffffffffffffffe) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x285, r0, 0x1}) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x40000) ioctl$SNDCTL_DSP_STEREO(r3, 0xc0045003, &(0x7f00000000c0)=0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0086202, &(0x7f0000000080)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) add_key$fscrypt_provisioning(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)={0x2, 0x0, @d}, 0x18, 0xfffffffffffffffe) (async) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x285, r0, 0x1}) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x40000) (async) ioctl$SNDCTL_DSP_STEREO(r3, 0xc0045003, &(0x7f00000000c0)=0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0086202, &(0x7f0000000080)=0x2) (async) 14m18.748013254s ago: executing program 34 (id=2479): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) add_key$fscrypt_provisioning(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)={0x2, 0x0, @d}, 0x18, 0xfffffffffffffffe) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x285, r0, 0x1}) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x40000) ioctl$SNDCTL_DSP_STEREO(r3, 0xc0045003, &(0x7f00000000c0)=0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0086202, &(0x7f0000000080)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) add_key$fscrypt_provisioning(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)={0x2, 0x0, @d}, 0x18, 0xfffffffffffffffe) (async) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x285, r0, 0x1}) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x40000) (async) ioctl$SNDCTL_DSP_STEREO(r3, 0xc0045003, &(0x7f00000000c0)=0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0086202, &(0x7f0000000080)=0x2) (async) 5m18.160114501s ago: executing program 5 (id=5052): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e22, 0x1000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x401}}, 0x1, 0x7ffe}, 0x90) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1, 0x7}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000040)={r4}, &(0x7f00000000c0)=0x8) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r5, 0x0, 0x4, &(0x7f0000000200)="440910bc996c301c8183070400", 0xd) sendto$inet(r5, 0x0, 0x0, 0x20000450, &(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000504000f275b6c4e2f7b921299ac", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e000018000280050016000000000006000e000000000004001200"], 0x48}}, 0x0) 5m18.046587882s ago: executing program 5 (id=5053): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2458a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000044}, 0x40) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000040)={r1, 0x1, 0x6, @random="7b8756406d20"}, 0x10) 5m16.45274748s ago: executing program 5 (id=5056): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7\x00', 0x0) 5m16.177323963s ago: executing program 5 (id=5060): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r2, 0x0, 0x4004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000080)='./bus\x00', 0x1, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001020000082505a1a44000010203010902"], 0xfffffffffffffffc) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r6, 0x4c00, r5) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) dup2(r5, r3) 5m12.692879558s ago: executing program 5 (id=5076): preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f00000000c0)={0x0, 0x10, 0x83, {0x83, 0x7, "bfddaee5a5253d6138de096562e8538876fd543b2d12f2a7c7704222b26e5cadafcd4006373e12310cb5ce5cffe0e6045d170f39c919de22ea937966c3e2915ef2689e68ce99315890197ac87279969477288bb8aeeed2d43a6e7a32dc32c0068918ca4ba9c994d8b1b8da02766eaa435f865f172e2ac812f029d6ef3056489ce5"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x200a}}, &(0x7f0000000180)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "fba4474a1014c1c04673bd86e0aebfef"}, @ssp_cap={0xc, 0x10, 0xa, 0x6, 0x0, 0x0, 0x0, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d6838af1fe47cd8f493078237ad7a2d1"}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x84, 0x1, 0x4, 0x1, 'R^~E', "70a191b7"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x18, 0x65, 0x2, 0xf, 0x2, 0x800}}}, &(0x7f0000000780)={0x84, &(0x7f0000000280)={0x40, 0x12, 0x63, "a848fa99c50202cf94bcd89f271560b42ebd6cfe40284d25b45b7eec0fd3646fd6f5af084c52efa1075f2911b03b2f308dfc103f6dae827c8eda1db4ce98251b5c2762757982da857deea69dc176716d114febf08ea801b2d4538d9dea9464cb404c00"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x77}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x1, 0x6}}, &(0x7f0000000400)={0x20, 0x0, 0x8, {0x200, 0x40, [0xf0]}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x5}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "d1e1"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x400}, &(0x7f0000000540)={0x40, 0x13, 0x6, @random="6ded6e22f59e"}, &(0x7f0000000580)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "299f"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x3}}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="001203000000c8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 5m12.279246555s ago: executing program 5 (id=5078): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x19, 0x14, "ffb3d741dd17c1ac0d38ef0200000000000000000000000000000000000000000000000000fe00", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xffffffffffffbffe, 0x53e]}}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000700)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x2ac, 0x0, 0x0, 0x15, 0x19, "8975301576b0cf0900245518580ce0c8bf604cca41f31c108938fcfa393edb69e0bcff0f0000000000000900000000000100d0f08e8ad896ba67a00973defa00", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee41b80000827cc7d24fdc26f2395d702020000e4b8fb1703e47463b969e4", "ca1bf5ff2b4a000000000000008218040000db00", [0xc, 0xfffffffffffffffd]}) 5m11.619742497s ago: executing program 35 (id=5078): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x19, 0x14, "ffb3d741dd17c1ac0d38ef0200000000000000000000000000000000000000000000000000fe00", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xffffffffffffbffe, 0x53e]}}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000700)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x2ac, 0x0, 0x0, 0x15, 0x19, "8975301576b0cf0900245518580ce0c8bf604cca41f31c108938fcfa393edb69e0bcff0f0000000000000900000000000100d0f08e8ad896ba67a00973defa00", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee41b80000827cc7d24fdc26f2395d702020000e4b8fb1703e47463b969e4", "ca1bf5ff2b4a000000000000008218040000db00", [0xc, 0xfffffffffffffffd]}) 14.285385235s ago: executing program 8 (id=6158): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) execve(0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000380)=0x0) sched_setattr(r2, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0xd01, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xa001, 0x45001}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x0, 0x2000000}, 0x20) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x19, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000140)=0x2, 0x4) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) r5 = socket(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@gettaction={0x1e8, 0x32, 0x200, 0x70bd25, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}, @action_gd=@TCA_ACT_TAB={0x54, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x44}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa1d}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb4b5}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x14, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_gd=@TCA_ACT_TAB={0x74, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x1e8}}, 0x880) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'team0\x00', &(0x7f0000000140)=@ethtool_sfeatures={0x3b, 0x2, [{0x209}, {0xffffff7e, 0x5461d6e7}]}}) r7 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$VIDIOC_S_CROP(r7, 0x4014563c, &(0x7f0000000100)={0x9, {0xf8001002, 0x9, 0x6, 0xb}}) 11.492124857s ago: executing program 1 (id=6161): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x1000)=nil) openat$tun(0xffffffffffffff9c, &(0x7f0000010140), 0x101000, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000900)={0x14, &(0x7f00000007c0)={0x0, 0x1, 0xca, {0xca, 0x11, "ebe39c6e06e3e2182781c3cfa853224cb82087ee58fdf2f33552f60993f3e6f3ec69a7fe9d678c685cee139e933b7296930a8807b2788ce8fcba9d2794b02df0cf11560d0c904e619d2ccc10d00954f371f14eae584594c75c7cd203816e01f102f5d02f1bd9e8d962f8b664b0e8c8b259afe12ae382af195d5b5029d75f3c596cbfd6b3937c2023e028b78d0e21a2b9d6b9238b67c88a572626f4547d08db760971bd311e83f7703a649a3369e38e522ce48e8e7625e1d0e5f9a3a4aa91cf37ee59b136b9e9c8fd"}}, &(0x7f00000008c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1801}}}, &(0x7f0000000b00)={0x34, &(0x7f0000000940)={0x0, 0x31, 0x50, "f9cbbb265e693f717775057b8e8fdea79a438a76de3ec9487d1b766946ddd4f08bdef16ff11a3ed738c7f7beadb46786593a0909de3b600f7f233e9f8420f3fd288e3982d21084ddd65b0f3ccd2af463"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000a40)={0xc0, 0xa1, 0x4, 0x100}, &(0x7f0000000a80)={0x40, 0xa0, 0x4, 0x4}, &(0x7f0000000ac0)={0xc0, 0xa2, 0x2f, "44deb83026eac38cbc7c862f44419f597b549aba3a6969fc279967454f13062c79fa684ca9117de16c454998e230dc"}}) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000e00)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="400c8a0000008a05fe0d99b9f3fb99f9066848eb6f5807de2ac70e91ec7c3dd3139271dba86e3370474be0bf97323e82d4c99c49c945c97d37ec5f5688c5c154ab7c803dee3eb4758de917a561bdcc989e4b544fd4219bd8d5e7339264629ae7a903ef2848ab17a0f39f36a615ad5d366e5896318508ebc20000010000000000a07a382a06ca957ec3bcbf728587eb195be2402f1ee4fd3924ced1575a026959d3275032e2003a022bb9b869d3161a9adad9512cf8"], &(0x7f0000000c80)={0x0, 0x3, 0xf8, @string={0xf8, 0x3, "7188f556253097251a8665b693fc85e25d14bb7c1b27de0e605e36b3e2bc2d39a47bbcb4fe709af48477ed5b82fb088674602b3d844cd7dbe64141644d7f62810c646c07a9b1e235afb69eb85d148bcf330892d790d1909e36738b2f1c24d7725542dc1d5a6814e266b3369d249f22a0d16c6b563dee5a40bd534a791a33420fc85848c257bd7ae4d77e491364c3981427b744569686e54580f85df7f9ba2868b790d6291e04044afefbc8dafaef919d474ea4f4415d1c88e4444c1bb6e4d821a79704df15fc33ef33f2796e314ef279cb67695db38c439a1b84afa60f9d7d415e69c06265d396eb319e38f9458ffd402e492bf89532"}}, &(0x7f0000000d80)={0x0, 0x22, 0x14, {[@main=@item_4={0x3, 0x0, 0xc, "74bc8d04"}, @global=@item_012={0x2, 0x1, 0xa, "ee1b"}, @global=@item_012={0x1, 0x1, 0xa, "c8"}, @local=@item_4={0x3, 0x2, 0x2, "1b8c9b4b"}, @main=@item_4={0x3, 0x0, 0xa, "bb778b41"}]}}, &(0x7f0000000dc0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x5, 0x1, {0x22, 0x5dd}}}}, &(0x7f0000001000)={0x2c, &(0x7f0000000e40)={0x0, 0x12, 0x75, "63875f13a2e698261467e7c5a321a0474bba38d619302b0bf2d12dc6988620ff0cbc882c3060948eddceffdfafa1808ee61b044e861a3735f5ba44dbc8fdac6b09396eef1b85bab9f6a7dfa3010c62f1790f78049028b0c8814d7755035b3f61f0e1784cf0521171ecd4c2eb2998408e07ab899d7e"}, &(0x7f0000000ec0)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000f40)={0x20, 0x1, 0x60, "cff02f892cf8e1b71d9e4a81c991306c4578c0d7ef9d4117ea46eb75ceb00b42246ac929b47302968e59420aac811757ecf72395d772dbbd10102306ce5dd43266fa5a938f7d4b7f8492c5b44d28d5c693c092758dcc2af5854b996def8c7156"}, &(0x7f0000000fc0)={0x20, 0x3, 0x1, 0x2}}) recvfrom(r1, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/custom1\x00', 0x0, 0x0) 10.206369836s ago: executing program 8 (id=6168): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0xeeee0000, 0xb, 0xfefffffb, 0xfffffffc, 0x0, [{0xc, 0xfc, 0x18, '\x00', 0xb4}, {0x83, 0x9, 0x7, '\x00', 0x4b}, {0xf9, 0xe, 0x7, '\x00', 0xda}, {0x0, 0x5, 0x0, '\x00', 0x8}, {0x8, 0xd, 0x8, '\x00', 0xff}, {0x2, 0x6, 0x6, '\x00', 0xff}, {0x6, 0xe, 0x47, '\x00', 0x6}, {0x5, 0x90, 0x4, '\x00', 0xe6}, {0xe, 0x0, 0xa7, '\x00', 0x1}, {0x9, 0xcc, 0x16, '\x00', 0x5}, {0xfd, 0x9, 0x15, '\x00', 0x8}, {0x0, 0x3, 0x9b, '\x00', 0x7}, {0x2, 0xca, 0x80, '\x00', 0x4}, {0x3, 0xf1, 0x6, '\x00', 0xb2}, {0x8, 0x4, 0x0, '\x00', 0xfd}, {0x0, 0x0, 0x4, '\x00', 0x1}, {0x7, 0x2, 0x8, '\x00', 0x3}, {0xee, 0x6, 0x4, '\x00', 0x1}, {0xf, 0x41, 0x6, '\x00', 0x1}, {0x9, 0x3, 0x54, '\x00', 0x4}, {0x4, 0x3, 0x7, '\x00', 0x4}, {0xc, 0x3f, 0x7, '\x00', 0x4}, {0x5, 0xfd, 0x4, '\x00', 0x12}, {0x5, 0x6, 0xfa, '\x00', 0x40}]}}) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000100)=0x9) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ce2a4fa77baa108b"}}, 0x48}}, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="010000000808000000000000000000001da5bae7889af52940292d7f41b4040085ac2086df19dd5233e907031ff512d7b7c15b38339bf5a046141bc91c69dd1fa1d91ac77729a007f892f24c58cdbc598f054d375567869f4dd4987f30f4168d0f8715374bbbad05a50e9cc0f0f85c743ffdcfcf49b5d045a4ad371ea737dff21bb5d5332915be245a8ceb0e15c301c78525a465790c003893dd0896719ddb019531414454de6dce3313c2b5a40b3c60a084dc47940b734469ce231d6375f26ca960bc23", @ANYRES64=0x77359400, @ANYRESHEX=r0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES16=r1], 0x80}}, 0x0) 9.784253165s ago: executing program 8 (id=6172): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) getpeername$unix(r0, 0x0, &(0x7f0000000340)) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b00010000000009040000015c293000090509"], 0x0) 8.362996035s ago: executing program 1 (id=6179): mount$fuse(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b", @ANYBLOB=',rootmode=0', @ANYBLOB=',group_id', @ANYBLOB=',']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 8.211077783s ago: executing program 6 (id=6180): r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x2, {0x1}}, 0x18) sendmsg$inet(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)=[{0x0, 0x500}, {&(0x7f0000000780)="8af83b42e304bd", 0x7}], 0x2}, 0x0) write(r0, &(0x7f0000000240)="7818840e72127022e1f1c3601a618b74bdf57f6b274c2309437a6b3816c7", 0x1e) sendfile(r0, r0, &(0x7f0000001000), 0xffff) 7.979808169s ago: executing program 1 (id=6182): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x4041}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x8c}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201e61d4c05c405000000000001090224000100000000090400000103000000092100000001220500090581030000000000"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a0005"], 0x24}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x1) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000800000300012800b00010067656e657665000020000280080005000000000014000700ff0000000000000500000000000000011400350067656e65766531"], 0x64}}, 0x0) r6 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000140)={0x20000000}) r8 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x401}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x6, 0x3, 0x6, 0x2, 0x0, 0x8}}, {0x4}}]}]}, 0x60}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000080)={0xc0002008}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) setgroups(0x0, 0x0) pread64(r4, &(0x7f0000002140)=""/17, 0x11, 0x0) 7.883408518s ago: executing program 6 (id=6183): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000180)=0x7ff, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xb, 0x0, 0x2}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000000)={'veth1_to_hsr\x00', {0x2, 0x0, @local}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 7.616619494s ago: executing program 6 (id=6184): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000080)={0x8601, 0x2}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_io_uring_setup(0x1238, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x2, 0xab9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}}) io_uring_enter(r6, 0x47bc, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x1, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x468, 0x238, 0x238, 0x468, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) dup2(r9, r5) syz_usb_connect(0x6, 0xe6, 0x0, 0x0) r10 = add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000)="100c0681000000ba8b0ad775b31b", 0xe, 0xfffffffffffffffc) keyctl$update(0x2, r10, &(0x7f0000000240)="ea6e367c0d981f911e4fba225f3a984c43b626e52024b33a9a9e2843a3b1885f96aaee8e3ffcc7f550a31cfa7e997f2596fd1b946cb4e5c4d880644779a9bc4a8a791028c2da5defafbe873237daf7fe6848115f06cd15f8e86a6487eb0be4b0c6705decbefcb3f3cc32fb7edc85e8d9dd", 0x71) keyctl$restrict_keyring(0x1d, r10, 0x0, &(0x7f0000000140)='\x00') r11 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r11, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000e40)='\b', 0x1}], 0x1) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028005002b000300000005002c000000000022cc1d50c3d6d6941c72b360a42d5b15c35ef2d4def9152fecaf390cc9e6659c3f8a1ebe5ee3f2cf35df986009b6aaf60b1b33734a467489876bf13b6d07e28799e5f34941bf7868b8f21bd0c3b12ce703797de74e558f88ed651620be"], 0x44}, 0x1, 0xffffffea}, 0x0) 6.778462639s ago: executing program 8 (id=6187): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500007fff000000b7020000000000007baaf8ff00000000b5090800821300007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7040000080000004600000076001e00bf98000000000000b5080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.623879498s ago: executing program 8 (id=6188): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0xfffffffffffffdaa, 0x6, 0x8, 0x8001, 0x7, 0x9, 0x0, 0xfffffe0000000002, 0xe, 0x1}, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x30314442}) (async) r3 = socket(0x1d, 0x2, 0x6) (async) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100)) (async) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x84) getsockname$packet(r7, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c8000001000850600"/20, @ANYRES32, @ANYBLOB="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"], 0x3c}}, 0x44000001) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x81) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1b, 0xe, &(0x7f0000000c00)=ANY=[@ANYRES64=0x0], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x800000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x10}, 0x94) (async) ioctl$sock_inet_SIOCGIFBRDADDR(r6, 0x8919, &(0x7f0000000140)={'wg2\x00', {0x2, 0x0, @empty}}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) (async) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r5, 0x0) 5.440593888s ago: executing program 3 (id=6190): socket$inet6_sctp(0xa, 0x5, 0x84) set_mempolicy(0x2, 0x0, 0xf5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000b00)=""/186, 0xba, 0x100e0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x5, &(0x7f0000000200)={[0xffffffffffffffff]}, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0xfd, {0xffffffffffffffff}, {}, 0x8001, 0x1}) sched_setattr(r3, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x1, 0x0, 0x5, 0xc000000000000000, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = userfaultfd(0x80801) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000000)={0x0, 0x101000, 0x8}) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000d76000/0x3000)=nil, 0x800000}) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000240)=""/215, 0xd7}, {&(0x7f0000000340)=""/106, 0x6a}, {&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f00000005c0)=""/242, 0xf2}, {&(0x7f00000007c0)=""/250, 0xfa}, {&(0x7f00000008c0)=""/217, 0xd9}, {&(0x7f00000009c0)=""/234, 0xea}], 0x8, &(0x7f0000000740)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001300)=""/4096, 0x1000}, &(0x7f0000000540), 0x8}}], 0x30, 0x40021}, 0x20004080) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_usb_connect(0x6, 0xffffffffffffff80, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x3f, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) 5.12023996s ago: executing program 7 (id=6191): socket(0x29, 0xa, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES8=r2, @ANYRES8], 0xe8}, 0x1, 0x0, 0x0, 0x4004810}, 0x40041) r5 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000004800010000000000000000000a00806e0800000000000000140001800d2a79075827af5aa534d6815c2e93f10c000280", @ANYRES32=0x0], 0x3c}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r8, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000400)=ANY=[@ANYBLOB="e21ec151073f514a6dfc29ea8e413870c40606d58a8a9c433a93fabd156d9857fa15a879e565a1c0f369cbfdf48aece78215c93dcb00000000000004eb6c76bf00de7800"/82]) socket(0x80000000000000a, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48) r9 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r9, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$sock_linger(r9, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r9, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000200)}}], 0x1, 0x4001c00) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000367000/0x4000)=nil, 0x4000, 0x19) 4.856569606s ago: executing program 1 (id=6192): mount$fuse(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b", @ANYBLOB=',rootmode=0', @ANYBLOB=',group_id', @ANYBLOB=',']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.544063024s ago: executing program 1 (id=6193): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x13, r3, 0x2000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) sendfile(r6, r6, 0x0, 0x40008) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x2000000}, 0x1c) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(r0, &(0x7f00000029c0), 0x400006d, 0x20000004) shutdown(r1, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r7 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0xfffffffb, 0x10000, 0x1, 0x3, 0x0, 0xfffffffc}, 0x1c) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r8, 0x6ca52000) r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r9, 0x400, 0x1) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000040)=@req3={0x3, 0x7bfe, 0x1000, 0x4, 0x80000001, 0x3ff, 0x39}, 0x1c) recvmmsg(r1, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/175, 0xaf}], 0x1}, 0x8}], 0x1, 0x0, 0x0) 4.312196311s ago: executing program 1 (id=6194): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x2f, &(0x7f0000000140), 0x4) r4 = fcntl$getown(r2, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, 0x0) chdir(&(0x7f0000000480)='./cgroup\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) open(&(0x7f0000022ff6)='./control\x00', 0x403000, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r7 = inotify_init() inotify_add_watch(r7, &(0x7f0000000000)='.\x00', 0x400017e) 4.243267733s ago: executing program 6 (id=6195): signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) socket(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2000000000000009, 0x8, 0x0, 0x4}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$ttynull(0xffffff9c, &(0x7f0000000980), 0x200, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'ipvlan0\x00', &(0x7f0000000180)=@ethtool_ringparam={0x50, 0x9, 0xfffffffc, 0x0, 0xffff2aec, 0x5, 0x802, 0x8, 0x6}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r6], 0x50}, 0x1, 0xba01}, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) statx(r7, 0x0, 0x800, 0x8, &(0x7f0000000480)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x78}, 0x94) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) ftruncate(0xffffffffffffffff, 0xffff) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0x0, 0x0, 0x5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000b508000000000000638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r8, @ANYBLOB="0000000002000000b703000008000000850000006a00000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x16, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 3.524287713s ago: executing program 7 (id=6196): r0 = fsopen(&(0x7f0000000200)='overlay\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000100)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000880)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xecQ\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849@\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xf4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;\xf1C\xea!J\x19\xe1\xfe\x0f\x84\xdfY\x10\xed\x1c\xb2n\xc0ME\xaa\x9e\xd1f\x92q\xeb\xdb)\xcd1(>\x8e\x0f}\x03\xdd\xf8\x84\x9bz!\x80F\xc5ls< \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x98\x1c\x9f\xbd\xcd\xea\xc3w\xa3\xf5\x1d.\x00\x00\x00\xa0\xf4\xe9\xe2\x83\xac\xde\x95cmvM\x12\xc1O\x1f#\xcd\x90\x1e\x03\x1e}\xe7w\xe7\"Oh`\xed\bM9\xaf\xa3BQ\xbf\xfd1\x1cG\xb5\xed\x86\xb9Q(\x19dZ\x8da\x008e*\x928\xcf\x0f\x0e\x05\x1dM?\x11$E\xc3\x12\x1e\xffI\x84t0D\xec\xf3T\xe2\xddJm\x87\xc9\xb1\xff\n\xa1\x13\xcbo\xc6\xda\x84\x02\xa3\x14\xf2q\x96\xa8Sa\xe4\x1f\x01\xa2]\xb2\xc9\xd5\xff\xfd\xf2\xb5\xf5\xef \xc7\x02\x927\xdb\xa5\a\x9eS\xb6\xe2\xbaL\x99n\xb4\xe3\xf7\x0eU\xc0', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000240)='fuseblk\x00', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000440)='\x00', &(0x7f0000000500)='^,/\x00', 0x0) close(r0) 3.362909673s ago: executing program 7 (id=6197): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000100)=0x470f, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r1, 0x0, 0x7, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000000)=0x6, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r2, &(0x7f0000000100)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x9, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000900)=[@in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000000)=0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x23, 0x0, &(0x7f0000000200)) madvise(&(0x7f00003cd000/0x1000)=nil, 0x1000, 0x8) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1000000000000069) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, 0x0, 0x0) 2.328044584s ago: executing program 6 (id=6198): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000550901000000000095000090ff000000b7020000000000007baaf8ff00000000b5090800821300007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7040000080000004600000076001e00bf98000000000000b5080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.324661246s ago: executing program 7 (id=6199): openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = gettid() setpgid(r2, 0x0) ptrace(0x4207, r2) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$dsp(0xffffffffffffffff, &(0x7f00000001c0)='\\', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000a80)="440f01580066b8d5000f00d80f0f071dc08a22450000000f005043c441f15f14b84c0fc72b660f103bc402e93a1666ba400066b8e00066ef", 0x38}], 0x1, 0x4498bda7e2139f53, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x488, 0xffffffff, 0x0, 0x100, 0x100, 0xffffffff, 0xffffffff, 0x3b8, 0x3b8, 0x3b8, 0xffffffff, 0x4, &(0x7f0000000380), {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xff, 0xffffffff, 0xffffff], [0xff, 0xff, 0xff, 0xff], 'bond0\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x6c, 0xff, 0x1, 0x12}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@remote, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @local}, [0xff, 0x0, 0xffffff00, 0x1ff0000fe], [0x3ec3f2b0a004fb01, 0xff000000, 0xff, 0xff000000], 'veth1_macvtap\x00', 'veth1_to_bond\x00', {0xff}, {0xff}, 0x21, 0x6, 0x1, 0x40}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@srh={{0x30}, {0x29, 0x7, 0x8a, 0x3, 0xea7, 0x400}}, @common=@srh1={{0x90}, {0x21, 0x6, 0x5, 0x4, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}, @mcast2, @loopback, [0xffffffff, 0x0, 0xff, 0xffffffff], [0xffffffff, 0xffffffff, 0xff, 0xffffff00], [0x0, 0xffffffff, 0xff000000, 0xff0000ff], 0x2024, 0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x3, 0x6a7cc980], 0x8, 0x20, 0x1}}, @common=@mh={{0x28}, {"0f70"}}]}, @common=@unspec=@AUDIT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3c, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0xfffffffc}}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000a40)={0x4400, r6}, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x5, 0x13, 0x1, 0x0, 0x5f, 0x3, 0x0, 0xa6, 0x2, 0x5, 0x6}, {0xfffffff9, 0x4004, 0x0, 0x0, 0x0, 0xf6, 0x3, 0x8, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x5, 0x7, 0xfe, 0x5, 0x2, 0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0xdddd1000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f0000002400)={[{0x3, 0xce, 0xfa, 0x5, 0x3, 0x96, 0x9, 0x6, 0x75, 0x4, 0x2, 0x6, 0xffffffff}, {0x15, 0x0, 0x6, 0x2, 0x4, 0xff, 0x2, 0x6, 0xb, 0x5, 0x3, 0x8, 0x1}, {0x2, 0xfff, 0x8, 0x52, 0x0, 0xf2, 0x7f, 0x7, 0xb, 0x40, 0xf4, 0x4, 0x200}], 0xffffffbe}) r7 = syz_clone(0x22010480, &(0x7f0000000240)="292f286a7120a14cddc67d04fdbb430e00ec99ebbd7599899325acbd71f6f2162238a501835bc04cfce3722822c57cd255758ea4136f3dd7eb7239d356c98b0751649943b6e0415b6058e43c62e92b71910d65030c4fcf25e290adb3daa01920f59294c0e2a4a927141148054982e91b02c9b35d1f71577bb0ba7010b56460d5a8b8c33b13cfdfad60d5cde610d9732dde6135d1224fb49bd1e06783bfcd0238edeb026877e1235b9c62530ec224f17e8b891b00bafd427b5f2e9566bf09048816cb619657a753dc82719fd1702572c5b1da58ddc3cdb25645535e9b0e5b3aa9e250e0534f8500f4", 0xe8, &(0x7f0000000140), &(0x7f0000000340), &(0x7f0000000480)="000412c81a6ed42e98ffbb9d5aebfb12375153e621254ef255c72bf33bbb52b92f891aadc6423be3b0b8aab776a72dcb16f58c10fbd78e79b2a69035d43c2ae3885351fccb0f58a5a726ef62e7d683c902ff8268ef95194a80a56a68c870e5e249f6fb586d3781d8bd15ac6caffcb073c3c000a1f553a8fceb39754acaec2795d5aa8e01249100568329bbb169ba3a0182a4a5c29b2b") syz_open_procfs(r7, &(0x7f00000000c0)='net/tcp\x00') 2.21611338s ago: executing program 6 (id=6200): semop(0x0, &(0x7f00000000c0)=[{0x4, 0xb}, {0x2}], 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4b23}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101292000090509"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) shutdown(r0, 0x1) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) fsopen(&(0x7f0000000580)='overlay\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "268435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xf3d8}}}}}}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x1}}, 0xb8}}, 0x0) syz_emit_ethernet(0x1ac, &(0x7f00000005c0)={@empty, @dev, @void, {@ipv4={0x800, @dccp={{0x27, 0x4, 0x2, 0x19, 0x19e, 0x65, 0x0, 0x7f, 0x21, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x16}, {[@timestamp_prespec={0x44, 0x14, 0x33, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xb}, {@remote}]}, @timestamp_addr={0x44, 0x2c, 0xe9, 0x1, 0xa, [{@loopback}, {@loopback, 0x6}, {@local, 0x10001}, {@loopback, 0xb}, {@multicast1, 0x3b6}]}, @cipso={0x86, 0x3b, 0x3, [{0x6, 0xa, "f4650129f47e116c"}, {0x6, 0x9, "a51b1ad8ec8f23"}, {0x2, 0x8, "96fe2be78ac7"}, {0x0, 0x6, "a65a00e8"}, {0x5, 0x4, "61be"}, {0x2, 0x7, "4eb1c17c94"}, {0x5, 0x9, "b3949e26dd2583"}]}, @lsrr={0x83, 0xb, 0xc5, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop]}}, {{0x4e21, 0x4e24, 0x4, 0x1, 0xe, 0x0, 0x0, 0xa, 0x5, "b92fbd", 0x6, "1c432a"}, "98d615996a34960962e565d254667c11c03b432de18f069784ed15dad8e3512d3c811afbd03f80b91191a57a45e1de93870322e003287f1a6f0b6ac28f0e5e0a6f625fb9037c4fe794f8bfecc4fdca8ec178d1cf2438f775301340b07c81ef172a6dd6712781f659574f3665a2255e7c6d735f203c5d806d7be6d653185e0b05c2ff554c626d7027a6e7f678e6ceb1d08979c26bf15e2855982d603cb86bc504b5e5609bc8ef2714e44a312ef765e2e8d81fc25da826169a3032a746189b434d93d8177c8b46dc9782e6d12cd1a1ee43c659b8098d766ea9a8c850c3efdeb8d7bea4fd86d38eac230eb4cfad3cc97fa79ae7"}}}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x81) r7 = socket$inet(0x10, 0x80000, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_mr_vif\x00') preadv(r8, &(0x7f00000009c0)=[{&(0x7f0000000140)=""/199, 0xc7}], 0x1, 0x43, 0x4) 1.776240344s ago: executing program 3 (id=6201): syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x9, @dev, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{}, {@remote}, {@dev}, {}, {@multicast2}, {@loopback}, {@local, 0x4}, {@multicast1}]}]}}}}}}}, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x1a}, @mcast1}) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x8000000000000001, 0x1c1280) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r2) readv(r1, &(0x7f0000000400)=[{&(0x7f0000002080)=""/4063, 0xfdf}, {0x0}], 0x2) syz_usb_connect$uac1(0x0, 0xcb, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb9, 0x3, 0x1, 0x0, 0xa0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x6}, [@input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x0, 0xb}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x306, 0x4, 0x2, 0xe5}, @extension_unit={0x8, 0x24, 0x8, 0x0, 0x100, 0x0, "e4"}, @processing_unit={0xc, 0x24, 0x7, 0x2, 0x0, 0x0, "a3e82f0707"}, @feature_unit={0xf, 0x24, 0x6, 0x3, 0x6, 0x4, [0xa, 0x8, 0x6, 0x1], 0x4}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x21, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x1, 0x4, 0x4, "", "944f5a"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x5, 0xf, 0x8, "e41b85e4d8"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 1.101176606s ago: executing program 3 (id=6202): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000002000000000000a0000000000000000000000080010000200"], 0x24}}, 0x0) 772.187255ms ago: executing program 3 (id=6203): add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000180)="240000001e005f0314f90408faac470002000000010000000000080008000dc013000000", 0x24) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@newspdinfo={0x1c, 0x24, 0x104, 0x70bd2a, 0x25dfdbff, 0xace9a775, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044040}, 0x4000) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@newspdinfo={0x1c, 0x24, 0x104, 0x70bd2a, 0x25dfdbff, 0xace9a775, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044040}, 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x6, 0x0, 0x3, 0x0) munlockall() prctl$PR_SET_UNALIGN(0x6, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 642.576285ms ago: executing program 7 (id=6204): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x0, 0x1, 0x7ffffffc}}) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890b, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$sndctrl(0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x2b, 0x1, 0x1) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) (async) r8 = fsopen(&(0x7f0000000580)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000040)='source', &(0x7f0000000080)='//', 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) (async) syz_io_uring_setup(0x62ce, &(0x7f0000000780)={0x0, 0x3, 0x10100, 0x3, 0xffffffff}, &(0x7f00000000c0), 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00000007060f0080000000000000000a00000405000100070000000f363d04373a3c813b7005f73f6f7c060cfc927e33729c4d7baa0c81c7e5b54f3db555ead3f4f415cc006042de73301f106d65ca27538a93a609a133dbd0ee4f44addf864d56e8218d460802dc33bd40c160160a30efee3bf40a2fc22496d9bed41440ee525b458c17f0a489251ca7db09caaa3b018d3f991aa86cb2b481bd2e60951833a7f479c0f8b3052533d863110d1fc49dd6f1ac41c8987412c384213595b181ee2da05ad7eb6e3b48078b7bae1486beda6fa13495dfb9354069db3f34599b99694c41124828af07ea5a04b3"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) (async) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) (async) socket$key(0xf, 0x3, 0x2) 419.859068ms ago: executing program 7 (id=6205): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x5, r4}, 0x10) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_G_SELECTION(r5, 0xc040565e, &(0x7f0000000140)={0xc, 0x3, 0x6, {0x8, 0x7, 0x2, 0x2}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) 162.02408ms ago: executing program 8 (id=6206): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x9, 0x0, 0x75, @mcast1, @empty, 0x7, 0x7800, 0x1d, 0xf1}}) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x20) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x121, 0x40000059, r2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x1e, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtclass={0x24, 0x28, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x7, 0xffe0}, {0xd, 0xfff2}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x44004}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001a00200026bd7000fedbdf250a1414800004fd07000b00000c0016805000090000000000080017000800000008001900cc51e13622dfb2b630dcd397652080bee92b3841f43304623ed0fafe9a56b944b616f861864af50b94c46bc66339ffda4523cd8fcdd7af784541919c9fd4944c93523a8a2ceab1357ce3b543394c262cf79f2defd939d82b468bf22e9a701a2247322d9b30715065fef228613829d19af66aef7f5939864cd6", @ANYRES32=r6, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x600}, 0x20004800) 50.656514ms ago: executing program 3 (id=6207): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="650f231d66b817008ed80f3566baf80cb8806a9e8aef66bafc0ced0f2b15000000000fde4bcfb9000000000f01c1f30f09c5a9c6a605c10fc77a7e0f01c9", 0x3e}], 0x1, 0x50, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x1, r0}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff5, 0x4}, {0xf, 0xc}, {0xe, 0xf}}}, 0x24}}, 0x80000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000001000010426bd70040008000000000000", @ANYRES32=0x0, @ANYBLOB="9980030004000000280012800b00010065727370616e0000180002800500170001000000050016000200000004001200140003006e"], 0x5c}, 0x1, 0x0, 0x0, 0x24008400}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 3 (id=6208): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d120c2f0081e949b93897bc3b0000001200007d01ff020000000000000000000000000001120022eb"], 0xfdef) kernel console output (not intermixed with test programs): 1621.137086][T27215] ? __pfx__copy_from_iter+0x10/0x10 [ 1621.137125][T27215] tun_get_user+0x488/0x3e90 [ 1621.137177][T27215] ? aa_file_perm+0x44d/0x1550 [ 1621.137199][T27215] ? __pfx_tun_get_user+0x10/0x10 [ 1621.137229][T27215] ? _parse_integer_limit+0x1ae/0x1f0 [ 1621.137259][T27215] ? __lock_acquire+0xab9/0xd20 [ 1621.137286][T27215] ? ref_tracker_alloc+0x318/0x460 [ 1621.137305][T27215] ? __lock_acquire+0xab9/0xd20 [ 1621.137328][T27215] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1621.137354][T27215] ? tun_get+0x1c/0x2f0 [ 1621.137391][T27215] ? tun_get+0x1c/0x2f0 [ 1621.137420][T27215] ? tun_get+0x1c/0x2f0 [ 1621.137473][T27215] tun_chr_write_iter+0x113/0x200 [ 1621.137506][T27215] vfs_write+0x5c9/0xb30 [ 1621.137538][T27215] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1621.137569][T27215] ? __pfx_vfs_write+0x10/0x10 [ 1621.137606][T27215] ? __fget_files+0x2a/0x420 [ 1621.137645][T27215] ksys_write+0x145/0x250 [ 1621.137675][T27215] ? __pfx_ksys_write+0x10/0x10 [ 1621.137698][T27215] ? rcu_is_watching+0x15/0xb0 [ 1621.137727][T27215] ? do_syscall_64+0xbe/0x3b0 [ 1621.137754][T27215] do_syscall_64+0xfa/0x3b0 [ 1621.137776][T27215] ? lockdep_hardirqs_on+0x9c/0x150 [ 1621.137797][T27215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1621.137817][T27215] ? clear_bhb_loop+0x60/0xb0 [ 1621.137841][T27215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1621.137860][T27215] RIP: 0033:0x7fccf7f8eec9 [ 1621.137879][T27215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1621.137896][T27215] RSP: 002b:00007fccf8dee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1621.137919][T27215] RAX: ffffffffffffffda RBX: 00007fccf81e5fa0 RCX: 00007fccf7f8eec9 [ 1621.137934][T27215] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000005 [ 1621.137947][T27215] RBP: 00007fccf8dee090 R08: 0000000000000000 R09: 0000000000000000 [ 1621.137960][T27215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1621.137973][T27215] R13: 00007fccf81e6038 R14: 00007fccf81e5fa0 R15: 00007fccf830fa28 [ 1621.138004][T27215] [ 1621.409717][ C1] vkms_vblank_simulate: vblank timer overrun [ 1621.420654][T27219] netlink: 'syz.7.5643': attribute type 2 has an invalid length. [ 1621.515834][ C1] vkms_vblank_simulate: vblank timer overrun [ 1621.687934][T27229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5640'. [ 1624.261111][T27263] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1624.883266][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1625.003853][T27268] ±ÿ: renamed from batadv_slave_1 (while UP) [ 1625.401938][T27274] hub 9-0:1.0: USB hub found [ 1625.415040][T27274] hub 9-0:1.0: 1 port detected [ 1625.426004][T27274] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5656'. [ 1625.521769][T27278] syzkaller1: entered promiscuous mode [ 1625.531298][T27278] syzkaller1: entered allmulticast mode [ 1625.539875][T27278] FAULT_INJECTION: forcing a failure. [ 1625.539875][T27278] name failslab, interval 1, probability 0, space 0, times 0 [ 1625.554333][T27278] CPU: 0 UID: 0 PID: 27278 Comm: syz.6.5658 Not tainted syzkaller #0 PREEMPT(full) [ 1625.554354][T27278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1625.554363][T27278] Call Trace: [ 1625.554370][T27278] [ 1625.554376][T27278] dump_stack_lvl+0x189/0x250 [ 1625.554399][T27278] ? __pfx____ratelimit+0x10/0x10 [ 1625.554416][T27278] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1625.554434][T27278] ? __pfx__printk+0x10/0x10 [ 1625.554460][T27278] ? __pfx___might_resched+0x10/0x10 [ 1625.554476][T27278] ? fs_reclaim_acquire+0x7d/0x100 [ 1625.554501][T27278] should_fail_ex+0x414/0x560 [ 1625.554528][T27278] should_failslab+0xa8/0x100 [ 1625.554553][T27278] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1625.554574][T27278] ? __alloc_skb+0x112/0x2d0 [ 1625.554596][T27278] __alloc_skb+0x112/0x2d0 [ 1625.554617][T27278] alloc_skb_with_frags+0xca/0x890 [ 1625.554646][T27278] sock_alloc_send_pskb+0x84d/0x980 [ 1625.554682][T27278] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1625.554711][T27278] ? iov_iter_advance+0x8b/0x1c0 [ 1625.554731][T27278] tun_get_user+0xa43/0x3e90 [ 1625.554769][T27278] ? aa_file_perm+0x44d/0x1550 [ 1625.554791][T27278] ? __pfx_tun_get_user+0x10/0x10 [ 1625.554813][T27278] ? _parse_integer_limit+0x1ae/0x1f0 [ 1625.554834][T27278] ? __lock_acquire+0xab9/0xd20 [ 1625.554866][T27278] ? ref_tracker_alloc+0x318/0x460 [ 1625.554879][T27278] ? __lock_acquire+0xab9/0xd20 [ 1625.554894][T27278] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1625.554912][T27278] ? tun_get+0x1c/0x2f0 [ 1625.554937][T27278] ? tun_get+0x1c/0x2f0 [ 1625.554957][T27278] ? tun_get+0x1c/0x2f0 [ 1625.554981][T27278] tun_chr_write_iter+0x113/0x200 [ 1625.555005][T27278] vfs_write+0x5c9/0xb30 [ 1625.555027][T27278] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1625.555049][T27278] ? __pfx_vfs_write+0x10/0x10 [ 1625.555075][T27278] ? __fget_files+0x2a/0x420 [ 1625.555103][T27278] ksys_write+0x145/0x250 [ 1625.555123][T27278] ? __pfx_ksys_write+0x10/0x10 [ 1625.555140][T27278] ? rcu_is_watching+0x15/0xb0 [ 1625.555161][T27278] ? do_syscall_64+0xbe/0x3b0 [ 1625.555180][T27278] do_syscall_64+0xfa/0x3b0 [ 1625.555195][T27278] ? lockdep_hardirqs_on+0x9c/0x150 [ 1625.555210][T27278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1625.555224][T27278] ? clear_bhb_loop+0x60/0xb0 [ 1625.555241][T27278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1625.555255][T27278] RIP: 0033:0x7f3832d8eec9 [ 1625.555268][T27278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1625.555280][T27278] RSP: 002b:00007f3833c7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1625.555295][T27278] RAX: ffffffffffffffda RBX: 00007f3832fe5fa0 RCX: 00007f3832d8eec9 [ 1625.555306][T27278] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000005 [ 1625.555315][T27278] RBP: 00007f3833c7f090 R08: 0000000000000000 R09: 0000000000000000 [ 1625.555324][T27278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1625.555333][T27278] R13: 00007f3832fe6038 R14: 00007f3832fe5fa0 R15: 00007f383310fa28 [ 1625.555355][T27278] [ 1625.923067][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1626.963310][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1627.359447][T27310] syzkaller1: entered promiscuous mode [ 1627.370074][T27310] syzkaller1: entered allmulticast mode [ 1627.829783][T27326] netlink: 1196 bytes leftover after parsing attributes in process `syz.8.5670'. [ 1627.853257][T27326] netlink: 8496 bytes leftover after parsing attributes in process `syz.8.5670'. [ 1628.003127][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1628.133004][T22272] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1628.292963][T22272] usb 9-1: Using ep0 maxpacket: 8 [ 1628.302008][T22272] usb 9-1: config index 0 descriptor too short (expected 30, got 18) [ 1628.316618][T22272] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1628.327704][T22272] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1628.336460][T22272] usb 9-1: Product: syz [ 1628.341475][T22272] usb 9-1: Manufacturer: syz [ 1628.346663][T22272] usb 9-1: SerialNumber: syz [ 1628.354022][T22272] usb 9-1: config 0 descriptor?? [ 1628.366228][T22272] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1628.376030][T22272] usb 9-1: setting power ON [ 1628.380667][T22272] dvb-usb: bulk message failed: -22 (2/0) [ 1628.389777][T22272] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1628.412123][T22272] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1628.430475][T22272] usb 9-1: media controller created [ 1628.499035][T22272] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1628.553701][T22272] usb 9-1: selecting invalid altsetting 6 [ 1628.563063][T22272] usb 9-1: digital interface selection failed (-22) [ 1628.580042][T22272] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1628.599813][T22272] usb 9-1: setting power OFF [ 1628.608147][T22272] dvb-usb: bulk message failed: -22 (2/0) [ 1628.633535][T22272] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1628.653050][T22272] (NULL device *): no alternate interface [ 1628.738072][T22272] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1629.043277][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1629.717227][T27339] loop5: detected capacity change from 0 to 7 [ 1629.773230][T27339] Dev loop5: unable to read RDB block 7 [ 1629.786648][T27339] loop5: unable to read partition table [ 1629.801420][T27339] loop5: partition table beyond EOD, truncated [ 1629.873315][T27339] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1630.083261][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1630.101431][T27351] syzkaller1: entered promiscuous mode [ 1630.115520][T27351] syzkaller1: entered allmulticast mode [ 1630.178552][T27354] wg1: entered promiscuous mode [ 1630.189899][T27354] wg1: entered allmulticast mode [ 1630.815371][ T5850] usb 9-1: USB disconnect, device number 31 [ 1631.123568][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1632.047030][T27392] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5688'. [ 1632.163148][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1632.185732][T27392] sctp: [Deprecated]: syz.1.5688 (pid 27392) Use of int in max_burst socket option. [ 1632.185732][T27392] Use struct sctp_assoc_value instead [ 1632.253486][T27395] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1632.486733][T27399] loop5: detected capacity change from 0 to 7 [ 1632.513518][ T7142] Dev loop5: unable to read RDB block 7 [ 1632.523046][ T7142] loop5: unable to read partition table [ 1632.529025][ T7142] loop5: partition table beyond EOD, truncated [ 1632.553396][T27399] Dev loop5: unable to read RDB block 7 [ 1632.563900][T27399] loop5: unable to read partition table [ 1632.581351][T27399] loop5: partition table beyond EOD, truncated [ 1632.605187][T27399] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1632.685742][T27404] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5691'. [ 1632.812074][T27403] syzkaller1: entered promiscuous mode [ 1632.857636][T27403] syzkaller1: entered allmulticast mode [ 1633.193116][T22272] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1633.203259][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1633.474965][T22272] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1633.535679][T22272] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1633.593543][T22272] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1633.629713][T22272] usb 2-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 1633.649827][T22272] usb 2-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 1633.673324][T22272] usb 2-1: Manufacturer: syz [ 1633.682204][T22272] usb 2-1: config 0 descriptor?? [ 1633.715926][T22272] smsusb:smsusb_probe: board id=9, interface number 0 [ 1633.767358][T22272] smsusb:smsusb_probe: Device initialized with return code -19 [ 1633.919878][T22272] usb 2-1: USB disconnect, device number 56 [ 1634.023252][ T5826] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1634.198045][ T5826] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1634.217951][ T5826] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1634.228664][ T5826] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1634.242069][ T5826] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1634.251540][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1634.261309][T22273] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1634.270466][ T5826] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1634.285123][ T5826] usb 9-1: config 0 descriptor?? [ 1634.675537][T27427] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1634.740830][ T5826] plantronics 0003:047F:FFFF.004D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1635.283262][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1636.176554][T27443] tipc: Enabling of bearer rejected, already enabled [ 1636.196456][T27443] tipc: Enabling of bearer rejected, failed to enable media [ 1636.323035][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1636.601130][T27445] loop5: detected capacity change from 0 to 7 [ 1636.610040][ T7142] Dev loop5: unable to read RDB block 7 [ 1636.618225][ T7142] loop5: unable to read partition table [ 1636.624482][ T7142] loop5: partition table beyond EOD, truncated [ 1636.640869][T27445] Dev loop5: unable to read RDB block 7 [ 1636.656226][T27445] loop5: unable to read partition table [ 1636.669695][T27445] loop5: partition table beyond EOD, truncated [ 1636.693014][T27445] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1636.850138][T27449] syzkaller1: entered promiscuous mode [ 1636.868244][T27449] syzkaller1: entered allmulticast mode [ 1636.880157][T27451] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5705'. [ 1636.946086][T27453] FAULT_INJECTION: forcing a failure. [ 1636.946086][T27453] name failslab, interval 1, probability 0, space 0, times 0 [ 1636.962503][T27453] CPU: 1 UID: 0 PID: 27453 Comm: syz.7.5707 Not tainted syzkaller #0 PREEMPT(full) [ 1636.962534][T27453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1636.962547][T27453] Call Trace: [ 1636.962556][T27453] [ 1636.962566][T27453] dump_stack_lvl+0x189/0x250 [ 1636.962596][T27453] ? __pfx____ratelimit+0x10/0x10 [ 1636.962619][T27453] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1636.962644][T27453] ? __pfx__printk+0x10/0x10 [ 1636.962679][T27453] ? __pfx___might_resched+0x10/0x10 [ 1636.962707][T27453] should_fail_ex+0x414/0x560 [ 1636.962743][T27453] should_failslab+0xa8/0x100 [ 1636.962783][T27453] __kmalloc_noprof+0xcb/0x7f0 [ 1636.962809][T27453] ? kfree+0x4d/0x6d0 [ 1636.962829][T27453] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1636.962862][T27453] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1636.962896][T27453] tomoyo_path2_perm+0x288/0x680 [ 1636.962924][T27453] ? tomoyo_path2_perm+0x235/0x680 [ 1636.962953][T27453] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 1636.963031][T27453] tomoyo_path_rename+0x141/0x190 [ 1636.963053][T27453] ? __d_lookup+0x6df/0x780 [ 1636.963077][T27453] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 1636.963112][T27453] security_path_rename+0x250/0x490 [ 1636.963139][T27453] do_renameat2+0x52b/0xa50 [ 1636.963186][T27453] ? __pfx_do_renameat2+0x10/0x10 [ 1636.963230][T27453] ? getname_flags+0x1e5/0x540 [ 1636.963254][T27453] __x64_sys_renameat2+0xce/0xe0 [ 1636.963286][T27453] do_syscall_64+0xfa/0x3b0 [ 1636.963308][T27453] ? lockdep_hardirqs_on+0x9c/0x150 [ 1636.963329][T27453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1636.963349][T27453] ? clear_bhb_loop+0x60/0xb0 [ 1636.963374][T27453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1636.963393][T27453] RIP: 0033:0x7f5f8498eec9 [ 1636.963411][T27453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1636.963430][T27453] RSP: 002b:00007f5f85892038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 1636.963452][T27453] RAX: ffffffffffffffda RBX: 00007f5f84be5fa0 RCX: 00007f5f8498eec9 [ 1636.963467][T27453] RDX: ffffffffffffff9c RSI: 0000200000000780 RDI: ffffffffffffff9c [ 1636.963481][T27453] RBP: 00007f5f85892090 R08: 0000000000000000 R09: 0000000000000000 [ 1636.963494][T27453] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000000000000001 [ 1636.963508][T27453] R13: 00007f5f84be6038 R14: 00007f5f84be5fa0 R15: 00007f5f84d0fa28 [ 1636.963541][T27453] [ 1637.201477][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059641800: rx timeout, send abort [ 1637.218329][T27453] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1637.313513][ T43] usb 9-1: reset high-speed USB device number 32 using dummy_hcd [ 1637.321997][ T43] usb 9-1: device reset changed ep0 maxpacket size! [ 1637.335612][T15276] usb 9-1: USB disconnect, device number 32 [ 1637.363407][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1637.406177][T27457] gretap1: entered promiscuous mode [ 1637.483004][T15276] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1637.651967][T27464] loop2: detected capacity change from 0 to 7 [ 1637.658154][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059640800: rx timeout, send abort [ 1637.670721][T15276] usb 9-1: Using ep0 maxpacket: 32 [ 1637.685713][T15276] usb 9-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1637.704222][T15276] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1637.712274][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059641800: abort rx timeout. Force session deactivation [ 1637.760965][T27464] Dev loop2: unable to read RDB block 7 [ 1637.790593][T27464] loop2: unable to read partition table [ 1637.815851][T27464] loop2: partition table beyond EOD, truncated [ 1637.831500][T27464] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1637.842059][T15276] usb 9-1: config 0 descriptor?? [ 1637.894303][T15276] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1638.158255][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059640800: abort rx timeout. Force session deactivation [ 1638.403252][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1638.515467][T15276] gspca_sunplus: reg_r err -32 [ 1638.520489][T15276] sunplus 9-1:0.0: probe with driver sunplus failed with error -32 [ 1639.141476][T27481] loop5: detected capacity change from 0 to 7 [ 1639.150777][ T7142] Dev loop5: unable to read RDB block 7 [ 1639.157336][ T7142] loop5: unable to read partition table [ 1639.165023][ T7142] loop5: partition table beyond EOD, truncated [ 1639.177500][T27481] Dev loop5: unable to read RDB block 7 [ 1639.184020][T27481] loop5: unable to read partition table [ 1639.190001][T27481] loop5: partition table beyond EOD, truncated [ 1639.198350][T27481] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1639.271157][ T5207] Dev loop5: unable to read RDB block 7 [ 1639.277180][ T5207] loop5: unable to read partition table [ 1639.284056][ T5207] loop5: partition table beyond EOD, truncated [ 1639.362922][T27486] IPVS: sync thread started: state = BACKUP, mcast_ifn = gre0, syncid = 4, id = 0 [ 1639.443478][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1639.457831][T22273] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1639.470284][T22273] usb 4-1: no configurations [ 1639.478793][T22273] usb 4-1: can't read configurations, error -22 [ 1639.633024][T22273] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1639.772977][T22273] usb 4-1: device descriptor read/64, error -32 [ 1639.857990][T27494] FAULT_INJECTION: forcing a failure. [ 1639.857990][T27494] name failslab, interval 1, probability 0, space 0, times 0 [ 1639.871248][T27494] CPU: 1 UID: 0 PID: 27494 Comm: syz.7.5719 Not tainted syzkaller #0 PREEMPT(full) [ 1639.871277][T27494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1639.871289][T27494] Call Trace: [ 1639.871298][T27494] [ 1639.871307][T27494] dump_stack_lvl+0x189/0x250 [ 1639.871336][T27494] ? __pfx____ratelimit+0x10/0x10 [ 1639.871356][T27494] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1639.871378][T27494] ? __pfx__printk+0x10/0x10 [ 1639.871412][T27494] ? __pfx___might_resched+0x10/0x10 [ 1639.871432][T27494] ? fs_reclaim_acquire+0x7d/0x100 [ 1639.871467][T27494] should_fail_ex+0x414/0x560 [ 1639.871502][T27494] should_failslab+0xa8/0x100 [ 1639.871543][T27494] __kmalloc_noprof+0xcb/0x7f0 [ 1639.871569][T27494] ? tomoyo_encode+0x28b/0x550 [ 1639.871596][T27494] tomoyo_encode+0x28b/0x550 [ 1639.871623][T27494] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1639.871659][T27494] tomoyo_path2_perm+0x288/0x680 [ 1639.871687][T27494] ? tomoyo_path2_perm+0x235/0x680 [ 1639.871717][T27494] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 1639.871809][T27494] tomoyo_path_rename+0x141/0x190 [ 1639.871831][T27494] ? __d_lookup+0x6df/0x780 [ 1639.871856][T27494] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 1639.871893][T27494] security_path_rename+0x250/0x490 [ 1639.871921][T27494] do_renameat2+0x52b/0xa50 [ 1639.871967][T27494] ? __pfx_do_renameat2+0x10/0x10 [ 1639.872011][T27494] ? getname_flags+0x1e5/0x540 [ 1639.872036][T27494] __x64_sys_renameat2+0xce/0xe0 [ 1639.872068][T27494] do_syscall_64+0xfa/0x3b0 [ 1639.872090][T27494] ? lockdep_hardirqs_on+0x9c/0x150 [ 1639.872111][T27494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1639.872131][T27494] ? clear_bhb_loop+0x60/0xb0 [ 1639.872156][T27494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1639.872175][T27494] RIP: 0033:0x7f5f8498eec9 [ 1639.872194][T27494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1639.872212][T27494] RSP: 002b:00007f5f85892038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 1639.872252][T27494] RAX: ffffffffffffffda RBX: 00007f5f84be5fa0 RCX: 00007f5f8498eec9 [ 1639.872267][T27494] RDX: ffffffffffffff9c RSI: 0000200000000780 RDI: ffffffffffffff9c [ 1639.872283][T27494] RBP: 00007f5f85892090 R08: 0000000000000000 R09: 0000000000000000 [ 1639.872297][T27494] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000000000000001 [ 1639.872310][T27494] R13: 00007f5f84be6038 R14: 00007f5f84be5fa0 R15: 00007f5f84d0fa28 [ 1639.872345][T27494] [ 1639.872492][T27494] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1639.886237][T22273] usb usb4-port1: attempt power cycle [ 1640.321735][T15276] usb 9-1: USB disconnect, device number 33 [ 1640.395918][T27501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1640.408584][T27501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1640.484549][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1640.514506][T22273] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1640.544287][T22273] usb 4-1: device descriptor read/8, error -32 [ 1640.704780][T15276] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1640.883125][T22273] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1640.918836][T22273] usb 4-1: device descriptor read/8, error -32 [ 1640.946012][T15276] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1640.962617][T15276] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1641.015722][T15276] usb 9-1: Product: syz [ 1641.043400][T22273] usb usb4-port1: unable to enumerate USB device [ 1641.045530][T15276] usb 9-1: Manufacturer: syz [ 1641.067583][T15276] usb 9-1: SerialNumber: syz [ 1641.137730][T15276] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1641.168169][ T5850] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1641.523270][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1641.754460][T15276] usb 9-1: USB disconnect, device number 34 [ 1641.896041][T27517] loop5: detected capacity change from 0 to 7 [ 1641.915777][T27517] Dev loop5: unable to read RDB block 7 [ 1641.921426][T27517] loop5: unable to read partition table [ 1641.955882][T27517] loop5: partition table beyond EOD, truncated [ 1641.965776][T27517] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1642.182789][T27522] syzkaller1: entered promiscuous mode [ 1642.198530][T27522] syzkaller1: entered allmulticast mode [ 1642.233989][T27527] FAULT_INJECTION: forcing a failure. [ 1642.233989][T27527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1642.258021][ T5850] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 1642.277356][ T5850] ath9k_htc: Failed to initialize the device [ 1642.292429][T27527] CPU: 1 UID: 0 PID: 27527 Comm: syz.1.5730 Not tainted syzkaller #0 PREEMPT(full) [ 1642.292458][T27527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1642.292472][T27527] Call Trace: [ 1642.292482][T27527] [ 1642.292491][T27527] dump_stack_lvl+0x189/0x250 [ 1642.292520][T27527] ? __pfx____ratelimit+0x10/0x10 [ 1642.292543][T27527] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1642.292567][T27527] ? __pfx__printk+0x10/0x10 [ 1642.292597][T27527] ? __might_fault+0xb0/0x130 [ 1642.292636][T27527] should_fail_ex+0x414/0x560 [ 1642.292673][T27527] _copy_from_iter+0x1de/0x1790 [ 1642.292705][T27527] ? _copy_from_iter+0x24f/0x1790 [ 1642.292734][T27527] ? __pfx__copy_from_iter+0x10/0x10 [ 1642.292754][T27527] ? sock_alloc_send_pskb+0x86b/0x980 [ 1642.292792][T27527] ? __pfx__copy_from_iter+0x10/0x10 [ 1642.292818][T27527] ? page_copy_sane+0x16a/0x280 [ 1642.292842][T27527] copy_page_from_iter+0xdd/0x170 [ 1642.292874][T27527] skb_copy_datagram_from_iter+0x306/0x720 [ 1642.292916][T27527] tun_get_user+0x1691/0x3e90 [ 1642.292967][T27527] ? aa_file_perm+0x44d/0x1550 [ 1642.292989][T27527] ? __pfx_tun_get_user+0x10/0x10 [ 1642.293018][T27527] ? _parse_integer_limit+0x1ae/0x1f0 [ 1642.293046][T27527] ? __lock_acquire+0xab9/0xd20 [ 1642.293072][T27527] ? ref_tracker_alloc+0x318/0x460 [ 1642.293090][T27527] ? __lock_acquire+0xab9/0xd20 [ 1642.293112][T27527] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1642.293139][T27527] ? tun_get+0x1c/0x2f0 [ 1642.293173][T27527] ? tun_get+0x1c/0x2f0 [ 1642.293214][T27527] ? tun_get+0x1c/0x2f0 [ 1642.293250][T27527] tun_chr_write_iter+0x113/0x200 [ 1642.293284][T27527] vfs_write+0x5c9/0xb30 [ 1642.293317][T27527] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1642.293349][T27527] ? __pfx_vfs_write+0x10/0x10 [ 1642.293386][T27527] ? __fget_files+0x2a/0x420 [ 1642.293425][T27527] ksys_write+0x145/0x250 [ 1642.293454][T27527] ? __pfx_ksys_write+0x10/0x10 [ 1642.293478][T27527] ? rcu_is_watching+0x15/0xb0 [ 1642.293508][T27527] ? do_syscall_64+0xbe/0x3b0 [ 1642.293536][T27527] do_syscall_64+0xfa/0x3b0 [ 1642.293558][T27527] ? lockdep_hardirqs_on+0x9c/0x150 [ 1642.293580][T27527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1642.293601][T27527] ? clear_bhb_loop+0x60/0xb0 [ 1642.293626][T27527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1642.293645][T27527] RIP: 0033:0x7fccf7f8eec9 [ 1642.293663][T27527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1642.293681][T27527] RSP: 002b:00007fccf8dcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1642.293703][T27527] RAX: ffffffffffffffda RBX: 00007fccf81e6090 RCX: 00007fccf7f8eec9 [ 1642.293718][T27527] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000005 [ 1642.293732][T27527] RBP: 00007fccf8dcd090 R08: 0000000000000000 R09: 0000000000000000 [ 1642.293745][T27527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1642.293758][T27527] R13: 00007fccf81e6128 R14: 00007fccf81e6090 R15: 00007fccf830fa28 [ 1642.293791][T27527] [ 1642.563197][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1642.591030][T15276] usb 9-1: ath9k_htc: USB layer deinitialized [ 1643.181993][T27548] netlink: 'syz.1.5736': attribute type 12 has an invalid length. [ 1643.235452][T27548] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.5736'. [ 1643.603320][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1644.327179][T27554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1644.443874][T27557] syzkaller1: entered promiscuous mode [ 1644.469841][T27557] syzkaller1: entered allmulticast mode [ 1644.593053][T15276] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1644.643139][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1644.681615][T27563] loop5: detected capacity change from 0 to 7 [ 1644.730595][T27563] Dev loop5: unable to read RDB block 7 [ 1644.745371][T15276] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1644.756795][T27565] sctp: [Deprecated]: syz.3.5742 (pid 27565) Use of int in maxseg socket option. [ 1644.756795][T27565] Use struct sctp_assoc_value instead [ 1644.787467][T27567] loop2: detected capacity change from 0 to 7 [ 1644.806904][T27563] loop5: unable to read partition table [ 1644.815028][ T7587] Dev loop2: unable to read RDB block 7 [ 1644.822785][ T7587] loop2: unable to read partition table [ 1644.829980][ T7587] loop2: partition table beyond EOD, truncated [ 1644.843689][T15276] usb 2-1: config 0 has no interfaces? [ 1644.851007][T27563] loop5: partition table beyond EOD, truncated [ 1644.866910][T27567] Dev loop2: unable to read RDB block 7 [ 1644.873383][T27567] loop2: unable to read partition table [ 1644.879874][T27567] loop2: partition table beyond EOD, truncated [ 1644.891133][T27567] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1644.903442][T15276] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1644.912629][T27563] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1644.935045][T15276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1645.054297][T15276] usb 2-1: config 0 descriptor?? [ 1645.190732][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1645.230143][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1645.683451][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1645.931790][T27585] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5748'. [ 1645.941895][T27585] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1646.723115][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1646.916984][T15276] usb 2-1: USB disconnect, device number 57 [ 1647.763464][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1648.102467][T27600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1648.117249][T27600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1648.142076][T27600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1648.153934][T27600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1648.163527][T27600] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1648.171187][T27600] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1648.179145][T27600] veth0_to_bridge: entered allmulticast mode [ 1648.186894][T27600] veth0_to_bridge: entered promiscuous mode [ 1648.193433][T27600] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1648.207693][T27600] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1648.214990][T27600] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 1648.230199][ T30] audit: type=1326 audit(1759502215.077:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27599 comm="syz.3.5753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47c18eec9 code=0x7ffc0000 [ 1648.392937][ T30] audit: type=1326 audit(1759502215.077:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27599 comm="syz.3.5753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47c18eec9 code=0x7ffc0000 [ 1648.552690][T27608] loop5: detected capacity change from 0 to 7 [ 1648.566032][ T7142] Dev loop5: unable to read RDB block 7 [ 1648.589950][ T7142] loop5: unable to read partition table [ 1648.603283][ T7142] loop5: partition table beyond EOD, truncated [ 1648.725360][T27608] Dev loop5: unable to read RDB block 7 [ 1648.736014][T27608] loop5: unable to read partition table [ 1648.741950][T27608] loop5: partition table beyond EOD, truncated [ 1648.751740][T27608] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1648.813067][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1649.158327][T27623] syzkaller1: entered promiscuous mode [ 1649.164259][T27623] syzkaller1: entered allmulticast mode [ 1649.176493][T27623] FAULT_INJECTION: forcing a failure. [ 1649.176493][T27623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1649.193029][T27623] CPU: 0 UID: 0 PID: 27623 Comm: syz.7.5760 Not tainted syzkaller #0 PREEMPT(full) [ 1649.193059][T27623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1649.193074][T27623] Call Trace: [ 1649.193083][T27623] [ 1649.193093][T27623] dump_stack_lvl+0x189/0x250 [ 1649.193125][T27623] ? __pfx____ratelimit+0x10/0x10 [ 1649.193149][T27623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1649.193175][T27623] ? __pfx__printk+0x10/0x10 [ 1649.193205][T27623] ? __might_fault+0xb0/0x130 [ 1649.193255][T27623] should_fail_ex+0x414/0x560 [ 1649.193293][T27623] _copy_from_iter+0x1de/0x1790 [ 1649.193324][T27623] ? _copy_from_iter+0x24f/0x1790 [ 1649.193354][T27623] ? __pfx__copy_from_iter+0x10/0x10 [ 1649.193375][T27623] ? sock_alloc_send_pskb+0x86b/0x980 [ 1649.193412][T27623] ? __pfx__copy_from_iter+0x10/0x10 [ 1649.193440][T27623] ? page_copy_sane+0x16a/0x280 [ 1649.193466][T27623] copy_page_from_iter+0xdd/0x170 [ 1649.193496][T27623] skb_copy_datagram_from_iter+0x306/0x720 [ 1649.193540][T27623] tun_get_user+0x1691/0x3e90 [ 1649.193594][T27623] ? aa_file_perm+0x44d/0x1550 [ 1649.193616][T27623] ? __pfx_tun_get_user+0x10/0x10 [ 1649.193646][T27623] ? _parse_integer_limit+0x1ae/0x1f0 [ 1649.193676][T27623] ? __lock_acquire+0xab9/0xd20 [ 1649.193704][T27623] ? ref_tracker_alloc+0x318/0x460 [ 1649.193723][T27623] ? __lock_acquire+0xab9/0xd20 [ 1649.193746][T27623] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1649.193774][T27623] ? tun_get+0x1c/0x2f0 [ 1649.193810][T27623] ? tun_get+0x1c/0x2f0 [ 1649.193840][T27623] ? tun_get+0x1c/0x2f0 [ 1649.193875][T27623] tun_chr_write_iter+0x113/0x200 [ 1649.193910][T27623] vfs_write+0x5c9/0xb30 [ 1649.193944][T27623] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1649.193976][T27623] ? __pfx_vfs_write+0x10/0x10 [ 1649.194020][T27623] ? __fget_files+0x2a/0x420 [ 1649.194060][T27623] ksys_write+0x145/0x250 [ 1649.194091][T27623] ? __pfx_ksys_write+0x10/0x10 [ 1649.194116][T27623] ? rcu_is_watching+0x15/0xb0 [ 1649.194147][T27623] ? do_syscall_64+0xbe/0x3b0 [ 1649.194175][T27623] do_syscall_64+0xfa/0x3b0 [ 1649.194197][T27623] ? lockdep_hardirqs_on+0x9c/0x150 [ 1649.194228][T27623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1649.194249][T27623] ? clear_bhb_loop+0x60/0xb0 [ 1649.194275][T27623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1649.194296][T27623] RIP: 0033:0x7f5f8498eec9 [ 1649.194315][T27623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1649.194333][T27623] RSP: 002b:00007f5f85892038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1649.194356][T27623] RAX: ffffffffffffffda RBX: 00007f5f84be5fa0 RCX: 00007f5f8498eec9 [ 1649.194372][T27623] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000005 [ 1649.194386][T27623] RBP: 00007f5f85892090 R08: 0000000000000000 R09: 0000000000000000 [ 1649.194399][T27623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1649.194411][T27623] R13: 00007f5f84be6038 R14: 00007f5f84be5fa0 R15: 00007f5f84d0fa28 [ 1649.194444][T27623] [ 1649.512272][ T5826] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 1649.572492][T27627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1649.628007][T27627] team0: Port device batadv0 added [ 1649.688337][ T5826] usb 2-1: config 4 has an invalid interface number: 9 but max is 0 [ 1649.696818][ T5826] usb 2-1: config 4 has no interface number 0 [ 1649.719403][ T5826] usb 2-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=d7.0c [ 1649.728592][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1649.736680][ T5826] usb 2-1: Product: syz [ 1649.741868][ T5826] usb 2-1: Manufacturer: syz [ 1649.746945][ T5826] usb 2-1: SerialNumber: syz [ 1649.760804][ T5826] gspca_main: spca505-2.14.0 probing 0733:0430 [ 1649.843364][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1650.090521][T27638] IPVS: sync thread started: state = BACKUP, mcast_ifn = gre0, syncid = 4, id = 0 [ 1650.244055][ T5826] gspca_spca505: reg write: error -71 [ 1650.249853][ T5826] spca505 2-1:4.9: probe with driver spca505 failed with error -5 [ 1650.289196][ T5826] usb 2-1: USB disconnect, device number 58 [ 1650.442946][T22272] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1650.596991][T22272] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1650.608021][T22272] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1650.619267][T22272] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1650.635215][T22272] usb 9-1: config 0 descriptor?? [ 1650.654096][T22272] pwc: Askey VC010 type 2 USB webcam detected. [ 1650.862670][T27641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1650.883167][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1650.911844][T27648] loop5: detected capacity change from 0 to 7 [ 1650.911953][T27641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1650.924894][ T7587] Dev loop5: unable to read RDB block 7 [ 1650.952101][ T7587] loop5: unable to read partition table [ 1650.977046][ T7587] loop5: partition table beyond EOD, truncated [ 1650.979292][T27641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1651.005666][T27648] Dev loop5: unable to read RDB block 7 [ 1651.051915][T27641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1651.084812][T27648] loop5: unable to read partition table [ 1651.242526][T27648] loop5: partition table beyond EOD, truncated [ 1651.354697][T27648] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1651.585245][T27661] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5768'. [ 1651.599496][T22272] pwc: recv_control_msg error -71 req 02 val 2700 [ 1651.615466][T22272] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1651.630142][T22272] pwc: recv_control_msg error -71 req 04 val 1000 [ 1651.638198][T22272] pwc: recv_control_msg error -71 req 04 val 1300 [ 1651.645892][T22272] pwc: recv_control_msg error -71 req 04 val 1400 [ 1651.653749][T22272] pwc: recv_control_msg error -71 req 02 val 2000 [ 1651.662558][T22272] pwc: recv_control_msg error -71 req 02 val 2100 [ 1651.670205][T27665] fuse: Bad value for 'fd' [ 1651.676254][T22272] pwc: recv_control_msg error -71 req 04 val 1500 [ 1651.689551][T22272] pwc: recv_control_msg error -71 req 02 val 2500 [ 1651.696876][T22272] pwc: recv_control_msg error -71 req 02 val 2400 [ 1651.704539][T22272] pwc: recv_control_msg error -71 req 02 val 2600 [ 1651.711554][T22272] pwc: recv_control_msg error -71 req 02 val 2900 [ 1651.720778][T22272] pwc: recv_control_msg error -71 req 02 val 2800 [ 1651.728310][T22272] pwc: recv_control_msg error -71 req 04 val 1100 [ 1651.735539][T22272] pwc: recv_control_msg error -71 req 04 val 1200 [ 1651.745605][T22272] pwc: Registered as video103. [ 1651.752021][T22272] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input104 [ 1651.767425][T22272] usb 9-1: USB disconnect, device number 35 [ 1651.923333][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1652.963178][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1653.003034][ T3554] batman_adv: batadv2: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 1653.062271][T27679] hub 9-0:1.0: USB hub found [ 1653.068407][T27679] hub 9-0:1.0: 1 port detected [ 1653.612201][T20368] Bluetooth: hci0: command 0x0405 tx timeout [ 1653.618706][T27657] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1653.625371][T20368] Bluetooth: hci4: command 0x0405 tx timeout [ 1653.901627][T27657] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1653.908216][T27657] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1654.013271][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1654.467188][T27657] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1654.474602][T27657] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1654.482328][T27657] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1654.490417][T27657] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1654.498711][T27657] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1654.508579][T27657] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1654.515182][T27657] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1654.523498][T27657] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1654.639351][T27693] syzkaller0: entered promiscuous mode [ 1654.645077][T27693] syzkaller0: entered allmulticast mode [ 1655.043072][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1655.410456][T27707] syzkaller1: entered promiscuous mode [ 1655.417847][T27707] syzkaller1: entered allmulticast mode [ 1655.431343][ T30] audit: type=1326 audit(1759502222.277:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27703 comm="syz.3.5781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47c18eec9 code=0x7ffc0000 [ 1655.466990][T27707] FAULT_INJECTION: forcing a failure. [ 1655.466990][T27707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1655.496069][T27707] CPU: 1 UID: 0 PID: 27707 Comm: syz.6.5782 Not tainted syzkaller #0 PREEMPT(full) [ 1655.496096][T27707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1655.496108][T27707] Call Trace: [ 1655.496117][T27707] [ 1655.496126][T27707] dump_stack_lvl+0x189/0x250 [ 1655.496158][T27707] ? __pfx____ratelimit+0x10/0x10 [ 1655.496177][T27707] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1655.496194][T27707] ? __pfx__printk+0x10/0x10 [ 1655.496215][T27707] ? __might_fault+0xb0/0x130 [ 1655.496249][T27707] should_fail_ex+0x414/0x560 [ 1655.496275][T27707] _copy_from_iter+0x1de/0x1790 [ 1655.496297][T27707] ? _copy_from_iter+0x24f/0x1790 [ 1655.496316][T27707] ? __pfx__copy_from_iter+0x10/0x10 [ 1655.496334][T27707] ? sock_alloc_send_pskb+0x86b/0x980 [ 1655.496360][T27707] ? __pfx__copy_from_iter+0x10/0x10 [ 1655.496378][T27707] ? page_copy_sane+0x16a/0x280 [ 1655.496395][T27707] copy_page_from_iter+0xdd/0x170 [ 1655.496415][T27707] skb_copy_datagram_from_iter+0x306/0x720 [ 1655.496445][T27707] tun_get_user+0x1691/0x3e90 [ 1655.496481][T27707] ? aa_file_perm+0x44d/0x1550 [ 1655.496497][T27707] ? __pfx_tun_get_user+0x10/0x10 [ 1655.496526][T27707] ? _parse_integer_limit+0x1ae/0x1f0 [ 1655.496548][T27707] ? __lock_acquire+0xab9/0xd20 [ 1655.496566][T27707] ? ref_tracker_alloc+0x318/0x460 [ 1655.496579][T27707] ? __lock_acquire+0xab9/0xd20 [ 1655.496594][T27707] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1655.496613][T27707] ? tun_get+0x1c/0x2f0 [ 1655.496638][T27707] ? tun_get+0x1c/0x2f0 [ 1655.496658][T27707] ? tun_get+0x1c/0x2f0 [ 1655.496682][T27707] tun_chr_write_iter+0x113/0x200 [ 1655.496705][T27707] vfs_write+0x5c9/0xb30 [ 1655.496728][T27707] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1655.496750][T27707] ? __pfx_vfs_write+0x10/0x10 [ 1655.496776][T27707] ? __fget_files+0x2a/0x420 [ 1655.496803][T27707] ksys_write+0x145/0x250 [ 1655.496828][T27707] ? __pfx_ksys_write+0x10/0x10 [ 1655.496845][T27707] ? rcu_is_watching+0x15/0xb0 [ 1655.496867][T27707] ? do_syscall_64+0xbe/0x3b0 [ 1655.496886][T27707] do_syscall_64+0xfa/0x3b0 [ 1655.496901][T27707] ? lockdep_hardirqs_on+0x9c/0x150 [ 1655.496916][T27707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1655.496930][T27707] ? clear_bhb_loop+0x60/0xb0 [ 1655.496947][T27707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1655.496961][T27707] RIP: 0033:0x7f3832d8eec9 [ 1655.496973][T27707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1655.496985][T27707] RSP: 002b:00007f3833c7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1655.497001][T27707] RAX: ffffffffffffffda RBX: 00007f3832fe5fa0 RCX: 00007f3832d8eec9 [ 1655.497012][T27707] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000005 [ 1655.497021][T27707] RBP: 00007f3833c7f090 R08: 0000000000000000 R09: 0000000000000000 [ 1655.497030][T27707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1655.497038][T27707] R13: 00007f3832fe6038 R14: 00007f3832fe5fa0 R15: 00007f383310fa28 [ 1655.497059][T27707] [ 1655.497978][ T30] audit: type=1326 audit(1759502222.277:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27703 comm="syz.3.5781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47c18eec9 code=0x7ffc0000 [ 1655.936498][T20368] Bluetooth: hci2: command 0x0406 tx timeout [ 1656.013031][ T30] audit: type=1326 audit(1759502222.277:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27703 comm="syz.3.5781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7fd47c18eec9 code=0x7ffc0000 [ 1656.058979][ T30] audit: type=1326 audit(1759502222.277:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27703 comm="syz.3.5781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47c18eec9 code=0x7ffc0000 [ 1656.083106][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1656.112553][ T30] audit: type=1326 audit(1759502222.277:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27703 comm="syz.3.5781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47c18eec9 code=0x7ffc0000 [ 1656.135303][ T30] audit: type=1326 audit(1759502222.277:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27703 comm="syz.3.5781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd47c18eec9 code=0x7ffc0000 [ 1656.180119][ T30] audit: type=1326 audit(1759502222.277:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27703 comm="syz.3.5781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47c18eec9 code=0x7ffc0000 [ 1656.217672][ T30] audit: type=1326 audit(1759502222.277:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27703 comm="syz.3.5781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47c18eec9 code=0x7ffc0000 [ 1656.330082][ T30] audit: type=1326 audit(1759502222.277:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27703 comm="syz.3.5781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd47c18eec9 code=0x7ffc0000 [ 1656.381803][ T30] audit: type=1326 audit(1759502222.277:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27703 comm="syz.3.5781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47c18eec9 code=0x7ffc0000 [ 1656.486319][T20368] Bluetooth: hci1: command 0x0c1a tx timeout [ 1656.486329][T14540] Bluetooth: hci3: command 0x0406 tx timeout [ 1656.573429][T14540] Bluetooth: hci0: command 0x0405 tx timeout [ 1656.642718][T27727] loop5: detected capacity change from 0 to 7 [ 1656.651374][ T7142] Dev loop5: unable to read RDB block 7 [ 1656.657854][ T7142] loop5: unable to read partition table [ 1656.664864][ T7142] loop5: partition table beyond EOD, truncated [ 1656.672023][T27727] Dev loop5: unable to read RDB block 7 [ 1656.702037][T27727] loop5: unable to read partition table [ 1656.710458][T27727] loop5: partition table beyond EOD, truncated [ 1656.720612][T27727] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1656.823354][T22272] usb 2-1: new low-speed USB device number 59 using dummy_hcd [ 1657.005130][T22272] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1657.019101][T22272] usb 2-1: config 0 has no interface number 0 [ 1657.026079][T22272] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1657.040788][T22272] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1657.062993][ T5850] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1657.089162][T22272] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1657.120116][T22272] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1657.131764][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1657.166118][T22272] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1657.178969][T22272] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1657.196369][T22272] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1657.206494][T22272] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1657.216161][ T5850] usb 9-1: device descriptor read/64, error -71 [ 1657.234181][T22272] usb 2-1: config 0 descriptor?? [ 1657.246392][T27725] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1657.255282][T27725] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1657.298341][T22272] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1657.463264][ T5850] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 1657.515641][T27725] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5787'. [ 1657.656075][ T5850] usb 9-1: device descriptor read/64, error -71 [ 1657.773392][ T5850] usb usb9-port1: attempt power cycle [ 1658.003012][T14540] Bluetooth: hci2: command 0x0406 tx timeout [ 1658.119345][T22273] usb 2-1: USB disconnect, device number 59 [ 1658.152408][T22273] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1658.153064][ T5850] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 1658.173201][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1658.236047][ T5850] usb 9-1: device descriptor read/8, error -71 [ 1658.503632][ T5850] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 1658.515070][T27751] binder_alloc: 27750: binder_alloc_buf, no vma [ 1658.524273][ T5850] usb 9-1: device descriptor read/8, error -71 [ 1658.565147][T14540] Bluetooth: hci3: command 0x0406 tx timeout [ 1658.572953][T14540] Bluetooth: hci1: command 0x0c1a tx timeout [ 1658.573492][T22273] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 1658.642986][T14540] Bluetooth: hci0: command 0x0405 tx timeout [ 1658.649575][ T5850] usb usb9-port1: unable to enumerate USB device [ 1658.807752][T22273] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1658.821721][T22273] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1658.833553][T22273] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1658.840290][T22273] usb 2-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 1658.849702][T22273] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1658.862078][T22273] usb 2-1: config 0 descriptor?? [ 1658.868800][T27744] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1659.203034][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1659.335102][T22273] hid-u2fzero 0003:10C4:8ACF.004E: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.1-1/input0 [ 1659.387235][T22273] hid-u2fzero 0003:10C4:8ACF.004E: U2F Zero LED initialised [ 1659.402217][T22273] hid-u2fzero 0003:10C4:8ACF.004E: U2F Zero RNG initialised [ 1659.609676][T27744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1659.633489][T27744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1659.716703][T27744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1659.729065][T27744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1659.741859][T15276] usb 2-1: USB disconnect, device number 60 [ 1660.015419][T27769] loop5: detected capacity change from 0 to 7 [ 1660.044651][T27769] Dev loop5: unable to read RDB block 7 [ 1660.050292][T27769] loop5: unable to read partition table [ 1660.068208][T27770] fuse: Bad value for 'max_read' [ 1660.074040][T27769] loop5: partition table beyond EOD, truncated [ 1660.096115][T27769] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1660.243226][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1660.420544][T27775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1660.439118][T27778] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5805'. [ 1660.448316][T27778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5805'. [ 1660.523301][T15276] usb 9-1: new full-speed USB device number 40 using dummy_hcd [ 1660.643077][T14540] Bluetooth: hci1: command 0x0c1a tx timeout [ 1660.653005][T15276] usb 9-1: device descriptor read/64, error -71 [ 1660.725244][T14540] Bluetooth: hci0: command 0x0405 tx timeout [ 1660.933971][T15276] usb 9-1: new full-speed USB device number 41 using dummy_hcd [ 1661.007868][T27795] binder: 27794:27795 ioctl c018620c 200000000000 returned -1 [ 1661.030808][T27793] syzkaller1: entered promiscuous mode [ 1661.055205][T27793] syzkaller1: entered allmulticast mode [ 1661.070674][T27793] FAULT_INJECTION: forcing a failure. [ 1661.070674][T27793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1661.083901][T15276] usb 9-1: device descriptor read/64, error -71 [ 1661.091202][T27793] CPU: 1 UID: 0 PID: 27793 Comm: syz.6.5809 Not tainted syzkaller #0 PREEMPT(full) [ 1661.091231][T27793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1661.091245][T27793] Call Trace: [ 1661.091255][T27793] [ 1661.091265][T27793] dump_stack_lvl+0x189/0x250 [ 1661.091296][T27793] ? __pfx____ratelimit+0x10/0x10 [ 1661.091319][T27793] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1661.091345][T27793] ? __pfx__printk+0x10/0x10 [ 1661.091375][T27793] ? __might_fault+0xb0/0x130 [ 1661.091413][T27793] should_fail_ex+0x414/0x560 [ 1661.091450][T27793] _copy_from_iter+0x1de/0x1790 [ 1661.091486][T27793] ? _copy_from_iter+0x24f/0x1790 [ 1661.091514][T27793] ? __pfx__copy_from_iter+0x10/0x10 [ 1661.091534][T27793] ? sock_alloc_send_pskb+0x86b/0x980 [ 1661.091572][T27793] ? __pfx__copy_from_iter+0x10/0x10 [ 1661.091599][T27793] ? page_copy_sane+0x16a/0x280 [ 1661.091626][T27793] copy_page_from_iter+0xdd/0x170 [ 1661.091655][T27793] skb_copy_datagram_from_iter+0x306/0x720 [ 1661.091699][T27793] tun_get_user+0x1691/0x3e90 [ 1661.091752][T27793] ? aa_file_perm+0x44d/0x1550 [ 1661.091774][T27793] ? __pfx_tun_get_user+0x10/0x10 [ 1661.091804][T27793] ? _parse_integer_limit+0x1ae/0x1f0 [ 1661.091835][T27793] ? __lock_acquire+0xab9/0xd20 [ 1661.091862][T27793] ? ref_tracker_alloc+0x318/0x460 [ 1661.091888][T27793] ? __lock_acquire+0xab9/0xd20 [ 1661.091910][T27793] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1661.091938][T27793] ? tun_get+0x1c/0x2f0 [ 1661.091975][T27793] ? tun_get+0x1c/0x2f0 [ 1661.092004][T27793] ? tun_get+0x1c/0x2f0 [ 1661.092039][T27793] tun_chr_write_iter+0x113/0x200 [ 1661.092074][T27793] vfs_write+0x5c9/0xb30 [ 1661.092107][T27793] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1661.092139][T27793] ? __pfx_vfs_write+0x10/0x10 [ 1661.092177][T27793] ? __fget_files+0x2a/0x420 [ 1661.092217][T27793] ksys_write+0x145/0x250 [ 1661.092247][T27793] ? __pfx_ksys_write+0x10/0x10 [ 1661.092272][T27793] ? rcu_is_watching+0x15/0xb0 [ 1661.092302][T27793] ? do_syscall_64+0xbe/0x3b0 [ 1661.092330][T27793] do_syscall_64+0xfa/0x3b0 [ 1661.092353][T27793] ? lockdep_hardirqs_on+0x9c/0x150 [ 1661.092374][T27793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1661.092395][T27793] ? clear_bhb_loop+0x60/0xb0 [ 1661.092421][T27793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1661.092442][T27793] RIP: 0033:0x7f3832d8eec9 [ 1661.092461][T27793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1661.092480][T27793] RSP: 002b:00007f3833c7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1661.092502][T27793] RAX: ffffffffffffffda RBX: 00007f3832fe5fa0 RCX: 00007f3832d8eec9 [ 1661.092519][T27793] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000005 [ 1661.092533][T27793] RBP: 00007f3833c7f090 R08: 0000000000000000 R09: 0000000000000000 [ 1661.092547][T27793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1661.092559][T27793] R13: 00007f3832fe6038 R14: 00007f3832fe5fa0 R15: 00007f383310fa28 [ 1661.092592][T27793] [ 1661.283117][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1661.284342][ C1] vkms_vblank_simulate: vblank timer overrun [ 1661.398912][ C1] vkms_vblank_simulate: vblank timer overrun [ 1661.409844][T15276] usb usb9-port1: attempt power cycle [ 1661.697511][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 1661.697531][ T30] audit: type=1326 audit(1759502228.537:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27800 comm="syz.1.5813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf7f8eec9 code=0x7ff00000 [ 1661.726576][ T30] audit: type=1326 audit(1759502228.537:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27800 comm="syz.1.5813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf7f8eec9 code=0x7ff00000 [ 1661.755087][ T30] audit: type=1326 audit(1759502228.537:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27800 comm="syz.1.5813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf7f8eec9 code=0x7ff00000 [ 1661.778129][T15276] usb 9-1: new full-speed USB device number 42 using dummy_hcd [ 1661.786222][ T30] audit: type=1326 audit(1759502228.537:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27800 comm="syz.1.5813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf7f8eec9 code=0x7ff00000 [ 1661.809552][T15276] usb 9-1: device descriptor read/8, error -71 [ 1661.818800][ T30] audit: type=1326 audit(1759502228.537:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27800 comm="syz.1.5813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf7f8eec9 code=0x7ff00000 [ 1661.844379][ T30] audit: type=1326 audit(1759502228.537:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27800 comm="syz.1.5813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf7f8eec9 code=0x7ff00000 [ 1661.870628][ T30] audit: type=1326 audit(1759502228.537:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27800 comm="syz.1.5813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf7f8eec9 code=0x7ff00000 [ 1661.894184][ T30] audit: type=1326 audit(1759502228.537:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27800 comm="syz.1.5813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf7f8eec9 code=0x7ff00000 [ 1661.917142][ T30] audit: type=1326 audit(1759502228.537:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27800 comm="syz.1.5813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf7f8eec9 code=0x7ff00000 [ 1661.943522][ T30] audit: type=1326 audit(1759502228.537:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27800 comm="syz.1.5813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf7f8eec9 code=0x7ff00000 [ 1662.025030][T27806] loop5: detected capacity change from 0 to 7 [ 1662.034376][T27806] Dev loop5: unable to read RDB block 7 [ 1662.040083][T27806] loop5: unable to read partition table [ 1662.048939][T27806] loop5: partition table beyond EOD, truncated [ 1662.055359][T27806] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1662.124158][T15276] usb 9-1: new full-speed USB device number 43 using dummy_hcd [ 1662.165214][T15276] usb 9-1: device descriptor read/8, error -71 [ 1662.243480][T27814] netlink: 1196 bytes leftover after parsing attributes in process `syz.6.5815'. [ 1662.252810][T27814] netlink: 8496 bytes leftover after parsing attributes in process `syz.6.5815'. [ 1662.277427][T15276] usb usb9-port1: unable to enumerate USB device [ 1662.323236][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1663.363070][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1663.586742][T27822] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5818'. [ 1663.586775][T27822] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1664.403313][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1664.809185][T27851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1664.892612][T27851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1664.910065][T27854] netlink: 'syz.8.5827': attribute type 29 has an invalid length. [ 1664.919044][T27854] netlink: 'syz.8.5827': attribute type 29 has an invalid length. [ 1665.183585][T27859] loop2: detected capacity change from 0 to 7 [ 1665.328540][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1665.344700][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1665.353985][ C0] buffer_io_error: 25 callbacks suppressed [ 1665.353999][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1665.371488][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1665.380839][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1665.393146][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1665.402330][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1665.415147][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1665.424404][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1665.443144][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1665.464107][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1665.473372][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1665.493609][T22272] usb 9-1: new full-speed USB device number 44 using dummy_hcd [ 1665.636879][T22272] usb 9-1: device descriptor read/64, error -71 [ 1665.833683][T27868] CIFS: iocharset name too long [ 1665.859863][ T10] hid-generic 0000:0000:0000.004F: unknown main item tag 0x0 [ 1665.893277][T22272] usb 9-1: new full-speed USB device number 45 using dummy_hcd [ 1665.919935][ T10] hid-generic 0000:0000:0000.004F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1665.961218][T27865] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1666.057887][T27873] fido_id[27873]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1666.071687][T22272] usb 9-1: device descriptor read/64, error -71 [ 1666.193322][T22272] usb usb9-port1: attempt power cycle [ 1666.269607][T27876] loop5: detected capacity change from 0 to 7 [ 1666.296630][T27876] Dev loop5: unable to read RDB block 7 [ 1666.326985][T27876] loop5: unable to read partition table [ 1666.385233][T27876] loop5: partition table beyond EOD, truncated [ 1666.450909][T27876] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1666.483174][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1666.507144][T27887] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5836'. [ 1666.543044][T22272] usb 9-1: new full-speed USB device number 46 using dummy_hcd [ 1666.564540][T22272] usb 9-1: device descriptor read/8, error -71 [ 1666.803002][T22272] usb 9-1: new full-speed USB device number 47 using dummy_hcd [ 1666.823703][T22272] usb 9-1: device descriptor read/8, error -71 [ 1666.943791][T22272] usb usb9-port1: unable to enumerate USB device [ 1667.151809][T27900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5838'. [ 1667.240521][T27892] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1667.523036][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1668.563224][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1668.702944][ T5850] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 1668.838299][T27925] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5842'. [ 1668.983449][ T5850] usb 9-1: Using ep0 maxpacket: 32 [ 1669.074011][ T5850] usb 9-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1669.083885][ T5850] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1669.214107][ T5850] usb 9-1: config 0 descriptor?? [ 1669.240780][ T5850] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1669.603035][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1669.686607][T27934] cifs: Unknown parameter 'f,' [ 1670.453435][ T5850] gspca_sunplus: reg_r err -110 [ 1670.458490][ T5850] sunplus 9-1:0.0: probe with driver sunplus failed with error -110 [ 1670.643143][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1671.668324][ T10] usb 9-1: USB disconnect, device number 48 [ 1671.683010][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1672.576900][T27967] loop5: detected capacity change from 0 to 7 [ 1672.594616][T27967] Dev loop5: unable to read RDB block 7 [ 1672.613801][T27967] loop5: unable to read partition table [ 1672.631169][T27967] loop5: partition table beyond EOD, truncated [ 1672.661864][T27967] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1672.723152][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1672.881079][T27972] loop2: detected capacity change from 0 to 7 [ 1672.923217][T27972] Dev loop2: unable to read RDB block 7 [ 1672.977353][T27972] loop2: unable to read partition table [ 1672.992194][T27972] loop2: partition table beyond EOD, truncated [ 1673.007781][T27972] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1673.772999][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1674.272421][T27987] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5856'. [ 1674.813275][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1675.049993][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1675.062409][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1675.074728][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1675.086954][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1675.099170][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1675.111446][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1675.283715][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1675.290443][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1676.693092][ C1] net_ratelimit: 4532 callbacks suppressed [ 1676.693113][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1676.711328][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1676.723622][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1676.737301][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1676.749624][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1676.761927][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1676.774233][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1676.786537][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1676.798835][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1676.811121][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1679.955443][T28023] loop2: detected capacity change from 0 to 7 [ 1680.001782][ T7142] Dev loop2: unable to read RDB block 7 [ 1680.051407][ T7142] loop2: unable to read partition table [ 1680.061249][ T7142] loop2: partition table beyond EOD, truncated [ 1680.086506][T28023] Dev loop2: unable to read RDB block 7 [ 1680.144847][T28023] loop2: unable to read partition table [ 1680.171235][T28023] loop2: partition table beyond EOD, truncated [ 1680.257372][T28023] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1680.274156][T22273] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1680.510792][T22273] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1680.712050][T22273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1680.871941][T22273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1681.021285][T28027] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1681.028852][T28027] bridge0: port 2(bridge_slave_1) entered disabled state [ 1681.036436][T28027] bridge0: port 1(bridge_slave_0) entered disabled state [ 1681.094116][T22273] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1681.168371][T22273] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1681.205186][T22273] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1681.240248][T22273] usb 2-1: config 0 descriptor?? [ 1681.493163][T22274] usb 9-1: new full-speed USB device number 49 using dummy_hcd [ 1681.670933][T28050] loop5: detected capacity change from 0 to 7 [ 1681.683288][ T7142] Dev loop5: unable to read RDB block 7 [ 1681.689113][ T7142] loop5: unable to read partition table [ 1681.707801][ T7142] loop5: partition table beyond EOD, truncated [ 1681.840416][T22273] plantronics 0003:047F:FFFF.0050: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1681.873523][T28050] Dev loop5: unable to read RDB block 7 [ 1681.900967][T28050] loop5: unable to read partition table [ 1681.935183][T28050] loop5: partition table beyond EOD, truncated [ 1681.970932][T28050] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1681.994655][T22273] usb 2-1: USB disconnect, device number 61 [ 1682.083044][ C0] net_ratelimit: 13395 callbacks suppressed [ 1682.083065][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1682.211334][T28057] fido_id[28057]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1682.352226][T22281] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1682.378325][T22281] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1682.389714][T28024] ALSA: mixer_oss: invalid OSS volume '' [ 1682.428685][T22281] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1682.499744][T22281] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1683.123267][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1683.245374][T28075] futex_wake_op: syz.7.5876 tries to shift op by 32; fix this program [ 1683.284177][T28082] random: crng reseeded on system resumption [ 1684.163379][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1684.702996][T22274] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 1684.862993][T22274] usb 9-1: Using ep0 maxpacket: 8 [ 1684.969177][T22274] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1684.978620][T22274] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1684.989979][T22274] usb 9-1: Product: syz [ 1684.998891][T22274] usb 9-1: Manufacturer: syz [ 1685.003935][T22274] usb 9-1: SerialNumber: syz [ 1685.011248][T22274] usb 9-1: config 0 descriptor?? [ 1685.203181][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1685.217373][T28112] loop2: detected capacity change from 0 to 7 [ 1685.257628][T22274] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1685.362474][T28112] Dev loop2: unable to read RDB block 7 [ 1685.382148][T28114] program syz.1.5888 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1685.397140][T28112] loop2: unable to read partition table [ 1685.424802][T28112] loop2: partition table beyond EOD, truncated [ 1685.433145][T28112] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1685.712977][T15276] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1685.872990][T15276] usb 2-1: Using ep0 maxpacket: 8 [ 1685.933358][T15276] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1685.956025][T28121] netlink: 'syz.6.5891': attribute type 9 has an invalid length. [ 1685.964881][T28121] netlink: 'syz.6.5891': attribute type 7 has an invalid length. [ 1685.974732][T15276] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1685.984093][T28121] netlink: 'syz.6.5891': attribute type 8 has an invalid length. [ 1685.991868][T15276] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1686.003694][T15276] usb 2-1: Product: syz [ 1686.007919][T15276] usb 2-1: Manufacturer: syz [ 1686.012543][T15276] usb 2-1: SerialNumber: syz [ 1686.078757][T28124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1686.082706][T22274] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1686.090257][T28124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1686.120782][T22274] usb 9-1: USB disconnect, device number 50 [ 1686.222313][T15276] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 1686.232021][T15276] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1686.239969][T15276] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1686.243063][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1686.247844][T15276] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1686.432052][T15276] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 1686.442142][T15276] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1686.453597][T15276] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1686.797497][T28133] loop5: detected capacity change from 0 to 7 [ 1686.808079][ T7142] Dev loop5: unable to read RDB block 7 [ 1686.820992][ T7142] loop5: unable to read partition table [ 1686.829012][ T7142] loop5: partition table beyond EOD, truncated [ 1686.839513][T28133] Dev loop5: unable to read RDB block 7 [ 1686.850669][T28133] loop5: unable to read partition table [ 1686.871393][T28133] loop5: partition table beyond EOD, truncated [ 1686.891214][T28133] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1687.283325][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1688.323013][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1688.342187][T22274] usb 2-1: USB disconnect, device number 62 [ 1688.382689][T22274] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1688.413640][T22274] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1688.442372][T28156] loop2: detected capacity change from 0 to 7 [ 1688.449462][T22274] visor 2-1:1.0: device disconnected [ 1688.463813][T28156] Dev loop2: unable to read RDB block 7 [ 1688.466180][T28153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1688.470847][T28156] loop2: unable to read partition table [ 1688.490056][T28153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1688.534785][T28156] loop2: partition table beyond EOD, truncated [ 1688.542228][T28156] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1689.196741][T28169] fuse: Bad value for 'user_id' [ 1689.202084][T28169] fuse: Bad value for 'user_id' [ 1689.373188][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1689.680000][T28176] fuse: Bad value for 'user_id' [ 1689.697450][T28176] fuse: Bad value for 'user_id' [ 1690.404113][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1690.651360][T28203] loop2: detected capacity change from 0 to 7 [ 1690.679702][T17766] Dev loop2: unable to read RDB block 7 [ 1690.687042][T17766] loop2: unable to read partition table [ 1690.739943][T17766] loop2: partition table beyond EOD, truncated [ 1690.771545][T28203] Dev loop2: unable to read RDB block 7 [ 1690.777553][T28203] loop2: unable to read partition table [ 1690.791275][T28203] loop2: partition table beyond EOD, truncated [ 1690.882774][T28203] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1691.443158][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1692.305137][T28218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1692.339029][T28218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1692.483062][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1692.608902][T28228] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5910'. [ 1692.982310][T28231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5918'. [ 1693.025833][T28233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1693.062431][T28233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1693.523316][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1693.586069][T15276] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1693.763460][T15276] usb 2-1: Using ep0 maxpacket: 16 [ 1693.793492][T28249] netlink: 'syz.6.5923': attribute type 5 has an invalid length. [ 1693.795512][T15276] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1693.801661][T28249] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5923'. [ 1693.826260][T15276] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1693.848488][T15276] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1693.899115][T15276] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1693.912939][T15276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1693.924970][T28252] syz_tun: entered allmulticast mode [ 1693.943586][T15276] usb 2-1: config 0 descriptor?? [ 1694.412357][T15276] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0051/input/input107 [ 1694.453307][T15276] microsoft 0003:045E:07DA.0051: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1694.563029][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1694.617973][T28242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1694.664805][T28242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1694.746352][ T5826] usb 2-1: USB disconnect, device number 63 [ 1694.911140][T28251] syz_tun: left allmulticast mode [ 1694.940526][T28271] nftables ruleset with unbound chain [ 1695.603268][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1695.842647][T28286] loop2: detected capacity change from 0 to 7 [ 1695.863390][T28286] Dev loop2: unable to read RDB block 7 [ 1695.872003][T28286] loop2: unable to read partition table [ 1695.884348][T28286] loop2: partition table beyond EOD, truncated [ 1695.897590][T28286] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1696.596225][T28294] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 1696.621344][T28294] bond1 (unregistering): Released all slaves [ 1696.643030][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1697.292443][T28277] PKCS7: Unknown OID: [5] (bad) [ 1697.471686][T28277] PKCS7: Only support pkcs7_signedData type [ 1697.479568][T28310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5937'. [ 1697.683329][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1698.723190][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1698.857084][T28322] fuse: Bad value for 'fd' [ 1699.773318][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1700.129158][T28347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5947'. [ 1700.669908][T28363] netlink: 176 bytes leftover after parsing attributes in process `syz.3.5951'. [ 1700.803048][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1701.193031][T22274] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1701.328414][T28376] PKCS7: Unknown OID: [5] (bad) [ 1701.347378][T28376] PKCS7: Only support pkcs7_signedData type [ 1701.357980][T22274] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1701.383123][T22274] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1701.423334][T22274] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1701.463023][T22274] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1701.488951][T22274] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1701.533068][T22274] usb 2-1: config 0 descriptor?? [ 1701.853408][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1701.957397][T28367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1701.974561][T28367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1701.997816][T22274] usbhid 2-1:0.0: can't add hid device: -71 [ 1702.013375][T22274] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1702.138269][T22274] usb 2-1: USB disconnect, device number 64 [ 1702.324746][T28380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1702.336498][T28380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1702.344461][ T5850] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 1702.604679][ T5850] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1702.644535][ T5850] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1702.669501][ T5850] usb 9-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1702.702402][ T5850] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1702.744081][ T5850] usb 9-1: config 0 descriptor?? [ 1702.861882][T22274] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1702.883013][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1703.105300][T22274] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 1703.113650][T22274] usb 2-1: config 1 has no interface number 0 [ 1703.120057][T22274] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 8 [ 1703.133431][T22274] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1703.143377][T22274] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1703.151653][T22274] usb 2-1: Product: syz [ 1703.156208][T22274] usb 2-1: Manufacturer: syz [ 1703.160974][T22274] usb 2-1: SerialNumber: syz [ 1703.174381][T28385] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 1703.230339][T22274] usb 2-1: Error in usbnet_get_endpoints (-22) [ 1703.668036][T28378] ip6tnl1: entered promiscuous mode [ 1703.709378][T28378] ip6tnl1: entered allmulticast mode [ 1703.923382][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1704.011235][ T5850] Bluetooth: Can't get version to change to load ram patch err [ 1704.019004][ T5850] Bluetooth: Loading patch file failed [ 1704.042158][ T5850] ath3k 9-1:0.0: probe with driver ath3k failed with error -71 [ 1704.076556][ T5850] usb 9-1: USB disconnect, device number 51 [ 1704.963050][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1705.731503][T28406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1705.800053][T28406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1706.003520][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1706.404638][T28404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1706.414859][T28404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1706.576914][ T5850] usb 2-1: USB disconnect, device number 65 [ 1706.856534][T28413] netlink: 'syz.1.5964': attribute type 19 has an invalid length. [ 1707.043323][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1707.237233][T28426] kvm: apic: phys broadcast and lowest prio [ 1707.653233][T22274] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 1707.816015][T22274] usb 9-1: Using ep0 maxpacket: 16 [ 1707.845684][T22274] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1707.873500][T22274] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1707.894677][T22274] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1707.905296][T22274] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1707.917491][T22274] usb 9-1: Product: syz [ 1707.921830][T22274] usb 9-1: Manufacturer: syz [ 1707.927583][T22274] usb 9-1: SerialNumber: syz [ 1708.083229][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1708.185127][T28430] netlink: 128 bytes leftover after parsing attributes in process `syz.8.5969'. [ 1708.654663][T22274] usb 9-1: cannot find UAC_HEADER [ 1708.691549][T22274] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1708.724653][T22274] usb 9-1: USB disconnect, device number 52 [ 1708.750372][ T7142] udevd[7142]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1709.123023][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1709.412102][T28451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5974'. [ 1710.163250][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1710.586408][T20368] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1710.597914][T20368] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1710.608037][T20368] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1710.616827][T20368] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1710.625243][T20368] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1711.595575][T22281] bridge_slave_1: left allmulticast mode [ 1711.601296][T22281] bridge_slave_1: left promiscuous mode [ 1711.633176][T22281] bridge0: port 2(bridge_slave_1) entered disabled state [ 1711.682460][T22281] bridge_slave_0: left allmulticast mode [ 1711.689386][T22281] bridge_slave_0: left promiscuous mode [ 1711.706615][T22281] bridge0: port 1(bridge_slave_0) entered disabled state [ 1712.160039][T28484] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5981'. [ 1712.598926][T22281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1712.608533][T22281] bond0 (unregistering): Released all slaves [ 1712.624243][T22281] bond1 (unregistering): Released all slaves [ 1712.638713][T22281] bond2 (unregistering): Released all slaves [ 1712.667849][T28469] chnl_net:caif_netlink_parms(): no params data found [ 1712.723076][T14540] Bluetooth: hci5: command tx timeout [ 1712.935907][T22281] tipc: Disabling bearer [ 1712.947646][T22281] tipc: Disabling bearer [ 1712.954385][T22281] tipc: Left network mode [ 1713.067701][T22281] IPVS: stopping backup sync thread 19902 ... [ 1713.205756][T28469] bridge0: port 1(bridge_slave_0) entered blocking state [ 1713.230028][T28469] bridge0: port 1(bridge_slave_0) entered disabled state [ 1713.260028][T28469] bridge_slave_0: entered allmulticast mode [ 1713.296977][T28469] bridge_slave_0: entered promiscuous mode [ 1713.346755][T28469] bridge0: port 2(bridge_slave_1) entered blocking state [ 1713.374615][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 1713.374634][ T30] audit: type=1326 audit(1759502280.227:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28510 comm="syz.3.5984" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd47c18eec9 code=0x0 [ 1713.412990][T28469] bridge0: port 2(bridge_slave_1) entered disabled state [ 1713.501415][T28469] bridge_slave_1: entered allmulticast mode [ 1713.514928][T28469] bridge_slave_1: entered promiscuous mode [ 1713.811641][T28525] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1713.826996][T28469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1713.858624][T28469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1714.038957][T28469] team0: Port device team_slave_0 added [ 1714.069036][T28469] team0: Port device team_slave_1 added [ 1714.246740][T28469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1714.300290][T28469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1714.372889][T28469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1714.402207][T28469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1714.412864][T28469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1714.536809][T28469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1714.750611][T28469] hsr_slave_0: entered promiscuous mode [ 1714.761242][T28469] hsr_slave_1: entered promiscuous mode [ 1714.769245][T28469] debugfs: 'hsr0' already exists in 'hsr' [ 1714.775771][T28469] Cannot create hsr debugfs directory [ 1714.809966][T14540] Bluetooth: hci5: command tx timeout [ 1716.034516][T28558] trusted_key: encrypted_key: insufficient parameters specified [ 1716.890193][T14540] Bluetooth: hci5: command tx timeout [ 1716.961161][T22281] dummy0: left promiscuous mode [ 1717.032636][T22281] hsr_slave_0: left promiscuous mode [ 1717.096152][T22281] hsr_slave_1: left promiscuous mode [ 1718.402655][T28571] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1718.467556][T28469] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1718.547888][T28469] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1718.638496][T28469] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1718.704067][T28469] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1718.963358][T14540] Bluetooth: hci5: command tx timeout [ 1719.145845][T22281] IPVS: stop unused estimator thread 0... [ 1719.174544][T28469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1719.227066][T28469] 8021q: adding VLAN 0 to HW filter on device team0 [ 1719.270203][ T3554] bridge0: port 1(bridge_slave_0) entered blocking state [ 1719.277406][ T3554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1719.339837][ T3554] bridge0: port 2(bridge_slave_1) entered blocking state [ 1719.347076][ T3554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1719.690920][T28469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1719.901019][T28469] veth0_vlan: entered promiscuous mode [ 1719.922851][T28469] veth1_vlan: entered promiscuous mode [ 1720.006005][T28469] veth0_macvtap: entered promiscuous mode [ 1720.088070][T28469] veth1_macvtap: entered promiscuous mode [ 1720.111121][ T30] audit: type=1326 audit(1759502286.957:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28602 comm="syz.7.5996" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5f8498eec9 code=0x0 [ 1720.217449][T28469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1720.280478][T28611] netlink: 1 bytes leftover after parsing attributes in process `syz.6.5997'. [ 1720.380214][T28469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1720.396603][T28613] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1720.417815][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1720.440843][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1720.462065][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1720.482476][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1720.736721][ T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1720.759161][ T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1720.945997][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1720.986022][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1721.092937][ T30] audit: type=1326 audit(1759502287.887:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28627 comm="syz.3.6000" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd47c18eec9 code=0x0 [ 1721.304080][T28637] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1721.476377][T28644] vcan0: tx drop: invalid sa for name 0x0000100000000000 [ 1722.546598][T28641] delete_channel: no stack [ 1723.331827][T28669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6003'. [ 1723.381562][T28672] fuse: Bad value for 'user_id' [ 1723.386713][T28672] fuse: Bad value for 'user_id' [ 1723.578485][T28681] tipc: Started in network mode [ 1723.592064][T28681] tipc: Node identity 7f000001, cluster identity 4711 [ 1723.601188][T28681] tipc: Enabled bearer , priority 10 [ 1724.233522][T28714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6010'. [ 1724.491721][ T30] audit: type=1326 audit(1759502291.337:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28718 comm="syz.1.6012" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f41c258eec9 code=0x0 [ 1724.603097][ T43] tipc: Node number set to 2130706433 [ 1724.715472][T28725] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1724.743924][T28726] syzkaller1: entered promiscuous mode [ 1724.749788][T28726] syzkaller1: entered allmulticast mode [ 1725.866272][T28747] loop5: detected capacity change from 0 to 7 [ 1725.875642][T28747] Dev loop5: unable to read RDB block 7 [ 1725.895995][T28747] loop5: unable to read partition table [ 1725.933400][T28747] loop5: partition table beyond EOD, truncated [ 1725.939670][T28747] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1727.083689][T28731] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1727.977894][T28781] netlink: 'syz.1.6027': attribute type 1 has an invalid length. [ 1728.522575][T28787] tipc: Enabling of bearer rejected, already enabled [ 1728.533601][T28787] FAULT_INJECTION: forcing a failure. [ 1728.533601][T28787] name failslab, interval 1, probability 0, space 0, times 0 [ 1728.549092][T28787] CPU: 0 UID: 0 PID: 28787 Comm: syz.3.6029 Not tainted syzkaller #0 PREEMPT(full) [ 1728.549119][T28787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1728.549129][T28787] Call Trace: [ 1728.549135][T28787] [ 1728.549142][T28787] dump_stack_lvl+0x189/0x250 [ 1728.549165][T28787] ? __pfx____ratelimit+0x10/0x10 [ 1728.549182][T28787] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1728.549200][T28787] ? __pfx__printk+0x10/0x10 [ 1728.549232][T28787] ? __pfx___might_resched+0x10/0x10 [ 1728.549252][T28787] ? fs_reclaim_acquire+0x7d/0x100 [ 1728.549278][T28787] should_fail_ex+0x414/0x560 [ 1728.549306][T28787] should_failslab+0xa8/0x100 [ 1728.549330][T28787] __kmalloc_noprof+0xcb/0x7f0 [ 1728.549349][T28787] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1728.549373][T28787] ? rcu_is_watching+0x15/0xb0 [ 1728.549404][T28787] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1728.549433][T28787] genl_family_rcv_msg_doit+0xb8/0x300 [ 1728.549460][T28787] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1728.549483][T28787] ? __pfx___mutex_lock+0x10/0x10 [ 1728.549501][T28787] ? __pfx_genl_get_cmd+0x10/0x10 [ 1728.549521][T28787] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 1728.549548][T28787] ? stack_trace_save+0x9c/0xe0 [ 1728.549573][T28787] genl_rcv_msg+0x60e/0x790 [ 1728.549599][T28787] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1728.549620][T28787] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 1728.549652][T28787] netlink_rcv_skb+0x208/0x470 [ 1728.549668][T28787] ? __lock_acquire+0xab9/0xd20 [ 1728.549683][T28787] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1728.549706][T28787] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1728.549737][T28787] ? down_read+0x1ad/0x2e0 [ 1728.549756][T28787] genl_rcv+0x28/0x40 [ 1728.549776][T28787] netlink_unicast+0x82c/0x9e0 [ 1728.549798][T28787] ? __pfx_netlink_unicast+0x10/0x10 [ 1728.549815][T28787] ? netlink_sendmsg+0x642/0xb30 [ 1728.549831][T28787] ? skb_put+0x11b/0x210 [ 1728.549852][T28787] netlink_sendmsg+0x805/0xb30 [ 1728.549877][T28787] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1728.549897][T28787] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1728.549913][T28787] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1728.549932][T28787] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1728.549950][T28787] __sock_sendmsg+0x219/0x270 [ 1728.549967][T28787] ____sys_sendmsg+0x505/0x830 [ 1728.549992][T28787] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1728.550019][T28787] ? import_iovec+0x74/0xa0 [ 1728.550041][T28787] ___sys_sendmsg+0x21f/0x2a0 [ 1728.550062][T28787] ? __pfx____sys_sendmsg+0x10/0x10 [ 1728.550114][T28787] ? __fget_files+0x2a/0x420 [ 1728.550136][T28787] ? __fget_files+0x3a0/0x420 [ 1728.550166][T28787] __x64_sys_sendmsg+0x19b/0x260 [ 1728.550188][T28787] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1728.550216][T28787] ? __pfx_ksys_write+0x10/0x10 [ 1728.550234][T28787] ? rcu_is_watching+0x15/0xb0 [ 1728.550255][T28787] ? do_syscall_64+0xbe/0x3b0 [ 1728.550275][T28787] do_syscall_64+0xfa/0x3b0 [ 1728.550291][T28787] ? lockdep_hardirqs_on+0x9c/0x150 [ 1728.550306][T28787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1728.550321][T28787] ? clear_bhb_loop+0x60/0xb0 [ 1728.550339][T28787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1728.550353][T28787] RIP: 0033:0x7fd47c18eec9 [ 1728.550367][T28787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1728.550381][T28787] RSP: 002b:00007fd47cf8a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1728.550397][T28787] RAX: ffffffffffffffda RBX: 00007fd47c3e5fa0 RCX: 00007fd47c18eec9 [ 1728.550408][T28787] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000007 [ 1728.550417][T28787] RBP: 00007fd47cf8a090 R08: 0000000000000000 R09: 0000000000000000 [ 1728.550426][T28787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1728.550435][T28787] R13: 00007fd47c3e6038 R14: 00007fd47c3e5fa0 R15: 00007fd47c50fa28 [ 1728.550458][T28787] [ 1729.350583][T28789] binder: 28788:28789 ioctl c0306201 2000000003c0 returned -14 [ 1729.444755][T28791] loop5: detected capacity change from 0 to 7 [ 1729.481002][T28794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1729.490789][T28794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1729.539665][T28791] Dev loop5: unable to read RDB block 7 [ 1729.590087][T28796] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6033'. [ 1729.716641][T28791] loop5: unable to read partition table [ 1729.751108][T28791] loop5: partition table beyond EOD, truncated [ 1729.765631][T28791] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1729.975879][T28804] loop2: detected capacity change from 0 to 7 [ 1730.090407][T28804] Dev loop2: unable to read RDB block 7 [ 1730.106111][T28804] loop2: unable to read partition table [ 1730.146562][T28804] loop2: partition table beyond EOD, truncated [ 1730.158583][T28804] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1730.838086][T28819] netlink: 'syz.1.6042': attribute type 10 has an invalid length. [ 1730.847425][T28819] macvlan0: entered promiscuous mode [ 1730.853308][T28819] macvlan0: entered allmulticast mode [ 1730.862419][T28819] veth1_vlan: entered allmulticast mode [ 1730.871945][T28819] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 1731.499327][T28844] loop5: detected capacity change from 0 to 7 [ 1731.515974][T28844] Dev loop5: unable to read RDB block 7 [ 1731.516028][T28844] loop5: unable to read partition table [ 1731.516246][T28844] loop5: partition table beyond EOD, truncated [ 1731.516269][T28844] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1731.619154][T28847] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6047'. [ 1731.915963][T28851] loop2: detected capacity change from 0 to 7 [ 1732.076883][T28851] Dev loop2: unable to read RDB block 7 [ 1732.110176][T28851] loop2: unable to read partition table [ 1732.117640][T28851] loop2: partition table beyond EOD, truncated [ 1732.136322][T28851] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1732.620583][T28873] bridge1: entered allmulticast mode [ 1732.662738][T28873] team0: Port device bridge1 added [ 1732.674031][T28857] dummy0: entered allmulticast mode [ 1732.730075][T28876] PKCS7: Unknown OID: [5] (bad) [ 1732.741754][T28876] PKCS7: Only support pkcs7_signedData type [ 1732.986101][T28879] netlink: 'syz.7.6057': attribute type 1 has an invalid length. [ 1733.114696][T28856] dummy0: left allmulticast mode [ 1733.165948][T28879] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1733.176289][T28882] syz_tun: entered promiscuous mode [ 1733.189959][T28882] bond1: (slave syz_tun): making interface the new active one [ 1733.200312][T28882] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 1733.201056][T28879] binder: 28878:28879 ioctl c0306201 200000000680 returned -14 [ 1733.391468][T28888] sctp: [Deprecated]: syz.1.6059 (pid 28888) Use of int in max_burst socket option. [ 1733.391468][T28888] Use struct sctp_assoc_value instead [ 1733.421302][T28888] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6059'. [ 1733.464386][T28889] loop5: detected capacity change from 0 to 7 [ 1733.486555][ T7142] Dev loop5: unable to read RDB block 7 [ 1733.498442][ T7142] loop5: unable to read partition table [ 1733.516400][ T7142] loop5: partition table beyond EOD, truncated [ 1733.535963][T28889] Dev loop5: unable to read RDB block 7 [ 1733.545445][T28889] loop5: unable to read partition table [ 1733.551430][T28889] loop5: partition table beyond EOD, truncated [ 1733.570466][T28889] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1733.736573][T28895] loop2: detected capacity change from 0 to 7 [ 1733.766401][T28895] Dev loop2: unable to read RDB block 7 [ 1733.785347][T28895] loop2: unable to read partition table [ 1733.809275][T28895] loop2: partition table beyond EOD, truncated [ 1733.835453][T28895] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1734.443756][ T43] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1734.672640][ T43] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 1734.691993][ T43] usb 2-1: config 1 has no interface number 0 [ 1734.698693][ T43] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 8 [ 1734.724333][ T43] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1734.747585][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1734.758049][ T43] usb 2-1: Product: syz [ 1734.762307][ T43] usb 2-1: Manufacturer: syz [ 1734.767522][ T43] usb 2-1: SerialNumber: syz [ 1734.824264][T28912] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1734.864545][ T43] usb 2-1: Error in usbnet_get_endpoints (-22) [ 1735.273006][ T43] usb 9-1: new full-speed USB device number 53 using dummy_hcd [ 1735.495980][T28931] syz_tun: entered allmulticast mode [ 1735.864597][ T43] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1735.876329][ T43] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1735.887380][ T43] usb 9-1: Product: syz [ 1735.891900][ T43] usb 9-1: Manufacturer: syz [ 1735.898127][ T43] usb 9-1: SerialNumber: syz [ 1735.918025][ T43] usb 9-1: config 0 descriptor?? [ 1736.278739][ T43] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1736.501908][T28939] IPv4: Oversized IP packet from 172.20.20.24 [ 1736.509383][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 1736.516152][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 1736.583687][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1736.590561][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1736.887561][T28942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1736.918779][T28942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1737.361769][T28945] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1737.964370][T28947] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6074'. [ 1737.964393][T28948] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6074'. [ 1738.059278][T28947] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6074'. [ 1738.143567][ T915] usb 2-1: USB disconnect, device number 66 [ 1738.328038][T28953] loop2: detected capacity change from 0 to 7 [ 1738.346254][T28953] Dev loop2: unable to read RDB block 7 [ 1738.380597][T28953] loop2: unable to read partition table [ 1738.395941][T28953] loop2: partition table beyond EOD, truncated [ 1738.417291][T28953] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1738.568020][T28924] syz_tun: left allmulticast mode [ 1740.013539][T28978] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1740.308194][ T43] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1740.322767][ T43] usb 9-1: USB disconnect, device number 53 [ 1740.868145][T28985] netlink: 'syz.3.6084': attribute type 11 has an invalid length. [ 1740.954976][T22273] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 1741.182678][T22273] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1741.198006][T22273] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1741.203574][T26328] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1741.352460][T22273] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1741.377559][T22273] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1741.394590][T26328] usb 2-1: config 1 has an invalid descriptor of length 108, skipping remainder of the config [ 1741.409618][T26328] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1741.409638][T22273] usb 9-1: Product: syz [ 1741.409658][T22273] usb 9-1: Manufacturer: syz [ 1741.440772][T22273] usb 9-1: SerialNumber: syz [ 1741.535728][T26328] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1741.545328][T26328] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1741.553752][T26328] usb 2-1: SerialNumber: syz [ 1741.614346][T22273] cdc_mbim 9-1:1.0: skipping garbage [ 1741.727089][T29003] loop2: detected capacity change from 0 to 7 [ 1741.744968][ T7587] Dev loop2: unable to read RDB block 7 [ 1741.750838][ T7587] loop2: unable to read partition table [ 1741.757352][ T7587] loop2: partition table beyond EOD, truncated [ 1741.784406][T29003] Dev loop2: unable to read RDB block 7 [ 1741.791445][T29003] loop2: unable to read partition table [ 1741.797789][T26328] usb 2-1: 0:2 : does not exist [ 1741.802328][T29003] loop2: partition table beyond EOD, truncated [ 1741.803478][T26328] usb 2-1: unit 152 not found! [ 1741.815361][T29003] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1741.839781][ T5207] Dev loop2: unable to read RDB block 7 [ 1741.846769][ T5207] loop2: unable to read partition table [ 1741.852659][ T5207] loop2: partition table beyond EOD, truncated [ 1741.949877][T28991] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1741.969485][T29005] tipc: Enabling of bearer rejected, already enabled [ 1742.032006][T29005] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6090'. [ 1742.053843][T26328] usb 2-1: USB disconnect, device number 67 [ 1742.073047][T29005] tipc: Invalid UDP bearer configuration [ 1742.074598][T29005] tipc: Enabling of bearer rejected, failed to enable media [ 1742.124234][T17766] udevd[17766]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1742.692995][T22272] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1742.717456][T29014] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1742.730642][T22273] cdc_mbim 9-1:1.0: setting tx_max = 48 [ 1742.740748][T22273] cdc_mbim 9-1:1.0: cdc-wdm0: USB WDM device [ 1742.754461][T22273] wwan wwan0: port wwan0mbim0 attached [ 1742.769405][T22273] cdc_mbim 9-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.8-1, CDC MBIM, ae:87:e0:f8:93:b9 [ 1742.853402][T22272] usb 2-1: Using ep0 maxpacket: 16 [ 1742.861769][T22272] usb 2-1: config 0 has an invalid interface number: 63 but max is 0 [ 1742.875747][T22272] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1742.887070][T22272] usb 2-1: config 0 has no interface number 0 [ 1742.894569][T22272] usb 2-1: config 0 interface 63 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1742.905107][T22272] usb 2-1: config 0 interface 63 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1742.918414][T22272] usb 2-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice=41.e6 [ 1742.928299][T22272] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1742.958009][T22272] usb 2-1: config 0 descriptor?? [ 1743.300934][T26328] usb 2-1: USB disconnect, device number 68 [ 1743.658822][ C0] vcan0: j1939_tp_rxtimer: 0xffff888044bb3c00: rx timeout, send abort [ 1743.669689][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888044bb3c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1744.095540][ T5502] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 1744.262945][ T43] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1744.436103][ T43] usb 2-1: device descriptor read/64, error -71 [ 1744.682979][ T43] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1744.746368][T26328] usb 9-1: USB disconnect, device number 54 [ 1744.753472][T26328] cdc_mbim 9-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.8-1, CDC MBIM [ 1744.831710][ T43] usb 2-1: device descriptor read/64, error -71 [ 1744.894983][T29066] ptrace attach of "./syz-executor exec"[24457] was attempted by "./syz-executor exec"[29066] [ 1744.944312][ T43] usb usb2-port1: attempt power cycle [ 1744.971335][T26328] wwan wwan0: port wwan0mbim0 disconnected [ 1745.306268][ T43] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1745.337999][ T43] usb 2-1: device descriptor read/8, error -71 [ 1745.640440][T29081] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.6103'. [ 1745.650016][ T43] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1745.667368][T29081] netlink: zone id is out of range [ 1745.674815][T29081] netlink: get zone limit has 8 unknown bytes [ 1745.682574][ T43] usb 2-1: device descriptor read/8, error -71 [ 1745.827747][ T43] usb usb2-port1: unable to enumerate USB device [ 1749.204200][T29160] fuse: Unknown parameter 'ÌJÞuser_id' [ 1749.350119][T29166] tipc: Enabling of bearer rejected, already enabled [ 1749.363652][T29166] tipc: Enabling of bearer rejected, failed to enable media [ 1749.830686][ T30] audit: type=1326 audit(1759502316.677:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29173 comm="syz.1.6117" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f41c258eec9 code=0x0 [ 1749.952581][T29184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1749.975677][T29184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1750.027946][T29181] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1751.275828][T29208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1751.289969][T29208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1751.901658][ T30] audit: type=1326 audit(1759502318.747:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29217 comm="syz.3.6127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47c18eec9 code=0x7ffc0000 [ 1751.951749][ T30] audit: type=1326 audit(1759502318.767:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29217 comm="syz.3.6127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47c18eec9 code=0x7ffc0000 [ 1752.002646][ T30] audit: type=1326 audit(1759502318.787:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29217 comm="syz.3.6127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd47c18eec9 code=0x7ffc0000 [ 1752.081578][ T30] audit: type=1326 audit(1759502318.787:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29217 comm="syz.3.6127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47c18eec9 code=0x7ffc0000 [ 1752.616614][ T30] audit: type=1326 audit(1759502318.797:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29217 comm="syz.3.6127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd47c18eec9 code=0x7ffc0000 [ 1753.222119][ T30] audit: type=1800 audit(1759502320.067:1874): pid=29231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6130" name="file1" dev="tmpfs" ino=455 res=0 errno=0 [ 1754.023556][T22274] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1754.185298][T22274] usb 2-1: config 0 has an invalid interface number: 32 but max is 2 [ 1754.194009][T22274] usb 2-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 1754.204789][T22274] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1754.213930][T22274] usb 2-1: config 0 has no interface number 0 [ 1754.220214][T22274] usb 2-1: too many endpoints for config 0 interface 32 altsetting 32: 32, using maximum allowed: 30 [ 1754.239689][T22274] usb 2-1: config 0 interface 32 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1754.259199][T22274] usb 2-1: config 0 interface 32 has no altsetting 0 [ 1754.268478][T22274] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1754.282581][T22274] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1754.315030][T22274] usb 2-1: config 0 descriptor?? [ 1754.645239][T22274] usb 2-1: string descriptor 0 read error: -71 [ 1754.680718][T22274] usb 2-1: USB disconnect, device number 73 [ 1754.747919][T29255] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1754.760184][T29255] block device autoloading is deprecated and will be removed. [ 1754.906742][T29270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1754.921482][T29270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1755.793096][ T5850] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1756.012985][ T5850] usb 2-1: Using ep0 maxpacket: 16 [ 1756.056191][ T5850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1756.066181][ T5850] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1756.109973][ T5850] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 1756.161691][ T5850] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1756.172256][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1756.254705][ T5850] usb 2-1: Product: syz [ 1756.259520][ T5850] usb 2-1: Manufacturer: syz [ 1756.271854][ T5850] usb 2-1: SerialNumber: syz [ 1756.279883][ T5850] usb 2-1: config 0 descriptor?? [ 1756.286304][T29286] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1756.341287][ T5850] mcba_usb 2-1:0.0 can0: failed tx_urb -90 [ 1756.347577][ T5850] mcba_usb 2-1:0.0 can0: Failed to send cmd (169) [ 1756.355572][ T5850] mcba_usb 2-1:0.0 can0: failed tx_urb -90 [ 1756.363817][ T5850] mcba_usb 2-1:0.0 can0: Failed to send cmd (169) [ 1756.370348][ T5850] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 1756.555761][T29286] netlink: 'syz.1.6144': attribute type 1 has an invalid length. [ 1756.768898][T29306] netlink: 68 bytes leftover after parsing attributes in process `syz.8.6149'. [ 1757.345516][ T5502] mcba_usb 2-1:0.0 can0: bit-timing not yet defined [ 1758.247174][T29328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1758.258921][T29328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1758.375040][T29331] syzkaller1: entered promiscuous mode [ 1758.381247][T29331] syzkaller1: entered allmulticast mode [ 1758.466660][T26328] usb 2-1: USB disconnect, device number 74 [ 1758.478596][T26328] mcba_usb 2-1:0.0 can0: device disconnected [ 1758.884473][T26328] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1759.032984][T26328] usb 2-1: device descriptor read/64, error -71 [ 1759.283846][T26328] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1759.422906][T26328] usb 2-1: device descriptor read/64, error -71 [ 1759.536749][T26328] usb usb2-port1: attempt power cycle [ 1759.893112][T26328] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1759.913683][T26328] usb 2-1: device descriptor read/8, error -71 [ 1760.163883][T26328] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1760.184897][T26328] usb 2-1: device descriptor read/8, error -71 [ 1760.294863][T26328] usb usb2-port1: unable to enumerate USB device [ 1761.992915][T22273] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1762.153477][T22273] usb 2-1: device descriptor read/64, error -71 [ 1762.551979][ T30] audit: type=1326 audit(1759502329.397:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29374 comm="syz.6.6165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3832d8eec9 code=0x7ffc0000 [ 1762.575915][ T30] audit: type=1326 audit(1759502329.397:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29374 comm="syz.6.6165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3832d8eec9 code=0x7ffc0000 [ 1762.603021][T22273] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1762.610816][ T30] audit: type=1326 audit(1759502329.457:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29374 comm="syz.6.6165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f3832d8eec9 code=0x7ffc0000 [ 1762.648873][ T30] audit: type=1326 audit(1759502329.497:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29374 comm="syz.6.6165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3832d8eec9 code=0x7ffc0000 [ 1762.671919][ T30] audit: type=1326 audit(1759502329.527:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29374 comm="syz.6.6165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3832d8eec9 code=0x7ffc0000 [ 1762.758573][T29378] syzkaller1: entered promiscuous mode [ 1762.765611][T29378] syzkaller1: entered allmulticast mode [ 1762.823413][T22273] usb 2-1: device descriptor read/64, error -71 [ 1762.947202][T22273] usb usb2-port1: attempt power cycle [ 1762.953937][T29386] fuse: Unknown parameter '0x0000000000000003' [ 1763.194112][ T30] audit: type=1800 audit(1759502330.047:1880): pid=29399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.6171" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=178788 res=0 errno=0 [ 1763.293227][T22273] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1763.334000][T22273] usb 2-1: device descriptor read/8, error -71 [ 1763.508258][T26328] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 1763.576632][T22273] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1763.625973][T22273] usb 2-1: device descriptor read/8, error -71 [ 1763.756913][T22273] usb usb2-port1: unable to enumerate USB device [ 1764.699474][T26328] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1764.818890][T26328] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1764.837999][T26328] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1764.893115][T26328] usb 9-1: Product: syz [ 1764.897437][T26328] usb 9-1: Manufacturer: syz [ 1764.902063][T26328] usb 9-1: SerialNumber: syz [ 1764.921597][T26328] usb 9-1: config 0 descriptor?? [ 1765.004018][T29433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1765.033772][T29433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1765.053216][T29433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1765.074581][T29433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1765.136041][T29435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6182'. [ 1765.208263][T29428] syz_tun: left promiscuous mode [ 1765.240435][T29438] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1765.526853][T22274] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1765.663013][T22274] usb 2-1: device descriptor read/64, error -71 [ 1765.676492][T26328] usb 9-1: USB disconnect, device number 55 [ 1765.804835][T29428] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1765.923641][T22274] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1765.949053][T29444] PKCS7: Unknown OID: [5] (bad) [ 1765.954403][T29444] PKCS7: Only support pkcs7_signedData type [ 1765.977034][ T30] audit: type=1326 audit(1759502332.827:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29447 comm="syz.3.6186" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd47c18eec9 code=0x0 [ 1766.062933][T22274] usb 2-1: device descriptor read/64, error -71 [ 1766.211285][T22274] usb usb2-port1: attempt power cycle [ 1766.748579][T22274] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1766.874111][T22274] usb 2-1: device descriptor read/8, error -71 [ 1767.312964][T22274] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1767.355570][T22274] usb 2-1: device descriptor read/8, error -71 [ 1767.483741][T22274] usb usb2-port1: unable to enumerate USB device [ 1768.973455][T22272] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1769.164264][T22272] usb 2-1: Using ep0 maxpacket: 32 [ 1769.174712][T22272] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 1769.184367][T22272] usb 2-1: config 0 has no interface number 0 [ 1769.190497][T22272] usb 2-1: config 0 interface 89 has no altsetting 0 [ 1769.295447][T29486] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6195'. [ 1769.311876][T22272] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1769.332278][T22272] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1769.357750][T22272] usb 2-1: Product: syz [ 1769.375033][T22272] usb 2-1: Manufacturer: syz [ 1769.437475][T22272] usb 2-1: SerialNumber: syz [ 1769.466732][T22272] usb 2-1: config 0 descriptor?? [ 1769.576637][T22272] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1769.630562][T22272] em28xx 2-1:0.89: Video interface 89 found: bulk [ 1770.200872][T22272] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 1771.081094][ T30] audit: type=1326 audit(1759502337.927:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29499 comm="syz.7.6199" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5f8498eec9 code=0x0 [ 1771.297479][T29508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1771.315917][T29508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1771.859691][T22272] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1771.932985][T22272] em28xx 2-1:0.89: board has no eeprom [ 1772.003257][T22272] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 1772.047669][T22272] em28xx 2-1:0.89: analog set to bulk mode. [ 1772.054885][T22273] em28xx 2-1:0.89: Registering V4L2 extension [ 1772.291080][T22273] em28xx 2-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 1772.314587][T22273] em28xx 2-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 1772.336728][T22273] em28xx 2-1:0.89: reading from i2c device at 0x42 failed (error=-5) [ 1772.421727][T22273] em28xx 2-1:0.89: reading from i2c device at 0x40 failed (error=-5) [ 1772.439047][T22273] em28xx 2-1:0.89: Config register raw data: 0xfffffffb [ 1772.516669][T22273] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 1772.524158][T22273] em28xx 2-1:0.89: No AC97 audio processor [ 1772.592729][T22273] usb 2-1: Decoder not found [ 1772.603966][T22273] em28xx 2-1:0.89: failed to create media graph [ 1772.870296][T22273] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 1772.894950][T26328] usb 2-1: USB disconnect, device number 87 [ 1772.901968][T26328] em28xx 2-1:0.89: Disconnecting em28xx [ 1773.119775][T22273] em28xx 2-1:0.89: Registering snapshot button... [ 1773.134310][T29521] ================================================================== [ 1773.142422][T29521] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 1773.149805][T29521] Read of size 8 at addr ffff8880545dc740 by task v4l_id/29521 [ 1773.157365][T29521] [ 1773.159688][T29521] CPU: 1 UID: 0 PID: 29521 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 1773.159706][T29521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1773.159716][T29521] Call Trace: [ 1773.159724][T29521] [ 1773.159730][T29521] dump_stack_lvl+0x189/0x250 [ 1773.159751][T29521] ? __virt_addr_valid+0x1c8/0x5c0 [ 1773.159771][T29521] ? rcu_is_watching+0x15/0xb0 [ 1773.159788][T29521] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1773.159805][T29521] ? rcu_is_watching+0x15/0xb0 [ 1773.159825][T29521] ? lock_release+0x4b/0x3e0 [ 1773.159838][T29521] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1773.159863][T29521] ? __virt_addr_valid+0x1c8/0x5c0 [ 1773.159881][T29521] ? __virt_addr_valid+0x4a5/0x5c0 [ 1773.159901][T29521] print_report+0xca/0x240 [ 1773.159916][T29521] ? v4l2_fh_open+0xac/0x420 [ 1773.159935][T29521] kasan_report+0x118/0x150 [ 1773.159959][T29521] ? v4l2_fh_open+0xac/0x420 [ 1773.159981][T29521] v4l2_fh_open+0xac/0x420 [ 1773.160002][T29521] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1773.160020][T29521] em28xx_v4l2_open+0x157/0x9a0 [ 1773.160043][T29521] v4l2_open+0x1bc/0x3a0 [ 1773.160066][T29521] chrdev_open+0x4cc/0x5e0 [ 1773.160088][T29521] ? __pfx_chrdev_open+0x10/0x10 [ 1773.160110][T29521] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1773.160135][T29521] ? __pfx_chrdev_open+0x10/0x10 [ 1773.160155][T29521] do_dentry_open+0x950/0x13f0 [ 1773.160174][T29521] vfs_open+0x3b/0x340 [ 1773.160187][T29521] ? path_openat+0x2ecd/0x3830 [ 1773.160205][T29521] path_openat+0x2ee5/0x3830 [ 1773.160234][T29521] ? __pfx_path_openat+0x10/0x10 [ 1773.160257][T29521] do_filp_open+0x1fa/0x410 [ 1773.160273][T29521] ? __lock_acquire+0xab9/0xd20 [ 1773.160287][T29521] ? __pfx_do_filp_open+0x10/0x10 [ 1773.160312][T29521] ? _raw_spin_unlock+0x28/0x50 [ 1773.160323][T29521] ? alloc_fd+0x64c/0x6c0 [ 1773.160347][T29521] do_sys_openat2+0x121/0x1c0 [ 1773.160364][T29521] ? __pfx_do_sys_openat2+0x10/0x10 [ 1773.160379][T29521] ? exc_page_fault+0x76/0xf0 [ 1773.160394][T29521] ? do_user_addr_fault+0xc85/0x1380 [ 1773.160410][T29521] __x64_sys_openat+0x138/0x170 [ 1773.160427][T29521] do_syscall_64+0xfa/0x3b0 [ 1773.160443][T29521] ? lockdep_hardirqs_on+0x9c/0x150 [ 1773.160457][T29521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1773.160472][T29521] ? clear_bhb_loop+0x60/0xb0 [ 1773.160487][T29521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1773.160520][T29521] RIP: 0033:0x7f8baf8a7407 [ 1773.160534][T29521] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1773.160548][T29521] RSP: 002b:00007ffdbfcbc0f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1773.160564][T29521] RAX: ffffffffffffffda RBX: 00007f8baffff880 RCX: 00007f8baf8a7407 [ 1773.160575][T29521] RDX: 0000000000000000 RSI: 00007ffdbfcbcf1b RDI: ffffffffffffff9c [ 1773.160586][T29521] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1773.160595][T29521] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1773.160603][T29521] R13: 00007ffdbfcbc340 R14: 00007f8bb0166000 R15: 000055ae198f64d8 [ 1773.160620][T29521] [ 1773.160626][T29521] [ 1773.463928][T29521] Allocated by task 22273: [ 1773.468359][T29521] kasan_save_track+0x3e/0x80 [ 1773.473066][T29521] __kasan_kmalloc+0x93/0xb0 [ 1773.477659][T29521] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 1773.483043][T29521] em28xx_v4l2_init+0x10b/0x2e70 [ 1773.487991][T29521] em28xx_init_extension+0x120/0x1c0 [ 1773.493277][T29521] process_scheduled_works+0xade/0x17b0 [ 1773.498834][T29521] worker_thread+0x8a0/0xda0 [ 1773.503510][T29521] kthread+0x70e/0x8a0 [ 1773.507577][T29521] ret_from_fork+0x436/0x7d0 [ 1773.512174][T29521] ret_from_fork_asm+0x1a/0x30 [ 1773.516963][T29521] [ 1773.519298][T29521] Freed by task 22273: [ 1773.523355][T29521] kasan_save_track+0x3e/0x80 [ 1773.528046][T29521] __kasan_save_free_info+0x46/0x50 [ 1773.533246][T29521] __kasan_slab_free+0x5c/0x80 [ 1773.538016][T29521] kfree+0x19a/0x6d0 [ 1773.541931][T29521] em28xx_v4l2_init+0x1683/0x2e70 [ 1773.547044][T29521] em28xx_init_extension+0x120/0x1c0 [ 1773.552335][T29521] process_scheduled_works+0xade/0x17b0 [ 1773.557880][T29521] worker_thread+0x8a0/0xda0 [ 1773.562465][T29521] kthread+0x70e/0x8a0 [ 1773.566708][T29521] ret_from_fork+0x436/0x7d0 [ 1773.571296][T29521] ret_from_fork_asm+0x1a/0x30 [ 1773.576068][T29521] [ 1773.578443][T29521] The buggy address belongs to the object at ffff8880545dc000 [ 1773.578443][T29521] which belongs to the cache kmalloc-8k of size 8192 [ 1773.592512][T29521] The buggy address is located 1856 bytes inside of [ 1773.592512][T29521] freed 8192-byte region [ffff8880545dc000, ffff8880545de000) [ 1773.606479][T29521] [ 1773.608822][T29521] The buggy address belongs to the physical page: [ 1773.615249][T29521] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x545d8 [ 1773.624005][T29521] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1773.632502][T29521] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1773.640128][T29521] page_type: f5(slab) [ 1773.644135][T29521] raw: 00fff00000000040 ffff88813fe27280 ffffea000083dc00 dead000000000002 [ 1773.652709][T29521] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 1773.661291][T29521] head: 00fff00000000040 ffff88813fe27280 ffffea000083dc00 dead000000000002 [ 1773.669962][T29521] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 1773.678661][T29521] head: 00fff00000000003 ffffea0001517601 00000000ffffffff 00000000ffffffff [ 1773.687331][T29521] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1773.695992][T29521] page dumped because: kasan: bad access detected [ 1773.702399][T29521] page_owner tracks the page as allocated [ 1773.708104][T29521] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 16411, tgid 16410 (syz.1.2673), ts 967770480853, free_ts 967757191307 [ 1773.727998][T29521] post_alloc_hook+0x240/0x2a0 [ 1773.732766][T29521] get_page_from_freelist+0x2365/0x2440 [ 1773.738330][T29521] __alloc_frozen_pages_noprof+0x181/0x370 [ 1773.744139][T29521] alloc_pages_mpol+0x232/0x4a0 [ 1773.749006][T29521] allocate_slab+0x96/0x3a0 [ 1773.753505][T29521] ___slab_alloc+0xe94/0x1920 [ 1773.758171][T29521] __slab_alloc+0x65/0x100 [ 1773.762579][T29521] __kvmalloc_node_noprof+0x6ba/0x910 [ 1773.767966][T29521] pfifo_fast_init+0x372/0x6c0 [ 1773.772724][T29521] qdisc_create_dflt+0x138/0x4e0 [ 1773.777656][T29521] dev_activate+0x378/0x1150 [ 1773.782245][T29521] __dev_open+0x69c/0x880 [ 1773.786567][T29521] __dev_change_flags+0x1ea/0x6d0 [ 1773.791598][T29521] netif_change_flags+0x88/0x1a0 [ 1773.796534][T29521] dev_change_flags+0x130/0x260 [ 1773.801377][T29521] dev_ioctl+0x7b4/0x1150 [ 1773.805699][T29521] page last free pid 16410 tgid 16410 stack trace: [ 1773.812188][T29521] __free_frozen_pages+0xbc4/0xd30 [ 1773.817295][T29521] __slab_free+0x2e7/0x390 [ 1773.821732][T29521] qlist_free_all+0x97/0x140 [ 1773.826322][T29521] kasan_quarantine_reduce+0x148/0x160 [ 1773.831780][T29521] __kasan_slab_alloc+0x22/0x80 [ 1773.836638][T29521] kmem_cache_alloc_noprof+0x367/0x6e0 [ 1773.842093][T29521] ptlock_alloc+0x20/0x70 [ 1773.846419][T29521] pte_alloc_one+0x7a/0x310 [ 1773.850929][T29521] __handle_mm_fault+0x2767/0x5400 [ 1773.856036][T29521] handle_mm_fault+0x40a/0x8e0 [ 1773.860800][T29521] do_user_addr_fault+0xa7c/0x1380 [ 1773.865907][T29521] exc_page_fault+0x76/0xf0 [ 1773.870416][T29521] asm_exc_page_fault+0x26/0x30 [ 1773.875257][T29521] [ 1773.877572][T29521] Memory state around the buggy address: [ 1773.883194][T29521] ffff8880545dc600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1773.891248][T29521] ffff8880545dc680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1773.899300][T29521] >ffff8880545dc700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1773.907365][T29521] ^ [ 1773.913509][T29521] ffff8880545dc780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1773.921561][T29521] ffff8880545dc800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1773.929622][T29521] ================================================================== [ 1773.991710][T22273] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input109 [ 1774.011806][T22273] em28xx 2-1:0.89: Remote control support is not available for this card. [ 1774.178515][T26328] em28xx 2-1:0.89: Closing input extension [ 1774.185653][T29521] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1774.192881][T29521] CPU: 0 UID: 0 PID: 29521 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 1774.201913][T29521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1774.211972][T29521] Call Trace: [ 1774.215249][T29521] [ 1774.218177][T29521] dump_stack_lvl+0x99/0x250 [ 1774.222767][T29521] ? __asan_memcpy+0x40/0x70 [ 1774.227362][T29521] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1774.232596][T29521] ? __pfx__printk+0x10/0x10 [ 1774.237213][T29521] vpanic+0x237/0x6d0 [ 1774.241195][T29521] ? __pfx_vpanic+0x10/0x10 [ 1774.245697][T29521] ? preempt_schedule+0xae/0xc0 [ 1774.250542][T29521] ? __pfx_preempt_schedule+0x10/0x10 [ 1774.255916][T29521] panic+0xb9/0xc0 [ 1774.259636][T29521] ? __pfx_panic+0x10/0x10 [ 1774.264053][T29521] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1774.269957][T29521] ? is_module_address+0x17/0xf0 [ 1774.274898][T29521] ? v4l2_fh_open+0xac/0x420 [ 1774.279524][T29521] check_panic_on_warn+0x89/0xb0 [ 1774.284465][T29521] ? v4l2_fh_open+0xac/0x420 [ 1774.289056][T29521] end_report+0x78/0x160 [ 1774.293301][T29521] kasan_report+0x129/0x150 [ 1774.297808][T29521] ? v4l2_fh_open+0xac/0x420 [ 1774.302403][T29521] v4l2_fh_open+0xac/0x420 [ 1774.306839][T29521] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1774.312830][T29521] em28xx_v4l2_open+0x157/0x9a0 [ 1774.317692][T29521] v4l2_open+0x1bc/0x3a0 [ 1774.321940][T29521] chrdev_open+0x4cc/0x5e0 [ 1774.326358][T29521] ? __pfx_chrdev_open+0x10/0x10 [ 1774.331331][T29521] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1774.337666][T29521] ? __pfx_chrdev_open+0x10/0x10 [ 1774.342608][T29521] do_dentry_open+0x950/0x13f0 [ 1774.347375][T29521] vfs_open+0x3b/0x340 [ 1774.351438][T29521] ? path_openat+0x2ecd/0x3830 [ 1774.356200][T29521] path_openat+0x2ee5/0x3830 [ 1774.360799][T29521] ? __pfx_path_openat+0x10/0x10 [ 1774.365740][T29521] do_filp_open+0x1fa/0x410 [ 1774.370242][T29521] ? __lock_acquire+0xab9/0xd20 [ 1774.375087][T29521] ? __pfx_do_filp_open+0x10/0x10 [ 1774.380118][T29521] ? _raw_spin_unlock+0x28/0x50 [ 1774.384974][T29521] ? alloc_fd+0x64c/0x6c0 [ 1774.389308][T29521] do_sys_openat2+0x121/0x1c0 [ 1774.393981][T29521] ? __pfx_do_sys_openat2+0x10/0x10 [ 1774.399173][T29521] ? exc_page_fault+0x76/0xf0 [ 1774.403849][T29521] ? do_user_addr_fault+0xc85/0x1380 [ 1774.409134][T29521] __x64_sys_openat+0x138/0x170 [ 1774.413984][T29521] do_syscall_64+0xfa/0x3b0 [ 1774.418487][T29521] ? lockdep_hardirqs_on+0x9c/0x150 [ 1774.423683][T29521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1774.429756][T29521] ? clear_bhb_loop+0x60/0xb0 [ 1774.434428][T29521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1774.440319][T29521] RIP: 0033:0x7f8baf8a7407 [ 1774.444729][T29521] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1774.464332][T29521] RSP: 002b:00007ffdbfcbc0f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1774.472743][T29521] RAX: ffffffffffffffda RBX: 00007f8baffff880 RCX: 00007f8baf8a7407 [ 1774.480730][T29521] RDX: 0000000000000000 RSI: 00007ffdbfcbcf1b RDI: ffffffffffffff9c [ 1774.488700][T29521] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1774.496669][T29521] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1774.504633][T29521] R13: 00007ffdbfcbc340 R14: 00007f8bb0166000 R15: 000055ae198f64d8 [ 1774.512607][T29521] [ 1774.516036][T29521] Kernel Offset: disabled [ 1774.520362][T29521] Rebooting in 86400 seconds..