last executing test programs: 9m45.64600411s ago: executing program 3 (id=16): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_SET_DEBUG(r4, 0x227e, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x0, 0x9, 0x4, 0x1, 0x7043}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) unshare(0x2a020600) r5 = timerfd_create(0x0, 0x80800) timerfd_settime(r5, 0x3, &(0x7f0000000000)={{0x77359400}}, 0x0) timerfd_gettime(r5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000005180)={0x2020}, 0x2020) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002f80)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x138, 0x0, 0x368, 0x1d0, 0x138, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x4}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x11, 0x0, 0x28}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x10, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xffffff00, 'vlan1\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0xff, 0xffffff00, 'ip6gre0\x00', 'virt_wifi0\x00', {0xff}, {}, 0x2e, 0x0, 0x1}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {0xe6d959333babc205}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) socket$kcm(0x29, 0xc, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) fanotify_mark(0xffffffffffffffff, 0x400, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00') 9m43.515579622s ago: executing program 3 (id=21): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) r1 = socket$xdp(0x2c, 0x3, 0x0) socket(0x28, 0x5, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x100000, 0x4) r2 = syz_open_dev$sg(0x0, 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0) r7 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$HIDIOCSREPORT(r7, 0x81044804, &(0x7f0000000400)={0x1}) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 9m40.600117783s ago: executing program 3 (id=28): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r1, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200)={'#! ', './file0'}, 0xb) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) write$proc_mixer(r2, &(0x7f0000000240)=ANY=[], 0xbb) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000240)="14a10d12805953125adf713f8459e0436af007a3addc7215a5688b06a6af58e58ae5cb941dc0d85c8ef6857d0831cf9d8faf7498b33cee0e3a06b001d754697216a5d21ab7bced720a160e49dd71aab50b7a85af13793f8ca6b1a27d0a50a023a564dc9fa19e518f85e1b01a037b69305210daacdf6b0bff9cbc6d3585887e11ff152bff79beb91a090c173978a2aa3787ce729424986b62f0a23ee5fdaf4c9383717a59beaf38f37f2ccfccf8edec51d6291c76a4077b2f8b5f93d00a327d6637f002e7d8accd0f3af74c0791b90a5ea140b60e8db8dcc29de487b55f754002bd29f85008e09f590b3030f9ec56700fce85a90453c3a7c78e", 0xf9}], 0x1) close(r2) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x18, 0x8, 0x26, 0x10, 0xa5c, 0x396e, 0x21b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x24, 0x60, 0x8, "", [{{0x9, 0x4, 0xe4, 0xef, 0x0, 0xff, 0x1, 0x1, 0x5}}]}}]}}, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = gettid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)={0x130, 0x36, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x120, 0x0, 0x0, 0x1, [@nested={0x11c, 0x7, 0x0, 0x1, [@typed={0x8, 0x14d, 0x0, 0x0, @pid=r5}, @generic, @nested={0x107, 0x104, 0x0, 0x1, [@typed={0x14, 0xfa, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @nested={0x4, 0x82}, @generic="3c25340a6e89eec142208bc6addb8124fa2ad35f79fcae1626381610d6c9a59f04805cc4421a3716a5d74ae263efa1b87e4efc1d5fedc2c57488b594e510c15462ee4a133bbcec87f100a53bcad94a215e6911a2e9f6057c06da929c2be7182858160069f1a215b0c4f82a8e3cf3c1284ac122fff91c85d31a6f8ab8d9d21dee7e6018b34420e8541d2f52de04e1c4e4aa0d2bb97b7f1d6334271e3c152833aa", @typed={0x6, 0x4e, 0x0, 0x0, @str='p\a'}, @generic, @generic, @generic="3c7574b67059c9ba407da102126cca7ed7d5da57f4649d5a5d874a7d1c74f4d2226b06b9ac4e3a86614270d8ec5abcddec4938db59d3fe9348e45e", @typed={0x5, 0x5d, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x6f, 0x0, 0x0, @pid=r5}]}]}]}, 0x130}], 0x1, 0x0, 0x0, 0x4051}, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a32000000000500040000000000050005000a00000005000100060000001400078008000640000000020800"], 0x58}}, 0x20000000) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x30, r3, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x101, 0x0, 0x8}}}}, 0x30}}, 0x4009004) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@local, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xffffffffffffffff}, {@in6=@loopback, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x7f, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x6, 0x1000, 0xfffffffffffffffd}, {}, 0x80000000, 0x0, 0x2, 0x1, 0x6, 0x2c}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$key(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x9, 0x0, 0x9, 0x2}, 0x10}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4ea4, 0x20000, @local, 0x9}, 0x1c) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) 9m38.024863434s ago: executing program 3 (id=33): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000000700)={&(0x7f0000000280)={0x50, 0x0, 0xf, {0x7, 0x2b, 0x7fffffff, 0x800000, 0x0, 0x6, 0xe9f, 0xffffffff, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000060c0)="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", 0x2000, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000c0c0)="f1187c2666e938b0d719606210914a175384a7d8bfa08a4ce1a6704c4c59dca5bd31c2e0daaec1bf1788b64cc764755c8227d255c9fcb56cddc8d23a8719578a528df745f0862275073dd2c88521736ffbb58e980e9803aa1406002487d226af95eedef88d3c768b748c28d604cd82f416f3c4f2071aac0274092945c94a4911345f1fb12c47fd864cef58c44ad5fb5348fea8246b3604a4c9c9a827e4aae4f7677d023169ef281c43f5341372d459170f25365fa911efb58b1a0c883d98677cce26aed7f8410a54aee36c963dd8f82fe532fd73594ee6f83265b5fbf2507319d73f87cb6d2050a7b1e001ec563d4170d9ca49e019c1f34a3f6a29e4adc72fcc343bb15caaa44814a11a621d682070b253354508d7b97b1439ad827954b305797e4de400c046ff93c99fa15125daa8b53581ae5392373621d5beffde817abdd5f4feb80aef8cbec83ad2a830c773ae907c19f5385e77e3adc425fc5d8dfd53312af6cb6556f8e3d871add2dc48a37fc05c65f32149a0ac179386d1016590ed19baede89d890902306e3ca40ddf9ea5f54b51cab0b6bc1bdddea7e6a64746cef6ecebedc1c51c670b0af450099c4052caf1eb0d4137a74f41f101a604fe08ef524e12f8f831c30e15da0947f6f584ae2ad96de45e3143f5a9dbce67edbdf5904a0ca1db282fb70dbec4870f6aeba8a74b24900d7c5a0758afadc26ac6f93695eeec1611d7a1123098420302ac2ecfb31bd545695b61c9f36663cf7ce86cd7ac350670893acf0d065fab2dc2ea43505b261393d285fbceaebe30e0d1fbf8baacb9eaf9f6ca84c598c5604fd4b11412a027760671956d312a4cd2e2dd54100519a0a8f93f5b229728bac624870cefd815a6b6d1ce8b06e045c47ee2f91e3524493df21f46cdd00a60c39f49d29965dbed6f408c42b29a3f76e0f840762b273628f7834397bb37d931231ab16f6cc7bbb5ca17fe83fc5ac8c67b120b19d8dbc3ef054e7490851bbf11c4cd19d8aad281fc054613050013dec6821e034f10413f96e289f81f10a52fc941992692b2c3b849d949b5c6465f335cd7876caff414d0a00ec927c2766c83249ca5e2d5dc9a524ea5142375bae891c8bcb34e8b4044964b8141841c619c6b1da249cf65b9c16506926804e4e388b60638c46128b43ab76a32659a5e3fa64c75609e31cc2738392a868434d9108c7710d72f8a34827943ded46328621b39b646cb663500467580b76cd6ee0217149dac6168499edcbff45193f49bd28fd105740f641f341ff8ded97ebea072d805062b35819f28541423b0e16ef996323f5907b0b2a0703e9fd5c6a511787cf6321a87f648170efd691aede0c178e0daf53da03829e4e7617b5b834c6b4196d926c7d7a54b9f1b3d3bc09bb7f22fb18f09150e34bec2102eafe634e13454a9d5cdc10da8e880cddaf892af35c437768b62c73f67ccd8764c34669a91f9d669fa1ebcc4159e4be7d4e589a59cb70c1ba77ef7a6a2c6fa4481c5f2c025ee26e24ea59215f971b1bd22af51af1334432d149a9574cac0d4cb145de1038fc37317b947fffb232209f8c65dce28179c950c7b23bd1052db323662512c5fb41acc84c4e42d1daa9be21e6c1d22b6bedd5f28d2241afc578e2a33e12d1b1b6427c620ce5d80c4a5ef351b2cdaa598c478b56bf79d9dcb8b8556503c66b44b27e8df8e046469a5da9390f58144b8766f9f51d39e8d5bd44e1ad024fed57ec1a3b18f04e6bb3b011f1b23031d85c498766cb10f66e3868a76ef1e388018292fdc4435e14bcf7ff6067535ee3764d8deb725cc0fe0afffe4285958ec9595ae5c5cb04834d15429435272e5b0510f246ce806895b85ba2f81912f76f6b955e28febafbd0c2e854479c4a6150b85c05bd54a1d0d37877e6fd3ae20046380dbf82bf9c8fa8a8d48f76cfc376fc9e0e4fdf0ccb785e9833c6c9ba006f7e59318ac733c3a1250f40ceb7ac3a167727bf89daea038372e212f02cf677a009cdfd224b41fc3c142b0882a53c1b9b7de6e99974d80ff8506c71ad3e063d7bc5c5366042b1cf952c6f76fad74fb16b9d9c9804589ae4f4afbc7bbaa340c1093d76a01fb254c5ea168e83b39bd3c97b8ace4f32612b63e841fd6eb304a663e4f43fcfb5f435716df89146d0ebc0c1517734ca4c90b9dd5db6820a4d730a9a7e6748d0d2b7def30a1c242fa36f52c3f685555b0828e1dd59023290ef4626d3759462cad9371d72a9c63824c91d5cc304ab43279f199811a604c164493794986b643ba6bf53d0a9ec7e304488b18bb2eedde5c128b2ef0303f85ed54875e38d4adbbfd477e8fe9a2217f084000813aecedcccb1dbe482b4856b9ceecb28d40bde5e8376eb8c29dc71b85d4b345fc411937234b318238e962f0d5dd46fdf5149685cb3c4f9c2710f4173f4ec616f7036ccf83ba228e1cc7b205cde9b57f00502d4d1c2af6dffaa37ad30fe0f5d955cfee2e00f48cb7ba02ab86748d0238914c66ca9ad9ff0e8bf2705e527c56b0d63a9b5a7b1da19424bc0c81d627b1389a42626654d901eff0f37d64e0cc894ab2c4399c67b846839a1c40033f4f9ecf8410fc63672ad471253fadd976df6510137d903a76ccf14509dd8839024608d707c4eb69cbcd5ba9cdddb7fbac1c963a99ef6e75eea8924aad62d6aea792042cb372131a83730a6ee7de386410d91697dad01d85ffcb22b3679573fea63a38c192b1b1e3a722adacaaf8e855843e1366763456c86ba9934302e0abfea2044386f31c457cb7ff445d7b00e3ed7d1dd4b2f92c845f65af3a3f68de96dd9b7bba62b7fefb52639b6796ca56d902f9dad52f42a1b79fc814c8a58033daa9f43ee3c540cfd08b0ed21941d67dc3ee37fcb855fa4a03453833714d8f8abf83256c503713adf7f8aee122cdb01d0ed27945d42633b0fc3b2fd51f8a9d403e792c9b77be56c257110669b46bd0f8bea9ec7b895b0b1bc9a9485a51e72763c3ccaf6210af7652ccd437722b359d20bc124e7055c5e41ddc5eb66f966647a3b91f1c51f3c6e340d6e203fcd30f39dd0398f0a1c9fa58f2da697033f5988cbc6e5c8e1fce7904112964b2ac5f938b9132d680f3cb0d8ec2fb65162113462ec459356bc9d28d9efdeb9983d79ed04da1a78f02ea8f5b42210a23d9c98a734dab4069dad2a532ebced93f5dad2ec9290b0016e6db7c3c9ca3ebc71d805aafc113ac93d1e68c637000879fd736cd8a42474e607da884df065a06f4d64054512a396d99cb7dfaad6a91cfce8288cf995e83a1ffd2ec83483a807c7ab3d0703e956222dbbc2fc5d57661fd186626b41a2e18144d592174cc8e45f1580593206e6d7c7f3236eeb41aa772e663834768dc21a4c216490612e6e912ad48f1d90650f1a9a29239ffa8f00747833038b75e8759c50799eba59ba58a1ddd3d9b49806e2c7ae143e88f704d0a5556429445a41ad83a95e43bf32fe2f6954ca030a3f2697014cb351c89cbd3d2792cc73371cae124e5c0055201036c7c0c73d94215214b33234f4e21071743cd553b8d96e3387151860f5143f16980020954d80b7f60955f9c09a6501e9d0eee4d8793e9ca2d04a8aa6831d2e54c0397c6c9f2486b79d06aee46f064c02e77fc4bd7bdf31b9dcf520e26ebb7a02ff3d9eef1357dbcc83877f5613c7a8c4e3a4636d2e0161a663a946f651cb5915f0776088c3de6b59b5ed0002a1fd5f7eb316ab62fef44af65abb81f96f495f867e128e8829a3d2693e00a5b2a14a6b76dff7c1cd80e26dca00482b3055741fcc7973e33346264f268e22ee4a74fb45066eb24cdbf71ea7c69d3fe9e9ce52dcc7e9b0645474ba2a635c36a83135cd98f892c2619a5724faff0aed7e236cad81184dd05dc5645c7e7ad52ef76d615255b2936bc40f0ea017035a8bfacc18c7bc52ec0e29d70126a6e912c6d06856a12ec2792738a9a1c2b2bd1e9b39db4fd115bc901e0d3fba472ea0182604cc9e73cc772117d49dbf41c7098076e20867d8eeb7b927701bd5cd21bc2b32e4ee2ab86f143770b4718f7c9ebdd32fdef6170ca284d4102360242f4d007fdcdd8fcfbb90e7d9b693fb1101dec0fa152a7417f70003159ca3633299cae4035793aa7668df47b09e0fad406e278a6105bbd2b9a523c1a8fdb394b9de39d3d9e1ce9d9ba717014dbe59855a92ff2375a3a3477c8bd22cde51e5bbb738b92ef4f3781e605c24e7140b2504b59328cb8e20c5c5d19acca392bbf60194e6257f674df0f99945132d78c76f182f2eb52058a908abf568352d50a7aa4d061380cc58cea53f166a753ffc4a51e90a0f46104decd9eaa77d48300f2c7901465effda4fdb0e70f7ede3541890732d4ff10eef7745ca362eb336febc2609f50f237eac6d4950593bfefe0718ae3bbf227ddd524178b39ce4341e68e4c1e5c65b506b73965c5e6ba8e7472d3b573d41b4e458c97d1f0164376cb24fdc38bce00df871938e65f46c3df4fc20e574581d6631d759c316af7f7709e05e9dc465b87234029ae78f071d892d5e7ab7fab90cbaba55acb3e654a18a5f0bf79d6e471d53b5fca51085a65534dbfa953379c4d4a0022f03da76fce767cfe2930992935ea897fc56dc23d377004d119c9b648986e402b035b7927e567db9019c915c0ab54e6e45435336e37d974a7ea3dfad73915badda2e0c32b87391e3226ef0509ec6a33462a246e62e0fb83065db0270c6c026415dfac7be0e7b1e790631347665e789ce6be41e7ea32b987465ca6a803508a52626d92858156920f841da0532854cd5c966f02911d10a4e12f687801d7b87891e0d7a1ed0279e3cbea3d73b3886e798d39460ef71ebafd803e3d367a0c67c31d502021a796e6c351caca55865902dea97edf28ca7f4da37d62e17df5245e52510e1d5bac6851e1a2bb2228aeb6add3c07bad5798176145d1b46d5ae3169581f2286f6ca3b09ce4c44df0031d6ed077e6af6226b6e21634037079331094fd3bcd0126d5c88069d1c240eba9a4ef943552dd69a2786301a0d94ba5f4afad155583d81cae6f68e600979674d05c5593ada14dccf11745118dfb6da366a15655469cc0fe0d31cabff9a84e40896f8726bb64bb0c548b8b7a7c031967ef8a38e85063eeeb48d271aa893cda1c66204cd3b2c35e27fa7dd972bc396283e24671b9f4c1bd9a4dcf30c8887864305b3f92ec1e678f85d552d411f8c2012bc77ae55d6d8a7c31bb6a9b80a530ef2900961a5c59fa0716f5b6ac2aa5b231005539414b2abb7ea3f7b4044e91e463f02e9c51891458084782209323f856148ed89c83d2fc194c127e47ae5bd711f5b130e6b21775090c6156cbe9737b33865b48489f4533945c4b9491add986d3095956796c1b217bf6b09ec63958fca7a9ec6b5435bb3fdbaca8a7520c7ba79098c47cd9208351b54e292509d4bc33bf40eaac6caa9f94d0918a7461e6bb8e8b259d3d90d641dec6612dc14b683ac4cbc217f6d108f666e66817867c70f3550d1ce37daf358cce35b8231fb70a4b1e302718163e5a628e8f653eeb25041290ef5f5289ec33dcec3bece209afaf2c4c8ed6145768ac945034473b01b63986f9882514722dd85df95448be18a59c5408ec8c95d203e7a4aebc68999c760d3f3929d0d28f7d8d0ea7c02a813515c5a82fc04cdcf20654c91af430aa34859a77eeca938842600afc6035605a0a9c01acdb164f2b2c3d4d7534c5292d08edb1adc446fedce1a14b7defb274051614de5157e8b5864f7ad8bf6d2f98515c07171afbb8c9d29a2202087bba880441bf68084d5bfdf3a7926ea2767a24bacdd5a6b98080b044071b3c21854333b84156771bbffe0458aed18e110ee0ec37f542b53afd04b76bbce6653d49434f0a8fe97d11cca1b211922bc48b0fa7526693889d0ae2b5a5f7746bd20803db5c57563137910efe92c6f4e0417978ac3af913d46fa9d49acf5f84de8e67f90b409bc78c30b58913f0149eab1629c1e8409190894f2591e208f3b61ed699670de4621675e9ca789cadb219013682d0655b785065dd4d2193f0a81b84f27330aa7a06fc09979239eff65b0327bd7887dd671bc4a51ca7dcca404fc24699a7703bdb1fe4b5175760f682531523ed75396e556b391b627035bbd9e323a004ec1875771b72f02af7711046a16e1df4fe22c8cc064bef1a401a430d2ed959aae3ab82db7a86b74821ed07dcf98ca76070b6e18fc749ef2ffeeec9585bd21aedaf8c05918bfd2f9ab1e1a6f023c0f2a2a418f5ecf711526525a165652eeab3ae16405ed177706844d1ca239f52641e0a66d89565d0b83cedc51d337496b2c5318cd5f44e6122c617387f85c3a6f76dc4d437e45f790c5f489bd56e56b8fa1e3111806429cd4ccf871b887ab9d8ee379f4cdd23bdbc476428ff912adcf7a84810c81943a778e57bbc3690911b5e046988dc85b7ccd09b7fc061f9259369601252aaeb4863d8d57796f1f4518130c911d1a331953663ef8a80fec491308297ccea77691fe14820aca10c6719c205988802791a54348222d6a34d9bf656696f396b27cfdea9d5b0e36838640d68ebe3be9ad72450232b66a5db274087e7a350a7d6abd95adf2557ee93154a966aab798b45c2fb1d5fa1f92db67a5bb2819e580dc15955249065189e4d1621c4517a67a76da14090a90b4da7272f57acc4228b49a1e5dc30002c11d03df9b60c382c026fac97ca1e389d6bb2af95494c2775b789988860478cb1e0a0e8e6a5b823fcaf6f8a031983408624a301bfad96784c9fe217e0c656cff8b65b3897a966c5ab572d269e30124ee813ac08ecec1aa40b73a3149e0647a00c612c0910878a079b5c163029435356473beced7fbc6ded2ee3e313082501fa91dc3ff05e4be525212ab350dceb9ac95c4f1db5399ea008b8609cb0c0f1a1319b9de77bbff478c197b9318005cf401a84f49499808fc403ea3ff9e1874d5ebe7997a0c03d977542c1877348da98f1d05641c9debd0dbba6b14ce8a83ac11de52ba7451cd1bb75f58ecc32676b3d00a76ce09e5695380ecc2e73f44ece11f77238d39696572e46761c7d5e638e94693591b70fffd8ab98b3294fc2614e3ce314a4947d0515baeab18ca4a23d479fa0a55d2950082cb770dbc34e138e9469f218a657dcdfee84cac9131cf6ad38000630aaf3fad747cb1dfc777188bafc927e7371ae2be48772afc09b6837784c8365c0ac6caac7de7ede4202ba8d28b18e6d20a217c30776f97546dc65822ff02be3be42f6043f828927ddcd693a7b691f9312aed70b5346cab9ff0d21e8783677bd71cd1b5e4975e588e121a90cdb6b4d3219effc8a868dd110f5cdfc119c121c84c2ad04189f84cec8f7d98d71ebb1f9793af002e2d645d7cfc03e3a4f61c28ff69f08024a93b8c712df64c83859374ae6d5575048d7baa3a0fab0ec0ecc731e3523d9deaebed7de16e9c6c453093de8738f8d7f4a244a6f15432cb494855c6c9b840d514af760c73b88099a66fc926b2f05befc766729f109ea436bbbb5ce2513fe654d7e0b379b49ed555cbddb8a690132417a31f48e530449ffe71d1f851acb1bdf245ec02dd39925782511c0d8930f17a14c54906d96a2daf27144914135cef344451982b50c71c1e5bf7d63f646fbdb749e2e9ce8e84ed334fb90d9ab7c6e7b265bdff840606ec572b035877e7d18cad3fa246ed000ec243d38da351fbea47a54dbea0942fbbf3fd9b00f19c21417159eedf477eb6af4ea228cde4ed64cc2d6890db81c74e5e08720dbea0f5364c1923cef7e0a883188a99896483d2977646bc9ebe9c8667fa68b3aa9cd961ad1dcaeba799eec564d20d771390c2ea12eb8cad0575d08320515c790155dcf477952c72c536e1bb2d6bdca553b02d23992129ce65d520c9f38bd385e37b98ac6c6974bd1fce4d53a7d11666ab3c04b6ff39f93ea50790aa027062d99c1486c5c692eefb05c29737b178526c91b62595f79396d40f2558148dd72652806ffd9fb334e744a2025070780d684dedb6db564fc76a5cf6f75766806e5c644bdb58c6c2aefe02a523f676aef200a3ea928810be43ec4367ec203edae43eedecb608cc48cde469217e36002b8419ba55ce00044a6d3590ba22c77001347c1545d07486d6a5f70ad9561fee62ee4eda80953218711d68ead9b38f3ef1012a952a572b38a5c90536754717799777574874b45e0b39e938ab2d31823bb1f44f965e225be271b69a9ccb32da2df01c65401df771f5e3e195ac977e627e3c4b522928d95391c1f6869ec2e340caf3f336e246d042da8fbe9702980babbb45067d82abebdfe34e3832c123575c479b66a33e22e47a5d8f7ee3c40fb538a3bb7a08ec13017f4c58f7ef769b7597f7252c8b6d0e4bbcefe0e32b4c1c92c5da2506d2be19bb6f71e662fb81f016404c96c50e4ad61dd3ba73746ce0489136d3b0414992f506900151bfbdf118a0e2f998f893560225da2c19280238cab9a986c747a265b22c0d6473f8248f83a3e155f4ee67cbde536b3c4dce586cc8d8ea15e55f3569ede91d29f9fdbaa88d20909f3dc3450e22ddb91722ed6e42f515db47259b74e25966408f4cab33177a74a038daf0967864330fc0be9f1f2b685cfa288bf89e72fecefca841fd0564a47826e586b6d4eb8dacbbfb0808a3255d5f69a8c56ca6e17f2041eff85aaa4eac86c1008d428d91237ec5e2cedad5383703ea7ca8e7dfb483ffd8e1f2abe1a90af170660f881f6cac3025087d72b6454bbc3f8b7308a27ee8a6e8294955903b0a69f66dbb4b6d7dfa2e726ebbdf91908990b042bd09ae9a6f6cd39a4d626f62b2efd8e85c02adeb492a9c97a4e883cd2660b570d0cf5b13c60fb58d60f07ca43b2b3a21843f85801c8d824d2bee451b86db0a61b45142a397372a3deb3bc10d80bf4f9907f5f3200c65f9cb6dd6411284ad5f7b837cb121c42b99f1e517569fc12b2606cb3f45daa0597a8aec824bfd4a31e4b17d5715ec48e8b9e666a5a9f881884b5d06cad31f1830d76db5bae7ef1833b727f6a15c0f32b8e561b41d4f286c74c901201ca52b95dd2b7bc930f5c7702eb282f4dce8dbb37f5137996967a07b0131da890e27edbbf5f5bcd3885889277d6faca161a138460fd1e70ef41179389c87338eb9eae94f2b8167e7e0683836b6153b7428ce1969da01b096eea0b4e7d5d85bb96037c17ee9ca630921367f17eb83845264fec0ecc866e58f845f2f32be57ea9d5c2c595f82efa6608c4c8946f0f56f3856fdaf3b8c0f78a017604521c727a136c2ac28c16ae19da2482c199eb7930fda5198f8269c774b8b2bd769c377a6f86416c2c3579e57a329e74021597aa1ed4e6da50806bdbdee831101cfa13b97e99fd512e43fa414f7b4cf1262c16b9e30ac4c34b108355ac16b6053751fb8c2f4eb4bbf7edcfbd0184f2250344e47bbfe9ca50f0e91e65c78270c58603c20679d739b454d1ec3301fd6b884d00d7539bdd3178126aca8ae37b9d8ecfcf14e62e653864d3ee4f1fae9ffb2197ed8a2455c90359b6a09910b79c2822f04bf07b6a27e01c9f1883fbcd08b7c26d7c8c25271338914cbc157dbbd0efada31709841831c71c1aaf111d0d46845d9aaeb7249dae34fdb050047ac38fbf0b746f33d6ea0baa5d4f7ddadeacb5831b7f9d5e219e4bae55d0b8594f52f0011badef967afef02884ce212c3341c340ee8fdca78e887b7bf2a98c31d1bb8a3969b8b4c939c362cd3edc19598fae9ccd82c88aabbad4c4ae278aa1b59d2003375cc932210f4a636af6c3126f200c8a7ac82d8226f244661ac6d73aa76edb53fa5b2216f645e873de27fbf580c7148fa72f992a220d1d4f499779e25c8b996c580a1165848d23088a6369957841653e291c7f520a8665997bf958ff7da53bef74eea85e3a1a3657945513137351cd4aab8499f23718abb8f66dd7d60e9775639e32ca1e8faacdb8f6b66d0b1b714af355773f1aed034f2e4cdaa17bac308dfd889bf123762b5c894de392a3081af84195438fdfd1868e2d978bf3ec1df5e81b9f8f6afdfbe3dc344f2a6dbf550080e403690d2ca7cfc0244014939aa79a8b3a0933e2bbc226385e3e4188a1ba2b37c34e02fd28c31f2c48d1a83294da501ab012d1d5e5fd26cd41ee71b4a150cf784486f9f6b5ab510cf07cf9792dd9e4d8bf48f06464fc957885d346fc501f21a07ac7fc71b9c01519cf4d2fa766d15eaf459fc429ace3a1a61ba078da7324ac06e65d7f36271f6898e8ccd673edeb25571c44606d7bde39d5195472e727bc7e2a2d1578328cdaf90400a7843f31793ad33d0f32885bf9b1f0e56d4a3ec40a1094e0ecec32a1712b88ff3008213795ffece882254753011c6988931fc9f19b5ad0891e20887b47ccf460e303842bb4c0b62163868e805b3bae6e4937a476e7eafe9fde0d0cf62223f714c69be6833c10d06f91a78016b1c00087415ac4a5b7b5e10f98a3e19adf60d56d5bee918c1c7ebbf7cfc37130ffae2ad7a620250c7387069ecc926f34069b717b97bf2a0ef0a2bf796034e88d30aa4235744a1aa5601ba718add8cd0cf38411f4787cd22e21dbacd9e480b13af38477a70d2a4800f680fa7cc8684fd467b86555422b1a901144b03e4327b2573769cb02de90e8e30df7afd2e571e2946d23a0efe02bac8e9698d12589378e28d1c36ce328a27abff98eca7b6da95daa681700397ce62c9b50a47cedeafd51b62e953413639a9d9978fb3e1604027751da66b5e481ec1e4697d64a4477c67ec2967e2389b6f716f77c810a62a5fd78c69907f4a4dc210db30d5d000000002c9c81f0dbeecb33a702f4860426e7d1c26d1a00ee4c62e3d671d545b26aab8ac758c53cea2250ed929aa715bf513a5fa242b78ddbc263990c42025ba2a52e368f6a18e2cfc0a6047e7f0e7187c3e36d61905cf0c1824a08e5c240ec56b04c909390322ce24f35001e8d5a599ffadbe2a8755920cc488f40be225110310d4e9e4d4cfa34f953c6f6cc6a5f8a89373739dc5da9445947fb58bec2c8e5b7f8c349d6df29e6a87336dd7bccb036139922faf14f3eeb92ba12d0084b1da8d36a3f9656414c0f32a1b2575a5147568ad96c2125701fc67d00e9d78788bfd0188276727d568bb0800a576913dbc5c1035fbcaa5359bc9b7fca0ef528903250be1a942e59727789ec61ee1ae617c3a23d3a89044a9ec729ef0cf7ec6a3d01e06e864c2e24c38a8389826c2cd471cca5cfd18a34050f24b99dcd26d418465a5e3623d7c9dffe7e65fc25f90710f42d00fb81b33a2db18d0ff7955c8d87ba8fdfe1186b638312505c7810dd0ead9c7722fcef542d2a73f107993e3ec78d3a0b15506ebd4d13a72384f77268b44c32a957aefda0bed253e76cb09012f104bd0c1f04e96b1fc60d08eb79ce9216fe1fde6ffe65d09056c9643ada21ef080b9da75c10f71ad334e4d3b5d3a0e55bd1ffcc18259cd28f6bbdfab16575cdcce86c95f894cd001e795cdaeac95c90d1ba94806ea2fdf45906eb7a2ba0613503f7aa7397e78c964ad3251d297ea76d88b4221efccb2c00", 0x2000, &(0x7f0000000d00)={&(0x7f00000080c0)={0x50, 0x0, 0x2000000000020000, {0x7, 0x2b, 0x2000000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000008140)="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", 0x2000, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x0, {0x3, 0x0, 0xfffffffffffff7fd, 0x0, 0x4227, 0x8000, {0x1, 0x8000, 0x0, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x6, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 9m37.656642823s ago: executing program 3 (id=34): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_SET_DEBUG(r4, 0x227e, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x0, 0x9, 0x4, 0x1, 0x7043}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) unshare(0x2a020600) r5 = timerfd_create(0x0, 0x80800) timerfd_settime(r5, 0x3, &(0x7f0000000000)={{0x77359400}}, 0x0) timerfd_gettime(r5, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f00006bb000/0x1000)=nil, 0x1000) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000005180)={0x2020}, 0x2020) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002f80)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x138, 0x0, 0x368, 0x1d0, 0x138, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x4}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x11, 0x0, 0x28}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x10, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xffffff00, 'vlan1\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0xff, 0xffffff00, 'ip6gre0\x00', 'virt_wifi0\x00', {0xff}, {}, 0x2e, 0x0, 0x1}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {0xe6d959333babc205}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) socket$kcm(0x29, 0xc, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) fanotify_mark(0xffffffffffffffff, 0x400, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00') 9m36.945558942s ago: executing program 3 (id=39): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001340)={'geneve0\x00', 0x0}) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8, 0x0, 0x6, 0x1, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r4, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f0000000040)={0x18, r4}) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)='Z', 0xffaa}, {&(0x7f0000000040)="a3d7f3e8a9cf9e3887a6f6eca30e90d85fcfa281378973ab916b0e1d03bd28bca55c552da8cfecb0fbccbfb18ef20fe9541e0e1e8fa214cb6bb0455c2386f5ebb4730be449beb72f481c1429d6eb835b76fd1fdcacd50b884c98caa871ec4e225b6036b6ad2638ab5b06828c10fc355b170075f37b748b8f466fe29f40ec981d1431132bca9884654780b3205ed61f49c3b3b6229593e61d13a8505de19a8a0f502d4f3148f9450ed35ef5950bb7fefcf299beed14", 0xb5}], 0x2}, 0x0) recvmmsg(r6, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/120, 0x78}], 0x24}}], 0x1, 0x0, 0x0) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r7, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) 9m36.222545322s ago: executing program 32 (id=39): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001340)={'geneve0\x00', 0x0}) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8, 0x0, 0x6, 0x1, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r4, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f0000000040)={0x18, r4}) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)='Z', 0xffaa}, {&(0x7f0000000040)="a3d7f3e8a9cf9e3887a6f6eca30e90d85fcfa281378973ab916b0e1d03bd28bca55c552da8cfecb0fbccbfb18ef20fe9541e0e1e8fa214cb6bb0455c2386f5ebb4730be449beb72f481c1429d6eb835b76fd1fdcacd50b884c98caa871ec4e225b6036b6ad2638ab5b06828c10fc355b170075f37b748b8f466fe29f40ec981d1431132bca9884654780b3205ed61f49c3b3b6229593e61d13a8505de19a8a0f502d4f3148f9450ed35ef5950bb7fefcf299beed14", 0xb5}], 0x2}, 0x0) recvmmsg(r6, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/120, 0x78}], 0x24}}], 0x1, 0x0, 0x0) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r7, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) 12.025474425s ago: executing program 4 (id=2919): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x24044080) 11.881235016s ago: executing program 4 (id=2921): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f00000002c0)={0xa, 0x4e24, 0x14, @mcast2}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0x70000, 0x104000, 0x1}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x19) r3 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r3, &(0x7f0000000000), 0x10) io_submit(r4, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x4000, r3, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f0000ffffffe8090000000000003f420f00000000000029ffdfff000000", 0x38}]) close(r2) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) close(r5) r6 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x24, 0x109, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x5, 0x0, 0x0, @fd}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x82581, 0x0) ioctl$TCSETSW(r8, 0x5403, &(0x7f00000000c0)={0xbd2f, 0x3, 0x8, 0x7ffffffe, 0x2, "48b4299abf3991c75ba90fb7ee13ed2ee2f419"}) ioctl$TIOCPKT(r8, 0x5420, &(0x7f00000026c0)=0x3d) ioctl$TCSETSW(r8, 0x5403, &(0x7f0000000100)={0xffffffff, 0x6e3, 0x6, 0x6, 0x17, "c7d92c0155b6056ee613657246ec62b016d5a9"}) sendmmsg$inet6(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x4f}}, {{&(0x7f0000000000)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xdeca}, 0x1c, 0x0}}], 0x2, 0x2400c444) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f00000000c0)=""/125, &(0x7f0000000140)=0x7d) 11.089931874s ago: executing program 4 (id=2926): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x54, r2, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_TYPE={0x8}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040001}, 0x4004000) 10.940268601s ago: executing program 4 (id=2927): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', 0x0}) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) 10.773472078s ago: executing program 4 (id=2928): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x4, 0x8, 0xfffffffc, 0x80, 0x10001, 0x5}}}}]}, 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) (fail_nth: 2) 10.525928579s ago: executing program 4 (id=2929): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_PARMS={0xfdaf, 0x1, {0x7, 0x0, 0x0, 0x20}}]}}]}, 0x154}}, 0x40084) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000240)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000400)) socket$nl_generic(0x10, 0x3, 0x10) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r10 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r10, 0xc0184800, &(0x7f0000000100)={0x4, r9}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd29, 0x25dfdb7c, {0x0, 0x0, 0x0, 0x0, 0x1607}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x24000000) prctl$PR_SCHED_CORE(0x53564d41, 0x0, 0x0, 0x5697fb8c14c50798, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r14, 0x1, 0x41, &(0x7f0000000100)=r15, 0x8) setsockopt$sock_attach_bpf(r14, 0x1, 0x41, &(0x7f0000000100)=r13, 0x4) pselect6(0xa0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x80000000000300, 0x0, 0x0, 0x4, 0x80000000000}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, &(0x7f00000001c0)={r8}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000ffdbdf250c00000008000300", @ANYRES32=r3, @ANYBLOB="0a00060008021100000000003400508005000200020000000800030001ac0f70040005001100010094ec80ec85a2d8e2531f7dbbfb000000080007000000000004000b00"], 0x60}, 0x1, 0x0, 0x0, 0x4040001}, 0x4004000) 8.716832401s ago: executing program 2 (id=2940): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83a", 0x5a}, {&(0x7f0000000800)}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b", 0x2b}], 0x1, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.642006753s ago: executing program 2 (id=2947): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @empty, 0x1}, {0xa, 0x4e22, 0x2, @remote, 0x80000000}, r2, 0xfffffe4d}}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c00040005c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.413227485s ago: executing program 1 (id=2950): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x70bd25, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x9, 0xfc, 0x1, 0x0, 0x9}}, 0x1c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x70bd25, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x9, 0xfc, 0x1, 0x0, 0x9}}, 0x1c}}, 0x0) syz_io_uring_setup(0x30f2, &(0x7f0000000200)={0x0, 0xe7fe, 0x400, 0x4, 0x1a}, &(0x7f0000000340), &(0x7f0000000600), &(0x7f0000000000)) (async) r1 = syz_io_uring_setup(0x30f2, &(0x7f0000000200)={0x0, 0xe7fe, 0x400, 0x4, 0x1a}, &(0x7f0000000340), &(0x7f0000000600), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 5.121162502s ago: executing program 0 (id=2952): syz_open_procfs$namespace(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, r2, 0xfffff000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x2c, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @private=0xa010101}, @in6={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x10}, 0x3}]}, 0x0) fcntl$setflags(r2, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e25, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000300000000000000080008a61d000000", 0x24) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 5.088122879s ago: executing program 5 (id=2953): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id='], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x100b7c, 0x0, 0x0, 0x807, 0x0, 0x0, 0x0, 0x118, 0xfffffffe}}, 0x50) read$FUSE(r0, &(0x7f000000b040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000009040)="c9b6cf40d6a9928c6a8c0fdaba1e7bbd4ee597917b02ec4e8ff3bec8d7d8c08f8813039f40175e54e3d66ec19388ed788cf69c0c5b560f0401f1adb4b1f5198fe0bd7627cb9dc384db5b44495ba6094046fb2c8c7d0af7d67dbc3f5ef4aef8ec6bb01c52b6a10d4f9473987d0809b6a84f2ff8aae19a082abcb68b41c291add3ca2204a38c59e28c7c910aaa5a075676e541b6bb91de3854d2f97d3f80dc56c0705e74624a947f2c21ff936c6ba827742a24fd6d9e10b470ceb73a23fc57f5fa27cf073f2d0235e6fa4d1c29f9d0b6509c890ce0e7c3a2a4dd8b6336f02b9d7cc4c8e37f5f5a57f63aeec3228bd15b6d041eab97bccb14ee1ca6fbf7f7ed2e4dd0a32d41cc41c1031424b94621edcea1bddd40f3ad905202dfba3b912efd3468d2ad42b8a01bcb13b288afdc00b7e5857425d7919651160ec15447a26758f20653e69559f0892efc8f0715d8d79f52a44c79aba8ac58dc726ed721eeab3480eaacc2655d4b8831c9aff049c32709ab7adfb24ae767d45468dc0e42bc34b3568ce95e850eaabbf3a1be4d0f9b3e8781a2a9dc06374fe496a755b48abce67fd56de43816d64e883d9db51489ab8a81d1af3a180b6772d2bdac6313d3c183239d4c0bbbe76173f011f144ba71ac8043107f6533b3ef2f44924039b8587485749647315eb7bfe1e412e94f8cdaa937480fdd23769a69e14ea82d741484c99dd1ddd1edfb4faa51431f15531b61e59d68f9d189b27d0bf925970ac66fc35dbe1e430893cc60b28ca6d8e34931bf02154aee6f1fc58d0c0d8e48eaf8079ded67fdd9f19ebfa85d1ab6ec7f54e1963be353b34a6cb7fa35ddb60a9fc6bd1c6f11bf981b5a1bba81513fe447ff7eb2db0d27f1cfd04353e05f37d6c1bd6eb8219ce799338de3518bfec529373e4acfd644212be283856be064bac0f4926c02c0915816615f1f04d1d5136872029afee663f0bf1b6811c594e1465fba59f5727e5a826e3c60576bc2087f21521ffc90dcca39cbec7c0466c8fb7b1bcea7cffb333d2d16daa269d63f4911d10ed24462b37cdceb7c88e819489e1939e5e3cdcc5a858d09803c98d9e5fd617bc92c0880f072c54608f6ea69edba05b4edcd8d3f5e3c926220a191f2aa0d2f0c9158e298bc2e756ee091a0ac48752e4bb56fac67b02eb2c7b3380244ed66648482d8bc2a29bfc26ade0f4a5665282ea408254fd88e2812a184ee9af9c7769fba1ec380043d5cdf6056f89b4d7f12a441c3013b0fe0d8418fc47c13fbf4fc2b4a89496d4ab9d9826d0e586574e8dd15d4eb8b86ed372e37287fc818df5b6993b650fba844d960e3fd62db0bc7b12ab286d6492388a91ae4da6bdece6e101c13100eaba3b9998706fd4defaa3ed2965ce7fe6062b8c58f20c6b44b01121184ee1dda1cb66b3ababecfc0b7a9a12624e0b826c35d0149335149cfb49fbe68d1dbb7eef96d7956dc573d449847ff4bb7ba0ededd00c904130f1252c3dd4bdcdeccf6f8a83e3abfa14d12c753558022efa0704549b0571e31c4bc9f3e485f8d2d88189b4149569ef83e8feb2ad26c263b0f91f8975c86c8fa9c9457da5ef4a8a94844f824873576f722e32b376ba5f3ed0ea9818d86ddc35ba0e7f322594d9a0fea878af5c03d242bc7b0af89091f088245154391e75ab1b6b2730ccd01c28e9ec99428cc22c2d08ae2829537c34ebd1273327d0d18175698f9fe587e968d19f00ff98555fcfe95d00cb3abae32afcd48f3d4cd7c63c45581203a8a3040363d98bf9426493039fce7bb03493ab6e176cb45e2af461e77fc93d1202fe0bc7b77398c52bbc1c1436439f26cb2e17933a0ae309611e46bebd4d84a939d9b040a08cad90c2eda6ddc933edffc8e562aa64658f99a9ec8a47278edb828b5312a95ca34c0af428aac64d3fa1c4045885891fda7666dfb680da4dc2c02becb8303b76987b6d9be01174df88e41a48a42444caeae5e36118564e57209594285bc2915b222f99f016326430c38c9807994cfa1c3c85aa0f6375c716cd7f27be9b2cef6866d07c8ed00bc101a74219182562467ebbd43d2ba78a4b0eae22c67702f318bc55ccd92f5fd11557335f94ff6f38cfe9fbe31d3fac064dcd7d660d02fbeaa26acf8927c1e3bc71d9ed8ef2e93f0a42813526daa1fad36676734103bcc621a114b098295de578bf8d7df9034fb3ba86ea529bf639cde496b5e48145e4a814f894fb3bf3f41b49d0572dad5988348dad7a064b2d76d9092336cb404934790683b2b3576d3b75534df2c36bc78e05ed250b9aaede772a08bf5972444ecf4e447c062d95e556768e264813369465713834f6e239695b6bfca1b6108a09368688e212b7ba556df50c02486bf1b2196da3d4c0553923fe9b1bb4474d0f569bec1f35dce4be0f5e2408efa69aa66dda6bb1ef43295fe005f4a86840bb608796ce14bcc1134013bf741ad1aa70cc6579edbd42478d3054e1f7bdbd5b1131ded725041270e8a46bcc8bbfe89089f87105939deb2a9f10dd60d059679d4514bfbfc94b333c7dde79576426f07f24ab6a57290b0d723bf3bffa2f66fe191d0dee8b292c8c15eb42245b899ddde3c6afbbf0d7c301dd142878dbca579f387931460c8c37e186f60f8d9209dc98f1a27b84ecefd71de077017261ad6cc3072fe57ec589cd9498946fda8a834e3f02e8a91f7ce6e18e76f936f6f39d354b63dccc706e25b1d8b1a4830c46f249b5e5a40042fea920ed57a2415431f83c238113ee7d152c16f0780c502d5c995168e3f91113af11752f10434b8dc5ef0e46a276c683261aa73877ce96ebd0176977e124c5b93bbb02ef97a6f6a13c15c261f23014f4b13c8f18746727206b245bee70d7b94968141f104f0682a3df4242c6a60fa1b70c227306520b1b9fbd6c916b0edf5e2ce5220fc9ef10ab0a10e1bf259e91eb127d5a31b7633f15130fdb44ce2178a20d5dc3f91688090881c061d75b4b59c3b2b7eb7a3dd1564bfa6c883c217cb76c2a7516dec926add0a1886570531c32b6284b1e80fbde88905f67ea5cea41003325327000a7f7249a99986f19f423843e8dc791df8679a2ed2b024d7d8c79112644a4fbd32bef0cd1f9d55025708135ed34cbf52ce3a0af0f8cd985362ef6fceb6c72f241128b16dad7575558badb3847e051f38d7b5ca638a1f454054659d90b2c046e4f9e2ab127f257ccc92f887b3e0c4fb49d159741fc649638180addf3f23e5265015f6dad9b25cb86d8a33b802e55258749ec050d15d0d7d821f9615c7d8c12ce11c63fb1eb118455c4e2167f66e4eaf9dec0dd2f345a7e2bb369a66b0755003a9c89449393f71acd98afdf6347792251d669ff3c64c50d705a67e543cad95655d6a4cce233acdac5ffc96681772be3c04a1b36f5273815af65ef87c7ad0d51462bf337c2389a8eded875f75eeebe5e5efc26933948e623364d0dbad3402f659a93acaaa21bc8f559dca605aa6732d0eced5a21ee8a6403b1f91722fcbada24a3031d6aa221612a36584d5edc6ba0f64096e9b6eae1555a95945b937457c4c74371f474939d3c3f299f691316497951c646f142adbd6ee49182aec388ce2ca560a1f4b7d8a63e5cd25ba91ebc61175a6955895bcddae7bf1cefccac5c93dd669ab65a2f508adbcfd62ec46027efa396b9f69984d6adcb38fdddb616ec38929fedd97677c3d06060309db5a9cb5fc8919f4310f06bb40f1b76bc197798acbf8d3162257071e034174047006796fac6fbc95c28afd881e1197c20fea8b4be5c5de39a292bd1ff3819d4d4f48162ea1a57930d8f324ce54875d3ad09eea95c4c825765842f9bbb1957fa8188578e86081adfc87502e69c8841218b596d71c4ec49afa60408028012d974051559d924f5f8a59ee195fb01994b8710994d8201ae10f6e88e0e418489c47499b7efd2021f56a6c9fba761beaf79acb6087a496afe7524f2260e14a792cf1a1203d4b0cd8a11d2544293b7657fc393014295fa28e409ab8be0a02695223d17d7caf4f44cf5d0f416130067f28f3fc51c88ad7b53e401e658214abcc8f597f22d662144f878573d0370c874287698784b6ba9abf9b22da2eeb0ce8b817f85e429e799a5edd246d72d77228652b80c4949a85cd5131d851d9f9bda9afa0646de5e477e0fa999562cb46758502c7d63dd3e8b6f88c7ea44f41c4212d633f0160e738c6d36128e9e58c154b08460c899a26276dc1257dc5de18495573693674e40faf1dad49db8ac83baecf92f3aa5c23f639cdcf6e6864c14a8d6a3de95906813fd17f83c406ffd1d2d7bc75737b7b00172448b2ff167b9fa43649db32ab4094652cbb2e18c3bdb527f24049878bb44b82135009f9af22d24ffbee4b5289fa61bd0502f019b2f24a08542db818bffb7c1637b4f4cb9043952f88aa69d9431b8df2e3f9ef6e4a5ba58e79acf082bbd871aa0f0feef71ade8f921bb597ea28548f4116a281ab3542b732c4a8e9973409c75a0c6443d83547d0d314cc7bd62128e3b0db9c03c78b9d78ba714627866230414947523a6a239873f932c2b28c09cbdf182e856bf41598998150cbdd6d54f76c227fb1519f5afb0008e31d6a0b87818d0a2ca0dd6e953a5ba1a347dd927acd36f3fa3a68920eb9c36bce6cef857447aa733e4ffb7014e194993eb1399270b64151ddbb15478c2b762a14d1782608fb24199d9d311281c47726f565b3a3b7be584afb03d87cdc5eb8156772694ab422f59cd7b1e359583a7cc0695b9f64e6416c6b52de230afbc160d2e9384501b40645189434d416c0fbb034e9ffc654d0dee7ee7a878f9e559daac7ee5af769aeac7a92e85b1bc7983803d3bb572befe76184a46b76450feccffa753cc6123cba0686440a5ba81236458831031a4ba4c91d7aab3bb2514208a902face1c12b7dfe25318ab5ca2c1ef9769aa06ba0539f6904f95d3c8440617efc7858d3984f566b3390b9b1a0f2ec3c86dd77a0b82958c4b15278ffaf10e47e613545f4cf67ef7e8b31a6bda35022871840ae1536fb65bb11b932936db7a15642359bb6b157893d19e7918b11d3d3072b78c761c1784afa2214c865fc2aed860dcc17b69cfe9189bcd0767a84cb306a59966e5f96514a7d7182e6aa7204bbd1a84092ba645f86b68813debd5a2290acc93388e5eacc17db51d69604733ea9160a0e77ec5317194654313a9a8a0535c0bc49d0837e2821df92e8ee2f154cbea6b87ffc207aab4ea491e8aa75b90f70136d84ea2f5dfd138371dbdf8fe273956cb7411db6df48ebf56105da42b219b9dad387ca7be9ecd90508c62279a53bc9f7e2a845f9da42d8e85d2653854737948ce228b2d76d1b9fe2e0e456fdff24575939b82a3f6e1a4be6ffcf1c493c17dabbfa0859a87d259ae3931fb6da544589b9b6bb7cc93e078813ac94918942bf113aee5742498d86a70fff31d2a69507739317a9aa9e0289f053dad4eec63cd58e833027f0859fb4ab74e8fc742d03b5b6dca1168d3d47fd95b514a567e6518342d52b3c3bb6438b5aeacb95ff9001d2f5480f6a80a0685b5bda2ceba06925ab5ae0986954c3169e92fedaf3f1681247cb114202c0f728296a51396063fc64aad05662bf05a626b90f656b47069ca668bb96208c287e8f793d77d4fb1f1cc14e73406005e11a2c1c46ca7448be534c97738487527d79e284d7a0ae275bd4361ecf4a352e6dc8b8c8c8e132a3edb7d645f4943445f523fb28bbf857218a117f1288afec49f9def9aabc2381b38a315d5c927aeb96fa1ad3eb13b0151dd570f6734f004467171d2cdd609d1d09d115c9b42e1da3472ada98d3e1da90a8f373a98133fa708f5a62c75b5eb1b643c48de72143ffc8761ccffd7f3336b69faa277d364cdf2d4f2bc428bda8b76e4748d5ae02d9850ac6f2ed0ddcb874c25d210163d4da10c0d6cc5218a3558deee5519c94032158bca02fe1c1b8184fdf417e863352b224b7b06267486296ebd4100ad5f1108c78a7056979f5ad6f97794a0460bf371584d9b962034aa7449f4e6b0f925b7a648d4ed7f2442135629b0baee3385882682fde57e5eb9204647a898c566120e4b577ba215ed863f76d5ad9ed19a6b7465952292e7543110eac3dc436a16c85047f3ff10a00c917d5902d296c063c4b173775f2b612e407bce02c8647877abcc07b21b89a60e16ff5c5cdc3708f285d6e411036661e97f628c6c2bef7a6e297f0ea7db2aaceb87d13425e80c28cf095b1dd4e08122e89f58862c6466d79fe7d06e0038a9a1869cba0d1554bffc08b94bf3dc7ec4d108073a4dcb7a6a503b608e777f1ca6b64deec19072052cdab8e7222966170bd35cfa66d3d013c537e723bfa2f634b34edba64ee27ab814bf66c5943e5b7b4d2cbad0550982b2d68ea0633a48f24ef5a59da6e9671717afed4253db66afce693ab08e2b4343d9efd1705802393ba22af5f0e04fc559ddafd78bb1c013b2826cfd77591736cd8a1e079c00f72dc89ee419cf4cc5e867138e35372bb0854df45d2142ce56ea01465d7cf42d3beabbed8602ff568df5d8e53d22bbd897c0aa050165319ba28d6f861a128556e420275562b8a19c0a2112df4490925f52090c6c7ac79b8533936d4020af3ea5d383cc8e4f23cf275194887d42bde7061bc17246a91b735472c4dee6f2d159a4fb2cce10f0727a964658f6d60aa18bd474ce1e88114ce3c2a3acabd74175b82afc6126ed79d8d333ed993e3a0d67afba888c94cb266f906681d9595f2ca21946f32d8f07eb7cfc979cdd56a885e6a5deb1dc54ffbbbac728db4145056cc9b78386f1f17ad16856cc10b04038f0d835a5842584b6a9516a770abd839ade5d379db9889d22d9049dd13010ad612a64128f724f7a643505b8ca50bddc4ec4875beed2f8593b7382645625809bbc3591027d53bde8a16be5bb209cd49e71aaa435c923ef3c4d1aefec7111773b0d58b47efabc7a43b93cb7eab287cefe554a5b59e2a746081d0d875919df356504008374ef184be2f7ef7e644bf5535dedf5b969b30dcedcfbecb83173b0cea015efe45630880c303472daf1dc22b384e65078cb0ae21baa4834fcd4b4f7c995b700117e1448d041a7106277302fabf3a512ad4e802988c43e6cad0b4b74962e195b355b653acfab53d9f38337e46758c0f8c147333d30f8fbb508a889b84d4672e025b0d9adec09fd4e2d62bda0e0c40570d8fcf5487a59380584f7b85a8576985a4423cbdb1503ea4f93d4f3dbb2c384efcac84dd8649e6f09d2ac37e1d8268c3c07db365581c7c3752410909968598b8ea5ea05b68e6013965cc60be6f6b24e493655f5ddd572a84a924803a7df025914f4b57527841928d30c03b09aeee28c8b81860968f53a663f4f56b004e07cc380f5b0b0dad43869faeed5f240ce389a0fb0920073b8d3de611e54d4011f55ba28743a3b51af6293ed1376fcfe3592c877e2d81d14ee882410cf8207476409b5673eb65297155e91cbe089c8c043964063f9b469419bce6e59e0017e0f527d20eab5d9579208df9cc65389ca8fdb3d62618395bb0274b8094799cb4c36632488e79950ac3bd3d982d521614f56df1bd16c1f928481dd4580a796eb7892b3e4a33b748b16f96b1def674c2b70d0315b486a94a979292d635a2ad1fa877927de9355f38a612747fb982bccf12040d9a14a63c34b6f2b3b450a6401d4d0c96a9090ab80d30f7e7af84bade864791455402cbd278427c5a1e84e2e2286c4bf773da614e6705802c130ade8a3a67b309f9db1558372046ec276a34fb50f72c7df40e33f447ab5f0af05eece4e8f654b3c2dad6ea76ef6b694699f4ad8c6fdcbfd8bdc23d0c580631d0c95ac6ae9613dad680939db2ecf9e7a0d4d0f2f2b7f1c1d308cfaccacc2381e97bb278a53b14daf686c0541e56264c33d5176b830ac7d13c28edb2d8e77d7acbced061c4ec315cb1a259966ad997c7c7beae44d4d1b6955842d7fbba0bb0c461bb22db3e15f0fc1cd3fd997dac5e6a4bff6e2eb8310d828f15309b2c8feaa21281963d35ab2d5c099beb806cd384d304449c58d89910105df11225fb893e984734a8e5cba2e553f03ebd5ce4cae24826547df81db3f2bd7d930f785755c8b6311f221da59679ce50479adef1cc5dac984a5d2f9343fe4892b2b5640892892cfd50d0015c1f568792d8919943a578b62585081175237444d9542a2241c967bcfbc3dab4e8961ecad89165eaada2d759e844be5021aed42b971e9ffea8c08a3d6e4073ce4226b4e54b83f3d8ccd207a0cfcf9da7b5e55d1a26a90e03f7c3611c6562b65edb42fe110dc3970b44aa36660d1cdbc882495271f80816350b945aedb0d46ca6d160d5f0096e8263325e257dbb574932e32f1b28ce2b7f5b3ee6ccec64085496bb513ec168b53d79e6ecb72622a70b22e1f9116fa48815709b2080b27b31a6b26dde0701cd74c31b4e33a702f051ae07ad54ce23ae33e6060e5451a4171cc930af2ab70862044c5a0ff9e8aeebd3cc41c62d38e7b79596d3851430dd661b071c319751985d48eeea2afb463d7d9390ed4e68a60f90ad80aeca4b8d283ae0538e590668c857a526a264be238641eeb5f321248d829539efccf03dcefa54c6def8b7d4a8cdf6bc76d71eefaca1a7a33bd4b56e94b8e38f784b742bdd080faca4769e1aa91ff50d9374f3632cb7b66a0042beb802c6cedff0a3634aec072f57d38a6ea61439029ba5d921f57bfbc281d75f5ec322b8f8c90b4d3f65d00ef97dcffe7e07fa01af8e7f8da15532f0c18b73d7a183327aea46680651645782f4f318c00f2355c301fe2e805a22f8586119768b8424735f5495607d170f0818be232cec1d9e40daf79bcd63a26cbead93753b7171bcad462da2af68e9ea9c0b207200f1fcf3793283931603a719e745120273efb541a7af896f6eea7359939d7226896c8023cc963e4e0a7579bc83a37cb8d871324bb3e66b671d8df83d645495740c5b99aaf2edda3018e1895dda6744b1e6623cb62d4b80ac208f69a81caa0277a497e41bf637817518cbe0fcd2028d07be199a126f82641f2fd54e6b20287b912ee8d8dd72db5824ca9e464a94d45beda7f52932d1bb57a28a4e99ac32ea4c3650197613a87e4cec91d82f37069fde871575d3cb2220aaad9277511271a86377da5f2a9f94303e7151acb087ca549fd0cb9b1961954ddb28333a24b510b92cddc057ec5a147ccdd708a2db3c8cb3600756100b38b71f0676f6fc5a7f5912b5e81bf6d2b07e15fb5b1c96459110ceb22ba4f2fb0e531dcaa913a13437cc6276c8b4e1bdbc5365144c7abd2e2a6c93ef102e26b14e576ada244408d9db50aab045f9879bf95425eaa7b11d77e0dc503851c5c278c282aa736103adf5ca2b30724bde27f98e4e7a947f964b7abfe58a3da354e3008a2b86d50223d3077e151ce2e086172002eab7279ac1948361e172073184401d5650181547f1bacc1534f9ab2ad66fd9d200d867de79a92e465dda8d781b15881acc9bfdc53815f3fc3f064c830db3908cdb173e3e1295ea7dca280273ca99073d5663003f14c4f7ac9ef9bc735b2a413daaa7d97101553f90a0d33b043d1f2b0f131d35c9244808bb4b76213ff5c418053a569d760498518d701aae39cfbd7a052b586c53617dfaad1415c1cafbb41640d1650be9297dd42c803d8bfd443916310bb80a74c991cc26331ab70c0c4bc4f2295f069787f6759878e42ffbc76b34493f71d88a109b0813ebfcd24953b2b5f1f5164d9974bab7ed1f4d42f62b8379912dd7e9f35a19951e4d57b0c70fe516cd2059c4ef879d9f9b1191d5bb51b852d3e9462e4528b9c1f7c676e6039d1deb00442a482e297b08a67c79bb818d0316072d8174885de3413ae0505232100f217e424e0106811902d60ecc0e0aaca7c5f00f4f365e1360f10aa645b9215c93668a08be97cacd6b0f9c80ead76478846d12e8f24a53bfab01628afd199b2db332d38d5009d7a1437f0f5b2a0d36b5c98f3a35e5043ffd55bac325d3927888fa5d0e3569d9be002205b501b3e68d661515bb9eac9d4f234e22e4e5bd0b4c4530933aadd99f132794ce48e9a3220d2c17748c012fc5fd93d265cebb3edc3be29a1ba26f2adcf510663c28d29e28774c4ec1190fbfbf614aa8e2745f8605f7d7e94fdd06322454a08833f1a22c77deedb1337e380a8e18f85168e045d1e7cf32fda1a709d3eddf62909a9e580ed8abd605e07dbab79b5bcc2f4533e6fec589b976816471b1f11ac3c89336c52e03b72520995d05275024e9988727f2e1ac9421ccaaa0b736e9f7f296c2d27cbd774d7179f9c6921df68985998034862c15adc452666deb40c0c40cedf16f4d187524a0a5cdff6f7b2531eda54fbe15a7ad1aea46466a51642326c5d7d374fb38475d119027a3714598fe7307de94bece2741b7a742b053682dae9452eed3b820b1386b604fa647e392b35b205019cf1ad317d1441cbee2aea5ca95e56fd5e959689bf96c9f470acb8e4e630b13403e9459242b629fa28e1ba8eacf1ed572b1db735a20ee1a5b8500b6edf66cbe671c5938741ab2b36ccd4e92160f6df9e1d465cdaf3a7746e128e26e0e7a7aa4869b2a482c6e9bf7e58408411016740c547129e4f11d2317af3c5bb55b2468e6d08e75e5039c3bfdc9b6da06e7c27933a8c9d8ad0e4c74a093e6d57c02b1b49e995962c1046b5c8a3df0ea4c20049e300cbe41bd92a0ea5993ef6fd92ea74e28e1cfaf4a8533c224104d6081b64ae08b4e7a23a259b2b03655b987c23687c6e279bab469a3e0881a30620910566982945f8f86229fd614ca2bb2adcbdd49a5c579c0d1bbdefb9e33cd0641bb43f6ca3fab33dc4188e1508e4293e6de932040b895a97bc1f196467ad4a0d4899e6078c014f42521cf39411e2e4f1b5adc26f1f3bb2fcd27b89ac418c8251423de82c4b5980a4e66649b9f3ec48c833c35f8653ca510a0a1b049561e64a6938714c3a1946b3fa5079533698bb8f8f85bea8711ccda5cf01de150b055d3586a890d0654d2b4cfba25c434e2ff492b69798aa197dffbfe2bba77d4b4eea35c42e698221e971a4bca34e59c46084f48f2170b83db6719324ecb55e07a9cf74a84ee0fc3567fa5cd2f3937ad956b4ed2187e2026b7d4166d50fd9c937fb4dd5aa96f2731f1db1dda4eac4e589295ffe9b72a7b9533f6e23c82b57c8361c8cb3b15128235f65c84b99d93383b7398e936884542d0e73bdf37cadfb6c70da47af3c5a3cde0d8e381cdf9ec1a39d2fc963f0d8ee31b76d9668c0171967cb9ef2f15d5bbdbd1058328da7a60bbc7d77efed2de74a2ed5637a8a84e1163325dd22b584b15fe894c9b1ce89d24619a344a8987f6d21b7de7ccf6fad223134e1c389a8e6baa375dd142baf4a8852e984eb6c281cf86e2457a7f85782c7764564af26d331d3ddf4850d24742ef449cd5e32f5957d2ee10e05e7d3312215e4d36ac5c8c4bae3340f074f88a20e18b270b3baf05de1b0363f4c6f2ab9386d6034e8567e4828ad256cd250448c70147c318a621697be402c1e8365d2798084f968a8897242ff6756c2937e4d1300", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)={0x90, 0xffffffffffffffda, 0x45, {0x6, 0x0, 0x0, 0xfa0, 0xffffffff, 0xffffffff, {0x8000, 0x0, 0x0, 0x0, 0x22, 0xcc, 0x3, 0x0, 0xfffffff7, 0xc000, 0x1, r4, 0x0, 0x0, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000810000000000000006"], 0xfeffffff) 4.929701516s ago: executing program 5 (id=2954): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', 0x0}) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) 4.890548055s ago: executing program 0 (id=2955): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a00)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x6361, 0x5, 0xffffffff, 0x403}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r6, 0x3e}, 0x80, &(0x7f0000002080)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}, {0x0}], 0x2}, 0x0) 4.801733371s ago: executing program 1 (id=2956): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83a", 0x5a}, {&(0x7f0000000800)}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b", 0x2b}], 0x1, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.747062204s ago: executing program 5 (id=2957): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf6", 0x7f}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9", 0x50}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83a", 0x5a}, {&(0x7f0000000800)}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b", 0x2b}], 0x1, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.662102554s ago: executing program 2 (id=2958): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x6}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x8f}]}}}]}, 0x44}}, 0x0) socket$alg(0x26, 0x5, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000005c0), 0x100, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000) connect$unix(r6, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) recvfrom$unix(r6, 0x0, 0x0, 0x2000, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x2d, 0x20040040) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)={0x4c, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc805}, 0x8d0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$FE_GET_EVENT(r0, 0x80286f4e, &(0x7f00000000c0)) 4.577807456s ago: executing program 1 (id=2959): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74f", 0x86}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe08", 0x5b}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83a", 0x5a}, {&(0x7f0000000800)}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b", 0x2b}], 0x1, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.498867532s ago: executing program 0 (id=2960): syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x48, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0xffff, 0x3c, 0x1, @dev={0xfe, 0x80, '\x00', 0x35}, @local, [@dstopts={0x2f, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @jumbo={0xc2, 0x4, 0xe}]}]}}}}}}}, 0x0) 4.434913518s ago: executing program 0 (id=2961): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f000000cd80)=[{{&(0x7f00000016c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000240)="151f7fd54be392ee77453d144fee18fddbadbaccfd5d95c66e3a66d2ad02085a988a19d72f649e7bfcdf31cccf322646cb899e3c8235b726a4c4e36b4a521096148e06ace23cfc26b4b28a717277dadaa37719447ba784e59dc201b13dd084d0a9dcd79d8855ec013c5a0971e521cf6d1fcb6ef415ad5231c240d33f218d0e9700c381572782ce33ed1eaba4be0a5861959b20bf89606426d4c6c6580fedb40145529535d72ab86a38d3999d3e9396e0221f766120598bb0ca18579489d0f02500756e56ab7426d6186728a571e2ffa8159da3f4d73bf0dabfbd7cdbe4214f39b7b4420444033cbe", 0xe8}, {&(0x7f00000006c0)="1b7a94dc2a4231a48b1e44814c94f4ad6da5023f8cf9752f93de6e8c3a4abdaf7c08c3e7367aa1d7e8523a8957fca6bc6a6fd05f0ccb1a2f1194d8b8eefd89a481244753376c390b38f02f116b8e4aa2a4081ee50e44a4dd1c9386eeda3be3d62ca5a07329cf632db5461da84908d409aa391a3dde4b4d1ffa0b8294910d11b17d9a70c9ef547a7eee274e5af5cee9b8e64d43be5ffc8c", 0x97}, {&(0x7f0000000780)="6a8c81a589b3f132576315b8856df289c7c2ba3c4963d608ea386276df2aed7e25c2596caadacde3ce5fcdcd0c437069ff01e9e289469f9bc3", 0x39}, {&(0x7f00000007c0)="7f2b93b500863ef6c4ed509c7d52f00cb3f7df8094df095152cdef3cec5928eb29ee06af5856727f43c93af910b78dcfb3771b5697964677a2fb5d4c2b18f248ff2489c1a0eeda2985f979a05eb9256059112c9e317ad2982f5cb3e5af47c1", 0x5f}, {&(0x7f0000000840)="a7c78f4702ff495d1ac71fe131ef04242846902693bccc067bab04b5d4344c17b687b569a67662a12ca9a3986aee760b69c9482c92b95f66fbb3358989494e387898d80c1f8f46e859995217188c061a1d57a14803cc73e45e7fa2cb61796e52ae52c6ca56d400b6871874898ae89bc9d9dbf091314689f5fd4442ed78a4bf31502f85ee776cc6bbd64de2c4dbda8f23a594020b601b6d5c179d689f09a9a4a9ccc9", 0xa2}, {&(0x7f0000000900)="43ecfa2bc16b300d43cd7340400832487fca030fddaa1552b38e0b1f614fc7cc27fdf68cfa954deec40ce87766147f2b38459bd827ae12fce065e84f45", 0x3d}, {&(0x7f0000000940)="19113f3af1e30c3b11bf6145e35f51b8f38019834a9183ba9aceb0bca0c508923ac0d4cd95e4585c5ed9b77ae3b76a06bf7b24413c175999e53109682b834e498354e8810f882ff805d8d835fb0802fd9b23d0472fe92f91df1e0ae9d75583765068dc6fbe9b6b032a20378bb3213008c64cb1572af95ee233bc17aef61090468c70f409a5d2da379a85a643de643258a077a4bea5fd82ce2fc6b75d60c9cbcd141cb59a9eb76cbddbd174776dd7cff74b7671f4f08ac11029f98a2e2829941872ccebf6876657f4842892d11a234b", 0xcf}, {&(0x7f0000000c80)="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", 0xfb}, {&(0x7f0000000480)="8b562a6a9953c8d063d6d6e597e57920cfdd82ebbdf809b4c863744d9d3dfdd060c830007955b9648c0971b01ad59b76cad16020e13b0ed253f0948f69a7898859322ab0e647902484b2f0a2a94f853bcf538b71462eec9d392e7d931e78b31e", 0x60}], 0x9, &(0x7f0000000e40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r0, @ANYRES32, @ANYRES32=r3, @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r5, @ANYRESOCT=r3, @ANYRESDEC=r0, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32], 0xe0, 0x40}}, {{&(0x7f0000001140)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000001540)=[{&(0x7f00000011c0)="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", 0xfb}, {&(0x7f00000012c0)="4b9836bb94d14b2a3ba18b2fd178eb064902e8545ef6813ec954e4c1964e24f3b099a845d21544d259b2cc55c20b663e22f9f3a0b5595970ff567d37bbe1e571f17b93fcf53d00947704599e83a5754ddcd3490997f36185334dcba30da1c23b7e9e97070c4b590dd96aad4f022b8583256513f94ec7b91d8979a35a19277eabd7ad9a0067ec4beaa6a3e500567f110e7c0c337798b6f2a5de4e7d26435926bf4d091184834bf07f72988300"/185, 0xb9}, {&(0x7f0000001380)="d994b811ff791187df040c95732a8d7a84d1662a8f581a886a132d49876e42def7b59cdb8d1d9f15efae41ff905c324045b09a669eb4bc261cc8934b7b04b80da4aa729e598310de2954a448366ad74571ad71ee44bb85b95be36126450a6c8ca87efaca9440fc7509c5042b18b989ba67edd7", 0x73}, {&(0x7f0000001400)="9e5c428d3f970f2e62606c", 0xb}, {&(0x7f0000001440)="697959ef252759cf2918bc0fbbfdb34462823da832396437943d1629a4f1ece577703fb22fe61964fddb40340885b52d3e41817cf20a8c149f47d0df57e941269bf9817a4aaa1bf75efa171d8c755ded9729d47232bfe504302633040ffbcfd6300298410330e8e6195320dd45af2fdc6c1d585d2741df8e5fc9fabfb538d1a747cc394876d90db4b4060aaca9d244bc1e920c9627fb7f4d80e414238bee7446e948d7b2773f0d9971f24d7ce3caec8b55429334bed102b3dd3779574ea606e4a2f44a46a78c89b0414416ede426ae5efe7d5c6384816908b80fdfc062e2da8164517ca322", 0xe5}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000191c0000000000000001000000020000001e9f64e396019640d0714b3832e77ed5e5d8dc47a28213c790c41a7a788533ba545f41ab69cf848353deb3d0c5c105f1f0ddf087585a827bd15cf89b359a89bb353dfe10298fa2971909d3e8151e9dc814ff3c635d100d87ea0d1f1ae40ee9530657f447072c4f8bb95f764928af29a7a6f2c7108c47ec9a815b0f8db7bbecefa65ea10ecc608af0bab01574a2b87f", @ANYRESHEX=r2, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES8=r2, @ANYRES32=0x0, @ANYRES64=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000d0000000000010000000100005c", @ANYRESDEC=r0, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c0000000010c822863c0000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r4], 0x118, 0x4000}}, {{&(0x7f000000c6c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f000000ca80)=[{&(0x7f0000001040)="23420f7d260f751a4a6e677af0c50fa4b231b9d0eca37ba1597c4f240517ce0d6b9aed66c70cdfd2e8f22c5e1ab677a83acf55c2b2efd7961eab75b8c966605925d855a75c88c55bd72428864ad11950a1a178e9b3c7af0ae0895484e2f770da98c84cbf95abb674a90a013d0256dfd7d41f1d7cb2a1a9f893446858579ea288f29d5232c3f2490a4ff8ef54bc1c26c8b74cd3a4a76368a2aa00", 0x9a}, {&(0x7f000000c800)="0a0e04cbed3ba110079d2945d7d4c948955794aa1b5b71b2d9c57be059768ae35fc9f4356de4f67c87527218eb2f5ca71785d2bdac97a13094b99984f52e3926fa4ec6e00fa4379fdc103cbc1c4e169f5b66a53fd8bb600d155c11ff65a185e9e7", 0x61}, {&(0x7f0000000a40)="dd9ef4047dea30f92be7567c6ca324a11407f70f1baea46a1196dc07d12177399233a1beb7f0fb94e7950dcaceede011bfc778e46cc06ae0b4d198b10611999b6a5ea4d25938e458fca65b6f501dcf7e372c898d781dc6cdf6b93dffe550", 0x5e}, {&(0x7f0000000d80)="3e3b1d7521248af0d5bb735b17bdd4823e25d080f5f6dbf351b6870485a6a08589b3ec5d17ce0b2b016ecf8cfc7c1e1e95e84c8f680998ab92215919f72d7cfd15175f028ddac227814a20f4d2db00a7f92fed4addc15844ccb71ec68970c798978f35bec8366189f95094f8360e17f6a449adba8f314b431b2ce8abac1f634a88fe9a1a2c2ab19d913ebd9453ce07228368ea52c77d17e83292e642f1c52b310f21af80", 0xa4}, {&(0x7f000000c9c0)="33747ca1a258efc06361fbe9c6fd31f0fcb417a27a79168da3dee2fbffb7461b70645415878fb65b64124dd0672b7dce0ee306199b34f554be64e76c567a5424f24a16d8", 0x44}, {&(0x7f000000ca40)="ad911123d08e8b6e1a78cc37", 0xc}], 0x6, &(0x7f0000000b00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r2, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYBLOB="1c4fe05f7a000200"/25, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xb0, 0x810}}], 0x3, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"/280], 0x118}, 0x1, 0x0, 0x0, 0x4000}, 0x240008c0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00') write$UHID_CREATE2(r7, 0x0, 0x1118) socket$igmp(0x2, 0x3, 0x2) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000500)="66b87f000f01b0279b0000ea4641ab83b5003e0fc76e00c74424000d000000c744240200500000c7442406000000000f0114242e0fc75f000f79707df30f01ea663626f3a70f0095000000000f09", 0x4e}], 0x1, 0x44, 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x877, 0x101000) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r12 = fcntl$dupfd(r11, 0x0, r11) write$sndseq(r12, &(0x7f0000000480)=[{0x0, 0x0, 0x0, 0x7, @tick=0x1fffffc, {0x0, 0x1}, {0x0, 0x2}, @raw32={[0xfffffffc]}}, {0x5, 0x0, 0x0, 0x0, @time={0x6, 0x6}, {}, {}, @addr={0x81}}], 0x38) r13 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r13, &(0x7f00000003c0)={0x1d, r2, 0x3, {0x0, 0xf0, 0x4}}, 0x18) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2}, 0x18) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x2, 0xe05, 0xe7, 0x4}) 4.346062008s ago: executing program 1 (id=2962): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80, 0x88}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@remote, @in=@rand_addr=0x60010102, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) (fail_nth: 2) 4.325031075s ago: executing program 5 (id=2963): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id='], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x100b7c, 0x0, 0x0, 0x807, 0x0, 0x0, 0x0, 0x118, 0xfffffffe}}, 0x50) read$FUSE(r0, &(0x7f000000b040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000009040)="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", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)={0x90, 0xffffffffffffffda, 0x45, {0x6, 0x0, 0x0, 0xfa0, 0xffffffff, 0xffffffff, {0x8000, 0x0, 0x0, 0x0, 0x22, 0xcc, 0x3, 0x0, 0xfffffff7, 0xc000, 0x1, r4, 0x0, 0x0, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000810000000000000006"], 0xfeffffff) 3.726711475s ago: executing program 1 (id=2964): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29", 0x58}, {&(0x7f0000000800)}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b", 0x2b}], 0x1, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.669879359s ago: executing program 5 (id=2965): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff00000000bfa10000000000000701000000feffffb702000008000000b70300000100000085000000a400000095"], &(0x7f0000000000)='syzkaller\x00', 0xe, 0xff5, &(0x7f00000003c0)=""/4085, 0x40f00}, 0x94) syz_usb_control_io(r0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002080)=@delchain={0x24, 0x65, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xb}, {0xd, 0x7}, {0xfff1, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc050) socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x22020600) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000080)={0x1ff, 0x0, 0x0, 0x7ffffffc, 0x0, 0x0, 0x6}, 0x0, 0x0) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x8864000000000000) 3.669402195s ago: executing program 2 (id=2966): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', 0x0}) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) 3.668942019s ago: executing program 0 (id=2967): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x43c37000) ioctl$BLKSSZGET(0xffffffffffffffff, 0x1268, &(0x7f0000003e40)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) prlimit64(r3, 0xc, &(0x7f0000000180)={0x8, 0x100000000}, &(0x7f00000001c0)) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PRIORITY={0x6, 0x2, 0xf94}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x0) syz_open_dev$vbi(&(0x7f0000000100), 0x3, 0x2) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 3.54999782s ago: executing program 2 (id=2968): socket$inet_smc(0x2b, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) r4 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0xa0000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0400000004000000040000000300000000080000", @ANYRES32=0x1, @ANYBLOB="000000000000000400000000000000b4e3000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000380)=0x10000) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000000)="aefdda9d242006000000f57f07603aeff0f64ebbee07962c38e22e11b44e65d76641cb0100070000002aa7", 0x2b}], 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) socket(0x10, 0x803, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) epoll_create(0x80) io_uring_enter(0xffffffffffffffff, 0x742f, 0x77ae, 0x1, 0x0, 0x0) r7 = socket(0x840000000002, 0x3, 0x100) connect$inet(r7, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r7, &(0x7f00000025c0)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)="20b0355302f31c2848d4505e10f5c285ffac6f7471d87011730b6250eeab1aff494b0843185920ef139ce5becba8bd4192a2f6875d1ee4958e871bff3d82f538e7c9a7633d4ab5ecf145f39d669180af30e18f5d3ea0f3e7ddb6b55f20a016f7349c7c377360f8d7417c0235a85addf2e59b59820134d9c0c4d450fa0600d88f3021354619c557dfd0ae59be", 0x8c}, {&(0x7f0000000540)="0830b87c2d4663589a88d8b2de7acd29caac2a0fffa118acb1cc39cfe72d5e33cdb5afb2b9d34149924b98de1be059f1259066994e", 0x35}, {&(0x7f0000000580)="734856316bfa042e839c3829f3487b24fbb4e5a509ec889555db35fea97704dd0f7cd896dfd73e3d4068ef5b1efc4b6d7d6bb727a3de0aecd47418785276413efc3c17f9859de44d19d096a1d5c925790930a59ade5913a2a1ffb1d06e74bcf9dad1473fb8c254c4030b94de1668027d778b30b082875f3f20ede1894a5ff764c0ce08fd30b688d8beef3174e623e15d16ef9d023db663fdb12f493ec2fc7da85bce091098860a5b8179388b60749e92a89df0fb23d64017bc4770b5f1", 0xbd}], 0x3, &(0x7f00000009c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x44, 0x0, 0x7, {[@cipso={0x86, 0xf, 0x2, [{0x5, 0x9, "97381f8eec7c35"}]}, @timestamp_addr={0x44, 0x24, 0xc, 0x1, 0x5, [{@multicast2, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@broadcast, 0xd1}, {@multicast2}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x101}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x800}}, @ip_retopts={{0x68, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x2c, 0x9, 0x3, 0x5, [{@multicast1, 0xffff}, {@loopback, 0xffffffff}, {@loopback, 0x9}, {@local, 0x6}, {@rand_addr=0x64010102, 0x2f17}]}, @lsrr={0x83, 0x2b, 0xa6, [@rand_addr=0x64010101, @rand_addr=0x64010102, @multicast1, @empty, @broadcast, @broadcast, @private=0xa010102, @rand_addr=0x64010100, @remote, @private=0xa010102]}]}}}], 0x110}}, {{&(0x7f0000000700)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000740)="d5affa56edadfe24cc13005f7de4170cb6356cb5d7be571d305fce2b4d602077783fea8747f2d219a319865dde6275a21b8aa56caecc9a582623e75e28a9b3325ba185fd8a2b67500a2790f109ec3e557fd72e01dd9ae26b059a7c2be75b1aa8e2bb6bc677f2461dc8a2f41b9969e998ede733e2649a68511988ad72f5e68af03cfb", 0x82}], 0x1}}, {{&(0x7f0000000dc0)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000f00)=[{&(0x7f0000000e00)="ad64f7e7c6f54366b5812f2ce379004d01b82065", 0x14}, {&(0x7f0000000e40)}, {&(0x7f0000000100)="07364366742caf22d5ca3a630810421127cc646a307e5470ddb6a8ba4b7eac", 0x1f}], 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x170}}], 0x3, 0xfffe) 2.310295645s ago: executing program 1 (id=2969): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a00)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x6361, 0x5, 0xffffffff, 0x403}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r6, 0x3e}, 0x80, &(0x7f0000002080)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}, {0x0}], 0x2}, 0x0) 501.519562ms ago: executing program 5 (id=2970): r0 = socket$nl_generic(0x10, 0x3, 0x10) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400", 0x2}], 0x1}, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000180), 0xfffffffffffffff1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, &(0x7f00000001c0)={{0x5, 0x3, 0x3, 0x6, 'syz1\x00', 0x101}, 0x0, [0xa9, 0x8001, 0x7, 0x10, 0x1, 0x8, 0x101, 0x5, 0x7, 0x3, 0x0, 0x1, 0x5, 0x1, 0x10, 0x9, 0xa60, 0x7, 0x9, 0x2, 0x9, 0xff, 0x0, 0x4, 0x2, 0x4, 0x3b2, 0xffffffffffffffff, 0x7f, 0x200, 0x3, 0x5, 0x5, 0x2, 0x4070000000000000, 0x6, 0xc, 0x2, 0x4, 0xffffffffffffffff, 0x1, 0xffffffffffffc4c0, 0x9, 0x9, 0x4, 0x5, 0x7, 0x5, 0x8, 0x1, 0x3, 0x1586, 0x6, 0x8000000000000001, 0x100000000, 0x40004, 0x0, 0x1, 0xbce0, 0x3, 0x78, 0x6, 0x24000, 0x10, 0x7, 0x1000, 0x6, 0x100000001, 0x101, 0x80000000, 0x6, 0x0, 0x800, 0x8, 0x2, 0x3, 0x100, 0xa26, 0x3, 0x3, 0x1, 0x5d65740b, 0x2, 0xc, 0x5, 0x2, 0x8, 0x4, 0x2, 0x6, 0xfffffffffffffffa, 0x8, 0x8001, 0x6, 0x7, 0x8, 0x1, 0x9, 0x9, 0x200, 0x5, 0xff, 0x9, 0x90ca, 0x6, 0xfffffffffffffffd, 0xffffffff, 0x10001, 0x3, 0x2, 0x0, 0x5, 0x1, 0x1, 0x6eef, 0xffff, 0x0, 0x193, 0x3, 0x9, 0x3, 0x6, 0x80000000, 0x1, 0xffff, 0xc6, 0x5ab7, 0x5]}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fcdbdf251900000008000300", @ANYRES32=r3, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 282.329157ms ago: executing program 2 (id=2971): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe08", 0x5b}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83a", 0x5a}, {&(0x7f0000000800)}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b", 0x2b}], 0x1, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 0 (id=2972): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0xd9e, 0x4) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x13, 0x4) (fail_nth: 2) kernel console output (not intermixed with test programs): m tag 0x0 [ 450.336430][ T5910] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 450.355076][ T5910] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 450.382419][ T5910] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 450.432132][ T5910] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 450.493792][ T5910] usb 1-1: USB disconnect, device number 42 [ 450.574084][T13291] fido_id[13291]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 450.928696][ T5914] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 451.088815][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.107406][T13313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2493'. [ 451.114700][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.127841][ T5914] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 451.158240][T13313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2493'. [ 451.163629][ T5914] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 451.181314][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.204205][ T5914] usb 6-1: config 0 descriptor?? [ 451.213393][T13313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2493'. [ 451.239672][T13313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2493'. [ 451.257096][T13313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2493'. [ 451.276227][T13313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2493'. [ 451.310641][T13313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2493'. [ 451.363432][T13313] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 451.683480][ T5914] usbhid 6-1:0.0: can't add hid device: -71 [ 451.713887][ T5914] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 451.741348][ T5914] usb 6-1: USB disconnect, device number 39 [ 452.283951][T13352] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 452.749155][ T5910] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 452.916519][ T5910] usb 2-1: Using ep0 maxpacket: 8 [ 452.931895][ T5910] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 452.955137][ T5910] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 452.988107][ T5910] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 453.036544][ T5910] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 453.066652][ T5910] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 453.085169][ T5910] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 453.116989][ T5910] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 453.165308][ T5910] usb 2-1: config 168 interface 0 has no altsetting 0 [ 453.191605][ T5910] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 453.200911][ T5910] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 453.243321][ T5910] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 453.278961][ T5910] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 453.350685][ T5910] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 453.385334][T13390] syzkaller0: entered promiscuous mode [ 453.396067][ T5910] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 453.400077][T13390] syzkaller0: entered allmulticast mode [ 453.438848][ T5910] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 453.477529][ T5910] usb 2-1: config 168 interface 0 has no altsetting 0 [ 453.531025][ T5910] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 453.551524][ T5910] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 453.583412][ T5910] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 453.615576][ T5910] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 453.643092][ T5910] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 453.676804][ T5910] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 453.721697][ T5910] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 453.755850][ T5910] usb 2-1: config 168 interface 0 has no altsetting 0 [ 453.785258][ T5910] usb 2-1: string descriptor 0 read error: -22 [ 453.792159][ T5910] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 453.827342][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.929270][ T5910] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 454.127125][T13409] kAFS: unable to lookup cell '' [ 454.141990][ T5910] usb 2-1: USB disconnect, device number 48 [ 455.085917][ T5910] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 455.265922][ T5910] usb 2-1: Using ep0 maxpacket: 8 [ 455.274701][ T5910] usb 2-1: config 0 has no interfaces? [ 455.281010][ T5910] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 455.312411][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.339183][ T5910] usb 2-1: config 0 descriptor?? [ 455.555380][ T5910] usb 2-1: USB disconnect, device number 49 [ 456.428497][T13427] __nla_validate_parse: 32 callbacks suppressed [ 456.428517][T13427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2540'. [ 456.462076][T13427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2540'. [ 457.229830][T13405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2531'. [ 457.248541][T13405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2531'. [ 457.263682][T13405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2531'. [ 457.279686][T13405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2531'. [ 457.304858][T13405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2531'. [ 457.327199][T13405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2531'. [ 457.361753][T13405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2531'. [ 457.410551][T13405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2531'. [ 457.453418][T13405] bridge0: port 3(syz_tun) entered blocking state [ 457.460118][T13405] bridge0: port 3(syz_tun) entered forwarding state [ 457.493883][T13405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.526961][T13405] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.568564][T13405] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 457.629842][ T5821] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 457.786571][ T5821] usb 6-1: Using ep0 maxpacket: 8 [ 457.798236][ T5821] usb 6-1: config 0 has no interfaces? [ 457.805685][ T5821] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 457.829470][ T5821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.844876][ T5821] usb 6-1: config 0 descriptor?? [ 457.857611][ T797] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 458.015945][ T797] usb 3-1: Using ep0 maxpacket: 8 [ 458.023889][ T797] usb 3-1: config 0 has no interfaces? [ 458.030892][ T797] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 458.036365][T13456] syzkaller0: entered promiscuous mode [ 458.047412][T13456] syzkaller0: entered allmulticast mode [ 458.052608][ T797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.082725][ T797] usb 3-1: config 0 descriptor?? [ 458.131679][ T797] usb 6-1: USB disconnect, device number 40 [ 458.301740][ T5914] usb 3-1: USB disconnect, device number 34 [ 458.906217][ T5910] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 459.140127][ T5910] usb 2-1: Using ep0 maxpacket: 8 [ 459.147622][ T5910] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 459.156237][ T5910] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 459.171991][ T5910] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 459.184749][ T5910] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 459.198426][ T5910] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 459.210727][ T5910] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 459.222925][ T5910] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 459.237377][ T5910] usb 2-1: config 168 interface 0 has no altsetting 0 [ 459.255363][ T5910] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 459.263377][ T5910] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 459.277446][ T5910] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 459.289754][ T5910] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 459.306608][ T5910] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 459.320512][ T5910] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 459.332694][ T5910] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 459.347852][ T5910] usb 2-1: config 168 interface 0 has no altsetting 0 [ 459.363314][ T5910] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 459.371292][ T5910] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 459.384193][ T5910] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 459.396374][ T5910] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 459.410091][ T5910] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 459.422113][ T5910] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 459.434286][ T5910] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 459.452357][ T5910] usb 2-1: config 168 interface 0 has no altsetting 0 [ 459.479951][ T5910] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 459.497742][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.506902][ T5910] usb 2-1: Product: syz [ 459.511543][ T5910] usb 2-1: Manufacturer: syz [ 459.516577][ T5910] usb 2-1: SerialNumber: syz [ 459.772354][ T5910] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 459.824203][ T5910] usb 2-1: USB disconnect, device number 50 [ 459.855238][T13476] netlink: 'syz.5.2561': attribute type 14 has an invalid length. [ 461.989675][T13507] __nla_validate_parse: 11 callbacks suppressed [ 461.989695][T13507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2575'. [ 462.024235][T13507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2575'. [ 462.075960][ T54] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 462.079333][T13509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2576'. [ 462.135269][T13509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2576'. [ 462.157763][T13509] netlink: 'syz.4.2576': attribute type 14 has an invalid length. [ 462.257361][ T54] usb 6-1: Using ep0 maxpacket: 8 [ 462.275721][ T54] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 462.296513][ T54] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 462.357174][ T54] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 462.359818][T13523] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.2582'. [ 462.394846][ T54] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 462.408505][T13523] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 462.418209][T13523] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 462.426744][ T54] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 462.465999][ T54] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 462.491734][ T54] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 462.514782][ T54] usb 6-1: config 168 interface 0 has no altsetting 0 [ 462.524801][ T54] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 462.534111][ T54] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 462.546536][ T54] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 462.559323][ T54] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 462.572577][ T54] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 462.584645][ T54] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 462.608907][ T54] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 462.623655][ T54] usb 6-1: config 168 interface 0 has no altsetting 0 [ 462.632737][ T54] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 462.642291][T13536] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2588'. [ 462.652041][ T54] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 462.664162][ T54] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 462.676180][ T54] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 462.689161][ T54] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 462.700930][ T54] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 462.713390][ T54] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 462.727634][ T54] usb 6-1: config 168 interface 0 has no altsetting 0 [ 462.737466][ T54] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 462.747108][ T54] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.755540][ T54] usb 6-1: Product: syz [ 462.760210][ T54] usb 6-1: Manufacturer: syz [ 462.765013][ T54] usb 6-1: SerialNumber: syz [ 463.010431][T13544] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2592'. [ 463.013244][ T54] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 463.056265][T13544] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2592'. [ 463.087602][ T54] usb 6-1: USB disconnect, device number 41 [ 463.148948][T13549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2593'. [ 463.167005][T13549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2593'. [ 463.192177][T13549] netlink: 'syz.1.2593': attribute type 14 has an invalid length. [ 463.270900][T13553] netlink: 'syz.0.2596': attribute type 24 has an invalid length. [ 463.280700][T13553] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 463.449469][T13565] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 463.588096][T13572] FAULT_INJECTION: forcing a failure. [ 463.588096][T13572] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 463.631731][T13572] CPU: 0 UID: 0 PID: 13572 Comm: syz.5.2602 Not tainted syzkaller #0 PREEMPT(full) [ 463.631756][T13572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 463.631772][T13572] Call Trace: [ 463.631780][T13572] [ 463.631787][T13572] dump_stack_lvl+0xe8/0x150 [ 463.631827][T13572] should_fail_ex+0x412/0x560 [ 463.631855][T13572] _copy_from_user+0x2d/0xb0 [ 463.631872][T13572] ___sys_sendmsg+0x1c6/0x360 [ 463.631896][T13572] ? __lock_acquire+0x6b5/0x2cf0 [ 463.631919][T13572] ? __pfx____sys_sendmsg+0x10/0x10 [ 463.631972][T13572] ? __fget_files+0x2a/0x420 [ 463.631991][T13572] ? __fget_files+0x3a0/0x420 [ 463.632016][T13572] __x64_sys_sendmsg+0x1bd/0x2a0 [ 463.632042][T13572] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 463.632071][T13572] ? rcu_is_watching+0x15/0xb0 [ 463.632100][T13572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.632119][T13572] do_syscall_64+0x15f/0xf80 [ 463.632139][T13572] ? trace_irq_disable+0x3b/0x140 [ 463.632157][T13572] ? clear_bhb_loop+0x40/0x90 [ 463.632176][T13572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.632198][T13572] RIP: 0033:0x7fc05e59c819 [ 463.632218][T13572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.632231][T13572] RSP: 002b:00007fc05f3f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.632250][T13572] RAX: ffffffffffffffda RBX: 00007fc05e815fa0 RCX: 00007fc05e59c819 [ 463.632263][T13572] RDX: 0000000000000041 RSI: 0000200000001600 RDI: 0000000000000004 [ 463.632274][T13572] RBP: 00007fc05f3f7090 R08: 0000000000000000 R09: 0000000000000000 [ 463.632285][T13572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.632295][T13572] R13: 00007fc05e816038 R14: 00007fc05e815fa0 R15: 00007fc05e93fa48 [ 463.632322][T13572] [ 464.519134][T13590] netlink: 'syz.2.2609': attribute type 24 has an invalid length. [ 464.550597][T13590] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 464.603943][T13593] sg_write: data in/out 393432/56 bytes for SCSI command 0x0-- guessing data in; [ 464.603943][T13593] program syz.1.2610 not setting count and/or reply_len properly [ 465.144534][T13609] FAULT_INJECTION: forcing a failure. [ 465.144534][T13609] name failslab, interval 1, probability 0, space 0, times 1 [ 465.166143][T13609] CPU: 0 UID: 0 PID: 13609 Comm: syz.0.2618 Not tainted syzkaller #0 PREEMPT(full) [ 465.166168][T13609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 465.166178][T13609] Call Trace: [ 465.166185][T13609] [ 465.166192][T13609] dump_stack_lvl+0xe8/0x150 [ 465.166231][T13609] should_fail_ex+0x412/0x560 [ 465.166260][T13609] should_failslab+0xa8/0x100 [ 465.166278][T13609] __kmalloc_noprof+0xe8/0x760 [ 465.166303][T13609] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 465.166333][T13609] tomoyo_realpath_from_path+0xe3/0x5d0 [ 465.166358][T13609] ? tomoyo_domain+0xd7/0x130 [ 465.166387][T13609] ? tomoyo_path_number_perm+0x219/0x630 [ 465.166407][T13609] tomoyo_path_number_perm+0x246/0x630 [ 465.166438][T13609] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 465.166458][T13609] ? __lock_acquire+0x6b5/0x2cf0 [ 465.166495][T13609] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 465.166536][T13609] ? __fget_files+0x2a/0x420 [ 465.166561][T13609] ? __fget_files+0x2a/0x420 [ 465.166580][T13609] ? __fget_files+0x3a0/0x420 [ 465.166600][T13609] ? __fget_files+0x2a/0x420 [ 465.166621][T13609] security_file_ioctl+0xc3/0x2a0 [ 465.166642][T13609] __se_sys_ioctl+0x47/0x170 [ 465.166658][T13609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.166676][T13609] do_syscall_64+0x15f/0xf80 [ 465.166695][T13609] ? trace_irq_disable+0x3b/0x140 [ 465.166712][T13609] ? clear_bhb_loop+0x40/0x90 [ 465.166731][T13609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.166745][T13609] RIP: 0033:0x7fafd5d9c819 [ 465.166759][T13609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.166772][T13609] RSP: 002b:00007fafd6c3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 465.166790][T13609] RAX: ffffffffffffffda RBX: 00007fafd6015fa0 RCX: 00007fafd5d9c819 [ 465.166801][T13609] RDX: 0000200000000080 RSI: 00000000c0285628 RDI: 0000000000000003 [ 465.166810][T13609] RBP: 00007fafd6c3a090 R08: 0000000000000000 R09: 0000000000000000 [ 465.166820][T13609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.166829][T13609] R13: 00007fafd6016038 R14: 00007fafd6015fa0 R15: 00007fafd613fa48 [ 465.166854][T13609] [ 465.168531][T13609] ERROR: Out of memory at tomoyo_realpath_from_path. [ 465.456426][ T54] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 465.636035][ T54] usb 5-1: Using ep0 maxpacket: 8 [ 465.644997][ T54] usb 5-1: unable to get BOS descriptor or descriptor too short [ 465.672874][ T54] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 465.702132][ T54] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 465.727092][ T54] usb 5-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 465.738299][ T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.746947][ T54] usb 5-1: Product: syz [ 465.751789][ T54] usb 5-1: Manufacturer: syz [ 465.756870][ T54] usb 5-1: SerialNumber: syz [ 465.773055][T13628] fuse: Bad value for 'rootmode' [ 465.990755][ T54] usb 5-1: failed waiting for Axe-Fx III to boot: -71 [ 466.009979][ T54] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 466.042577][ T54] usb 5-1: USB disconnect, device number 53 [ 466.766163][T13656] fuse: Bad value for 'fd' [ 466.788481][T13664] fuse: Bad value for 'fd' [ 467.314533][T13688] __nla_validate_parse: 26 callbacks suppressed [ 467.314559][T13688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2632'. [ 467.505634][T13688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2632'. [ 467.582182][T13688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2632'. [ 467.631843][T13688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2632'. [ 467.659882][T13688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2632'. [ 467.671228][T13688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2632'. [ 467.691551][T13688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2632'. [ 467.726427][T13688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2632'. [ 467.740450][T13688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2632'. [ 467.754211][T13688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2632'. [ 467.781877][T13688] bridge0: port 3(syz_tun) entered blocking state [ 467.788868][T13688] bridge0: port 3(syz_tun) entered forwarding state [ 467.805080][T13688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.817406][T13688] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.833951][T13688] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 468.058177][T13701] syzkaller0: entered promiscuous mode [ 468.075149][T13701] syzkaller0: entered allmulticast mode [ 468.267356][T13711] FAULT_INJECTION: forcing a failure. [ 468.267356][T13711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 468.292152][T13711] CPU: 0 UID: 0 PID: 13711 Comm: syz.0.2638 Not tainted syzkaller #0 PREEMPT(full) [ 468.292186][T13711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 468.292196][T13711] Call Trace: [ 468.292204][T13711] [ 468.292211][T13711] dump_stack_lvl+0xe8/0x150 [ 468.292239][T13711] should_fail_ex+0x412/0x560 [ 468.292266][T13711] _copy_from_user+0x2d/0xb0 [ 468.292282][T13711] __sys_bpf+0x229/0x950 [ 468.292301][T13711] ? __pfx___sys_bpf+0x10/0x10 [ 468.292327][T13711] ? ksys_write+0x242/0x270 [ 468.292348][T13711] ? __pfx_ksys_write+0x10/0x10 [ 468.292376][T13711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.292394][T13711] __x64_sys_bpf+0x7c/0x90 [ 468.292409][T13711] do_syscall_64+0x15f/0xf80 [ 468.292428][T13711] ? trace_irq_disable+0x3b/0x140 [ 468.292446][T13711] ? clear_bhb_loop+0x40/0x90 [ 468.292461][T13711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.292473][T13711] RIP: 0033:0x7fafd5d9c819 [ 468.292487][T13711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.292498][T13711] RSP: 002b:00007fafd6c3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 468.292513][T13711] RAX: ffffffffffffffda RBX: 00007fafd6015fa0 RCX: 00007fafd5d9c819 [ 468.292523][T13711] RDX: 000000000000001c RSI: 00002000000005c0 RDI: 0000000000000002 [ 468.292531][T13711] RBP: 00007fafd6c3a090 R08: 0000000000000000 R09: 0000000000000000 [ 468.292539][T13711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.292547][T13711] R13: 00007fafd6016038 R14: 00007fafd6015fa0 R15: 00007fafd613fa48 [ 468.292567][T13711] [ 468.786159][ T5910] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 468.940183][ T5910] usb 5-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 468.965914][ T5910] usb 5-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 468.980454][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.012660][ T5910] usb 5-1: Product: syz [ 469.035836][ T5910] usb 5-1: Manufacturer: syz [ 469.050780][ T5910] usb 5-1: SerialNumber: syz [ 469.284609][ T5910] gspca_main: pac207-2.14.0 probing 093a:2476 [ 469.295107][ T5910] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 469.332724][ T5910] usb 5-1: USB disconnect, device number 54 [ 470.895846][ T5914] usb 5-1: new low-speed USB device number 55 using dummy_hcd [ 471.048031][ T5914] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 471.056943][ T5914] usb 5-1: config 0 has no interface number 0 [ 471.063295][ T5914] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 471.074789][ T5914] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 471.086265][ T5914] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 471.095650][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.116402][ T5914] usb 5-1: config 0 descriptor?? [ 471.128226][T13724] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 471.176712][ T5914] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 473.005611][T13731] fuse: Bad value for 'fd' [ 473.119801][ T54] usb 5-1: USB disconnect, device number 55 [ 473.256219][T13749] __nla_validate_parse: 7 callbacks suppressed [ 473.256287][T13749] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2650'. [ 473.275162][T13749] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2650'. [ 473.469682][T13755] FAULT_INJECTION: forcing a failure. [ 473.469682][T13755] name failslab, interval 1, probability 0, space 0, times 0 [ 473.483270][T13755] CPU: 1 UID: 0 PID: 13755 Comm: syz.5.2652 Not tainted syzkaller #0 PREEMPT(full) [ 473.483295][T13755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 473.483307][T13755] Call Trace: [ 473.483315][T13755] [ 473.483323][T13755] dump_stack_lvl+0xe8/0x150 [ 473.483344][T13755] should_fail_ex+0x412/0x560 [ 473.483360][T13755] should_failslab+0xa8/0x100 [ 473.483372][T13755] __kmalloc_cache_noprof+0x88/0x660 [ 473.483386][T13755] ? alloc_pipe_info+0xe8/0x4d0 [ 473.483399][T13755] alloc_pipe_info+0xe8/0x4d0 [ 473.483409][T13755] splice_direct_to_actor+0xa08/0xc70 [ 473.483425][T13755] ? kstrtouint+0x6e/0xe0 [ 473.483438][T13755] ? __pfx_direct_splice_actor+0x10/0x10 [ 473.483451][T13755] ? __pfx_aa_file_perm+0x10/0x10 [ 473.483467][T13755] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 473.483484][T13755] do_splice_direct+0x195/0x290 [ 473.483498][T13755] ? __pfx_do_splice_direct+0x10/0x10 [ 473.483510][T13755] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 473.483524][T13755] ? bpf_lsm_file_permission+0x9/0x20 [ 473.483534][T13755] ? security_file_permission+0x75/0x260 [ 473.483546][T13755] ? rw_verify_area+0x255/0x4d0 [ 473.483562][T13755] do_sendfile+0x535/0x7d0 [ 473.483572][T13755] ? __pfx_vfs_write+0x10/0x10 [ 473.483588][T13755] ? __pfx_do_sendfile+0x10/0x10 [ 473.483603][T13755] ? __fget_files+0x3a0/0x420 [ 473.483629][T13755] __se_sys_sendfile64+0x144/0x1a0 [ 473.483646][T13755] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 473.483666][T13755] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.483679][T13755] do_syscall_64+0x15f/0xf80 [ 473.483697][T13755] ? clear_bhb_loop+0x40/0x90 [ 473.483713][T13755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.483728][T13755] RIP: 0033:0x7fc05e59c819 [ 473.483744][T13755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.483759][T13755] RSP: 002b:00007fc05f3d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 473.483777][T13755] RAX: ffffffffffffffda RBX: 00007fc05e816090 RCX: 00007fc05e59c819 [ 473.483789][T13755] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 473.483797][T13755] RBP: 00007fc05f3d6090 R08: 0000000000000000 R09: 0000000000000000 [ 473.483915][T13755] R10: 0000000000201f00 R11: 0000000000000246 R12: 0000000000000001 [ 473.483923][T13755] R13: 00007fc05e816128 R14: 00007fc05e816090 R15: 00007fc05e93fa48 [ 473.483941][T13755] [ 474.403173][T13771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2655'. [ 474.418421][ T54] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 474.496077][ T5914] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 474.585906][ T54] usb 3-1: device descriptor read/64, error -71 [ 474.665984][ T5914] usb 5-1: Using ep0 maxpacket: 8 [ 474.673831][T13779] kAFS: unable to lookup cell '' [ 474.681295][ T5914] usb 5-1: config 0 has no interfaces? [ 474.687782][ T5914] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 474.700269][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.719955][ T5914] usb 5-1: config 0 descriptor?? [ 474.785890][ T797] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 474.836025][ T54] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 474.936110][ T5914] usb 5-1: USB disconnect, device number 56 [ 474.947481][ T797] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 474.967334][ T797] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.978880][ T54] usb 3-1: device descriptor read/64, error -71 [ 474.995640][ T797] usb 2-1: config 0 has no interface number 0 [ 475.011988][ T797] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 475.027205][ T797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.040209][ T797] usb 2-1: Product: syz [ 475.048231][ T797] usb 2-1: Manufacturer: syz [ 475.054737][ T797] usb 2-1: SerialNumber: syz [ 475.065219][ T797] usb 2-1: config 0 descriptor?? [ 475.079884][ T797] uvcvideo 2-1:0.64: probe with driver uvcvideo failed with error -22 [ 475.098435][ T54] usb usb3-port1: attempt power cycle [ 475.257327][T13782] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2661'. [ 475.269795][T13782] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2661'. [ 475.363958][T13786] FAULT_INJECTION: forcing a failure. [ 475.363958][T13786] name failslab, interval 1, probability 0, space 0, times 0 [ 475.377290][T13786] CPU: 0 UID: 0 PID: 13786 Comm: syz.0.2663 Not tainted syzkaller #0 PREEMPT(full) [ 475.377316][T13786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 475.377327][T13786] Call Trace: [ 475.377334][T13786] [ 475.377341][T13786] dump_stack_lvl+0xe8/0x150 [ 475.377372][T13786] should_fail_ex+0x412/0x560 [ 475.377400][T13786] should_failslab+0xa8/0x100 [ 475.377420][T13786] __kmalloc_noprof+0xe8/0x760 [ 475.377453][T13786] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 475.377483][T13786] tomoyo_realpath_from_path+0xe3/0x5d0 [ 475.377540][T13786] ? tomoyo_domain+0xd7/0x130 [ 475.377574][T13786] ? tomoyo_path_number_perm+0x219/0x630 [ 475.377605][T13786] tomoyo_path_number_perm+0x246/0x630 [ 475.377637][T13786] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 475.377663][T13786] ? __lock_acquire+0x6b5/0x2cf0 [ 475.377720][T13786] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 475.377767][T13786] ? __fget_files+0x2a/0x420 [ 475.377798][T13786] ? __fget_files+0x2a/0x420 [ 475.377818][T13786] ? __fget_files+0x3a0/0x420 [ 475.377836][T13786] ? __fget_files+0x2a/0x420 [ 475.377860][T13786] security_file_ioctl+0xc3/0x2a0 [ 475.377882][T13786] __se_sys_ioctl+0x47/0x170 [ 475.377898][T13786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.377918][T13786] do_syscall_64+0x15f/0xf80 [ 475.377937][T13786] ? trace_irq_disable+0x3b/0x140 [ 475.377956][T13786] ? clear_bhb_loop+0x40/0x90 [ 475.377976][T13786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.377991][T13786] RIP: 0033:0x7fafd5d9c819 [ 475.378008][T13786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.378022][T13786] RSP: 002b:00007fafd6c3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 475.378042][T13786] RAX: ffffffffffffffda RBX: 00007fafd6015fa0 RCX: 00007fafd5d9c819 [ 475.378054][T13786] RDX: 0000200000000000 RSI: 000000008038550a RDI: 0000000000000003 [ 475.378071][T13786] RBP: 00007fafd6c3a090 R08: 0000000000000000 R09: 0000000000000000 [ 475.378081][T13786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.378092][T13786] R13: 00007fafd6016038 R14: 00007fafd6015fa0 R15: 00007fafd613fa48 [ 475.378120][T13786] [ 475.378129][T13786] ERROR: Out of memory at tomoyo_realpath_from_path. [ 475.466237][ T54] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 475.646572][ T54] usb 3-1: device descriptor read/8, error -71 [ 475.691684][T13792] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2659'. [ 475.703693][T13792] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2659'. [ 475.885922][ T54] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 475.917412][ T54] usb 3-1: device descriptor read/8, error -71 [ 476.037182][ T54] usb usb3-port1: unable to enumerate USB device [ 476.123581][T13809] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2672'. [ 476.137223][T13809] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2672'. [ 476.465905][ T54] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 476.626211][ T54] usb 1-1: Using ep0 maxpacket: 8 [ 476.638441][ T54] usb 1-1: config 0 has no interfaces? [ 476.650416][ T54] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 476.661805][ T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.681001][ T54] usb 1-1: config 0 descriptor?? [ 476.870963][T13838] fuse: Bad value for 'fd' [ 476.891442][ T54] usb 1-1: USB disconnect, device number 43 [ 476.949483][T13838] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3101303136 (3101303136 ns) > initial count (1262665829 ns). Using initial count to start timer. [ 477.202099][T13844] FAULT_INJECTION: forcing a failure. [ 477.202099][T13844] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 477.216166][T13844] CPU: 1 UID: 0 PID: 13844 Comm: syz.4.2686 Not tainted syzkaller #0 PREEMPT(full) [ 477.216191][T13844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 477.216201][T13844] Call Trace: [ 477.216209][T13844] [ 477.216216][T13844] dump_stack_lvl+0xe8/0x150 [ 477.216246][T13844] should_fail_ex+0x412/0x560 [ 477.216279][T13844] _copy_from_user+0x2d/0xb0 [ 477.216298][T13844] ___sys_recvmsg+0x175/0x590 [ 477.216314][T13844] ? get_pid_task+0x20/0x1f0 [ 477.216330][T13844] ? get_pid_task+0x20/0x1f0 [ 477.216350][T13844] ? __pfx____sys_recvmsg+0x10/0x10 [ 477.216372][T13844] ? __fget_files+0x2a/0x420 [ 477.216408][T13844] ? __fget_files+0x3a0/0x420 [ 477.216437][T13844] __x64_sys_recvmsg+0x1ba/0x2a0 [ 477.216455][T13844] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 477.216480][T13844] ? __pfx_ksys_write+0x10/0x10 [ 477.216510][T13844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.216528][T13844] do_syscall_64+0x15f/0xf80 [ 477.216554][T13844] ? trace_irq_disable+0x3b/0x140 [ 477.216570][T13844] ? clear_bhb_loop+0x40/0x90 [ 477.216588][T13844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.216603][T13844] RIP: 0033:0x7f45a3d9c819 [ 477.216617][T13844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.216629][T13844] RSP: 002b:00007f45a4cd0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 477.216645][T13844] RAX: ffffffffffffffda RBX: 00007f45a4016180 RCX: 00007f45a3d9c819 [ 477.216654][T13844] RDX: 0000000000002000 RSI: 0000200000000540 RDI: 0000000000000005 [ 477.216663][T13844] RBP: 00007f45a4cd0090 R08: 0000000000000000 R09: 0000000000000000 [ 477.216672][T13844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.216680][T13844] R13: 00007f45a4016218 R14: 00007f45a4016180 R15: 00007f45a413fa48 [ 477.216700][T13844] [ 477.563106][ T5910] usb 2-1: USB disconnect, device number 51 [ 477.646442][ T54] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 477.795996][ T54] usb 3-1: Using ep0 maxpacket: 8 [ 477.819601][ T54] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 477.832683][ T54] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.842347][ T54] usb 3-1: Product: syz [ 477.859722][ T54] usb 3-1: Manufacturer: syz [ 477.867817][ T54] usb 3-1: SerialNumber: syz [ 477.936039][ T5910] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 478.096150][ T5910] usb 2-1: Using ep0 maxpacket: 16 [ 478.115435][ T5910] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 478.142077][ T5910] usb 2-1: config 0 has no interface number 0 [ 478.184314][ T5910] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 478.198567][ T54] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 478.224832][ T5910] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 478.237457][ T54] usb 3-1: clock source 0 is not valid, cannot use [ 478.256074][ T54] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 478.268819][ T5910] usb 2-1: config 0 interface 41 has no altsetting 0 [ 478.280747][ T54] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 478.298298][ T5910] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 478.321148][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.331436][ T54] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 478.351110][ T5910] usb 2-1: Product: syz [ 478.355817][ T54] usb 3-1: clock source 0 is not valid, cannot use [ 478.365936][ T5910] usb 2-1: Manufacturer: syz [ 478.375864][ T5910] usb 2-1: SerialNumber: syz [ 478.383636][ T54] usb 3-1: 2:1: cannot get freq (v2/v3): err -71 [ 478.399182][ T54] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 478.408546][ T5910] usb 2-1: config 0 descriptor?? [ 478.425630][T13846] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 478.443499][T13846] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 478.588870][T13867] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2695'. [ 478.705597][T13846] loop5: detected capacity change from 0 to 7 [ 478.737397][T13846] Dev loop5: unable to read RDB block 7 [ 478.751880][T13846] loop5: unable to read partition table [ 478.761650][T13846] loop5: partition table beyond EOD, truncated [ 478.772240][T13846] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 478.840198][ T5910] sr9700 2-1:0.41: probe with driver sr9700 failed with error -71 [ 478.904990][ T5910] usb 2-1: USB disconnect, device number 52 [ 478.987319][ T54] usb 3-1: USB disconnect, device number 39 [ 479.065925][ T5821] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 479.133643][ T7635] udevd[7635]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 479.232583][T13878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2700'. [ 479.268914][ T5821] usb 5-1: Using ep0 maxpacket: 32 [ 479.280255][ T5821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.292225][ T5821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.319643][ T5821] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 479.331555][ T5821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.362793][ T5821] usb 5-1: config 0 descriptor?? [ 479.381171][ T5821] hub 5-1:0.0: USB hub found [ 479.575261][ T5821] hub 5-1:0.0: 1 port detected [ 479.626676][T13889] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2705'. [ 479.640904][T13889] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2705'. [ 479.746949][ T54] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 479.929445][ T54] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 479.941540][ T54] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 479.954878][ T54] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 479.967234][ T54] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64 [ 479.979567][ T54] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 480.004562][ T54] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 480.014352][ T54] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.030185][ T54] usb 3-1: Product: syz [ 480.043865][ T54] usb 3-1: Manufacturer: syz [ 480.073476][ T54] usb 3-1: SerialNumber: syz [ 480.091905][ T54] usb 3-1: config 0 descriptor?? [ 480.104157][T13878] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 480.128927][ T54] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input25 [ 480.777839][ T5914] hub 5-1:0.0: activate --> -90 [ 480.834972][ T54] usb 3-1: USB disconnect, device number 40 [ 481.018850][ T5914] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 481.038218][ T5821] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 481.054172][T13682] usb 5-1: Failed to suspend device, error -71 [ 481.067038][ T24] usb 5-1: USB disconnect, device number 57 [ 481.115986][ T5910] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 481.217762][ T5821] usb 1-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 481.239670][ T5821] usb 1-1: config 0 interface 0 has no altsetting 0 [ 481.251119][ T5821] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 481.261217][ T5821] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 481.270283][ T5821] usb 1-1: Product: syz [ 481.275964][ T5821] usb 1-1: Manufacturer: syz [ 481.281064][ T5821] usb 1-1: SerialNumber: syz [ 481.287157][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.290816][ T5821] usb 1-1: config 0 descriptor?? [ 481.315733][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.316476][T13914] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 481.347433][ T5910] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 481.357914][ T5821] usb 1-1: selecting invalid altsetting 0 [ 481.367929][ T5910] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 481.396668][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.426617][T13919] FAULT_INJECTION: forcing a failure. [ 481.426617][T13919] name failslab, interval 1, probability 0, space 0, times 0 [ 481.442056][ T5910] usb 2-1: config 0 descriptor?? [ 481.442060][T13919] CPU: 0 UID: 0 PID: 13919 Comm: syz.5.2714 Not tainted syzkaller #0 PREEMPT(full) [ 481.442081][T13919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 481.442091][T13919] Call Trace: [ 481.442098][T13919] [ 481.442104][T13919] dump_stack_lvl+0xe8/0x150 [ 481.442131][T13919] should_fail_ex+0x412/0x560 [ 481.442157][T13919] should_failslab+0xa8/0x100 [ 481.442179][T13919] __kmalloc_noprof+0xe8/0x760 [ 481.442203][T13919] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 481.442232][T13919] tomoyo_realpath_from_path+0xe3/0x5d0 [ 481.442253][T13919] ? tomoyo_domain+0xd7/0x130 [ 481.442280][T13919] ? tomoyo_path_number_perm+0x219/0x630 [ 481.442300][T13919] tomoyo_path_number_perm+0x246/0x630 [ 481.442323][T13919] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 481.442341][T13919] ? __lock_acquire+0x6b5/0x2cf0 [ 481.442375][T13919] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 481.442414][T13919] ? __fget_files+0x2a/0x420 [ 481.442437][T13919] ? __fget_files+0x2a/0x420 [ 481.442455][T13919] ? __fget_files+0x3a0/0x420 [ 481.442474][T13919] ? __fget_files+0x2a/0x420 [ 481.442497][T13919] security_file_ioctl+0xc3/0x2a0 [ 481.442518][T13919] __se_sys_ioctl+0x47/0x170 [ 481.442532][T13919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.442551][T13919] do_syscall_64+0x15f/0xf80 [ 481.442568][T13919] ? trace_irq_disable+0x3b/0x140 [ 481.442585][T13919] ? clear_bhb_loop+0x40/0x90 [ 481.442605][T13919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.442622][T13919] RIP: 0033:0x7fc05e59c819 [ 481.442641][T13919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.442655][T13919] RSP: 002b:00007fc05f3f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 481.442673][T13919] RAX: ffffffffffffffda RBX: 00007fc05e815fa0 RCX: 00007fc05e59c819 [ 481.442685][T13919] RDX: 0000200000000000 RSI: 0000000000005411 RDI: 0000000000000003 [ 481.442695][T13919] RBP: 00007fc05f3f7090 R08: 0000000000000000 R09: 0000000000000000 [ 481.442706][T13919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.442716][T13919] R13: 00007fc05e816038 R14: 00007fc05e815fa0 R15: 00007fc05e93fa48 [ 481.442743][T13919] [ 481.442751][T13919] ERROR: Out of memory at tomoyo_realpath_from_path. [ 481.672321][T13923] xt_TCPMSS: Only works on TCP SYN packets [ 481.894266][ T5910] usbhid 2-1:0.0: can't add hid device: -71 [ 481.901469][ T5910] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 481.947857][ T5910] usb 2-1: USB disconnect, device number 53 [ 481.985870][ T24] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 482.125944][ T54] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 482.142560][T13923] sit1: entered allmulticast mode [ 482.147892][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 482.158173][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 482.178384][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 482.207880][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 482.226185][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.245369][ T24] usb 3-1: Product: syz [ 482.256301][ T24] usb 3-1: Manufacturer: syz [ 482.266041][ T24] usb 3-1: SerialNumber: syz [ 482.283344][ T24] usb 3-1: config 0 descriptor?? [ 482.295247][ T54] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 482.311094][ T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.327220][ T54] usb 5-1: Product: syz [ 482.335871][ T54] usb 5-1: Manufacturer: syz [ 482.344322][ T24] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 482.357128][ T54] usb 5-1: SerialNumber: syz [ 482.373083][ T24] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 482.385228][ T54] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 482.518155][ T5910] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 482.717776][T13925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.746376][T13925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.759928][T13925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.794598][T13925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.963063][T13929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.000667][T13929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.050295][ T24] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 483.061562][T13929] IPVS: set_ctl: invalid protocol: 50 172.20.20.58:20004 [ 483.071811][ T24] em28xx 3-1:0.0: Config register raw data: 0x41 [ 483.160709][T13942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2723'. [ 483.238254][ T5821] usb 5-1: USB disconnect, device number 58 [ 483.569352][ T5910] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 483.598106][ T5910] ath9k_htc: Failed to initialize the device [ 483.619368][ T5821] usb 5-1: ath9k_htc: USB layer deinitialized [ 483.786587][T13960] sg_write: process 1521 (syz.1.2730) changed security contexts after opening file descriptor, this is not allowed. [ 483.943436][T13963] loop2: detected capacity change from 0 to 7 [ 483.967622][T13963] loop2: [ 483.975170][T13963] loop2: partition table partially beyond EOD, truncated [ 484.199068][ T5910] usb 1-1: USB disconnect, device number 44 [ 484.301837][T13977] FAULT_INJECTION: forcing a failure. [ 484.301837][T13977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 484.357335][T13977] CPU: 1 UID: 0 PID: 13977 Comm: syz.4.2736 Not tainted syzkaller #0 PREEMPT(full) [ 484.357361][T13977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 484.357372][T13977] Call Trace: [ 484.357380][T13977] [ 484.357387][T13977] dump_stack_lvl+0xe8/0x150 [ 484.357417][T13977] should_fail_ex+0x412/0x560 [ 484.357445][T13977] _copy_from_user+0x2d/0xb0 [ 484.357465][T13977] ___sys_sendmsg+0x1c6/0x360 [ 484.357490][T13977] ? __lock_acquire+0x6b5/0x2cf0 [ 484.357516][T13977] ? __pfx____sys_sendmsg+0x10/0x10 [ 484.357571][T13977] ? __fget_files+0x2a/0x420 [ 484.357591][T13977] ? __fget_files+0x3a0/0x420 [ 484.357629][T13977] __x64_sys_sendmsg+0x1bd/0x2a0 [ 484.357656][T13977] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 484.357690][T13977] ? __pfx_ksys_write+0x10/0x10 [ 484.357720][T13977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.357739][T13977] do_syscall_64+0x15f/0xf80 [ 484.357760][T13977] ? trace_irq_disable+0x3b/0x140 [ 484.357778][T13977] ? clear_bhb_loop+0x40/0x90 [ 484.357796][T13977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.357810][T13977] RIP: 0033:0x7f45a3d9c819 [ 484.357825][T13977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.357839][T13977] RSP: 002b:00007f45a4d12028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 484.357859][T13977] RAX: ffffffffffffffda RBX: 00007f45a4015fa0 RCX: 00007f45a3d9c819 [ 484.357871][T13977] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 484.357882][T13977] RBP: 00007f45a4d12090 R08: 0000000000000000 R09: 0000000000000000 [ 484.357893][T13977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.357903][T13977] R13: 00007f45a4016038 R14: 00007f45a4015fa0 R15: 00007f45a413fa48 [ 484.357927][T13977] [ 484.823773][T13991] veth1_to_bond: entered allmulticast mode [ 484.830716][T13992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2739'. [ 484.850692][T13991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2739'. [ 484.862367][T13992] veth1_to_bond (unregistering): left allmulticast mode [ 484.960192][T13992] bond0: (slave bond_slave_1): Releasing backup interface [ 484.980851][T13992] bond_slave_1 (unregistering): left promiscuous mode [ 485.049810][T14001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2741'. [ 485.078321][T14001] bridge0: entered promiscuous mode [ 485.098927][T14001] macsec1: entered promiscuous mode [ 485.113976][T14001] bridge0: port 4(macsec1) entered blocking state [ 485.131901][T14001] bridge0: port 4(macsec1) entered disabled state [ 485.138985][T14001] macsec1: entered allmulticast mode [ 485.144434][T14001] bridge0: entered allmulticast mode [ 485.152204][T14001] macsec1: left allmulticast mode [ 485.159299][T14001] bridge0: left allmulticast mode [ 485.165448][T14001] bridge0: left promiscuous mode [ 485.271170][T14010] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2745'. [ 485.281164][T14010] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2745'. [ 485.291356][T14010] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2745'. [ 485.353904][T14014] FAULT_INJECTION: forcing a failure. [ 485.353904][T14014] name failslab, interval 1, probability 0, space 0, times 0 [ 485.367641][T14014] CPU: 0 UID: 0 PID: 14014 Comm: syz.5.2746 Not tainted syzkaller #0 PREEMPT(full) [ 485.367665][T14014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 485.367676][T14014] Call Trace: [ 485.367684][T14014] [ 485.367692][T14014] dump_stack_lvl+0xe8/0x150 [ 485.367724][T14014] should_fail_ex+0x412/0x560 [ 485.367755][T14014] should_failslab+0xa8/0x100 [ 485.367775][T14014] __kmalloc_cache_noprof+0x88/0x660 [ 485.367801][T14014] ? trace_contention_end+0x3d/0x140 [ 485.367821][T14014] ? __vb2_init_fileio+0x1e8/0xff0 [ 485.367846][T14014] __vb2_init_fileio+0x1e8/0xff0 [ 485.367866][T14014] ? __lock_acquire+0x6b5/0x2cf0 [ 485.367893][T14014] ? _parse_integer_limit+0x1ae/0x1f0 [ 485.367916][T14014] ? vb2_fop_read+0x101/0x360 [ 485.367933][T14014] ? __pfx_aa_file_perm+0x10/0x10 [ 485.367961][T14014] __vb2_perform_fileio+0x282/0x1620 [ 485.367990][T14014] ? __asan_memset+0x22/0x50 [ 485.368017][T14014] vb2_fop_read+0x273/0x360 [ 485.368041][T14014] v4l2_read+0x19c/0x2c0 [ 485.368065][T14014] vfs_readv+0x587/0x840 [ 485.368088][T14014] ? __pfx_v4l2_read+0x10/0x10 [ 485.368110][T14014] ? __pfx_vfs_readv+0x10/0x10 [ 485.368142][T14014] ? __fget_files+0x2a/0x420 [ 485.368167][T14014] ? __fget_files+0x3a0/0x420 [ 485.368187][T14014] ? __fget_files+0x2a/0x420 [ 485.368215][T14014] __x64_sys_preadv+0x19f/0x2a0 [ 485.368235][T14014] ? __pfx___x64_sys_preadv+0x10/0x10 [ 485.368258][T14014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.368277][T14014] do_syscall_64+0x15f/0xf80 [ 485.368317][T14014] ? trace_irq_disable+0x3b/0x140 [ 485.368336][T14014] ? clear_bhb_loop+0x40/0x90 [ 485.368358][T14014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.368376][T14014] RIP: 0033:0x7fc05e59c819 [ 485.368392][T14014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.368407][T14014] RSP: 002b:00007fc05f3f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 485.368427][T14014] RAX: ffffffffffffffda RBX: 00007fc05e815fa0 RCX: 00007fc05e59c819 [ 485.368441][T14014] RDX: 0000000000000001 RSI: 0000200000003640 RDI: 0000000000000003 [ 485.368452][T14014] RBP: 00007fc05f3f7090 R08: 0000000000000004 R09: 0000000000000000 [ 485.368462][T14014] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 485.368473][T14014] R13: 00007fc05e816038 R14: 00007fc05e815fa0 R15: 00007fc05e93fa48 [ 485.368500][T14014] [ 485.823449][ T24] usb 3-1: USB disconnect, device number 41 [ 485.833259][T14027] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 485.868124][ T24] em28xx 3-1:0.0: Disconnecting em28xx [ 485.995369][ T24] em28xx 3-1:0.0: Freeing device [ 486.625897][ T5914] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 486.798483][ T5914] usb 2-1: Using ep0 maxpacket: 32 [ 486.811560][ T5914] usb 2-1: config 250 has an invalid interface number: 230 but max is 0 [ 486.828223][ T5914] usb 2-1: config 250 has no interface number 0 [ 486.840997][ T5914] usb 2-1: config 250 interface 230 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 486.856202][ T5914] usb 2-1: config 250 interface 230 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 486.866764][ T5914] usb 2-1: config 250 interface 230 has no altsetting 0 [ 486.883118][ T5914] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 486.893245][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.903492][ T5914] usb 2-1: Product: syz [ 486.910237][ T5914] usb 2-1: Manufacturer: syz [ 486.917240][ T5914] usb 2-1: SerialNumber: syz [ 487.155248][T14061] fuse: Unknown parameter 'user_id00000000000000000000' [ 487.280667][T14069] kAFS: unable to lookup cell '' [ 487.308255][T14070] netlink: 'syz.0.2767': attribute type 21 has an invalid length. [ 487.320748][T14070] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2767'. [ 487.337197][T14070] netlink: 'syz.0.2767': attribute type 4 has an invalid length. [ 487.345350][T14070] netlink: 'syz.0.2767': attribute type 5 has an invalid length. [ 487.353421][T14070] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2767'. [ 487.947287][ T5821] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 488.120434][ T5821] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 488.145727][ T5821] usb 1-1: config 0 has no interface number 0 [ 488.164598][ T5821] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 488.197551][ T5821] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 488.215099][ T5821] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 488.240112][ T5821] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 488.290950][ T5821] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 488.314301][ T5821] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 488.325739][ T5821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.342061][ T5821] usb 1-1: config 0 descriptor?? [ 488.354541][T14084] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 488.374910][ T5821] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 488.404226][T14103] fuse: Bad value for 'fd' [ 488.602268][T14084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.620106][T14084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.630847][ T5821] usb 1-1: USB disconnect, device number 45 [ 488.653185][ T5821] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 489.324480][T14118] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.2786'. [ 489.394671][T14119] fuse: Unknown parameter 'user_id00000000000000000000' [ 489.461821][ T5914] ums-usbat 2-1:250.230: USB Mass Storage device detected [ 489.530736][ T5914] ums-usbat 2-1:250.230: Quirks match for vid 0781 pid 0005: 1 [ 489.562491][T14129] FAULT_INJECTION: forcing a failure. [ 489.562491][T14129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.598052][T14129] CPU: 0 UID: 0 PID: 14129 Comm: syz.0.2790 Not tainted syzkaller #0 PREEMPT(full) [ 489.598085][T14129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 489.598094][T14129] Call Trace: [ 489.598102][T14129] [ 489.598110][T14129] dump_stack_lvl+0xe8/0x150 [ 489.598139][T14129] should_fail_ex+0x412/0x560 [ 489.598168][T14129] _copy_from_iter+0x1d3/0x1670 [ 489.598197][T14129] ? __lock_acquire+0x6b5/0x2cf0 [ 489.598220][T14129] ? __pfx__copy_from_iter+0x10/0x10 [ 489.598247][T14129] ? __lock_acquire+0x6b5/0x2cf0 [ 489.598272][T14129] tun_get_user+0x275/0x3ed0 [ 489.598304][T14129] ? aa_file_perm+0x192/0x15e0 [ 489.598330][T14129] ? aa_file_perm+0x50e/0x15e0 [ 489.598359][T14129] ? __pfx_tun_get_user+0x10/0x10 [ 489.598380][T14129] ? __lock_acquire+0x6b5/0x2cf0 [ 489.598404][T14129] ? kstrtoull+0x12f/0x1d0 [ 489.598432][T14129] ? ref_tracker_alloc+0x35c/0x4c0 [ 489.598458][T14129] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 489.598482][T14129] ? tun_get+0x1c/0x2f0 [ 489.598501][T14129] ? tun_get+0x1c/0x2f0 [ 489.598522][T14129] ? tun_get+0x1c/0x2f0 [ 489.598539][T14129] ? tun_get+0x1c/0x2f0 [ 489.598561][T14129] tun_chr_write_iter+0x113/0x200 [ 489.598583][T14129] vfs_write+0x61d/0xb90 [ 489.598615][T14129] ? __pfx_vfs_write+0x10/0x10 [ 489.598648][T14129] ? __fget_files+0x2a/0x420 [ 489.598677][T14129] ksys_write+0x150/0x270 [ 489.598703][T14129] ? __pfx_ksys_write+0x10/0x10 [ 489.598734][T14129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.598753][T14129] do_syscall_64+0x15f/0xf80 [ 489.598774][T14129] ? trace_irq_disable+0x3b/0x140 [ 489.598793][T14129] ? clear_bhb_loop+0x40/0x90 [ 489.598814][T14129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.598832][T14129] RIP: 0033:0x7fafd5d9c819 [ 489.598849][T14129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.598864][T14129] RSP: 002b:00007fafd6c3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 489.598884][T14129] RAX: ffffffffffffffda RBX: 00007fafd6015fa0 RCX: 00007fafd5d9c819 [ 489.598897][T14129] RDX: 000000000000002a RSI: 0000200000000300 RDI: 0000000000000003 [ 489.598908][T14129] RBP: 00007fafd6c3a090 R08: 0000000000000000 R09: 0000000000000000 [ 489.598919][T14129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.598929][T14129] R13: 00007fafd6016038 R14: 00007fafd6015fa0 R15: 00007fafd613fa48 [ 489.598957][T14129] [ 489.917740][ T5914] ums-usbat 2-1:250.230: probe with driver ums-usbat failed with error -5 [ 489.932356][ T5914] usb 2-1: USB disconnect, device number 54 [ 490.269845][T14154] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2800'. [ 490.299564][T14155] Failed to get privilege flags for destination (handle=0x2:0x400) [ 490.333156][T14155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2799'. [ 490.347742][T14155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2799'. [ 490.496007][ T24] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 490.542141][T14162] FAULT_INJECTION: forcing a failure. [ 490.542141][T14162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.559783][T14162] CPU: 1 UID: 0 PID: 14162 Comm: syz.0.2803 Not tainted syzkaller #0 PREEMPT(full) [ 490.559809][T14162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 490.559820][T14162] Call Trace: [ 490.559827][T14162] [ 490.559835][T14162] dump_stack_lvl+0xe8/0x150 [ 490.559865][T14162] should_fail_ex+0x412/0x560 [ 490.559893][T14162] _copy_from_user+0x2d/0xb0 [ 490.559913][T14162] ___sys_sendmsg+0x1c6/0x360 [ 490.559936][T14162] ? __lock_acquire+0x6b5/0x2cf0 [ 490.559962][T14162] ? __pfx____sys_sendmsg+0x10/0x10 [ 490.560017][T14162] ? __fget_files+0x2a/0x420 [ 490.560037][T14162] ? __fget_files+0x3a0/0x420 [ 490.560066][T14162] __x64_sys_sendmsg+0x1bd/0x2a0 [ 490.560092][T14162] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 490.560123][T14162] ? __pfx_ksys_write+0x10/0x10 [ 490.560154][T14162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.560172][T14162] do_syscall_64+0x15f/0xf80 [ 490.560199][T14162] ? trace_irq_disable+0x3b/0x140 [ 490.560217][T14162] ? clear_bhb_loop+0x40/0x90 [ 490.560234][T14162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.560247][T14162] RIP: 0033:0x7fafd5d9c819 [ 490.560260][T14162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.560271][T14162] RSP: 002b:00007fafd6c3a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.560286][T14162] RAX: ffffffffffffffda RBX: 00007fafd6015fa0 RCX: 00007fafd5d9c819 [ 490.560295][T14162] RDX: 0000000000048804 RSI: 00002000000042c0 RDI: 0000000000000004 [ 490.560304][T14162] RBP: 00007fafd6c3a090 R08: 0000000000000000 R09: 0000000000000000 [ 490.560311][T14162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.560319][T14162] R13: 00007fafd6016038 R14: 00007fafd6015fa0 R15: 00007fafd613fa48 [ 490.560339][T14162] [ 490.636322][T14165] netlink: 'syz.2.2804': attribute type 25 has an invalid length. [ 490.745934][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 490.778065][ T24] usb 6-1: config 0 has no interfaces? [ 490.784386][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 490.794708][T14165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2804'. [ 490.820002][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.832749][T14165] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 490.841285][T14148] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 490.870526][ T24] usb 6-1: config 0 descriptor?? [ 491.107316][ T5914] usb 6-1: USB disconnect, device number 42 [ 491.319186][T14182] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2811'. [ 491.362333][T14183] kAFS: unable to lookup cell '' [ 491.461604][T14189] bond9 (unregistering): Released all slaves [ 491.636618][ T24] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 491.827625][ T24] usb 2-1: config index 0 descriptor too short (expected 17188, got 36) [ 491.850298][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.871792][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.907355][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 491.938377][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 491.950605][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.963425][ T24] usb 2-1: config 0 descriptor?? [ 492.377283][ T54] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 492.454997][T14211] tipc: Started in network mode [ 492.484053][T14211] tipc: Node identity 5ea8cbf79f14, cluster identity 4711 [ 492.532196][T14211] tipc: Enabled bearer , priority 0 [ 492.545087][T14213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.585559][ T54] usb 6-1: Using ep0 maxpacket: 32 [ 492.609182][T14216] syzkaller0: entered promiscuous mode [ 492.626574][T14216] syzkaller0: entered allmulticast mode [ 492.644028][T14213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.678721][ T24] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 492.715897][T14211] tipc: Resetting bearer [ 492.723088][ T54] usb 6-1: config 0 has no interfaces? [ 492.730543][ T24] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 492.749741][ T54] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 492.762814][ T24] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 492.772515][ T54] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.781358][ T24] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 492.789439][ T54] usb 6-1: Product: syz [ 492.797641][ T54] usb 6-1: Manufacturer: syz [ 492.803598][ T24] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 492.811874][ T54] usb 6-1: SerialNumber: syz [ 492.817307][ T24] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 492.840494][ T54] usb 6-1: config 0 descriptor?? [ 492.846377][ T24] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 492.857349][ T24] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 492.866469][T14211] tipc: Disabling bearer [ 492.874268][ T24] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 492.915023][ T24] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 492.983071][ T24] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 494.503644][ T24] usb 2-1: USB disconnect, device number 55 [ 495.630112][ T24] usb 6-1: USB disconnect, device number 43 [ 501.569846][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.576664][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.008417][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.014875][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.458103][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.464797][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 644.614764][T14238] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2827'. [ 644.740497][T14244] [U]  [ 644.885901][ T24] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 645.065816][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 645.079746][ T24] usb 5-1: config 0 has no interfaces? [ 645.108446][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 645.120044][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.158036][ T24] usb 5-1: config 0 descriptor?? [ 645.231305][T14277] FAULT_INJECTION: forcing a failure. [ 645.231305][T14277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 645.246460][T14277] CPU: 1 UID: 0 PID: 14277 Comm: syz.0.2837 Not tainted syzkaller #0 PREEMPT(full) [ 645.246485][T14277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 645.246496][T14277] Call Trace: [ 645.246503][T14277] [ 645.246510][T14277] dump_stack_lvl+0xe8/0x150 [ 645.246541][T14277] should_fail_ex+0x412/0x560 [ 645.246582][T14277] _copy_from_user+0x2d/0xb0 [ 645.246600][T14277] ___sys_sendmsg+0x1c6/0x360 [ 645.246624][T14277] ? __lock_acquire+0x6b5/0x2cf0 [ 645.246648][T14277] ? __pfx____sys_sendmsg+0x10/0x10 [ 645.246700][T14277] ? __fget_files+0x2a/0x420 [ 645.246720][T14277] ? __fget_files+0x3a0/0x420 [ 645.246750][T14277] __x64_sys_sendmsg+0x1bd/0x2a0 [ 645.246776][T14277] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 645.246808][T14277] ? __pfx_ksys_write+0x10/0x10 [ 645.246839][T14277] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.246857][T14277] do_syscall_64+0x15f/0xf80 [ 645.246877][T14277] ? trace_irq_disable+0x3b/0x140 [ 645.246895][T14277] ? clear_bhb_loop+0x40/0x90 [ 645.246916][T14277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.246933][T14277] RIP: 0033:0x7fafd5d9c819 [ 645.246949][T14277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.246963][T14277] RSP: 002b:00007fafd6c3a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 645.246982][T14277] RAX: ffffffffffffffda RBX: 00007fafd6015fa0 RCX: 00007fafd5d9c819 [ 645.246993][T14277] RDX: 0000000002000800 RSI: 0000200000000000 RDI: 0000000000000004 [ 645.247003][T14277] RBP: 00007fafd6c3a090 R08: 0000000000000000 R09: 0000000000000000 [ 645.247013][T14277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.247022][T14277] R13: 00007fafd6016038 R14: 00007fafd6015fa0 R15: 00007fafd613fa48 [ 645.247044][T14277] [ 645.405950][ T5914] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 645.450877][T14238] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2827'. [ 645.465538][ T5910] usb 5-1: USB disconnect, device number 59 [ 645.867626][ T5914] usb 3-1: Using ep0 maxpacket: 32 [ 645.894291][ T5914] usb 3-1: config 0 has no interfaces? [ 645.929412][ T5914] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 645.957989][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.984301][ T5914] usb 3-1: Product: syz [ 645.992173][ T5914] usb 3-1: Manufacturer: syz [ 646.002044][ T5914] usb 3-1: SerialNumber: syz [ 646.021075][ T5914] usb 3-1: config 0 descriptor?? [ 646.106924][T14290] binder: 14289:14290 ioctl 4018620d 0 returned -22 [ 646.560550][T14305] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2847'. [ 646.779216][T14313] input: syz1 as /devices/virtual/input/input27 [ 646.905827][ T5914] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 646.943251][T14316] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2850'. [ 646.985281][T14320] FAULT_INJECTION: forcing a failure. [ 646.985281][T14320] name failslab, interval 1, probability 0, space 0, times 0 [ 647.029224][T14320] CPU: 0 UID: 0 PID: 14320 Comm: syz.5.2851 Not tainted syzkaller #0 PREEMPT(full) [ 647.029249][T14320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 647.029260][T14320] Call Trace: [ 647.029268][T14320] [ 647.029276][T14320] dump_stack_lvl+0xe8/0x150 [ 647.029305][T14320] should_fail_ex+0x412/0x560 [ 647.029331][T14320] should_failslab+0xa8/0x100 [ 647.029351][T14320] __kmalloc_noprof+0xe8/0x760 [ 647.029508][T14320] ? tomoyo_encode+0x28b/0x550 [ 647.029537][T14320] tomoyo_encode+0x28b/0x550 [ 647.029563][T14320] tomoyo_realpath_from_path+0x58d/0x5d0 [ 647.029595][T14320] ? tomoyo_path_number_perm+0x219/0x630 [ 647.029614][T14320] tomoyo_path_number_perm+0x246/0x630 [ 647.029635][T14320] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 647.029652][T14320] ? __lock_acquire+0x6b5/0x2cf0 [ 647.029684][T14320] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 647.029720][T14320] ? __fget_files+0x2a/0x420 [ 647.029742][T14320] ? __fget_files+0x2a/0x420 [ 647.029754][T14320] ? __fget_files+0x3a0/0x420 [ 647.029765][T14320] ? __fget_files+0x2a/0x420 [ 647.029779][T14320] security_file_ioctl+0xc3/0x2a0 [ 647.029795][T14320] __se_sys_ioctl+0x47/0x170 [ 647.029817][T14320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.029828][T14320] do_syscall_64+0x15f/0xf80 [ 647.029840][T14320] ? trace_irq_disable+0x3b/0x140 [ 647.029851][T14320] ? clear_bhb_loop+0x40/0x90 [ 647.029864][T14320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.029875][T14320] RIP: 0033:0x7fc05e59c819 [ 647.029887][T14320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.029895][T14320] RSP: 002b:00007fc05f3f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 647.029908][T14320] RAX: ffffffffffffffda RBX: 00007fc05e815fa0 RCX: 00007fc05e59c819 [ 647.029914][T14320] RDX: 0000200000000180 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 647.029921][T14320] RBP: 00007fc05f3f7090 R08: 0000000000000000 R09: 0000000000000000 [ 647.029927][T14320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.029932][T14320] R13: 00007fc05e816038 R14: 00007fc05e815fa0 R15: 00007fc05e93fa48 [ 647.029947][T14320] [ 647.031273][T14320] ERROR: Out of memory at tomoyo_realpath_from_path. [ 647.286841][ T5914] usb 1-1: Using ep0 maxpacket: 32 [ 647.304853][ T5914] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 647.326822][ T5914] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 647.344834][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.371685][ T5914] usb 1-1: Product: syz [ 647.380141][ T5914] usb 1-1: Manufacturer: syz [ 647.390011][ T5914] usb 1-1: SerialNumber: syz [ 647.431208][ T5914] usb 1-1: config 0 descriptor?? [ 647.468542][T14325] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 647.480593][ T5914] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 647.491946][T14322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2852'. [ 647.624163][T14322] 8021q: adding VLAN 0 to HW filter on device bond4 [ 647.700519][T14323] bond4: (slave macvlan1): Enslaving as an active interface with an up link [ 647.764775][T14330] bond4 (unregistering): (slave macvlan1): Releasing backup interface [ 647.787812][T14330] bond4 (unregistering): Released all slaves [ 647.805832][ T5821] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 647.951734][T14335] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2854'. [ 647.972952][ T5821] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 647.983104][ T5821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.000227][ T5821] usb 6-1: config 0 descriptor?? [ 648.176030][ T5914] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 648.189756][ T5914] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 648.237345][ T5821] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 648.256496][ T5821] [drm:udl_init] *ERROR* Selecting channel failed [ 648.404045][ T5821] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 648.419775][ T5821] [drm] Initialized udl on minor 2 [ 648.480359][ T5821] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 648.538747][ T5821] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 648.637595][ T5821] usb 6-1: USB disconnect, device number 44 [ 648.713099][T14348] FAULT_INJECTION: forcing a failure. [ 648.713099][T14348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 648.733190][ T5914] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 648.805653][T14348] CPU: 1 UID: 0 PID: 14348 Comm: syz.1.2857 Not tainted syzkaller #0 PREEMPT(full) [ 648.805670][T14348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 648.805681][T14348] Call Trace: [ 648.805687][T14348] [ 648.805694][T14348] dump_stack_lvl+0xe8/0x150 [ 648.805721][T14348] should_fail_ex+0x412/0x560 [ 648.805748][T14348] _copy_from_user+0x2d/0xb0 [ 648.805765][T14348] __copy_msghdr+0x3c5/0x5b0 [ 648.805791][T14348] ___sys_sendmsg+0x213/0x360 [ 648.805813][T14348] ? __lock_acquire+0x6b5/0x2cf0 [ 648.805838][T14348] ? __pfx____sys_sendmsg+0x10/0x10 [ 648.805889][T14348] ? __fget_files+0x2a/0x420 [ 648.805909][T14348] ? __fget_files+0x3a0/0x420 [ 648.805939][T14348] __x64_sys_sendmsg+0x1bd/0x2a0 [ 648.805966][T14348] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 648.805997][T14348] ? __pfx_ksys_write+0x10/0x10 [ 648.806027][T14348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.806044][T14348] do_syscall_64+0x15f/0xf80 [ 648.806065][T14348] ? clear_bhb_loop+0x40/0x90 [ 648.806084][T14348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.806101][T14348] RIP: 0033:0x7f55b5b9c819 [ 648.806115][T14348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.806124][T14348] RSP: 002b:00007f55b3df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 648.806137][T14348] RAX: ffffffffffffffda RBX: 00007f55b5e15fa0 RCX: 00007f55b5b9c819 [ 648.806144][T14348] RDX: 0000000004000001 RSI: 00002000000003c0 RDI: 0000000000000004 [ 648.806151][T14348] RBP: 00007f55b3df6090 R08: 0000000000000000 R09: 0000000000000000 [ 648.806157][T14348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.806163][T14348] R13: 00007f55b5e16038 R14: 00007f55b5e15fa0 R15: 00007f55b5f3fa48 [ 648.806178][T14348] [ 649.297228][ T5910] usb 1-1: USB disconnect, device number 46 [ 649.338427][ T5821] usb 3-1: USB disconnect, device number 42 [ 649.432764][T14357] FAULT_INJECTION: forcing a failure. [ 649.432764][T14357] name failslab, interval 1, probability 0, space 0, times 0 [ 649.451058][T14357] CPU: 1 UID: 0 PID: 14357 Comm: syz.4.2860 Not tainted syzkaller #0 PREEMPT(full) [ 649.451084][T14357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 649.451096][T14357] Call Trace: [ 649.451103][T14357] [ 649.451112][T14357] dump_stack_lvl+0xe8/0x150 [ 649.451142][T14357] should_fail_ex+0x412/0x560 [ 649.451171][T14357] should_failslab+0xa8/0x100 [ 649.451191][T14357] __kmalloc_noprof+0xe8/0x760 [ 649.451227][T14357] ? tomoyo_encode+0x28b/0x550 [ 649.451256][T14357] tomoyo_encode+0x28b/0x550 [ 649.451283][T14357] tomoyo_realpath_from_path+0x58d/0x5d0 [ 649.451317][T14357] ? tomoyo_path_number_perm+0x219/0x630 [ 649.451338][T14357] tomoyo_path_number_perm+0x246/0x630 [ 649.451362][T14357] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 649.451382][T14357] ? __lock_acquire+0x6b5/0x2cf0 [ 649.451417][T14357] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 649.451458][T14357] ? __fget_files+0x2a/0x420 [ 649.451482][T14357] ? __fget_files+0x2a/0x420 [ 649.451503][T14357] ? __fget_files+0x3a0/0x420 [ 649.451522][T14357] ? __fget_files+0x2a/0x420 [ 649.451547][T14357] security_file_ioctl+0xc3/0x2a0 [ 649.451573][T14357] __se_sys_ioctl+0x47/0x170 [ 649.451590][T14357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.451610][T14357] do_syscall_64+0x15f/0xf80 [ 649.451629][T14357] ? trace_irq_disable+0x3b/0x140 [ 649.451648][T14357] ? clear_bhb_loop+0x40/0x90 [ 649.451670][T14357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.451687][T14357] RIP: 0033:0x7f45a3d9c819 [ 649.451701][T14357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.451713][T14357] RSP: 002b:00007f45a4d12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 649.451730][T14357] RAX: ffffffffffffffda RBX: 00007f45a4015fa0 RCX: 00007f45a3d9c819 [ 649.451740][T14357] RDX: 0000200000000300 RSI: 0000000000002286 RDI: 0000000000000003 [ 649.451749][T14357] RBP: 00007f45a4d12090 R08: 0000000000000000 R09: 0000000000000000 [ 649.451757][T14357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 649.451766][T14357] R13: 00007f45a4016038 R14: 00007f45a4015fa0 R15: 00007f45a413fa48 [ 649.451787][T14357] [ 649.451819][T14357] ERROR: Out of memory at tomoyo_realpath_from_path. [ 649.539319][T14358] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2862'. [ 649.888503][T14370] FAULT_INJECTION: forcing a failure. [ 649.888503][T14370] name failslab, interval 1, probability 0, space 0, times 0 [ 649.905934][T14370] CPU: 0 UID: 0 PID: 14370 Comm: syz.4.2867 Not tainted syzkaller #0 PREEMPT(full) [ 649.905962][T14370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 649.905973][T14370] Call Trace: [ 649.905980][T14370] [ 649.905988][T14370] dump_stack_lvl+0xe8/0x150 [ 649.906018][T14370] should_fail_ex+0x412/0x560 [ 649.906046][T14370] should_failslab+0xa8/0x100 [ 649.906066][T14370] __kmalloc_noprof+0xe8/0x760 [ 649.906091][T14370] ? sock_kmalloc+0xd6/0x160 [ 649.906121][T14370] sock_kmalloc+0xd6/0x160 [ 649.906142][T14370] ____sys_sendmsg+0x1c2/0x9f0 [ 649.906167][T14370] ? __might_fault+0xaf/0x130 [ 649.906195][T14370] ? __pfx_____sys_sendmsg+0x10/0x10 [ 649.906228][T14370] ? import_iovec+0x73/0xa0 [ 649.906250][T14370] ___sys_sendmsg+0x2a5/0x360 [ 649.906274][T14370] ? __lock_acquire+0x6b5/0x2cf0 [ 649.906301][T14370] ? __pfx____sys_sendmsg+0x10/0x10 [ 649.906331][T14370] ? kstrtouint+0x6e/0xe0 [ 649.906378][T14370] ? __fget_files+0x2a/0x420 [ 649.906398][T14370] ? __fget_files+0x3a0/0x420 [ 649.906429][T14370] __sys_sendmmsg+0x27c/0x4e0 [ 649.906458][T14370] ? __pfx___sys_sendmmsg+0x10/0x10 [ 649.906480][T14370] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 649.906526][T14370] ? ksys_write+0x242/0x270 [ 649.906553][T14370] ? __pfx_ksys_write+0x10/0x10 [ 649.906581][T14370] __x64_sys_sendmmsg+0xa0/0xc0 [ 649.906606][T14370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.906624][T14370] do_syscall_64+0x15f/0xf80 [ 649.906645][T14370] ? trace_irq_disable+0x3b/0x140 [ 649.906664][T14370] ? clear_bhb_loop+0x40/0x90 [ 649.906686][T14370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.906704][T14370] RIP: 0033:0x7f45a3d9c819 [ 649.906721][T14370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.906736][T14370] RSP: 002b:00007f45a4d12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 649.906755][T14370] RAX: ffffffffffffffda RBX: 00007f45a4015fa0 RCX: 00007f45a3d9c819 [ 649.906768][T14370] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000003 [ 649.906780][T14370] RBP: 00007f45a4d12090 R08: 0000000000000000 R09: 0000000000000000 [ 649.906791][T14370] R10: 000000002400c444 R11: 0000000000000246 R12: 0000000000000001 [ 649.906803][T14370] R13: 00007f45a4016038 R14: 00007f45a4015fa0 R15: 00007f45a413fa48 [ 649.906832][T14370] [ 650.167100][T14375] FAULT_INJECTION: forcing a failure. [ 650.167100][T14375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 650.180628][T14375] CPU: 0 UID: 0 PID: 14375 Comm: syz.1.2869 Not tainted syzkaller #0 PREEMPT(full) [ 650.180644][T14375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 650.180651][T14375] Call Trace: [ 650.180658][T14375] [ 650.180664][T14375] dump_stack_lvl+0xe8/0x150 [ 650.180684][T14375] should_fail_ex+0x412/0x560 [ 650.180702][T14375] _copy_to_iter+0x1e4/0x17d0 [ 650.180716][T14375] ? seq_read_iter+0xb84/0xe10 [ 650.180729][T14375] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 650.180745][T14375] ? __pfx__copy_to_iter+0x10/0x10 [ 650.180759][T14375] ? kernfs_seq_stop+0x17e/0x200 [ 650.180773][T14375] ? kernfs_put_active+0xa0/0x100 [ 650.180787][T14375] ? kernfs_seq_stop+0x17e/0x200 [ 650.180799][T14375] seq_read_iter+0xbf5/0xe10 [ 650.180818][T14375] do_iter_readv_writev+0x619/0x8c0 [ 650.180836][T14375] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 650.180855][T14375] ? rw_verify_area+0x2a6/0x4d0 [ 650.180870][T14375] vfs_readv+0x288/0x840 [ 650.180886][T14375] ? __pfx_vfs_readv+0x10/0x10 [ 650.180903][T14375] ? __fget_files+0x2a/0x420 [ 650.180924][T14375] ? __fget_files+0x3a0/0x420 [ 650.180938][T14375] ? __fget_files+0x2a/0x420 [ 650.180953][T14375] do_readv+0x154/0x2e0 [ 650.180965][T14375] ? __pfx_do_readv+0x10/0x10 [ 650.180980][T14375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.180991][T14375] do_syscall_64+0x15f/0xf80 [ 650.181003][T14375] ? trace_irq_disable+0x3b/0x140 [ 650.181014][T14375] ? clear_bhb_loop+0x40/0x90 [ 650.181026][T14375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.181040][T14375] RIP: 0033:0x7f55b5b9c819 [ 650.181051][T14375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 650.181060][T14375] RSP: 002b:00007f55b3df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 650.181072][T14375] RAX: ffffffffffffffda RBX: 00007f55b5e15fa0 RCX: 00007f55b5b9c819 [ 650.181079][T14375] RDX: 0000000000000001 RSI: 0000200000001680 RDI: 0000000000000004 [ 650.181086][T14375] RBP: 00007f55b3df6090 R08: 0000000000000000 R09: 0000000000000000 [ 650.181092][T14375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.181098][T14375] R13: 00007f55b5e16038 R14: 00007f55b5e15fa0 R15: 00007f55b5f3fa48 [ 650.181113][T14375] [ 651.018076][ T5910] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 651.075921][ T24] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 651.110853][T14409] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2883'. [ 651.195988][ T5910] usb 3-1: Using ep0 maxpacket: 32 [ 651.214046][ T5910] usb 3-1: config 0 has no interfaces? [ 651.235929][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 651.245869][ T5821] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 651.258940][ T24] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 651.268196][ T5910] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 651.282842][ T24] usb 6-1: config 0 has no interface number 0 [ 651.295464][T14413] FAULT_INJECTION: forcing a failure. [ 651.295464][T14413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 651.314319][T14413] CPU: 0 UID: 0 PID: 14413 Comm: syz.4.2884 Not tainted syzkaller #0 PREEMPT(full) [ 651.314337][T14413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 651.314344][T14413] Call Trace: [ 651.314349][T14413] [ 651.314355][T14413] dump_stack_lvl+0xe8/0x150 [ 651.314375][T14413] should_fail_ex+0x412/0x560 [ 651.314392][T14413] _copy_from_user+0x2d/0xb0 [ 651.314403][T14413] __copy_msghdr+0x3c5/0x5b0 [ 651.314420][T14413] ___sys_sendmsg+0x213/0x360 [ 651.314434][T14413] ? __lock_acquire+0x6b5/0x2cf0 [ 651.314449][T14413] ? __pfx____sys_sendmsg+0x10/0x10 [ 651.314478][T14413] ? __fget_files+0x2a/0x420 [ 651.314494][T14413] ? __fget_files+0x3a0/0x420 [ 651.314523][T14413] __x64_sys_sendmsg+0x1bd/0x2a0 [ 651.314543][T14413] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 651.314561][T14413] ? __pfx_ksys_write+0x10/0x10 [ 651.314579][T14413] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.314590][T14413] do_syscall_64+0x15f/0xf80 [ 651.314602][T14413] ? trace_irq_disable+0x3b/0x140 [ 651.314613][T14413] ? clear_bhb_loop+0x40/0x90 [ 651.314624][T14413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.314634][T14413] RIP: 0033:0x7f45a3d9c819 [ 651.314645][T14413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.314653][T14413] RSP: 002b:00007f45a4d12028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 651.314666][T14413] RAX: ffffffffffffffda RBX: 00007f45a4015fa0 RCX: 00007f45a3d9c819 [ 651.314673][T14413] RDX: 0000000000048010 RSI: 0000200000000440 RDI: 0000000000000003 [ 651.314680][T14413] RBP: 00007f45a4d12090 R08: 0000000000000000 R09: 0000000000000000 [ 651.314686][T14413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.314692][T14413] R13: 00007f45a4016038 R14: 00007f45a4015fa0 R15: 00007f45a413fa48 [ 651.314707][T14413] [ 651.507853][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.516390][ T24] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 651.527900][ T5910] usb 3-1: Product: syz [ 651.532132][ T5910] usb 3-1: Manufacturer: syz [ 651.537040][ T24] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 651.548401][ T5910] usb 3-1: SerialNumber: syz [ 651.554065][ T24] usb 6-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 651.571797][T14414] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2881'. [ 651.581501][ T24] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 651.594119][ T5910] usb 3-1: config 0 descriptor?? [ 651.600174][ T24] usb 6-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 651.654641][ T24] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 651.691506][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.692144][ T5821] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 651.714283][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.726093][ T5821] usb 2-1: Product: syz [ 651.730621][ T5821] usb 2-1: Manufacturer: syz [ 651.735571][ T5821] usb 2-1: SerialNumber: syz [ 651.737609][ T24] usb 6-1: Product: syz [ 651.748522][ T5821] usb 2-1: config 0 descriptor?? [ 651.772435][ T5821] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 651.780921][ T24] usb 6-1: Manufacturer: syz [ 651.800829][T14416] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 651.813566][ T24] usb 6-1: SerialNumber: syz [ 651.841714][ T24] usb 6-1: config 0 descriptor?? [ 652.316341][ T5821] gspca_sunplus: reg_r err -110 [ 653.226490][ T24] iowarrior 6-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 653.238182][ T54] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 653.273398][ T24] usb 6-1: USB disconnect, device number 45 [ 653.397009][ T54] usb 5-1: Using ep0 maxpacket: 8 [ 653.410002][ T54] usb 5-1: too many configurations: 209, using maximum allowed: 8 [ 653.427336][ T54] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 653.443101][ T54] usb 5-1: can't read configurations, error -61 [ 653.560106][T14436] dvmrp0: entered allmulticast mode [ 653.586022][ T54] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 653.716451][T14443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.744356][T14443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.753012][ T54] usb 5-1: Using ep0 maxpacket: 8 [ 653.762729][ T54] usb 5-1: too many configurations: 209, using maximum allowed: 8 [ 653.774707][ T54] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 653.790799][ T54] usb 5-1: can't read configurations, error -61 [ 653.819742][ T54] usb usb5-port1: attempt power cycle [ 653.939623][ T5821] usb 3-1: USB disconnect, device number 43 [ 653.956279][ T24] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 654.060100][ T5910] usb 2-1: USB disconnect, device number 56 [ 654.145780][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 654.168692][ T24] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 654.180183][ T54] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 654.199367][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.214892][ T24] usb 1-1: Product: syz [ 654.221010][ T24] usb 1-1: Manufacturer: syz [ 654.226795][ T54] usb 5-1: Using ep0 maxpacket: 8 [ 654.232784][ T24] usb 1-1: SerialNumber: syz [ 654.240246][ T54] usb 5-1: too many configurations: 209, using maximum allowed: 8 [ 654.253391][ T54] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 654.264504][ T24] usb 1-1: config 0 descriptor?? [ 654.275284][ T54] usb 5-1: can't read configurations, error -61 [ 654.290151][ T24] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 654.337511][ T24] usb 1-1: Detected FT-X [ 654.435545][T14454] FAULT_INJECTION: forcing a failure. [ 654.435545][T14454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 654.435860][ T54] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 654.502363][ T24] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 654.520684][ T24] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 654.539253][ T24] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 654.548476][ T54] usb 5-1: Using ep0 maxpacket: 8 [ 654.557340][T14454] CPU: 0 UID: 0 PID: 14454 Comm: syz.1.2901 Not tainted syzkaller #0 PREEMPT(full) [ 654.557365][T14454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 654.557376][T14454] Call Trace: [ 654.557384][T14454] [ 654.557390][T14454] dump_stack_lvl+0xe8/0x150 [ 654.557420][T14454] should_fail_ex+0x412/0x560 [ 654.557448][T14454] _copy_from_user+0x2d/0xb0 [ 654.557466][T14454] __copy_msghdr+0x3c5/0x5b0 [ 654.557493][T14454] ___sys_sendmsg+0x213/0x360 [ 654.557516][T14454] ? __lock_acquire+0x6b5/0x2cf0 [ 654.557539][T14454] ? __pfx____sys_sendmsg+0x10/0x10 [ 654.557591][T14454] ? __fget_files+0x2a/0x420 [ 654.557612][T14454] ? __fget_files+0x3a0/0x420 [ 654.557639][T14454] __x64_sys_sendmsg+0x1bd/0x2a0 [ 654.557665][T14454] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 654.557698][T14454] ? __pfx_ksys_write+0x10/0x10 [ 654.557729][T14454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.557748][T14454] do_syscall_64+0x15f/0xf80 [ 654.557768][T14454] ? trace_irq_disable+0x3b/0x140 [ 654.557787][T14454] ? clear_bhb_loop+0x40/0x90 [ 654.557808][T14454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.557823][T14454] RIP: 0033:0x7f55b5b9c819 [ 654.557834][ T54] usb 5-1: too many configurations: 209, using maximum allowed: 8 [ 654.557840][T14454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.557856][T14454] RSP: 002b:00007f55b3df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 654.557875][T14454] RAX: ffffffffffffffda RBX: 00007f55b5e15fa0 RCX: 00007f55b5b9c819 [ 654.557884][T14454] RDX: 0000000000000040 RSI: 0000200000000140 RDI: 0000000000000004 [ 654.557893][T14454] RBP: 00007f55b3df6090 R08: 0000000000000000 R09: 0000000000000000 [ 654.557907][T14454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 654.557917][T14454] R13: 00007f55b5e16038 R14: 00007f55b5e15fa0 R15: 00007f55b5f3fa48 [ 654.557952][T14454] [ 654.765813][ T24] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 654.783071][ T24] usb 1-1: USB disconnect, device number 47 [ 654.806356][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 654.828219][ T24] ftdi_sio 1-1:0.0: device disconnected [ 654.869627][T14461] FAULT_INJECTION: forcing a failure. [ 654.869627][T14461] name failslab, interval 1, probability 0, space 0, times 0 [ 654.913773][T14461] CPU: 0 UID: 0 PID: 14461 Comm: syz.1.2903 Not tainted syzkaller #0 PREEMPT(full) [ 654.913793][T14461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 654.913800][T14461] Call Trace: [ 654.913804][T14461] [ 654.913809][T14461] dump_stack_lvl+0xe8/0x150 [ 654.913835][T14461] should_fail_ex+0x412/0x560 [ 654.913867][T14461] should_failslab+0xa8/0x100 [ 654.913887][T14461] __kvmalloc_node_noprof+0x178/0x8a0 [ 654.913898][T14461] ? xt_alloc_table_info+0x40/0xb0 [ 654.913919][T14461] xt_alloc_table_info+0x40/0xb0 [ 654.913930][T14461] do_ipt_set_ctl+0x903/0xe00 [ 654.913943][T14461] ? rcu_is_watching+0x15/0xb0 [ 654.913957][T14461] ? trace_contention_end+0x3d/0x140 [ 654.913967][T14461] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 654.913985][T14461] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 654.913997][T14461] ? __pfx___mutex_lock+0x10/0x10 [ 654.914010][T14461] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 654.914026][T14461] ? __pfx_aa_sk_perm+0x10/0x10 [ 654.914041][T14461] nf_setsockopt+0x26f/0x290 [ 654.914054][T14461] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 654.914067][T14461] do_sock_setsockopt+0x17c/0x1b0 [ 654.914083][T14461] __x64_sys_setsockopt+0x13d/0x1b0 [ 654.914098][T14461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.914109][T14461] do_syscall_64+0x15f/0xf80 [ 654.914121][T14461] ? trace_irq_disable+0x3b/0x140 [ 654.914132][T14461] ? clear_bhb_loop+0x40/0x90 [ 654.914144][T14461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.914154][T14461] RIP: 0033:0x7f55b5b9c819 [ 654.914165][T14461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.914174][T14461] RSP: 002b:00007f55b3df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 654.914186][T14461] RAX: ffffffffffffffda RBX: 00007f55b5e15fa0 RCX: 00007f55b5b9c819 [ 654.914193][T14461] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 654.914200][T14461] RBP: 00007f55b3df6090 R08: 00000000000002b0 R09: 0000000000000000 [ 654.914206][T14461] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 654.914213][T14461] R13: 00007f55b5e16038 R14: 00007f55b5e15fa0 R15: 00007f55b5f3fa48 [ 654.914228][T14461] [ 655.307466][T14465] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 655.307466][T14465] Please contact the netfilter-devel mailing list or update your nftables rules. [ 655.311193][ T54] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 655.425636][ T54] usb 5-1: can't read configurations, error -61 [ 655.443845][T14470] FAULT_INJECTION: forcing a failure. [ 655.443845][T14470] name failslab, interval 1, probability 0, space 0, times 0 [ 655.477706][ T54] usb usb5-port1: unable to enumerate USB device [ 655.532616][T14470] CPU: 0 UID: 0 PID: 14470 Comm: syz.1.2908 Not tainted syzkaller #0 PREEMPT(full) [ 655.532639][T14470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 655.532650][T14470] Call Trace: [ 655.532657][T14470] [ 655.532666][T14470] dump_stack_lvl+0xe8/0x150 [ 655.532696][T14470] should_fail_ex+0x412/0x560 [ 655.532726][T14470] should_failslab+0xa8/0x100 [ 655.532747][T14470] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 655.532771][T14470] ? __alloc_skb+0x186/0x7d0 [ 655.532803][T14470] ? __alloc_skb+0x1d0/0x7d0 [ 655.532823][T14470] ? __local_bh_enable_ip+0xd0/0x130 [ 655.532849][T14470] __alloc_skb+0x1d0/0x7d0 [ 655.532877][T14470] netlink_sendmsg+0x5d4/0xb40 [ 655.532910][T14470] ? __pfx_netlink_sendmsg+0x10/0x10 [ 655.532937][T14470] ? aa_sock_msg_perm+0xf1/0x1b0 [ 655.532961][T14470] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 655.532990][T14470] ____sys_sendmsg+0x972/0x9f0 [ 655.533015][T14470] ? __might_fault+0xaf/0x130 [ 655.533041][T14470] ? __pfx_____sys_sendmsg+0x10/0x10 [ 655.533071][T14470] ? import_iovec+0x73/0xa0 [ 655.533092][T14470] ___sys_sendmsg+0x2a5/0x360 [ 655.533115][T14470] ? __lock_acquire+0x6b5/0x2cf0 [ 655.533142][T14470] ? __pfx____sys_sendmsg+0x10/0x10 [ 655.533201][T14470] ? __fget_files+0x2a/0x420 [ 655.533220][T14470] ? __fget_files+0x3a0/0x420 [ 655.533250][T14470] __x64_sys_sendmsg+0x1bd/0x2a0 [ 655.533277][T14470] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 655.533310][T14470] ? __pfx_ksys_write+0x10/0x10 [ 655.533341][T14470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.533361][T14470] do_syscall_64+0x15f/0xf80 [ 655.533381][T14470] ? trace_irq_disable+0x3b/0x140 [ 655.533401][T14470] ? clear_bhb_loop+0x40/0x90 [ 655.533422][T14470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.533439][T14470] RIP: 0033:0x7f55b5b9c819 [ 655.533456][T14470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 655.533471][T14470] RSP: 002b:00007f55b3df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 655.533491][T14470] RAX: ffffffffffffffda RBX: 00007f55b5e15fa0 RCX: 00007f55b5b9c819 [ 655.533504][T14470] RDX: 0000000004004000 RSI: 0000200000000500 RDI: 0000000000000004 [ 655.533517][T14470] RBP: 00007f55b3df6090 R08: 0000000000000000 R09: 0000000000000000 [ 655.533528][T14470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 655.533538][T14470] R13: 00007f55b5e16038 R14: 00007f55b5e15fa0 R15: 00007f55b5f3fa48 [ 655.533566][T14470] [ 656.158954][T14482] FAULT_INJECTION: forcing a failure. [ 656.158954][T14482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 656.173914][T14482] CPU: 1 UID: 0 PID: 14482 Comm: syz.2.2912 Not tainted syzkaller #0 PREEMPT(full) [ 656.173941][T14482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 656.173953][T14482] Call Trace: [ 656.173961][T14482] [ 656.173969][T14482] dump_stack_lvl+0xe8/0x150 [ 656.174001][T14482] should_fail_ex+0x412/0x560 [ 656.174030][T14482] _copy_from_user+0x2d/0xb0 [ 656.174050][T14482] __copy_msghdr+0x3c5/0x5b0 [ 656.174080][T14482] ___sys_sendmsg+0x213/0x360 [ 656.174105][T14482] ? __lock_acquire+0x6b5/0x2cf0 [ 656.174132][T14482] ? __pfx____sys_sendmsg+0x10/0x10 [ 656.174188][T14482] ? __fget_files+0x2a/0x420 [ 656.174210][T14482] ? __fget_files+0x3a0/0x420 [ 656.174238][T14482] __x64_sys_sendmsg+0x1bd/0x2a0 [ 656.174266][T14482] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 656.174304][T14482] ? __pfx_ksys_write+0x10/0x10 [ 656.174337][T14482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.174356][T14482] do_syscall_64+0x15f/0xf80 [ 656.174378][T14482] ? trace_irq_disable+0x3b/0x140 [ 656.174397][T14482] ? clear_bhb_loop+0x40/0x90 [ 656.174419][T14482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.174446][T14482] RIP: 0033:0x7f342e39c819 [ 656.174463][T14482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 656.174477][T14482] RSP: 002b:00007f342f16f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 656.174496][T14482] RAX: ffffffffffffffda RBX: 00007f342e615fa0 RCX: 00007f342e39c819 [ 656.174507][T14482] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 656.174527][T14482] RBP: 00007f342f16f090 R08: 0000000000000000 R09: 0000000000000000 [ 656.174538][T14482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 656.174548][T14482] R13: 00007f342e616038 R14: 00007f342e615fa0 R15: 00007f342e73fa48 [ 656.174576][T14482] [ 656.495976][ T24] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 656.512223][T14484] xt_CT: You must specify a L4 protocol and not use inversions on it [ 656.587713][T14488] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 656.645815][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 656.667566][ T24] usb 1-1: config 0 has no interfaces? [ 656.708617][ T24] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 656.741733][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.788981][ T24] usb 1-1: Product: syz [ 656.816944][ T24] usb 1-1: Manufacturer: syz [ 656.837166][ T24] usb 1-1: SerialNumber: syz [ 656.872063][ T24] usb 1-1: config 0 descriptor?? [ 656.877399][T14499] syzkaller0: entered promiscuous mode [ 656.898773][T14499] syzkaller0: entered allmulticast mode [ 657.171347][T14502] netlink: 'syz.4.2921': attribute type 2 has an invalid length. [ 657.218159][T14502] netlink: 'syz.4.2921': attribute type 5 has an invalid length. [ 657.236031][T14502] netlink: 'syz.4.2921': attribute type 2 has an invalid length. [ 657.272098][T14502] netlink: 'syz.4.2921': attribute type 5 has an invalid length. [ 658.233949][T14549] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2929'. [ 658.517611][T14551] macvtap1: entered allmulticast mode [ 658.533599][T14551] team0: entered allmulticast mode [ 658.545971][T14551] team_slave_0: entered allmulticast mode [ 658.552129][T14551] team_slave_1: entered allmulticast mode [ 658.561284][T14551] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 658.609339][T14551] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 658.618291][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 658.618307][ T29] audit: type=1326 audit(1776275323.628:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14548 comm="syz.4.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a3d9c819 code=0x7fc00000 [ 658.689001][T14551] team0: Device macvtap1 is already an upper device of the team interface [ 658.714981][T14551] team0: left allmulticast mode [ 658.724786][T14551] team_slave_0: left allmulticast mode [ 658.737990][T14551] team_slave_1: left allmulticast mode [ 658.749396][T14551] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 658.969046][T14560] syzkaller0: entered promiscuous mode [ 658.982796][ T5821] usb 1-1: USB disconnect, device number 48 [ 658.983317][T14560] syzkaller0: entered allmulticast mode [ 659.051862][ T29] audit: type=1326 audit(1776275324.058:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14548 comm="syz.4.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f45a3d9c819 code=0x7fc00000 [ 659.142096][ T29] audit: type=1326 audit(1776275324.058:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14548 comm="syz.4.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a3d9c819 code=0x7fc00000 [ 659.181702][ T29] audit: type=1326 audit(1776275324.058:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14548 comm="syz.4.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a3d9c819 code=0x7fc00000 [ 659.224414][ T29] audit: type=1326 audit(1776275324.058:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14548 comm="syz.4.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a3d9c819 code=0x7fc00000 [ 659.247754][ T29] audit: type=1326 audit(1776275324.058:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14548 comm="syz.4.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a3d9c819 code=0x7fc00000 [ 659.272046][ T29] audit: type=1326 audit(1776275324.058:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14548 comm="syz.4.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a3d9c819 code=0x7fc00000 [ 659.305892][ T29] audit: type=1326 audit(1776275324.058:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14548 comm="syz.4.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a3d9c819 code=0x7fc00000 [ 659.329762][ T29] audit: type=1326 audit(1776275324.058:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14548 comm="syz.4.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a3d9c819 code=0x7fc00000 [ 659.353360][ T29] audit: type=1326 audit(1776275324.058:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14548 comm="syz.4.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a3d9c819 code=0x7fc00000 [ 659.425779][ T24] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 659.585897][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 659.613517][ T24] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 659.645512][ T49] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 659.679347][ T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 659.688702][ T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 659.696032][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.704402][ T24] usb 6-1: Product: Є [ 659.709786][ T24] usb 6-1: Manufacturer: 므ʌ⏀魣塪萇쫾ﷆ亗銒ㅀ圣✶櫹芖쭛᳞䰘﹅ꃅд⢁拀呎⦠⣧虮ၑ།䋃큿觽鉶魮茶꿽۩鮒漢娐桦質㋵ˠ啜胮ꋘ瀏炆끓䰜﯀묌Ợ쟊鈯ꥆ튎ꬊ齺愬ܐ誤撏㞏൱娨텮⻇唺⡃ꀍ랿즗䝲ݤ懆㿛㘀౽坅쀉囉碌忿냹⸥욡⛁፧Ⴁ潛阘 [ 659.741126][ T24] usb 6-1: SerialNumber: syz [ 659.756570][ T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 659.766502][ T49] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 660.210268][ T24] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 660.222352][ T24] usb 6-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 660.232495][ T24] usb 6-1: 2:1 : sample bitwidth 127 in over sample bytes 4 [ 660.240562][ T24] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 660.248206][ T24] usb 6-1: unit 5 not found! [ 660.316424][ T24] usb 6-1: USB disconnect, device number 46 [ 661.180505][T14593] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2944'. [ 661.895836][ T5826] Bluetooth: hci5: command tx timeout [ 662.916579][ T5840] bridge0: port 3(syz_tun) entered disabled state [ 662.949469][ T5840] syz_tun (unregistering): left allmulticast mode [ 662.957092][ T5840] syz_tun (unregistering): left promiscuous mode [ 662.963688][ T5840] bridge0: port 3(syz_tun) entered disabled state [ 663.018168][T14596] netlink: 'syz.0.2945': attribute type 1 has an invalid length. [ 663.559627][T14613] program syz.5.2951 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 663.610744][T14579] chnl_net:caif_netlink_parms(): no params data found [ 663.720602][T13610] team0: Port device netdevsim0 removed [ 663.722643][T14621] fuse: Bad value for 'group_id' [ 663.746453][T14621] fuse: Bad value for 'group_id' [ 663.955466][T14579] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.964169][T14579] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.971933][ T5826] Bluetooth: hci5: command tx timeout [ 663.978547][T14579] bridge_slave_0: entered allmulticast mode [ 663.987929][T14579] bridge_slave_0: entered promiscuous mode [ 663.999760][T14629] syzkaller0: entered promiscuous mode [ 664.005537][T14629] syzkaller0: entered allmulticast mode [ 664.015819][T14579] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.023156][T14579] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.030923][T14579] bridge_slave_1: entered allmulticast mode [ 664.041696][T14579] bridge_slave_1: entered promiscuous mode [ 664.273714][T14579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.307662][T14579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.400200][T14648] FAULT_INJECTION: forcing a failure. [ 664.400200][T14648] name failslab, interval 1, probability 0, space 0, times 0 [ 664.437749][T14648] CPU: 0 UID: 0 PID: 14648 Comm: syz.1.2962 Not tainted syzkaller #0 PREEMPT(full) [ 664.437774][T14648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 664.437784][T14648] Call Trace: [ 664.437793][T14648] [ 664.437800][T14648] dump_stack_lvl+0xe8/0x150 [ 664.437830][T14648] should_fail_ex+0x412/0x560 [ 664.437857][T14648] should_failslab+0xa8/0x100 [ 664.437875][T14648] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 664.437899][T14648] ? __alloc_skb+0x186/0x7d0 [ 664.437919][T14648] ? __alloc_skb+0x1d0/0x7d0 [ 664.437938][T14648] ? __local_bh_enable_ip+0xd0/0x130 [ 664.437962][T14648] __alloc_skb+0x1d0/0x7d0 [ 664.437984][T14648] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 664.438015][T14648] netlink_sendmsg+0x5d4/0xb40 [ 664.438048][T14648] ? __pfx_netlink_sendmsg+0x10/0x10 [ 664.438075][T14648] ? aa_sock_msg_perm+0xf1/0x1b0 [ 664.438097][T14648] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 664.438124][T14648] ____sys_sendmsg+0x972/0x9f0 [ 664.438156][T14648] ? __might_fault+0xaf/0x130 [ 664.438184][T14648] ? __pfx_____sys_sendmsg+0x10/0x10 [ 664.438220][T14648] ? import_iovec+0x73/0xa0 [ 664.438241][T14648] ___sys_sendmsg+0x2a5/0x360 [ 664.438265][T14648] ? __lock_acquire+0x6b5/0x2cf0 [ 664.438291][T14648] ? __pfx____sys_sendmsg+0x10/0x10 [ 664.438344][T14648] ? __fget_files+0x2a/0x420 [ 664.438361][T14648] ? __fget_files+0x3a0/0x420 [ 664.438385][T14648] __x64_sys_sendmsg+0x1bd/0x2a0 [ 664.438412][T14648] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 664.438441][T14648] ? __pfx_ksys_write+0x10/0x10 [ 664.438470][T14648] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.438488][T14648] do_syscall_64+0x15f/0xf80 [ 664.438506][T14648] ? trace_irq_disable+0x3b/0x140 [ 664.438521][T14648] ? clear_bhb_loop+0x40/0x90 [ 664.438540][T14648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.438557][T14648] RIP: 0033:0x7f55b5b9c819 [ 664.438574][T14648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 664.438587][T14648] RSP: 002b:00007f55b3df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 664.438605][T14648] RAX: ffffffffffffffda RBX: 00007f55b5e15fa0 RCX: 00007f55b5b9c819 [ 664.438628][T14648] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 664.438639][T14648] RBP: 00007f55b3df6090 R08: 0000000000000000 R09: 0000000000000000 [ 664.438650][T14648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 664.438660][T14648] R13: 00007f55b5e16038 R14: 00007f55b5e15fa0 R15: 00007f55b5f3fa48 [ 664.438687][T14648] [ 664.715580][T14579] team0: Port device team_slave_0 added [ 664.723550][T14579] team0: Port device team_slave_1 added [ 664.744768][T14579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.752060][T14579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.779463][T14579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 664.793522][T14650] fuse: Bad value for 'group_id' [ 664.808451][T14650] fuse: Bad value for 'group_id' [ 664.828714][T14579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 664.836095][T14579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.863652][T14579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 664.900717][T14579] hsr_slave_0: entered promiscuous mode [ 664.907360][T14579] hsr_slave_1: entered promiscuous mode [ 664.913565][T14579] debugfs: 'hsr0' already exists in 'hsr' [ 664.919323][T14579] Cannot create hsr debugfs directory [ 665.159112][T13610] bridge_slave_1: left allmulticast mode [ 665.172444][T13610] bridge_slave_1: left promiscuous mode [ 665.183727][T13610] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.203880][T13610] bridge_slave_0: left allmulticast mode [ 665.212696][T13610] bridge_slave_0: left promiscuous mode [ 665.219318][T13610] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.338924][ T5914] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 665.353376][T13610] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface [ 665.443496][T14664] sg_write: data in/out 401408/1 bytes for SCSI command 0x0-- guessing data in; [ 665.443496][T14664] program syz.2.2968 not setting count and/or reply_len properly [ 665.486034][ T24] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 665.505786][ T5914] usb 6-1: Using ep0 maxpacket: 32 [ 665.512525][ T5914] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 665.522504][T13610] gretap0 (unregistering): left promiscuous mode [ 665.530655][ T5914] usb 6-1: config 0 has no interface number 0 [ 665.545083][ T5914] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 665.581937][ T5914] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 665.605611][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.631435][ T5914] usb 6-1: Product: syz [ 665.635977][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 665.651724][ T5914] usb 6-1: Manufacturer: syz [ 665.661945][T13610] bond0 (unregistering): left promiscuous mode [ 665.668222][ T5914] usb 6-1: SerialNumber: syz [ 665.676412][T13610] bond_slave_0: left promiscuous mode [ 665.685894][ T5914] usb 6-1: config 0 descriptor?? [ 665.692998][ T24] usb 1-1: config 0 has no interfaces? [ 665.707532][ T5914] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 665.724889][T13610] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 665.736854][ T5914] em28xx 6-1:0.132: Video interface 132 found: [ 665.748142][ T24] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 665.760005][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.773480][ T24] usb 1-1: Product: syz [ 665.784257][ T24] usb 1-1: Manufacturer: syz [ 665.790567][ T24] usb 1-1: SerialNumber: syz [ 665.791319][T13610] bond0 (unregistering): Released all slaves [ 665.837065][ T24] usb 1-1: config 0 descriptor?? [ 665.863312][T13610] bond1 (unregistering): Released all slaves [ 665.920615][T13610] bond2 (unregistering): Released all slaves [ 665.960069][T13610] bond3 (unregistering): Released all slaves [ 666.003053][T13610] bond4 (unregistering): (slave veth3): Releasing active interface [ 666.035410][T13610] bond4 (unregistering): Released all slaves [ 666.056153][ T5826] Bluetooth: hci5: command tx timeout [ 666.068121][T13610] bond5 (unregistering): (slave veth5): Releasing active interface [ 666.100819][T13610] bond5 (unregistering): (slave batadv1): Releasing active interface [ 666.126932][T13610] bond5 (unregistering): Released all slaves [ 666.152043][T13610] bond6 (unregistering): Released all slaves [ 666.167811][T13610] bond7 (unregistering): Released all slaves [ 666.202082][T13610] bond8 (unregistering): (slave veth7): Releasing active interface [ 666.221904][T13610] batadv3: entered promiscuous mode [ 666.235287][T13610] bond8 (unregistering): (slave batadv3): Releasing active interface [ 666.258670][T13610] bond8 (unregistering): Released all slaves [ 666.902465][T13610] tipc: Left network mode [ 667.006392][ T5914] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 667.180831][ T5914] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 667.183314][T14677] syzkaller0: entered promiscuous mode [ 667.228141][ T5914] em28xx 6-1:0.132: board has no eeprom [ 667.234548][T14677] syzkaller0: entered allmulticast mode [ 667.336360][ T5914] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 667.350951][ T5914] em28xx 6-1:0.132: analog set to bulk mode. [ 667.390706][ T5821] em28xx 6-1:0.132: Registering V4L2 extension [ 667.633116][ T5821] em28xx 6-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 667.684774][ T5821] em28xx 6-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 667.707335][ T5821] em28xx 6-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 667.754374][ T5821] em28xx 6-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 667.943383][ T5821] em28xx 6-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 667.964774][ T5821] em28xx 6-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 667.999499][ T5821] em28xx 6-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 668.059407][ T5821] em28xx 6-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 668.135879][ T5826] Bluetooth: hci5: command tx timeout [ 668.165525][ T24] usb 6-1: USB disconnect, device number 47 [ 668.184670][ T24] em28xx 6-1:0.132: Disconnecting em28xx [ 668.226950][ T5821] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 668.248000][ T5821] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 668.276315][ T5821] em28xx 6-1:0.132: No AC97 audio processor [ 668.356643][T14694] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2970'. [ 668.580032][ T5821] usb 6-1: Decoder not found [ 668.604443][ T5821] em28xx 6-1:0.132: failed to create media graph [ 668.611368][ T5821] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 668.698294][ T5914] usb 1-1: USB disconnect, device number 49 [ 668.714319][T14695] ================================================================== [ 668.722874][T14695] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 668.730590][T14695] Read of size 8 at addr ffff888025f34790 by task v4l_id/14695 [ 668.738497][T14695] [ 668.740962][T14695] CPU: 0 UID: 0 PID: 14695 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 668.740981][T14695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 668.740990][T14695] Call Trace: [ 668.740997][T14695] [ 668.741004][T14695] dump_stack_lvl+0xe8/0x150 [ 668.741027][T14695] print_report+0xba/0x230 [ 668.741043][T14695] ? v4l2_fh_open+0xac/0x420 [ 668.741056][T14695] kasan_report+0x117/0x150 [ 668.741071][T14695] ? v4l2_fh_open+0xac/0x420 [ 668.741085][T14695] v4l2_fh_open+0xac/0x420 [ 668.741097][T14695] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 668.741115][T14695] ? __asan_memset+0x22/0x50 [ 668.741132][T14695] em28xx_v4l2_open+0x157/0x9a0 [ 668.741150][T14695] ? do_raw_spin_lock+0x12b/0x2f0 [ 668.741167][T14695] v4l2_open+0x1bf/0x3a0 [ 668.741182][T14695] chrdev_open+0x4cd/0x5e0 [ 668.741197][T14695] ? __pfx_chrdev_open+0x10/0x10 [ 668.741210][T14695] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 668.741231][T14695] ? __pfx_chrdev_open+0x10/0x10 [ 668.741243][T14695] do_dentry_open+0x785/0x14e0 [ 668.741263][T14695] vfs_open+0x3b/0x340 [ 668.741276][T14695] ? path_openat+0x2df0/0x3860 [ 668.741365][T14695] path_openat+0x2e08/0x3860 [ 668.741392][T14695] ? __pfx_stack_trace_save+0x10/0x10 [ 668.741409][T14695] ? stack_depot_save_flags+0x33/0x810 [ 668.741431][T14695] ? __pfx_path_openat+0x10/0x10 [ 668.741449][T14695] ? __x64_sys_openat+0x138/0x170 [ 668.741467][T14695] ? __lock_acquire+0x6b5/0x2cf0 [ 668.741488][T14695] do_file_open+0x23e/0x4a0 [ 668.741509][T14695] ? __pfx_do_file_open+0x10/0x10 [ 668.741535][T14695] ? _raw_spin_unlock+0x28/0x50 [ 668.741559][T14695] ? alloc_fd+0x64b/0x6c0 [ 668.741578][T14695] do_sys_openat2+0x113/0x200 [ 668.741595][T14695] ? __pfx_do_sys_openat2+0x10/0x10 [ 668.741611][T14695] ? exc_page_fault+0x6a/0xc0 [ 668.741627][T14695] ? do_user_addr_fault+0xc6f/0x1340 [ 668.741648][T14695] __x64_sys_openat+0x138/0x170 [ 668.741665][T14695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.741680][T14695] do_syscall_64+0x15f/0xf80 [ 668.741696][T14695] ? trace_irq_disable+0x3b/0x140 [ 668.741711][T14695] ? clear_bhb_loop+0x40/0x90 [ 668.741734][T14695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.741749][T14695] RIP: 0033:0x7f394a8a7407 [ 668.741764][T14695] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 668.741777][T14695] RSP: 002b:00007fff3c4b4d00 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 668.741820][T14695] RAX: ffffffffffffffda RBX: 00007f394af52880 RCX: 00007f394a8a7407 [ 668.741832][T14695] RDX: 0000000000000000 RSI: 00007fff3c4b6f1b RDI: ffffffffffffff9c [ 668.741842][T14695] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 668.741851][T14695] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 668.741860][T14695] R13: 00007fff3c4b4f50 R14: 00007f394b057000 R15: 00005619289904d8 [ 668.741876][T14695] [ 668.741882][T14695] [ 669.036834][T14695] Allocated by task 5821: [ 669.041420][T14695] kasan_save_track+0x3e/0x80 [ 669.046417][T14695] __kasan_kmalloc+0x93/0xb0 [ 669.051258][T14695] __kmalloc_cache_noprof+0x31c/0x660 [ 669.056732][T14695] em28xx_v4l2_init+0x10b/0x2e70 [ 669.061656][T14695] em28xx_init_extension+0x120/0x1c0 [ 669.067019][T14695] process_scheduled_works+0xb5d/0x1860 [ 669.072725][T14695] worker_thread+0xa53/0xfc0 [ 669.077299][T14695] kthread+0x388/0x470 [ 669.081608][T14695] ret_from_fork+0x514/0xb70 [ 669.086289][T14695] ret_from_fork_asm+0x1a/0x30 [ 669.091216][T14695] [ 669.093958][T14695] Freed by task 5821: [ 669.098039][T14695] kasan_save_track+0x3e/0x80 [ 669.102794][T14695] kasan_save_free_info+0x46/0x50 [ 669.107818][T14695] __kasan_slab_free+0x5c/0x80 [ 669.112744][T14695] kfree+0x1c1/0x620 [ 669.116621][T14695] em28xx_v4l2_init+0x1683/0x2e70 [ 669.121727][T14695] em28xx_init_extension+0x120/0x1c0 [ 669.127006][T14695] process_scheduled_works+0xb5d/0x1860 [ 669.132657][T14695] worker_thread+0xa53/0xfc0 [ 669.137500][T14695] kthread+0x388/0x470 [ 669.141637][T14695] ret_from_fork+0x514/0xb70 [ 669.146215][T14695] ret_from_fork_asm+0x1a/0x30 [ 669.150968][T14695] [ 669.153283][T14695] The buggy address belongs to the object at ffff888025f34000 [ 669.153283][T14695] which belongs to the cache kmalloc-8k of size 8192 [ 669.167442][T14695] The buggy address is located 1936 bytes inside of [ 669.167442][T14695] freed 8192-byte region [ffff888025f34000, ffff888025f36000) [ 669.181585][T14695] [ 669.183984][T14695] The buggy address belongs to the physical page: [ 669.190650][T14695] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25f30 [ 669.199670][T14695] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 669.208314][T14695] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 669.216095][T14695] page_type: f5(slab) [ 669.220361][T14695] raw: 00fff00000000040 ffff88813fe2d280 dead000000000100 dead000000000122 [ 669.229466][T14695] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 669.238138][T14695] head: 00fff00000000040 ffff88813fe2d280 dead000000000100 dead000000000122 [ 669.246907][T14695] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 669.255673][T14695] head: 00fff00000000003 ffffea000097cc01 00000000ffffffff 00000000ffffffff [ 669.264441][T14695] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 669.273444][T14695] page dumped because: kasan: bad access detected [ 669.280109][T14695] page_owner tracks the page as allocated [ 669.285985][T14695] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11806, tgid 11805 (syz.1.1927), ts 390368662024, free_ts 390001537693 [ 669.307771][T14695] post_alloc_hook+0x231/0x280 [ 669.312546][T14695] get_page_from_freelist+0x24dc/0x2580 [ 669.318166][T14695] __alloc_frozen_pages_noprof+0x18d/0x380 [ 669.323960][T14695] allocate_slab+0x77/0x660 [ 669.328631][T14695] refill_objects+0x331/0x3c0 [ 669.333397][T14695] __pcs_replace_empty_main+0x2e6/0x730 [ 669.339018][T14695] __kmalloc_node_track_caller_noprof+0x572/0x7b0 [ 669.345586][T14695] __alloc_skb+0x2c1/0x7d0 [ 669.350122][T14695] netlink_dump+0x18d/0xe10 [ 669.354791][T14695] netlink_recvmsg+0x690/0xa50 [ 669.359544][T14695] sock_recvmsg+0x172/0x1b0 [ 669.364035][T14695] ____sys_recvmsg+0x1e6/0x4a0 [ 669.368791][T14695] ___sys_recvmsg+0x215/0x590 [ 669.373459][T14695] do_recvmmsg+0x334/0x800 [ 669.377951][T14695] __x64_sys_recvmmsg+0x198/0x250 [ 669.383138][T14695] do_syscall_64+0x15f/0xf80 [ 669.387728][T14695] page last free pid 5809 tgid 5809 stack trace: [ 669.394302][T14695] __free_frozen_pages+0xc2b/0xdb0 [ 669.399671][T14695] __slab_free+0x263/0x2b0 [ 669.404258][T14695] qlist_free_all+0x97/0x100 [ 669.408865][T14695] kasan_quarantine_reduce+0x148/0x160 [ 669.414490][T14695] __kasan_slab_alloc+0x22/0x80 [ 669.419439][T14695] kmem_cache_alloc_node_noprof+0x384/0x690 [ 669.425598][T14695] __alloc_skb+0x1d0/0x7d0 [ 669.430092][T14695] tcp_stream_alloc_skb+0x3f/0x580 [ 669.435281][T14695] tcp_sendmsg_locked+0x1345/0x5450 [ 669.440535][T14695] tcp_sendmsg+0x2f/0x50 [ 669.444767][T14695] sock_write_iter+0x406/0x4f0 [ 669.449700][T14695] vfs_write+0x61d/0xb90 [ 669.454110][T14695] ksys_write+0x150/0x270 [ 669.458606][T14695] do_syscall_64+0x15f/0xf80 [ 669.463725][T14695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.469844][T14695] [ 669.472260][T14695] Memory state around the buggy address: [ 669.478061][T14695] ffff888025f34680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 669.486631][T14695] ffff888025f34700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 669.495243][T14695] >ffff888025f34780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 669.503463][T14695] ^ [ 669.508137][T14695] ffff888025f34800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 669.516456][T14695] ffff888025f34880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 669.524825][T14695] ================================================================== [ 669.536486][ T5821] em28xx 6-1:0.132: Remote control support is not available for this card. [ 669.546866][ T24] em28xx 6-1:0.132: Closing input extension [ 669.638027][T14699] FAULT_INJECTION: forcing a failure. [ 669.638027][T14699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 669.701594][T14695] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 669.709126][T14695] CPU: 0 UID: 0 PID: 14695 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 669.718163][T14695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 669.728671][T14695] Call Trace: [ 669.732049][T14695] [ 669.735073][T14695] vpanic+0x56c/0xa60 [ 669.739172][T14695] ? __pfx_vpanic+0x10/0x10 [ 669.744507][T14695] panic+0xc5/0xd0 [ 669.748331][T14695] ? __pfx_panic+0x10/0x10 [ 669.752914][T14695] ? preempt_schedule_thunk+0x16/0x30 [ 669.758392][T14695] ? preempt_schedule_thunk+0x16/0x30 [ 669.763837][T14695] ? v4l2_fh_open+0xac/0x420 [ 669.768511][T14695] check_panic_on_warn+0x89/0xb0 [ 669.773440][T14695] ? v4l2_fh_open+0xac/0x420 [ 669.778285][T14695] end_report+0x73/0x170 [ 669.782607][T14695] ? v4l2_fh_open+0xac/0x420 [ 669.787282][T14695] kasan_report+0x128/0x150 [ 669.791974][T14695] ? v4l2_fh_open+0xac/0x420 [ 669.796644][T14695] v4l2_fh_open+0xac/0x420 [ 669.801044][T14695] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 669.807096][T14695] ? __asan_memset+0x22/0x50 [ 669.811685][T14695] em28xx_v4l2_open+0x157/0x9a0 [ 669.816625][T14695] ? do_raw_spin_lock+0x12b/0x2f0 [ 669.821839][T14695] v4l2_open+0x1bf/0x3a0 [ 669.826338][T14695] chrdev_open+0x4cd/0x5e0 [ 669.830838][T14695] ? __pfx_chrdev_open+0x10/0x10 [ 669.835764][T14695] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 669.842633][T14695] ? __pfx_chrdev_open+0x10/0x10 [ 669.847573][T14695] do_dentry_open+0x785/0x14e0 [ 669.852609][T14695] vfs_open+0x3b/0x340 [ 669.856687][T14695] ? path_openat+0x2df0/0x3860 [ 669.861539][T14695] path_openat+0x2e08/0x3860 [ 669.866217][T14695] ? __pfx_stack_trace_save+0x10/0x10 [ 669.871667][T14695] ? stack_depot_save_flags+0x33/0x810 [ 669.877334][T14695] ? __pfx_path_openat+0x10/0x10 [ 669.882404][T14695] ? __x64_sys_openat+0x138/0x170 [ 669.887853][T14695] ? __lock_acquire+0x6b5/0x2cf0 [ 669.892889][T14695] do_file_open+0x23e/0x4a0 [ 669.897474][T14695] ? __pfx_do_file_open+0x10/0x10 [ 669.902590][T14695] ? _raw_spin_unlock+0x28/0x50 [ 669.907521][T14695] ? alloc_fd+0x64b/0x6c0 [ 669.911936][T14695] do_sys_openat2+0x113/0x200 [ 669.916989][T14695] ? __pfx_do_sys_openat2+0x10/0x10 [ 669.922349][T14695] ? exc_page_fault+0x6a/0xc0 [ 669.927195][T14695] ? do_user_addr_fault+0xc6f/0x1340 [ 669.932829][T14695] __x64_sys_openat+0x138/0x170 [ 669.937791][T14695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.943932][T14695] do_syscall_64+0x15f/0xf80 [ 669.948689][T14695] ? trace_irq_disable+0x3b/0x140 [ 669.953799][T14695] ? clear_bhb_loop+0x40/0x90 [ 669.958636][T14695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.964611][T14695] RIP: 0033:0x7f394a8a7407 [ 669.969025][T14695] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 669.989238][T14695] RSP: 002b:00007fff3c4b4d00 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 669.998212][T14695] RAX: ffffffffffffffda RBX: 00007f394af52880 RCX: 00007f394a8a7407 [ 670.006448][T14695] RDX: 0000000000000000 RSI: 00007fff3c4b6f1b RDI: ffffffffffffff9c [ 670.014701][T14695] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 670.022839][T14695] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 670.030991][T14695] R13: 00007fff3c4b4f50 R14: 00007f394b057000 R15: 00005619289904d8 [ 670.038962][T14695] [ 670.042509][T14695] Kernel Offset: disabled [ 670.046928][T14695] Rebooting in 86400 seconds..