last executing test programs: 29m19.876601028s ago: executing program 32 (id=109): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x235, 0x0, &(0x7f0000000680), &(0x7f0000000280), 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) syz_clone3(&(0x7f0000000600)={0x44000080, 0x0, 0x0, 0x0, {0x34}, &(0x7f00000004c0)=""/54, 0x36, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r1}}, 0x58) fcntl$lock(r2, 0x7, &(0x7f0000000280)={0x0, 0x0, 0x2f, 0x3}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, &(0x7f00000000c0)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4040000) 19m27.972516067s ago: executing program 33 (id=1738): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x3}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x1, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f0000000080)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x42, 0x3}, 0x1}}, 0x10, 0x0}, 0xc4) socket(0x15, 0x5, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r5 = accept(r4, 0x0, 0x0) r6 = socket(0x2, 0x3, 0xff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000003c0)=@nat={'nat\x00', 0x670, 0x5, 0x328, 0xa8, 0x1e8, 0xfeffffff, 0x290, 0xa8, 0x290, 0x290, 0xffffffff, 0x290, 0x290, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'dummy0\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1e8}}, {{@ip={@rand_addr=0x64010100, @multicast1, 0x0, 0xffffffff, 'veth1_to_bond\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x89, 0x1, 0xa}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @icmp_id=0x67, @gre_key=0x4}}}}, {{@ip={@private, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @icmp_id=0x67, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xb305, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xa, 0x3, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x3, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000040)={0x79, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000980)) sendmmsg$alg(r5, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x7}], 0x1, 0x0) recvmsg(r5, &(0x7f000000b680)={0x0, 0xffffffffffffffc3, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) 18m13.9745087s ago: executing program 34 (id=1883): unshare(0x6a040000) r0 = userfaultfd(0x80c01) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x358}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, 0x0) readlink(0x0, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x2c, 0x1, 0x4, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000800) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000040), 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000400)={0xfffc, 0x0, 0x3, 0xffff}, 0x8) sendto$inet6(r2, &(0x7f0000000080)='w', 0x1, 0x94, &(0x7f0000000000)={0xa, 0x4, 0x3, @private1, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000500)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) timer_gettime(r3, &(0x7f0000000000)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 17m31.711639354s ago: executing program 35 (id=1953): socket(0x1e, 0x80000, 0x0) r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000002700)=""/79, 0x0, 0x60000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001680)) r3 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/198, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, &(0x7f0000001840)=""/242, 0xeeef0000}) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e0ae50d0403"], 0xd) r5 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}, 0xfe, 0x0, 0x0) read$FUSE(r1, &(0x7f0000004940)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002200)={0x50, 0x0, r6, {0x7, 0x8, 0x2000800, 0x238d117e660ceb5b, 0x401, 0x6, 0x7f, 0x2bf, 0x0, 0x0, 0x100, 0x27}}, 0x50) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) symlinkat(&(0x7f0000000c00)='./file1\x00', r5, &(0x7f0000000c40)='./file1\x00') openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 17m31.31252086s ago: executing program 6 (id=1982): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0xfffffff5}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000200d1"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 17m31.082259913s ago: executing program 6 (id=1983): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r5, @ANYBLOB="00000000000000000000000000000000d3166a893caea6bd5d9e1388ebd342d974e798f4b5d90d9a94c900159cd126a3db7f"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004040) ioctl$VIDIOC_TRY_FMT(r2, 0xc0cc5640, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@gettaction={0x84, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x3c, 0x1, 'csum\x00'}}, {0xc, 0x25, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x0) listen(0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x6, 0x80) ioctl$NILFS_IOCTL_RESIZE(r1, 0x40086e8b, &(0x7f00000004c0)=0x3) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4040}, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r6, 0xc01c64a3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000e7ffffffce0000"], &(0x7f0000000040)='GPL\x00'}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r10, &(0x7f0000000480)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000240)=[{0x0}, {&(0x7f00000002c0)="c7934c2b8cb65b8c23a498c85d99e9882c0d3f090eb7b6464a188a6ca1063ebadb5174c27bc50eb4371c14763aa6c0f112a8cc72189a784b87bae2d958275336903661a0a591032beaf89091f5891cdfd0665e179b3314318cc59e9cfb071cc1d619147383bf86365e5983ca5d62e9ce64e72b100f3b2da44e33f9a23e71824a9d61afa13b6047a6a58eb2941cab19beefc368799df927217159207eb522fac33985454af74673e3e7fc20c6d29fc50e0723f9e0b9", 0xb5}, {&(0x7f00000001c0)="e7d80a430bd1407c7af58bfe09ff3e85b5409b1a718914c0196bb94b10e8b9f51a09dffd38f7e180465edefc1f68c436536dfee9b29796cf256dd33da3ad9417e5551481a27d31b24ea84362356695bf37b4d85ad1124b", 0x57}, {&(0x7f00000003c0)="96b773bf2015cb898f690deabd19147918e364b75cf349916c1331ff5f4e6600ba6aaca9d6f0f69db5b97b272c1c55c7695fe4b5ec690f81c7a0997697d8c23dbdbc1c5f2575232acda013c3b2b6ee882444320d55ca0f6abc658a45cb337d6bb30075f74264164ead3f221e8f3b27de07c069aa2a603d0e7f4c1ac409df32545f098a69336155b1a06d5e85ed39030a3f5155723b9d0c4a683eae1a54d482bdb971274f496d7543d72bfb046c14fb66b2251ecfa3f8cd4730df3064", 0xbc}], 0x4, 0x0, 0x0, 0x20000000}, 0x80) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c00000010004b0429bd7000faffffff7a000000", @ANYRES32=0x0, @ANYBLOB="08b0010006820000400012800b0001006272696467650000300002800c002200000000040000000005002400010000000600080088a80000080005000100000005002b00050000000a000100aa"], 0x6c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) 17m28.562983349s ago: executing program 6 (id=1988): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[], 0x33fe0}}, 0x40010) pipe(&(0x7f0000000140)) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0x20000800}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffa, @rand_addr, 0x5}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f00000000c0)={0xa, @pix={0x0, 0x0, 0x34565348, 0x0, 0x0, 0x0, 0x25}}) r5 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, 0x0) ioctl$VIDIOC_S_CROP(r5, 0x4014563c, &(0x7f0000000100)={0x9, {0xf8000002, 0x9, 0x8, 0xb}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001200576d10000010fbdbdf2507", @ANYRES32=0x0, @ANYBLOB="00000200000000000a003d"], 0x2c}, 0x1, 0x0, 0x0, 0x814}, 0x0) syz_io_uring_setup(0x892, &(0x7f0000000340)={0x0, 0x6994, 0x80, 0x0, 0xbfdffffc}, &(0x7f0000000300), &(0x7f00000001c0), &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 17m20.996713654s ago: executing program 1 (id=1998): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffb}, {}, 0x0, 0x6e6bb8, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) sendmsg$nl_xfrm(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x19}, &(0x7f0000000280)=""/215, 0xd7, 0x0, &(0x7f0000000200)=[0x0, 0x0], 0x2}, 0x58) r3 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) r4 = gettid() r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_XSAVE2(r6, 0x9000aecf, &(0x7f0000ffe000/0x2000)=nil) file_getattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0x8000000000000001, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000580)='iocharset', &(0x7f00000005c0)='io#harset', 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r7) 17m16.325166124s ago: executing program 1 (id=2003): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101242, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) r3 = syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000040)={0x1}) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) r4 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x1, 0x40000032, r5, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r7, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r7, 0x0, r5, 0x0, 0x7ffff000, 0x1) readv(r6, &(0x7f00000001c0)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) r8 = openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r8, 0x0) 17m15.390348442s ago: executing program 6 (id=2006): socket(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000380)='\x02\xc3\xf6\xddM\xd6\x8dwE)\x83\xe1\x1f\x9c\xf5q', &(0x7f00000003c0)='iochabset\xd9S\xdc\x85\xba\xbd\xd5\xb4B\x1b\x88$6\x85\\\xfe\x13\x1e\f\x14d\x04\x8e;\x9f\xa1/\xbe\xab\xc4\x82o\xe3c\xc5\xdd5\x1ca<\xdd\xd4\f\x14\xc2\xbd\xd2\x93H\x1a\xc3\x03\xf7\"\x16\xe2\xe6\xa5\xf7\ar\x0e\xedU\xb8!T\x13-\xef\x9fO\x1a\x03w\x99\xc5\xc3\x89\xd8\x99\xb6y\x18\x11\xb9\xf0\x17\x7fX\xfc\xb2\xc6\xc5\xbd\xde-\xdco*\xcd\xe8\xe9\x13\x04B\x9dw\xedH\xb0\xe0\x91\x04\xe6\t\xf1U\xb2Jn\x8da\xafv a\xee\xc3\xcf\x16+\xb4\xbbn \x1d<\xeeC\x1cv\'\xc8n\xd9.\xb8\xbe\xd7\xe0\xa8\xbb;\xf5\x1agV\xfcT\\\xb6\x7f\x9e|\xc5\xec6P\xd14\xfb\xe6~\xaa0\x955W6\xc8\x8d\x85\x86Q\x89\xf9\t3a\xed\xda\xb6\xc7\xf8\xa3\xcb>\x8a\xbd\x7fH\x80\x14', 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20000000000, 0xfffffffffffffffd, 0x10000000, 0x3}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x21182, 0x0) read$FUSE(r4, 0x0, 0x0) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000140)=0x2000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r5, 0x0) landlock_create_ruleset(&(0x7f0000000340)={0x7e64, 0x3, 0x2}, 0x18, 0x0) r6 = mq_open(&(0x7f0000000180)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x00\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8e}\xe1r\xf7s2\x82\xe57&b', 0x41, 0x80, 0x0) mmap(&(0x7f000074f000/0x1000)=nil, 0x1000, 0xb635773f04ebbeee, 0x11, r6, 0x15b77000) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000007, 0x200000005c832, r0, 0x9dc0d000) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f00000004c0)={@empty, @multicast1, 0x0}, &(0x7f0000000500)=0xc) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x4103, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x33ccc}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2}, 0x880) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 17m13.344583198s ago: executing program 1 (id=2008): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20048054) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(&(0x7f00000003c0)='./bus\x00', 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000240)=@req3={0x7813, 0x3, 0xfffffffc, 0x81, 0x1ff, 0x7, 0x1}, 0x1c) r4 = open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) ftruncate(r4, 0x2008002) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, 0x0, 0x40) listen(0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000540)=0x40) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r6) recvmmsg(r6, 0x0, 0x0, 0x40012100, 0x0) r7 = gettid() process_vm_writev(r7, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 17m11.396263267s ago: executing program 1 (id=2010): r0 = dup(0xffffffffffffffff) ioctl$TIOCMSET(r0, 0x5418, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x2, r1, 0x3, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r2 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r1, 0x0, 0x4004) ioctl$SNDCTL_SEQ_GETTIME(r0, 0x80045113, &(0x7f00000000c0)) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f0000000100)={0x2, 0x0, 0xfffffff7}) recvmmsg(0xffffffffffffffff, &(0x7f0000002600)=[{{&(0x7f0000000140)=@ax25={{0x3, @netrom}, [@null, @bcast, @bcast, @default, @bcast, @null, @default, @bcast]}, 0x80, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/108, 0x6c}, {&(0x7f0000000240)=""/250, 0xfa}, {&(0x7f0000000340)=""/55, 0x37}, {&(0x7f0000000380)=""/14, 0xe}, {&(0x7f00000003c0)=""/131, 0x83}, {&(0x7f0000000480)=""/172, 0xac}], 0x6, &(0x7f00000005c0)=""/201, 0xc9}, 0x603}, {{&(0x7f00000006c0)=@nfc_llcp, 0x80, &(0x7f0000000800)=[{&(0x7f0000000740)=""/174, 0xae}], 0x1, &(0x7f0000000840)=""/215, 0xd7}, 0xffffff81}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000940)=""/195, 0xc3}, {&(0x7f0000000a40)=""/148, 0x94}, {&(0x7f0000000b00)=""/156, 0x9c}, {&(0x7f0000000bc0)=""/19, 0x13}, {&(0x7f0000000c00)=""/24, 0x18}, {&(0x7f0000000c40)=""/16, 0x10}, {&(0x7f0000000c80)=""/252, 0xfc}], 0x7, &(0x7f0000000e00)=""/78, 0x4e}, 0x5}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000e80)=""/8, 0x8}, {&(0x7f0000000ec0)=""/232, 0xe8}, {&(0x7f0000000fc0)=""/72, 0x48}, {0x0}, {&(0x7f0000001140)=""/93, 0x5d}], 0x5, &(0x7f0000001240)}}, {{&(0x7f0000001280)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f00000023c0)=[{&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/137, 0x89}], 0x2, &(0x7f0000002400)=""/41, 0x29}, 0x6}, {{&(0x7f0000002440)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000002580)=[{&(0x7f00000024c0)=""/12, 0xc}, {&(0x7f0000002500)=""/121, 0x79}], 0x2, &(0x7f00000025c0)=""/28, 0x1c}, 0x4}], 0x6, 0x1, &(0x7f0000002780)={0x77359400}) mkdirat(r0, &(0x7f00000027c0)='./file0\x00', 0x1) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r0, 0x80184151, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000002940)={0x3, 0x0, 0x2}) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000002980)) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000029c0), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000002ac0)={0x9, @win={{0x4, 0x3, 0x1000, 0x2}, 0x8, 0x6, &(0x7f0000002a00)={{0x4, 0x4, 0x9, 0xde1}}, 0x3b, &(0x7f0000002a40)="4b8def224616ebefb0acbd71582dc8914f6fa994c91eb6739cf6ea3d270a265c3acec15e8d165335aa5bc8f6bc0f3fbb148c3c5c7cc4556b1e4fe49f6084e77aeee7651d7491b7018f0d8460", 0xa9}}) fchdir(r0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000002bc0)=0xf53e) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f0000002c00)=0x12) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000002c40)=r1) ioctl$NBD_DO_IT(r0, 0xab03) lseek(r2, 0x1, 0x2) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000002c80)=@int=0x2, 0x4) bind$xdp(r0, &(0x7f0000002d40)={0x2c, 0xd9e63976b2238950, 0x0, 0x8, r0}, 0x10) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r0, 0x4018aee1, &(0x7f0000002d80)=@attr_pmu_init) syz_open_dev$audion(&(0x7f0000002dc0), 0x5, 0x381000) 17m11.176266784s ago: executing program 1 (id=2011): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/16) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0x1000, 0xc000000, 0xfffffffb, 0xaaf, 0x0, [{0x4, 0x6, 0x2, '\x00', 0xfe}, {0x4, 0xe7, 0x9, '\x00', 0x7}, {0xf7, 0x8, 0x0, '\x00', 0x1}, {0x1, 0x5, 0x6, '\x00', 0x1}, {0xd2, 0x2, 0x5, '\x00', 0x6}, {0xe, 0x50, 0x0, '\x00', 0x9}, {0x7, 0x6, 0x7c, '\x00', 0x3}, {0x81, 0x8, 0x8, '\x00', 0x2}, {0xb, 0x80, 0xa, '\x00', 0x7}, {0x2, 0x9, 0x8, '\x00', 0x7}, {0xe, 0x80, 0x0, '\x00', 0x3}, {0x6, 0x40, 0x3, '\x00', 0x5}, {0x81, 0x81, 0x6, '\x00', 0x6}, {0x3, 0x2, 0x6, '\x00', 0x8}, {0x4, 0x2, 0x81}, {0x5, 0x0, 0x9, '\x00', 0x4}, {0x2, 0x9, 0xc1, '\x00', 0x3}, {0x5, 0x7, 0x5, '\x00', 0x9}, {0x23, 0x6, 0xb6, '\x00', 0x2}, {0x88, 0x3, 0x3f, '\x00', 0x4}, {0x8, 0xc, 0x3, '\x00', 0x3}, {0x0, 0x8, 0x6, '\x00', 0x5}, {0x6, 0x0, 0x8, '\x00', 0x10}, {0x40, 0x5, 0x81, '\x00', 0x5}]}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x6, 0x7, 0x5, 0x180, 0x0, 0x0, 0xf1, 0x9, 0x8, 0x5, 0x0, 0x9, 0x0, 0x8, 0x0, 0xbd9], 0x1, 0x1c4292}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x24040000) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_GET_MP_STATE(r4, 0x8004ae98, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r6, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 17m9.703394378s ago: executing program 6 (id=2013): r0 = socket(0x2, 0xa, 0x300) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x11, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000080)=ANY=[], 0x29) syz_emit_ethernet(0x80d, &(0x7f0000003600)=ANY=[@ANYBLOB="e727dc071f80aaaaaaaaaabb86dd60dd07a707d72c00cb697a653e336f000000500000000000ff0200000000000000000000000000012e"], 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[], 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) write$tun(r3, &(0x7f0000000240)={@void, @val={0x2, 0x3, 0x4, 0x7fff, 0x5, 0x3}, @mpls={[], @llc={@llc={0xaa, 0x0, "f5"}}}}, 0xd) socket$netlink(0x10, 0x3, 0x0) getsockname$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) set_mempolicy(0x4000, &(0x7f0000000180), 0xaba) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000002c0)=0x24) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000300)={r5, @in6={{0xa, 0x4e23, 0x200, @remote, 0x4}}, 0x8000, 0x6}, &(0x7f00000003c0)=0x90) 17m9.220020152s ago: executing program 6 (id=2016): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x4f, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000000)={0x80, 0x9, 0x2, 0xe05, 0x20000, 0x28e7}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) openat(0xffffffffffffffff, 0x0, 0xd40, 0x82) r5 = openat$btrfs_control(0xffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mknodat(r5, 0x0, 0x200, 0x4bde) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000001bc0)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000100)}}, {{&(0x7f00000022c0)={0x2, 0x20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}, {{&(0x7f0000000680)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}], 0x3, 0x1005) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xd) ioctl$TCFLSH(r6, 0x540b, 0x0) 17m8.900173905s ago: executing program 1 (id=2017): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0xa, 0x3, 0x3a) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) pipe2$watch_queue(0x0, 0x80) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000021c0)=[{0xf, 0x9, 0x7, 0x7fff0000}]}) r4 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) shmctl$IPC_RMID(r4, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e28, 0x1000, 0x0, 0x28b}) flock(r1, 0x2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000180)={0x2020}, 0x2020) syz_open_dev$loop(&(0x7f0000002280), 0xffff, 0x121ac3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x9, 0x1800}], 0x1, 0x0) semop(0x0, &(0x7f0000000240)=[{0x1, 0x0, 0x800}, {0x2, 0x0, 0x2000}], 0x2) semop(0x0, &(0x7f0000000140)=[{0x1, 0xfff, 0x1800}, {0x4, 0x0, 0x800}], 0x2) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, &(0x7f0000000040)) 16m53.61715286s ago: executing program 36 (id=2017): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0xa, 0x3, 0x3a) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) pipe2$watch_queue(0x0, 0x80) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000021c0)=[{0xf, 0x9, 0x7, 0x7fff0000}]}) r4 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) shmctl$IPC_RMID(r4, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e28, 0x1000, 0x0, 0x28b}) flock(r1, 0x2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000180)={0x2020}, 0x2020) syz_open_dev$loop(&(0x7f0000002280), 0xffff, 0x121ac3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x9, 0x1800}], 0x1, 0x0) semop(0x0, &(0x7f0000000240)=[{0x1, 0x0, 0x800}, {0x2, 0x0, 0x2000}], 0x2) semop(0x0, &(0x7f0000000140)=[{0x1, 0xfff, 0x1800}, {0x4, 0x0, 0x800}], 0x2) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, &(0x7f0000000040)) 16m53.544425075s ago: executing program 37 (id=2016): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x4f, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000000)={0x80, 0x9, 0x2, 0xe05, 0x20000, 0x28e7}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) openat(0xffffffffffffffff, 0x0, 0xd40, 0x82) r5 = openat$btrfs_control(0xffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mknodat(r5, 0x0, 0x200, 0x4bde) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000001bc0)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000100)}}, {{&(0x7f00000022c0)={0x2, 0x20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}, {{&(0x7f0000000680)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}], 0x3, 0x1005) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xd) ioctl$TCFLSH(r6, 0x540b, 0x0) 11m11.924278907s ago: executing program 9 (id=2690): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xfffffffffffffe3e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x10000) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000001c0)={0x0, 0x0, 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000140)=0x1) writev(r3, &(0x7f0000000080), 0x0) close(r3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mbind(&(0x7f00001ae000/0x4000)=nil, 0x4000, 0x4002, 0x0, 0x9, 0x3) syz_emit_ethernet(0x2c, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008902450c001e0064000004029078e0000001e0cb5a180fff1ffe"], 0x0) syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0) 11m9.519711652s ago: executing program 9 (id=2694): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x18b882) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x80) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r3, &(0x7f0000006380)="c66dd220cbdeb68f27c1f98bf43fd861bcf841572658a3308737983b31a434673f1003eeeb6d9b934bcd19cf754f4882114d61e15354449f763f772e86c9e2252731f7a098faad2accca3e470845b32918bcf530f9474d3cd610d9028cb7b247d3a73d887719f70554d8976c10784c8073e521a80b5ebe7501d6c3b6b5cf9a498a1e97b8201ac756e5f35d71bdd4d196e73cae0cc34c7140cde8380de823e8c76662f0844f549818b5ef6c732b8f412b79273508b69f2e6a653709b4d9bded080b6c15ca5c5b8ff23309e05d460dfb40403f60a3e5a0e1d4e1aa59d53823a047427673267e79d40fdd6f12ef696fe22887d24087373f64987e48ba20e7f47d1f08871e0c22a02593156648fc106c4529d8cf17c71d473f4ad43992b1cdbf5cfaaf1ce401d5ad8b9c6bdc3c60a88a91c52f5aae74a5d25e0cd738fd80169a98b84d4d24a7e86c9d8e4c3e3ff1a9fc44a87558aeb7acbfec13a26a4b121b2cb9ae628c682aa4c44311c45a673bab25880665d6cdf589e5c5415794c4fd6b940e7a44df93a34a684183581c850fbe97ef8c1de852ea836e0db1a104b498d6dd8fdf65c606e772de2e9dfe46a418fac3c0bdd72916c951e3df04f2ae85839305be2a86aebcf4898b6e49c27df6033ad2b8651279ceb20c779716240d3d0fef3bb6c417a8c6f75398a91942d8ab11f21f5795767650a96e246c7244f8e4935e9c01349616a098ae810487d657fd095beee05a36812f39f4266f25f4508e80f19a4aec7116f1d8bc48bc2c1f0f96ff34b66a965d428852766b78f1e7eb0260bbb355cc0859af6988ff7efa0b3fede3d5f2f2147ffae4a5eb58a7585b596270334c360a1547787a95634e13d59bf53f51f48e75a6a3e48f8348f4cb495d9699dfdf8cc71668c5b9622578100f7163394cb3171fc8a6c1e7f88f08b8c3cf4b0cd9a1bc16bd1488ebe43199d97cdf4bbcde8a06a79c5af6ff2ebf1a04add74830cfac0b946514b18de249e934dd8a1a96fce085320fa857c853480170208533acd3d41c4384a932eeccd4ce7d09827efae4c0d19d00c5b48943c4d877017be59434dae6bef767fb9ffd073c2261b06c0f23a0c77a5bcb1f5738dceb6abee00bd7c649f6ebc64b4b8b948319a22ed4add48eedda8a2cd1bad6799e1d9ed778e5ce22d5fead0cd06806cb4b7b5661f9db6bcf9ddcdc9e49e0e6a8ec98fc42c660d5d75311fb9c9d06074611ebbdbea45672dd78760ed92d0e95c1d5ae234d674dc3ffaeef3d928aa4b93c0fe55fa886bd3f2371a5bb22c4dd6b8bc13250490cf279d4e56b646dec4eaa53951d55f602c1f4081d49316f6bcb35aad0453b44c7f266e99838683404859bc372d1df5f1512f35558b3706b32093b72a78a40c8a188852a0b5aca11a34ba23195cb598ca595f243c260392cd793b65dda856f81be1b54d873a0366407ac26687262d6bda693e058f598bde80e304c83dd0c2fd0e634ff15e1ca4e2918bfa8e3a626aee7b5e445aa7fae096595fe58032c993eb06ce49c1045b1f132f2c90d6e23b76076838ad7ed7a6a74245d7ad72b38bdc04e458d3908d1d272f23fe18f68ad746e5440cfbcc3b7ad477dccd6fb2db536df0e4d24480d2765e724ca06cbde7e01cd32e36681796a454c801adc1b25b501cc4aaae778f3783dad15d12e656b09bb3d8f37efc86cc7faea5e51913902faed79ae5973f4413e275f78e7e66099f9e41bd73a07445a780dde0b189308e3b83d1a3cf5aef2d3e11fcad930eb6c60ebb899b22cdbd539412b2371d28a4331394d8f29d8b16f94ffd91d4eb5c278e7f6b4024fcc7af9dfde1b3c915b06dae683760fad05d6638c6389fdd19a9b12956c11e9b9ea7d30e09b13d9f681e012f1e41746341a61b71ac6c333b29883ca2cd1aaa3c02e66c85de1e3b2b7e77b0dd1469ab9db5c17beb2d33862db20fd77de685a1e70ba55b0d9cf4b2d3d1196196b5317324e5f189605baa37493c9586b7e475865b4bb21b335e8b291b9dea17f6afc1cd84618b189567817511de821a866a00b62c62516b716cf55dcf7f5b7d7520306fe03f00cc61b7dc297886459d74bedb8ac1d05cc506db74d018c877da735481c318224fd06f349b59f69b0d2d017c817e5a1f934d263789d418eb69c772d923b01a6a4a6afbba4a6980fbf7cddd84f8e4392eaccb98cdd30488919ea6d492d32f9ca4233649117474f4116f6ca4cb762d524c0f92bbb40d3f430dbd50dba20adda8b4170a73c3b66257c412311a7bd3ea3ecca0da47a7a00ef0a464ee0a4b2402b61db833f3cfe1847b9630de47f331d575f6e3c6fb44a9021700c6d8055ea982a05a5ba6a91a41e7445fdba7ac09202fee733a5c216b3c3090991225b98178508d1985832f8e7dae58482ec0fa2215c935bd0ef9f03c0ed3caf97bf4de023605aa8535f1e88e841471bd8842084c6715a3fd3acd07ec9c43f635e5f868d82cdc6f9424ed978d39e72cc92535c2637164f15e9a67770389535ba46cbf786189562908872274ba126b313bd1c0780e9d0ca38956d1277b58f04eaa1f97ed8c6c83d9c05df0df8b43da930707a84662e480a33d1868edc9ff65368d51fda828ad29ecbd3b2cc0ddb0aad251b4736f872ba5f066617a9e9675ed7f80685544af44c677b9d39a1a353984ea4ccbf36d759b490f8dcd5621e573baaa2c03ef367f543ca5d36d1c9d33d4762bb0b1e02ec67d3511582d69b06a57d15f5260fab5ed8d9361948eabf88d9e776a18c5c4f2d42bb46373861b613db9a91ccff8fbd563ddb37f0738fa1723c23c85cac0f9eb53a41d115fe0339eed3167f59b2f2f0739cf9c0ba5769b18a213d5809bccadecee6e781811bf584c22a6557516d12bd58420f5c67c673fdf0888ab31edcee3198927b5b87a63f89f7a07d1da8cb946f0a87e7d3bb455c888f394d17694378446c9073e54368564dc546b6c930ae17afcc8360cb2e31d87ad8923f60033aa637a399707398ffa51645ab1d9963c29375c834746004ac16d24d8f006e9674e45da3d938de524857c57fd39b22678f39096309527ed22c41677a65a67dc0998a8babc9cb688a56628d09a732773d9019d92399415e93852a12d66ccbfa571837b7689c7cc50026ed643a89c8f1bdef6d01016e6e1c21bb779db52c2254f5dae40ff173943ba62ce343ec035d93d5c92c64884d654777cf6995dd0c485c7c132db383769ae1f35f1980654d2b47e92b1862f653eeb81ada4eed6c9d0fe9da3d7db5dfb4d66b2d576676beddc4394ade2acf55f9ec24aee7c4c77138e799f62deb19367ce226a66715da515479b176c9ca06c739566d279142ce2163b8835c840a3de6e2d275b5d5a948b26ec8faa6cf322c5038fc00fb0a27f0b76b5e305780c9145e99feadf571bf8d87dc93ea0f8ff3bc246b16d4e43256507abc7ccc92e113a037ab13855058ba1e0770b90f52e0740c157d68963b3d236f681454589385c6124bddf948c5aa2e147a3543c301dc6d82acb504f76239c890b7d3d76dbd7c26445ab6fe66f9f71d95f4f0d6c51533ce4b05353ef27178f6b6813366189ff4cc19cc5c9f7aca4d6b6f3b5b213e828cbf8b8b5cacb42ade1fa2594cc4ccd3457a45a5b19926f17b9061c9072fdce96afbd3f2bbecc6dfbdf9d9b3e1a621e65a7cdf0a97cb0223b220b39a88b7414ce91e5fb52f3c9c7e10199ffc8fad826d40a798ecaebbd8881c1605f986bb0af06f416280f63f3a3c28d399d13c21e6d79501cbbfcc9483a73a931e91358807fbebefd39b466cb9f251fa4fc7d5f4fd2d87d4604c9750593d3a801b963085ad7aaa91e023977742b728d292b046d0bd49f81717a686f10096e154681b85aeb81a26fa8f46bf3dfdf5dc7c7ca37aa3da37e53a105be5935640baff476453f53ffcf786894eac35d1933a5e97fb9b6d975f9fbe7914d09dc948d305005eb4aba3a9b8cdefb30dbb3300f46041db06567956ba4327280721addb17425a2b223e81bc41467cb413cebbe16818468eeb5b24b6cd79ec4787f693f3c301e5dd10747bea13bf042d6fde42d18c48fec0e3e43454799da1d5501130fc98917fed27d696ae85a39debdb67d5b3d70a82a2097095476e24211757626c91a29e917796766bc4016456c4acf0436b6c02055778ce7f34e605264f7d6d1321072c4ba341866ac6f78e9b99a30478eb7f09a17f4fb3e23184e878c2f60d2c18617185007841778c7c256750a287ec0bbdd20bd37ab50538e43a5929456d336fb46a04593765b2692ba15e7b71b97788970a7903e12088211098bd356132862a4d586508b4aac077d3acd4f77c67d9066b436d14b20d3e2870cb19cdad5581de2e08da761fc95755c43cf0dc2cff84e6a3a8fa2d0390fcfee285a133b37ac7b2fefd0d3665b1705784187e228579680be97982194329136fb72d8b61cdeaa88f3dfc835ae22167c0130529fe81043b0e1c3aebccb1f4aadc28cb484f850158504439d389d1e559ff424217dc031d422a8b7b51731db75dc541e16fed8fae14f58c1f9c8d0fb91a685245ba558c1aeb243aa728db51c3f3aa6d8f7a4a547b8d95018402283a59a45173e7696f02304954ebfb43c2215f180c8e47e433e5262e279fdb63405c81b0f128b7d6a095ff5f85690331d94d34923a3e8beef5cccbf7b208b2a0aa898f9a32b2f1bb55aca4eaaefcdf09acd871f4b88feb535be87dfdbb5ad45ff3c26a2765230011d90baa4b5d5baaac5519f9013c8fd497d57083403ee6eb0c4e23428cf3846bd34d69840d021196f9a9a4fc101016fe2d4fbf4ec23c11e9d737c5e6d2cc3da7e0981c00ea9df07ed88ab05b7821033b2d311f2fe0525176660d0a33b0eb23a57f5b1d41e2c1698ac7bfe5f59c27792f899fd39610052b705862e798a27084450edfccd180a13d8adf8072430e9305f41b0a67bd1784b6ba9450b1e872794e0b7b55b22a2f649f83270b98d0a0137694fec0d16ec2ebf37c72d9398d231a71e40c912428929a29a433dc0fdcb697f64e07540da92067b1b5a7735fb7fb8ac8da2591fa44b676bbaa32ef5e6cc11f1b2ab3b262d9bc4b2082e081ee50fe71def63cf6e2d588bb8d66a8daa8c8a30ca07d2956463e1affc76003e4bacc632cdeee50098fe80cd7485fefed6eab639d8c42a1357fefae5a5a779fad536474e3bdebf6aab699552e807ffd8a44030f439756748dee9ddf19a6cbf5f75307b03c5ef4185a31a41583fb4ca3699e06319371c5d932d6e5f4e1bf77c02c70564d2140f7510e183ba2fa7ead8a9b8cfb085a9d0fa7dbca7561bd9dc1e5c1a1da0322982ff29c0fa2cc33bea18646445cc59b44965a01570b7b739d730df8f1f2cfe3558e7102de13994d6745ef8f91965265fbe0d29c3f381e1eb9c63242962a4409ddb0a4946ef9ce5b0eda90f8365362681943247a0d87d9b7fbbdd26d4902be34068499b6e2ab2ea746634402e1065c8cb9c32a211d10fc2796f1a7045c59b9cbc4771dbf56a5c38303f93951194d06a1b8cce31dd4869a148ae90a797d09de168e47974ed9699eab3a6424781f481d03cf1046df28b454af02df72c0f56c693343a82f7f383afb3ac452200ff155444010f6c988de71e3fb6f079bc6ac2bfab6ff451242b7e3e70578b8206529816764206d47115cda77b3e356e54f825ec745017ea8c3dcb412523b754b951d19fc075ec66012cceff51da925af9079f547e840c3f2774239cce5fd6533f3ee8d194812de2d4499ef18c4bebfa8d7273307d7aa0ac09e6ebfd95ba99946a585a4bd4afef8bb0b52857e8415a32b42e0a9ccb0749599d7a43cec793b22c96b3de91534c905456b25a5972124b83c7d8f0520cd71c5544e49afab26cccacdb7e112f0af1acbcb2b68760c7538aa6c990814d7cf7bde5ddd618bfd55bfbdd968e53e28f94042fafa2796b5bf2d1be612c81dbafbf90b0728b4b06fe216aab91b8898780ab06cff75be5239c39ac836dbdb5482222e61ff5971ea492c5b5ef509720fc886f8a07a9232653d427d176574c99d65244f1618fdaab109f732e1e1295391a25f9b750c9761bbceb81d316d9f9dcd555afb762191b7e173f06a4d8f4d97ab88b9ae19f6c85c361b8b5cbe91a3493cae594063ed457f3be99772485b34d3308da4e751e58a14cf7c771d8e5be77f88c7567af095caae1eb83d259cea709ea5441047ce96f0e21faf89ed491bba5d0dcc6bc33a07237fbef2fe671447ce14e16a1cae4361938767ce65ecfe0c63e1261cce5fbf603a2537d21b50c9a3a3ed6a7cf112a0586a653b43f813912a226aa4722f7edaf8dda5553efb22721dc71924aa73bf232c2439b1d806d3beaf157442643c81ce2b551b82d63cbcd4195029e2f63aef127ed4df0bffd41665d86213512557ce90ee54fcd01078a6a19085bde6a0343595f540b1ff610bd7a5a2d695bdc5e508cbf544d15cf5920b3e405ef4e10e6651c5ffff039adde2f805143b78916188fec05cadac443c93447d23bb25b0a0cfc787754a20f7efcdee5798de939b758f238f15c23f2622b8ed682378017c8f251dda0261baa33c6262d42d6365e68e85d43a46d92aaf04acee203c09487755df49f07ea1129782b1be0feb6f011bb914266fe2cf5361c377fe33a491089f701ac61bcab2bfa3bbe8bf7b0b834dba1bf187ab78fca751b57f1bddfc670c80d83c34c3461d823d7762b45ff0accc3af21b38137276d4e4d7a5d0a075902865f17f084cfa94cc28f70ee7296e216401b172184df0e060dd61be91efcdbeb03b4a6699c88a16ebb18f3e938cb458a377e29a3f3cbdaaf121e278b691c02b6f0dc790510840b3970b1f905b421a1cb376043cc7511e70e94cc63941ed0f864b4118592878538e12e986b9abaaf2ed588ad5f0e5e0851ffc29ef21aed080eb6f35fa10052f27767d0ddf3fea5a08c14657d68a9c3e6cba422d93a6aff222c40eee9f3c9fcb03a310453b616a80c48646f7d196433736fedcfc2ff4fa1a43bf9f8fc0a0660cf9f79fd0d8e106591a2319cff5eb0a5be578d178e0e184a9eca92991ca63bf1e9c5b1c56dba3c836975a74d9eb9b763ce7c5dc753cde77fb2d048e3656a15f9aa7f9dea249c4a3dc0456b64533513e69861fcb9f4348d78acd5b8ce1f3c41271b8551ba4d5754fbb123862236bc94192a5306c29adb2b0b053cd7d4deaa1be6c61f75bca27b53765a7356dd34a48437d5e5b356d48db64749243fea9b1f44e4625fe7ce820dc9f1a6022d77198e6e917cd4f5e23622d5b3b2fafd4f9be0b85db21371f5d35c7c651a616a8351a02dbfa74f9d273a0eb7d2ab9fca254bd28509b3d6f5420108cabc42d9a5670779dfdfb78afe74cd87fdf8e3be937e6c6981eb88156f5cbc91e4b92f8d65a151ee3307cce381dc189c54a29d21c9fa9f512c50dbc9f1c0ddb43b6b10d5190b8169f9e06f7c60a2103c9c3fa3fe0d1cab8358cf4ddf95d5e26fbed636b2f1f474b7d10426afb5aa21948f7486e0df5275ffa6c091c46c3868703c4e30e1a15a8d27a708b6d5fa7d123f1524c221fb93b5f9f8d87b0286de38c6112a05d1f07706923b531e335db326ff756acf6cf9a5e5352953d112a842d7b2f05d296f644b01bca413f2686dbdea6b2cc6dd8115e22d832af742eb801ee61f6b90f93d227b694fe474385125801d6eb58867c15246faa6c0a1cae0b05f104fb2e97476c73a79185796e0c26bb1b59527aba4b79db6ec99f1650898b996e068329d17b94730cd6ab79a3d77d80e5ed78eecc7d680b5425231357f24c46fd01732052eb18737634915131c7ffcdb0b48a35d8761c402ff5b56aa1a9080b46836e4a888c86d7a260fb6cc2f3b9f68d52201531220bbfe0e7b2890a390acb33831fa1126b88dceb126a555181edbfa4680cadb08d38abe00c91980ce68ab58274ec28eaa697f8a4d7d6db744d8c9daac2035d40a5eb565e12c8be5c2bc1d725f713d45a03ac14ceaf91bb1c5dddcac87553b9d22e23d738742e3bf994412ab153f66ddea53a35c9ec19c555a49ae1aea112a70ddc10201258536ba93ae0dc7fb60d51ffbbe9e96eb8eeea6878e3784dcd686fc0db4516249cdfcb9f6d880fdcf8f86cdadd23ea7455b3b7e3a0e8affc9b61be59814f8e32175c869adaf7dbb5acb4c994e2269d2657011e8751c5c0e6e97e9eda4e8e6c309e842c8ea01c20de3c5f4f6372cc8cb7cdf2b0e3519155e4c662fc8572c36d9d3b7eb3ee19e985bfab9eb20e077c20dec4172e584357cc54f9cd49742e0b31d1fed87812f19efa9ae81ebebb021df0c280aa9790d2f1acb94b38f268ca7861b1da63cbb86daaeac3a5b067c86fc532a1db230a29578563f16dee5b4267f9d474c81c9ad762216452cb3a37c8ed44cbaab2e4b9a9583b134da3a64390fe5f76946879a1757d127e6e10b3b3042de48189350d844ede16134c770dba47cf56483cc14e2cfc93fc11f47cd33b06b720f531efdd1ff1254966b68fc46645ec3b45c2a60427e69ba1d710f25571522ba90622315f9f0cad33f8b1a1053a45aa07964892621ecc9256b7c4e21716e546c235fdb618f339b55c377a30b61a9add4e3b5657e3433a6feaff5b67ef34771ae6d04449b5228b6b99ce7237996b307613d14602d76f21a58a55cdc71a1f348ca18265634f094012bf4eae241df634d7424de578eb4c4199de382f2795c17eefa11ac2ad4625be7263373de4bbe189d42fa51953652d433323b9e6110f00c7cb44e4e7df1e6e1cc421c5cc5e78eac4009824d73b4bf0a0340ebd883acb90e928f6034d6a44edee021abc40726df358ef83429351f46aaf10b63b0a5f4c68bdf4e425f8ce7c6a8ad95dc4874836a56a298f586a602ad7b33350fabaacfda30b80210432dc6b59cb807d50782399624d624bbb5e759c09daec8ab3afbff204f62f94754e377cca96b00ba4842d52d8f12a5ce7d1dd81b760c1c5392f739d91f8bdc8c290090fc6e3221ee69abd2648b6c7a818e8a0d04ffd83464f7b26002e4d5614392848205fc0e766713e4c65f46ec2f9d221e98fdeaa5c329d8a0e7481690164fa1ad829ce9dd2eec2fe92231b33415c3f564161353ea7f823e3dc97c9e905f40d693082be719aff77b3b35a832ed3fc16e3bf57305fbabfbbadea1d33ece1f05ba482d3dcc391e0c709c02c335a6289a8deb035fd5b99edde61f0d936631e21251eb65c1dc23574a7a8f9ba8fd0b6c958ee146954cdab3daf90c17ffe92aef5390b4e19d32fef469e9e60ef8ea16af6b66dab7de1d6ddfeeb602cd69d8f32e4d5f06bfaebe7f000d62abc793ad34d77d1369c63785e93c2ff205769589011208ed6affc73dda9287bc8f4d9e27d33038b699431f56285f92fd9f02e78745fcdca4a4840dcfc307bf8f1806146d954ed5ccc8a66edf2179e2a5356624b3b30f8f78839ddc9940794acce40290e5eb73dbb52fe1c633e88d1492aedc69b351912a0890b63eda0d8756a5b7c47c740fcd73a0f419fa363fbf0cd3fcdd38f0fd055627932c998421f086ee0cbe0520b2f2fd6d38fce1575a2c90fef9f81aa23fc7c4c5625d6f46fbfd02ac31cd1620a92c43b7884e4a050e5ef5bb9b8f9825a159bb0370c828519ef71090e09ab43ff2bd2cc75563fb9073eadcfd869f0d9b6986e4320b1986ce3f19a3f5dce202f8c13757726e5d6a9fc9e2b0b357625362fb873709fb307ee51bc58494857fdd3811f6a8aee0086b0a62da4e327c698e5639e373567d5eefc76e0d6725272527cdbc01a2b40e7511ac986e32bb7e48558756dca3b944855fd9dfdbb2358a52e53769817cad50af13d8a5941c41f6bd121cb267acdc461c500855c6f6c0750367c62dd32fa41595a6070e728f1915bab951e5536ff8230a0608ac96c2e19a5c1415209a3774c091174f575bc937d544d495370294aaffc5e6be76364c7a212bbb4ec7f3bd38db75a159b68e2b3075ae6bb68ffa02e6bfb42553b505da20f133b2855572b7e6f8f3de240d9ab1ff32b3d9825f087774f4932024be806b78f059d4b3b40414df456aef405d1cffb2f3604834dae38932d830298df7045d404f005f5edf81061850808d4998f6ce80bc7569081765875d908d4b6a0edcb434317543a4f5954a5e0e5b7c4da75cb369e2810e2aebf950b973ad3380bca5d0de8311e59a6ed3f01d8f7c1b39060fddc7ac1febe659626ed7ad27dcee7b3d409b9f84e4f55ceb2e462f55627857f8c485c35c9abdc2fa87c4281365790ecdf1971f3a285ea0bb2038ae91d927729f4bf847bf0fc724b002cb029d2a57b89218bd4a763ab01902b7b48cb609cf3b9ad8fb568aef0ceff20c5def1a4faee11d33d304e2227b83f3ab06f0b9fa5502b1d9c6fe2a34bf9abb9a5b13928800149488cead47e48c754c75a061d5ea8a515f7f55611b0c048b88c9772ca4b1eb3d6fc931801990f1611e9b1171223527dceccfe8cfd72600a88a8486e088e21c30b997af1b60b55bc5443cecb18c2dcf54dbca3ac34f10ad2be9d755679519bb674b42904be579df62436bcf06de4cfd636d592840d674d11195edeb4dfe61370e9a9453378957fdecf2115ee008224fb8c97fcd051ddb1ed8d0419b950f2cd085bf1debaafb2a46cf65be863939cffde741797fdf64c17f3b447464be0e6bb90324c4c65b3cf66958a15d537a1675dffbc4e41f7a6c92ed27c5ef0dd0dcce6f96225b4e0ece510ce00f9611e395215e116026499dce3417cee3fbde0106b2a6fbd5937423124f6549c2206afc2ad1df5bedcc5e1371ed2b9f09f76576589450b09dd990811c59c3f848c1a4fccdfe686968903edffbc010eb73f55ac5a675fa3db70db12c826c8b7360617d8abeacefa6e2a8da62e4f304543cc9217fe1b0ec4fb044ca849802c4a140b91cc056d566c8670e4600941a54b2eb8643ff206c3401c0bd9838a025545227ae3e6bcb47fa3dcd1b40d8a0917f63744fb1ec2b72211c6cfda13248b2d0b4232e4fe7015cc42d4928f07ca9161640102f22236cca7ca3b81ffc81c4ff20532b5203e0d94771b8d0ec70e637135fdbb788fa8b4704e11d3c6083a45f51efd8560c0e63435516586aa82eaa998c140767d3ce35491e301c12f74583c61cd4d2ef1caa6fea3e353637cdeb3332d964155c9d32f826829a7174ab06c44e32063e46ce742b7027cffb8999302b602949c60496a0bf3c7cdf859d4ba51102674414867af614cffb88ac177dfbdb6131f7370dcb851002cec1742fb1561257716850c9ed3b075a6c023bcf05b5d580ac8e5d7ab7e5b1723212c681989e5f91958b635e0d076634584920c1b98d7f6ea0ddded6be9eb74de778b3c57c36b18e0c56c3a051014e09fac70ce6a7b0f042f5eeca8b8885e500bcb41f6fd974e5f6888859abdf3600706a3de9fce060c3069600c63106aff24210461c5d3423fa4e350041fd166902ad86bdba8cf965917f7e3ab019e1911d8013dad576465319c4e04b89b5ee1d07f54705718592d6aa453558294743daa8dba33159fb0e291829ac220562b007597e067e5f65841563673b69cc1d549f50e9efbdf256d797fe8c7d09596c167a45d", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) write$FUSE_DIRENT(r3, &(0x7f00000005c0)={0xc8, 0x0, r4, [{0x0, 0x1, 0x3, 0x8, '7!/'}, {0x311b, 0x8000000000000001, 0xa, 0x7, '/dev/fuse\x00'}, {0x3, 0x4, 0xa, 0x70, '/dev/fuse\x00'}, {0x0, 0x0, 0x9, 0x4, 'net/udp6\x00'}, {0x5, 0x1, 0x1, 0x5, '\x00'}]}, 0xc8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0x10002, 0x6, 0x0, 0x9}) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/64) 11m7.266646664s ago: executing program 9 (id=2698): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000a80)={{0x5, 0x6, 0x404, 0x7, 'syz1\x00', 0x81}, 0x1, [0x6, 0xfffffffffffffffa, 0x20000000095, 0x7f, 0xffffffff, 0xfff, 0x1, 0xf, 0x1, 0x3, 0xfffffffffffffffd, 0x64, 0xfff, 0x100000001, 0x1, 0xc8, 0x51, 0xa5, 0x0, 0xb6, 0x8000000000000000, 0x8, 0x7, 0x4, 0x6, 0xff, 0x1, 0x4f51, 0x3, 0x37c7, 0xc, 0xbb33, 0x0, 0x63, 0x4, 0x4, 0x8, 0xffffffffffff7fff, 0x6, 0xfffffffffffffff7, 0x8, 0x0, 0x8, 0x401, 0x3, 0xc1bd, 0xffffffff, 0x8000000000000001, 0x800003, 0x0, 0x7, 0x72, 0x9, 0x2, 0x6a44d0ea, 0xffffffffffffffff, 0x9, 0x5f0, 0xfffffffffffff2e2, 0x7, 0x6, 0xfffffffffffffffd, 0x7, 0xf0, 0x26e692ff, 0x5, 0x2, 0x2, 0x2, 0x1, 0x9, 0x1, 0xe0000000000000, 0xd, 0x81, 0x80000001, 0x7ffe, 0x6, 0x6, 0x3ff, 0xffffffffffffcc1c, 0x10000, 0xfffffffffffffffb, 0x6, 0x100000001, 0x1, 0xf, 0x7dd, 0xfffffffffffff000, 0x8d6, 0x0, 0x5, 0x4, 0xafae, 0x1, 0x8, 0x1, 0xb, 0x1, 0xffff, 0x7, 0xcc, 0x1ff, 0xc, 0x0, 0x7, 0x5, 0x0, 0x3, 0x3, 0xaad, 0x7, 0x1, 0x8, 0xe2, 0x6, 0x6, 0xf, 0x7, 0x0, 0xa, 0x5, 0x40, 0x52a7, 0x9, 0xf0, 0x100000000, 0x140000000]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1c000000810000"], &(0x7f0000001500), 0x200) unshare(0x2c020400) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2718, 0x0, &(0x7f0000000040)) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000002100010000000000000000000a0000010000000000000000080006000000000014000300697036746e6c3000440000000000000043dd9036ae3ac800d827be45904774dd900ec3"], 0x38}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 11m4.373102254s ago: executing program 9 (id=2701): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(r0, 0x10, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000b"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x8800) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r3 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={r3, 0xffffffffffffffff, 0x9, 0x0, @val=@netkit}, 0x1c) setsockopt$packet_int(r3, 0x107, 0x3, 0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) getpid() syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x859, 0x805, 0x32c}, 0x0, &(0x7f00000000c0), &(0x7f0000000000)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x10) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0xd, 0x0, 0x0, "5deb13561a5fbf61048955f6f876b2ff", 0x0, 0x0, 0xfc}) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r5, r5, r5}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 11m1.798881033s ago: executing program 9 (id=2709): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r6, {0xffe0, 0xd}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x15}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20100}, 0x44010) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, &(0x7f00000001c0), 0x4) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002010800000008001b000000000008000d"], 0x38}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x42}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xffe0}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x7, 0x7f, 0x9, 0x7}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x14028010}, 0x4004000) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) 11m0.530803687s ago: executing program 9 (id=2711): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) close(0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020}, 0x2020) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3084, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x800}, &(0x7f0000ffc000), 0x0, &(0x7f0000000000)) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000002b00)={0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000000)={0x0, 0x10, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f0000000240)={r6}) 10m45.285668621s ago: executing program 38 (id=2711): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) close(0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020}, 0x2020) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3084, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x800}, &(0x7f0000ffc000), 0x0, &(0x7f0000000000)) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000002b00)={0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000000)={0x0, 0x10, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f0000000240)={r6}) 2m32.880494497s ago: executing program 2 (id=3673): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0180200000000000000001"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40000) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000004d80)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000008c0)="cc41", 0x2}], 0x1}}], 0x1, 0x0) shutdown(r5, 0x1) syz_usb_connect$printer(0x5, 0x0, 0x0, &(0x7f0000000d80)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x110, 0x2, 0x40, 0x3, 0x8}, 0xd0, &(0x7f0000000a40)={0x5, 0xf, 0xd0, 0x1, [@generic={0xcb, 0x10, 0x4, "37cbbb5d3e76edf213c818ddc9ec135880c67104c3d6963d7f53bc149492b0d67c934fa8b6988b87778773af15f5f748d05510252151451170473fc7e8691990408fbfd401d7d4392222d4fdd303cdacc5a0b259237b6821d1842a88fa84441c34a4e473b35508d44d5b7803528307e0b274f89b16d0d746d55502385c1cc97a5ca0e4fd426afe0f03b1e24d68fb3124b97eee553c0035150d83678080a7338bc2efdfd87beb13431497220abe9a33dc498d3109def8bd6298eb01c67854e6a11c360cc163a15728"}]}, 0x3, [{0xbc, &(0x7f0000000dc0)=@string={0xbc, 0x3, "fb8b184e5e270b80d1befbb5fff95ad518161b72b5fbdca4978e985a83f27ab7632770837f7134a21c503dbb2cc8ba7ffded80aa9c19862d423b3dd836a4c3f5d2afd6f08183a5b2e0a56798519cd5f47f80f45b5dbeb65a2bf294114ba78e221d5bf5eeb2f0edfb37b5ce072acb94a68f2ae17b5d73667f640e5daddfa1cd9406661a0347b644e41ec7010b143ac01e0bb76320cc29fa161d7a8dea16cbebfcc1df2f4b7582cf9085b361054744147a97e79860e3a527f6065a"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x40e}}, {0xf3, &(0x7f0000000c80)=@string={0xf3, 0x3, "d0f5af123ca856c54f00905fe9b2d5a26cf35941e709d557977ac227262a653d1bb77c1afa5ea5c488ed0532d9e5439597007f55bd21b2240a75e1593c98e5e5d8091f3db15872f84239698c527cea94a8d3f868d82ea9d45529a03d5193a11c6dc1a4945108bab6252699fa4540821a2b476cb4a1debe2a96f4bbb4f61f87a5af81c7407516c80a31fa8fc53de23eb1e08a24ce36b879fab0641d01d490c471e56a4eb2de52c798fe10bea9d2846c54a2cb3d32d660852d32d6318f1ae8dd26d3768b7ed42590ff90549dce49feaa5d9bd23d727ef32b1a5a17fc3ad4b45c3a0bc2683da98605f66d0876a2d689f6a010"}}]}) getsockopt$bt_hci(r5, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000600)={0x2, {{0x2, 0x4e24, @multicast2}}, 0x0, 0x3, [{{0x2, 0xffff, @remote}}, {{0x2, 0x0, @local}}, {{0x2, 0x4e24, @local}}]}, 0x210) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000280)={0x0, 0x10, 0x2, &(0x7f00000000c0)={0x13, "c2ba2cdddf96c2d905bd4296ce341591ddc08dbe750690648bd79a7fbf3d4cefc6"}}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, 0xfffffffffffffffd, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001880)=@newtfilter={0x8b0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x87c, 0x2, [@TCA_U32_POLICE={0x854, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x3, 0xf, 0xfdb, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x4, 0x0, 0x9, 0x4, 0x5, 0x80000001, 0x2, 0xe0, 0x9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0x7, 0x10000, 0x30, 0x803, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x1000, 0x7, 0x7198, 0x8, 0x80000001, 0x1, 0x101, 0x3, 0x7, 0x2, 0x1, 0x10001, 0x2, 0x1, 0x2, 0x6, 0x9, 0x13, 0x2, 0xffff, 0x80, 0xbf77, 0x8, 0xc52, 0x6, 0x9, 0x7, 0x9, 0x5, 0x8, 0x3, 0x8, 0x5, 0x8, 0x1, 0x3, 0x7fffffff, 0x8, 0x2845, 0x2, 0xe9, 0x2a, 0x3, 0x891, 0x7, 0x1, 0x12, 0x6, 0xfff, 0xffffc9b5, 0x4, 0x2, 0x6, 0x6, 0xaa, 0xffffffff, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x40, 0x4, 0x7, 0xa, 0x8000, 0x4, 0xffffff2d, 0x4, 0xffff7fff, 0x2, 0x3, 0x6, 0xebb, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x1, 0xfffffff9, 0xb, 0x1, 0xab, 0x9, 0x7, 0x0, 0x80e, 0x10001, 0x8, 0xa, 0x6, 0x0, 0xa1, 0x4, 0x7, 0x9, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ae, 0x8, 0x1e9, 0x9, 0x101, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x9, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0x5027, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x401, 0x74db, 0x400000, 0x401, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x5, 0xffff0000, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb35, 0xb2, 0x4, 0x5, 0x0, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x7f, 0x2, 0xc, 0xa, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x2, 0x40, 0x7, 0x8000, 0x7e, 0x4, 0x5, 0x7, 0x4, 0x3, 0x400, 0xe, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x5, 0x53e5, 0x7f, 0x4, 0x3000000, 0x0, 0xf0000000, 0x3, 0xfff, 0xe, 0x7, 0xf6, 0x1ff, 0x3, 0x800001, 0xfffffffb, 0x8001, 0xff, 0x0, 0xfff, 0x82, 0x1, 0x5, 0xffff, 0x0, 0x1, 0x7, 0x9, 0x10000, 0x0, 0x5, 0xe184, 0x4, 0x1, 0xadd, 0x1, 0x16, 0x4, 0xa35c, 0xc, 0x80, 0xff, 0x6, 0x2, 0xd, 0x4, 0x4003, 0x5, 0x4, 0x401, 0x4, 0x4, 0x1, 0x3, 0x8, 0xfffffffc, 0x3, 0xc1, 0x0, 0xffff, 0x80, 0xfffffff1, 0x7ff, 0x9, 0xfffffffe, 0x2, 0x6, 0x80, 0x200, 0x1000, 0xb11a, 0x0, 0x5, 0x8, 0xf49d, 0x5, 0x3361, 0x435, 0x7fffffff, 0x2, 0x806, 0xc4, 0x9, 0x0, 0xee2, 0x2, 0x401, 0xfffffffa, 0x8000, 0x2, 0x0, 0x5, 0x5dd3c81c, 0xffffffff, 0xffffffff, 0x3, 0x81, 0xe18, 0x5, 0xfffffffc, 0x2, 0x1, 0x8, 0x6, 0x0, 0x6, 0xc, 0x8, 0x6, 0x100, 0x1, 0xb5a, 0xa, 0x4, 0x18, 0x8, 0x31, 0x1ff, 0x4, 0x9, 0x400, 0x2, 0x6, 0x7, 0x9, 0x91e7, 0x5, 0x7, 0x81eb, 0x400, 0xffff, 0x9, 0x9, 0x6, 0x7, 0x6, 0xea, 0x3, 0x9, 0x200004, 0x3, 0x7, 0x0, 0x8, 0x1, 0xbf4, 0x7, 0x7, 0x66, 0x7, 0x6, 0x3, 0x9, 0x0, 0x9c4, 0x7fff, 0x7, 0x800, 0x5, 0x9, 0x10001, 0x4, 0x2, 0x0, 0x5, 0x2, 0x1, 0xf, 0x1ff, 0x400, 0x3, 0x3ff, 0xb, 0x39, 0x0, 0x8, 0xffffffff, 0x0, 0x8, 0x6, 0x9, 0x2, 0xffffffff, 0x401, 0x9, 0x800, 0x9, 0xeb, 0x8, 0x6ed, 0x5, 0x2004, 0x4c3e, 0x1bd, 0x381, 0x4282, 0x4, 0x7, 0x1, 0x4, 0xfffffff7, 0x5, 0x7, 0x0, 0x46, 0x9, 0x3, 0x3, 0x6, 0x9, 0x4, 0x1, 0x4, 0xfffeffff, 0xe, 0x3ff, 0x80000000, 0x7, 0x80, 0x7, 0x42b, 0x7, 0x7, 0xfff, 0x5, 0x8, 0xffffffff, 0xffff671f, 0x7, 0x4, 0x80, 0x6, 0x4, 0xd, 0x1, 0x80, 0x2, 0x5be228d5, 0x2, 0x0, 0x8, 0xaff0, 0x8001, 0x3, 0x1, 0x7, 0x0, 0x51e, 0x2, 0x6, 0x4, 0xfffffffc, 0xd97, 0xa8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x0, {0x7, 0x2, 0x3, 0x10, 0x4, 0x8}, {0x6, 0x2, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffffff}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) syz_usb_control_io$rtl8150(r1, &(0x7f0000000400)={0x14, &(0x7f0000000340)={0x0, 0x6, 0x49, {0x49, 0x22, "b842952e16dd7fc6244f9c3391ae2df8f0a233cd5941116814b2a0df93edda8f65f10583ba8ae07276dd4fd68423c7b5595d1d442acdb9daf16bd39f0f3c8e2af47a21394c13f8"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x416}}}, &(0x7f0000000980)={0x2c, &(0x7f0000000440)={0x0, 0x8, 0x42, "31e5589cbceb131cafc31da2ac7e9a2fec681fdb9fb9b5c8477469b875858983f82a926c9bdb974cb196555c5791f8eb798d8baa1f721fa045449f2a4790a258e590"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000900)={0xc0, 0x5, 0x1, "c2"}, &(0x7f0000000940)={0x40, 0x5, 0x3, "47f2c8"}}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000240)={0x6, "4d7c867ab877ecd3147d1cd41ab398ad5825649d7ca44db98105c48d3e6376a3", 0xffffffffffffffff}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, 0x40010, r10, 0xeb681000) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000004c0)={0x8, @sdr={0x36314d4e, 0x4}}) ioctl$XFS_IOC_ERROR_INJECTION(r5, 0x40085874, &(0x7f0000000140)={r2, 0x400000}) 2m31.916910013s ago: executing program 2 (id=3675): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0xa73, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x0, &(0x7f0000006680)) unshare(0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r3) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000680)={r6, 0x1ff, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e21, @private=0xa010100}, 0x201, 0x0, 0x0, 0x0, 0x33, &(0x7f0000000180)='tunl0\x00', 0x5, 0x3, 0x1000}) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r7, 0x0, 0x0, r8], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000480)=r9) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) r10 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_PARM(r10, 0xc0cc5615, &(0x7f0000000200)={0xb, @raw_data="af4dfb1b457ff6691f72737de6a5741a9c04e18a5225fb1a37a7ef084e587fa995ea316f1704a4ad61c0f99358348057b6307c9714cadff73d695c73ed2fe1f93885d59b55b3b57afbfdffe8aeda29ae3512dd06b29a5a86222f5e4e6b909bc4438a025f85ea5628adeb915a37e31694ba471ef6702459edafadf832d06325085fbd16e498c4e8add887324804be8753eabcf40a0e438ffa42c8aad4df48f212224ab8e30f1f1efe8295fe5b9f56a07a226aa457b018b6433922a91f80782c5088bafeee496c2ef5"}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {r1}}, './file0\x00'}) getsockopt$kcm_KCM_RECV_DISABLE(r11, 0x119, 0x1, 0x0, 0x0) sync() socket(0x5, 0x803, 0x0) socket$packet(0x11, 0x2, 0x300) 2m29.980485851s ago: executing program 2 (id=3680): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000280)={0x1, @win={{0xff, 0x0, 0x47425247}, 0x0, 0x0, 0x0, 0x0, 0x0}}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1, 0x20000}, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000480)={&(0x7f000003e000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/64, 0x40, 0x1, &(0x7f0000000180)=""/198, 0xc6}, &(0x7f0000000500)=0x40) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000ac0)="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", 0x187}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da", 0x89}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000003b620000280012800b0001007678634307000000c6ff02801400010000000000", @ANYRES32=0x0, @ANYBLOB="00140200000000000a0003003a712f0756b80000"], 0x54}}, 0x0) recvmmsg$unix(r4, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004880)=""/141, 0x8d}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000c80)=""/166, 0xa6}], 0x1}}], 0x2, 0x41, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0xc1842, 0x0) syz_usb_disconnect(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000030c0)={0x18, {"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", 0x1000}}, 0x1006) read$fb(0xffffffffffffffff, &(0x7f0000000540)=""/52, 0x34) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @random="429e82211cf8", @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "7abd6a", 0x0, 0x67, 0x1, @private0, @mcast2}}}}, 0x0) unshare(0x22020600) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x7ff, r7}, 0x38) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x2, 0x0, 0x0, 0x7ffc1ffb}]}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4, 0x2}, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m28.467923275s ago: executing program 2 (id=3684): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000002c0)='s\xefurce', &(0x7f0000000300)='\xb0\xfb\xd9\x9a\xbe\r\xcc:\x9b\xd0}\xe8\xff\xff\xff\xff\xff\xff\xff\x7f\xce\xf5\x1a\x01\xd6\a\xfe\xb8\x92~wS\x87\xd9\x9e0y\xc9\x8cw-zu(ht\xa1~\x9a\x8d^+\x9f\xee\x9a(&W\\\xbb\xd5W\xeb\x06\x9dva\x06\xe3\x97\xa1\x88\x83W{\x00\xff\xff\xff\xff\xff\xff\xff\xe9\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00)o\b~\xe3t`\xc9=;o\xe5\xb4T)\x04\xf9k\xfb%t\xa7\x80c\xbb\xeb\x10\xb8\x01', 0x0) r4 = userfaultfd(0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x8000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, 0x9, 0x6, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) close(0x3) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000180)=0x6f) r8 = dup2(r7, r7) prlimit64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r8, &(0x7f00000063c0)={0x2020}, 0x2020) 2m27.196019152s ago: executing program 2 (id=3688): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000540)={&(0x7f0000000240)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000780)}, 0x2000c040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x6, 0xc, 0x0, 0x1}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)={0x74, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7f, @loopback, 0x2}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$dsp(r5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = fsopen(&(0x7f0000000400)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000280)='source', &(0x7f0000000680)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa010fdde36600080045000044000000000021907800000000ffffffff050090780a0101024a0000000000000000000000ac1e0001ac141401071300e000000200000000ffffffff"], 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0x2, 0x2, 0xb) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r9, @ANYBLOB], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r10 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r10, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) memfd_create(0x0, 0x4) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x220000, 0x0, 0x30}, 0x18) r11 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r11, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r11, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 2m9.34184474s ago: executing program 39 (id=3692): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa010fdde36600080045000044000000000021907800000000ffffffff050090780a0101024a0000000000000000000000ac1e0001ac141401071300e000000200000000ffffffff"], 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0x2, 0x2, 0xb) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r9, @ANYBLOB], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r10 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r10, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) memfd_create(0x0, 0x4) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x220000, 0x0, 0x30}, 0x18) r11 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r11, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r11, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1m31.575785797s ago: executing program 4 (id=3783): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019300)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x7, 0x0, 0x0) sendmsg$can_raw(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r4}, 0x10, &(0x7f00000005c0)={&(0x7f0000000440)=@canfd={{0x4, 0x1, 0x0, 0x1}, 0x36, 0x0, 0x0, 0x0, "c2e5125998090b803796ce5cc5a115cc13c80a3eea1a09004a5845763ed8c6f643acf753f5409c76425436309f411775ff030000dd446d6291193400d6d200da"}, 0x48}, 0x1, 0x0, 0x0, 0x4044851}, 0x4b2281376c22b9a9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket(0x1d, 0x2, 0x6) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x10}) r6 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xfffffffd, 0x4, 0xb, 0x8001}}) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x18) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) r8 = open(0x0, 0x64842, 0x389b0d52417bb201) mbind(&(0x7f0000200000/0x3000)=nil, 0x3000, 0x2005, &(0x7f0000000600)=0x20002d34, 0x80000000, 0x6) pwritev2(r8, &(0x7f0000000240), 0x0, 0x7000, 0x0, 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000100010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a3200000000090001"], 0xec}, 0x1, 0x0, 0x0, 0x24004005}, 0x0) 1m30.060487373s ago: executing program 4 (id=3787): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x1c0, 0x20a, 0x278, 0x1c0, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xf1, 0x34, "f03f6980e25829d91e78bc24273b66a531ff539fcbfd609600371a57b658"}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x2}, {0x0, 0x46}, 0x8, 0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, 0x2e, 0x639ad587beb9ea67, 0x70bd25, 0x25dfdbfc, {0xb}, [@typed={0xa, 0x2, 0x0, 0x0, @binary="7a25b390ad66"}]}, 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(0xffffffffffffffff, r5, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x10b}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r8 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000004a40)={0x58, 0x0, &(0x7f0000000800)=[@free_buffer={0x40086303, r8}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000880)={@fd={0x66642a85, 0x0, r6}, @flat=@handle={0x73682a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x19}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, 0x0, 0x0) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r9, {0x7, 0x1f, 0x8, 0x12c00, 0x0, 0x7, 0x8, 0x40}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30) 1m28.042437177s ago: executing program 4 (id=3791): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000fdffffff0000000000000500180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000007a0000000600008095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 1m27.892683437s ago: executing program 4 (id=3794): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000002c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00') keyctl$dh_compute(0x17, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={'rmd160-generic\x00'}}) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x188, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0x8, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x158, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x8, 0x5, 0x1, 0x5, 0x17, 0x16, 0x5}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x2, 0x0, 0x6, 0xe, 0x19, 0xc, 0x8}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xc4d, 0xb7, 0x8, 0x17, 0x1d, 0xd}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x9, 0xa79, 0x6, 0x5, 0x20, 0x12, 0x4}}, @TCA_CHOKE_STAB={0x104, 0x2, "2c6b91245b350807b26f92b339c6b22f23065f066b37a51d5f0ca09bed852428c5998bc261080c4c1b775a31e5be9a46734d60f854101c3333d071182000208aff328af237ce66ab019005b79efd1d6697f7edc8c0c438dbfbde24901cddd0709b6761c17f507a17fdbc957995941aab28c0b6819ae86b425aabd3daa700ce841808abf258e2b403e874277c1fef0019ffa1f3effc58108ae5c51e0e7a24ac4d68e80bc00251b8f6cb4ad0946ed60335217a301e82db1a0d83197064fce8c7e990969902a3be285b8732b377490ccd81a5b5b5da5d24ae4c079973d6731914a31253a33f1c08c2de0f17c8664a2b0b120197e9cd8a91146730d647a61191b35b"}]}}]}, 0x188}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000bc0)=@newtfilter={0x34, 0x28, 0x575ac7824d421509, 0x8070bd29, 0x4, {0x0, 0x0, 0x0, r8, {0x9}, {0xffff}, {0x0, 0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x40) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 1m25.572268072s ago: executing program 4 (id=3800): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001700)=""/4108, 0x100c}], 0x1}, 0x2000) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4}) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000100)=0x9, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x20, 0x4, [0x2, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x2]}}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f00000000c0), 0x12) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) listen(0xffffffffffffffff, 0xda90) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000000) 1m25.275108501s ago: executing program 4 (id=3801): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045f80061000000000302907864010101e00000011100907800000000fc0d57f6d08c6b01592bc7dbef60febc3c5b619dee7a098b23b341fbe693b16b99df97fa3a7c48d6b2879737f202f26ba376309e7bdbea232c8d0150d34ac488775dbbce4530e06ca650d5a826321068c513640a4764fa869079d7f86a74889046215de189ff162ec05ce69939bdf901f12cbf18bfcce95a7651094a7e474a13fad344ab0d9eaf184e5ac537492b9f4727dfc527"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip_tables_matches\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000580)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000140)={0x3, 0x8, 0x1, 0x0, 0x7f}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002140)="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", 0x2000, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc1b}, 0x28) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xe, 0x4, 0x4, 0x2, 0x1000, 0xf1, 0x6, 0x3, 0x10000000005, 0xde11, 0x1, 0x0, 0x5, 0x0, 0x8], 0xa000, 0x3c4210}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, 0x0}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24000010) socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b0000001f00000002118857b70bc3ad42c88c00000000a9c69d1c6d4b944fd623ed04f59ac6bbb9674d179a0fe305afd6242c0855f84315c4337f20cc364edd8f9fcba2d04776677c6cffeddb8d30df091d19ce4488e0f3ff6d5be05f886b3e0227de16485959caaa8581ab3a6901796f73e247ae95a2e576ba260651ed2b1bf35f0423634475c427b2de1fa5d6453eee90d0ea3eb2dbb46f9f7cb481760cd4d2fe7493231b24", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d80000", 0x3}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 1m24.445306608s ago: executing program 40 (id=3801): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045f80061000000000302907864010101e00000011100907800000000fc0d57f6d08c6b01592bc7dbef60febc3c5b619dee7a098b23b341fbe693b16b99df97fa3a7c48d6b2879737f202f26ba376309e7bdbea232c8d0150d34ac488775dbbce4530e06ca650d5a826321068c513640a4764fa869079d7f86a74889046215de189ff162ec05ce69939bdf901f12cbf18bfcce95a7651094a7e474a13fad344ab0d9eaf184e5ac537492b9f4727dfc527"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip_tables_matches\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000580)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000140)={0x3, 0x8, 0x1, 0x0, 0x7f}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002140)="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", 0x2000, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc1b}, 0x28) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xe, 0x4, 0x4, 0x2, 0x1000, 0xf1, 0x6, 0x3, 0x10000000005, 0xde11, 0x1, 0x0, 0x5, 0x0, 0x8], 0xa000, 0x3c4210}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, 0x0}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24000010) socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b0000001f00000002118857b70bc3ad42c88c00000000a9c69d1c6d4b944fd623ed04f59ac6bbb9674d179a0fe305afd6242c0855f84315c4337f20cc364edd8f9fcba2d04776677c6cffeddb8d30df091d19ce4488e0f3ff6d5be05f886b3e0227de16485959caaa8581ab3a6901796f73e247ae95a2e576ba260651ed2b1bf35f0423634475c427b2de1fa5d6453eee90d0ea3eb2dbb46f9f7cb481760cd4d2fe7493231b24", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d80000", 0x3}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 11.93090763s ago: executing program 0 (id=4095): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000580)={0x48, 0x2, r1}) 11.850725863s ago: executing program 0 (id=4096): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(r0, 0x0, 0x0, 0x2003, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'dummy0\x00', @link_local}) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$tcp_congestion(r6, &(0x7f00000000c0)='vegas\x00', 0x6) close(0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x30, 0x3, "5fad843dc5c1efe84ced18d4422d5b0b86e8441958d3d2ea41149f1e55359af069a2a5e039ccf56f068a5a0b"}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}], {0x14}}, 0x10c}, 0x1, 0x0, 0x0, 0x4}, 0x0) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000005c0)={0xffffffffffffffff, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) r8 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$loop(&(0x7f0000000300), 0xc000000000000001, 0x168081) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000001280)={0xffffffffffffffff, 0x0, {0x2a12, 0x80010000, 0x0, 0xa, 0x5, 0x0, 0x1, 0xe, 0x11, "fee8a2ab78fc179fd1f809000006aca7ca64c6a4b4e00d9683dda1af01000000deff12001000000000000000000000000008000000000100", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe0, 0x9]}}) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000280)={[{0x4fba, 0x5, 0xfd, 0x7, 0x98, 0xf8, 0x2, 0x1, 0x9, 0x5, 0x4, 0x6, 0x9}, {0x10, 0x400, 0x14, 0x9, 0x7, 0x6, 0x31, 0x5, 0x1, 0x7, 0x7f, 0xd, 0x201}, {0x7d, 0x4c3e, 0x7f, 0xc, 0x5c, 0x2, 0x4, 0x4, 0x68, 0x7, 0x0, 0x6, 0x1e7}], 0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) 10.081936289s ago: executing program 0 (id=4100): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000200)={@remote, @loopback}, &(0x7f00000002c0)=0xc) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x100) ioctl$SNDRV_PCM_IOCTL_DROP(r3, 0x4143, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) write$binfmt_aout(r4, &(0x7f0000000280)=ANY=[], 0xff2e) ioctl$TCFLSH(r4, 0x540b, 0x1) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="e00000001500010028bd7000fddbdf25637279707464286563622d6165732d6e656f6e290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000002000"/224], 0xe0}, 0x1, 0x0, 0x0, 0xc000}, 0x20040000) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0xffffffffffffffb6) 6.860081251s ago: executing program 5 (id=4128): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000002c0)='s\xefurce', &(0x7f0000000300)='\xb0\xfb\xd9\x9a\xbe\r\xcc:\x9b\xd0}\xe8\xff\xff\xff\xff\xff\xff\xff\x7f\xce\xf5\x1a\x01\xd6\a\xfe\xb8\x92~wS\x87\xd9\x9e0y\xc9\x8cw-zu(ht\xa1~\x9a\x8d^+\x9f\xee\x9a(&W\\\xbb\xd5W\xeb\x06\x9dva\x06\xe3\x97\xa1\x88\x83W{\x00\xff\xff\xff\xff\xff\xff\xff\xe9\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00)o\b~\xe3t`\xc9=;o\xe5\xb4T)\x04\xf9k\xfb%t\xa7\x80c\xbb\xeb\x10\xb8\x01', 0x0) r4 = userfaultfd(0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x8000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr(r1, &(0x7f0000000200)=@known='user.incfs.id\x00', &(0x7f0000000280)='+.%+\x00', 0x5, 0x2) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, 0x9, 0x6, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) close(0x3) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000180)=0x6f) r8 = dup2(r7, r7) prlimit64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r8, &(0x7f00000063c0)={0x2020}, 0x2020) 6.832170206s ago: executing program 7 (id=4129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x4040884) 6.686470605s ago: executing program 7 (id=4130): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) close(0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020}, 0x2020) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x3084, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x800}, &(0x7f0000ffc000), 0x0, &(0x7f0000000000)) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01864ba, &(0x7f0000002b00)={0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000000)={0x0, 0x10, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f0000000240)={r7}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0xe, &(0x7f0000003b40)={0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040b01, 0x0) r9 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x400) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_RESET(r9, 0x4141, 0x0) 5.294633166s ago: executing program 5 (id=4136): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000700202142"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 5.239776039s ago: executing program 5 (id=4137): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(r0, 0x0, 0x0, 0x2003, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'dummy0\x00', @link_local}) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$tcp_congestion(r5, &(0x7f00000000c0)='vegas\x00', 0x6) close(0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x30, 0x3, "5fad843dc5c1efe84ced18d4422d5b0b86e8441958d3d2ea41149f1e55359af069a2a5e039ccf56f068a5a0b"}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}], {0x14}}, 0x10c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000200), 0x4f98, 0x40100) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000005c0)={0xffffffffffffffff, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) r8 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$loop(&(0x7f0000000300), 0xc000000000000001, 0x168081) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000001280)={r7, 0x0, {0x2a12, 0x80010000, 0x0, 0xa, 0x5, 0x0, 0x1, 0xe, 0x11, "fee8a2ab78fc179fd1f809000006aca7ca64c6a4b4e00d9683dda1af01000000deff12001000000000000000000000000008000000000100", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe0, 0x9]}}) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000280)={[{0x4fba, 0x5, 0xfd, 0x7, 0x98, 0xf8, 0x2, 0x1, 0x9, 0x5, 0x4, 0x6, 0x9}, {0x10, 0x400, 0x14, 0x9, 0x7, 0x6, 0x31, 0x5, 0x1, 0x7, 0x7f, 0xd, 0x201}, {0x7d, 0x4c3e, 0x7f, 0xc, 0x5c, 0x2, 0x4, 0x4, 0x68, 0x7, 0x0, 0x6, 0x1e7}], 0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) 3.481349678s ago: executing program 7 (id=4147): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e22, @empty}], 0x10) 3.403008192s ago: executing program 5 (id=4148): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a000000000000000000000000000040000000000000000100000000200002000a00000000000001fe8000000000000000000000000004bb000000000d0001007564703a73"], 0x6c}}, 0x0) 3.276224952s ago: executing program 7 (id=4149): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x1d}, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffffffffffff}, {0x4, 0x0, 0x40000000000000}}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x4, 0x3}]}]}, 0xfc}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000b80)={@multicast, @local, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x30, 0x2c, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[@hopopts={0x29}], @ni={0x8c, 0x0, 0x0, 0x8, 0x4, 0x2, "6d2634cc62d045903c2b5ac3a6368a46130a35c3099a9573"}}}}}}, 0x0) 3.163998498s ago: executing program 8 (id=4150): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019300)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x7, &(0x7f00000001c0)=0x4, 0x4) sendmsg$can_raw(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r4}, 0x10, &(0x7f00000005c0)={&(0x7f0000000440)=@canfd={{0x4, 0x1, 0x0, 0x1}, 0x36, 0x0, 0x0, 0x0, "c2e5125998090b803796ce5cc5a115cc13c80a3eea1a09004a5845763ed8c6f643acf753f5409c76425436309f411775ff030000dd446d6291193400d6d200da"}, 0x48}, 0x1, 0x0, 0x0, 0x4044851}, 0x4b2281376c22b9a9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket(0x1d, 0x2, 0x6) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x10}) r6 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xfffffffd, 0x4, 0xb, 0x8001}}) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x18) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) r8 = open(0x0, 0x64842, 0x389b0d52417bb201) mbind(&(0x7f0000200000/0x3000)=nil, 0x3000, 0x2005, &(0x7f0000000600)=0x20002d34, 0x80000000, 0x6) pwritev2(r8, &(0x7f0000000240), 0x0, 0x7000, 0x0, 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000100010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a3200000000090001"], 0xec}, 0x1, 0x0, 0x0, 0x24004005}, 0x0) 3.117891086s ago: executing program 7 (id=4151): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000067c000/0x4000)=nil, &(0x7f0000711000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000e3000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f3fdc20221802324a130102030109021b0001000010"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="183f0000000000000000000003000000950000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x1007, &(0x7f00000005c0)=""/4103, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0xc0) 3.060664363s ago: executing program 5 (id=4152): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0xfff, 0x0, 0x3, 0x14, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f00000000c0)=0x7) syz_open_dev$video4linux(0x0, 0x0, 0x41) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) keyctl$clear(0x7, 0xfffffffffffffffc) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40080) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x400102, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'tunl0\x00'}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r3 = add_key$user(&(0x7f0000000180), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000040)='\x00\b', 0x2, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000004c0), &(0x7f0000000440), &(0x7f0000000340)="94c14146f79c29fb4016c9d17e8040b8940ebf9c2db88dbad8af3b5516979a57e80b5f5e73001f8713f6b1c051cb6d08d2d082ac6c01b7e858f2b274a79a870bfa354e6b301c26b9d484ee1c9e28c336d013be7aa5d3edc593293845a375dff3401004440c50360a68b8a16c1f3cfacd9c9b0ee79d30cde69f397089ca03919d41aa483f8891b1c5c038c530f6caf30b1f3c15d4f7c0f7964230aa7199d63b0237f18e5ca8d130516c031f4afacc6576ddacc3ec81898561154adce958145d74", 0xc0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x0, 0x4, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x22000000}, 0xc000) gettid() r5 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$negate(0xd, r3, 0xcda9, r5) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/bus/input/handlers\x00', 0x1800, 0x0) preadv(r6, &(0x7f0000000180)=[{&(0x7f0000000080)=""/228, 0xe4}], 0x1, 0x7, 0x9) 2.79925037s ago: executing program 3 (id=4153): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) 2.722642764s ago: executing program 0 (id=4154): r0 = memfd_create(&(0x7f0000000b40)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xb5\x7f\xc0\xcck.5=\xcc\x10Y\xad^*\x10\x00\x06\x00\x00\x00\x00\x00\x0e%\x84\x95bXy\x81;o\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9{b\xab\x91\x88\xba\xa5J\xfd\xd2\x96R\x06\xeeP\x0f\xb0\xad_\x0e\xf6\xe7k\xbf\x93)\x02yX\x91\xc0\xdeke\xb6\xef\x10\xd2\xbd9\x87<[BKq\t*t\x9e\xf9\xa6\xb5\xda\tb\xcc%?\x14Y\x9b\x18nx\x19\x11\xb7\x9d~\xc5{O\xd0S\xbdi\xf8\"P>4\x05E|h?\x0f\xf5\xf8\x8c\xce\xebXN\xb7\xc0F\xbao\xf7\xab\xedO\x96\xa1(\n\x1e\xf9\xbe/.\xe2^\xb0\xb6{\x1fdX\x100v\xab\xce\x05\x00i\x85\xf63\x05\b\xd8\xeb\xdf\x00\x00]N\xe1\x9di&\r\xd2pw\x85\vQ \x82v\x8a7\xb6\xf8\x1c\x8c\xf0\xaf\xfa\x17\xbeD\a\vM\x87\xc0Q\x94\xd4\xd3\xc7I@Z\t\xa9\xf0\x9d4c\xb1^\xeeF\x96\xa1{OV\xe0\x1e#\xb3w\xc7\x87\xdd\'c\xcf.\x04\x8b\x9e\xef-b\xbe\x17T\xee\xe1\xf7\'+s\x15\xeb\xb1D\x86\x93\x1e\xf9\xf1L\x0f\x9b7/\xd9D\b\x007hI\xbc\x13.@R\x8b\xe2x\x97:A\xf1\xb6\xe2\xc8\xb2\x9bD\xb2P\xdc\xd4\xb1\xa50\x9f\x83~)\x9b7-\x80&r\xbc\xf60xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000002c0)='s\xefurce', &(0x7f0000000300)='\xb0\xfb\xd9\x9a\xbe\r\xcc:\x9b\xd0}\xe8\xff\xff\xff\xff\xff\xff\xff\x7f\xce\xf5\x1a\x01\xd6\a\xfe\xb8\x92~wS\x87\xd9\x9e0y\xc9\x8cw-zu(ht\xa1~\x9a\x8d^+\x9f\xee\x9a(&W\\\xbb\xd5W\xeb\x06\x9dva\x06\xe3\x97\xa1\x88\x83W{\x00\xff\xff\xff\xff\xff\xff\xff\xe9\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00)o\b~\xe3t`\xc9=;o\xe5\xb4T)\x04\xf9k\xfb%t\xa7\x80c\xbb\xeb\x10\xb8\x01', 0x0) r4 = userfaultfd(0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x8000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr(r1, &(0x7f0000000200)=@known='user.incfs.id\x00', &(0x7f0000000280)='+.%+\x00', 0x5, 0x2) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, 0x9, 0x6, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) close(0x3) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000180)=0x6f) r8 = dup2(r7, r7) prlimit64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r8, &(0x7f00000063c0)={0x2020}, 0x2020) 2.500215509s ago: executing program 0 (id=4156): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x28, 0x2, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x4, 0xfffbf010}, {0x6, 0xd, 0x7, 0x7}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 2.171205072s ago: executing program 0 (id=4157): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000200)={@remote, @loopback}, &(0x7f00000002c0)=0xc) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x100) ioctl$SNDRV_PCM_IOCTL_DROP(r3, 0x4143, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) write$binfmt_aout(r4, &(0x7f0000000280)=ANY=[], 0xff2e) ioctl$TCFLSH(r4, 0x540b, 0x1) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="e00000001500010028bd7000fddbdf25637279707464286563622d6165732d6e656f6e290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000002000"/224], 0xe0}, 0x1, 0x0, 0x0, 0xc000}, 0x20040000) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0xffffffffffffffb6) 1.816626688s ago: executing program 8 (id=4158): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(r0, 0x0, 0x0, 0x2003, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'dummy0\x00', @link_local}) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$tcp_congestion(r5, &(0x7f00000000c0)='vegas\x00', 0x6) close(0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x30, 0x3, "5fad843dc5c1efe84ced18d4422d5b0b86e8441958d3d2ea41149f1e55359af069a2a5e039ccf56f068a5a0b"}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}], {0x14}}, 0x10c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000200), 0x4f98, 0x40100) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000005c0)={0xffffffffffffffff, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) r8 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$loop(&(0x7f0000000300), 0xc000000000000001, 0x168081) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000001280)={r7, 0x0, {0x2a12, 0x80010000, 0x0, 0xa, 0x5, 0x0, 0x1, 0xe, 0x11, "fee8a2ab78fc179fd1f809000006aca7ca64c6a4b4e00d9683dda1af01000000deff12001000000000000000000000000008000000000100", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe0, 0x9]}}) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000280)={[{0x4fba, 0x5, 0xfd, 0x7, 0x98, 0xf8, 0x2, 0x1, 0x9, 0x5, 0x4, 0x6, 0x9}, {0x10, 0x400, 0x14, 0x9, 0x7, 0x6, 0x31, 0x5, 0x1, 0x7, 0x7f, 0xd, 0x201}, {0x7d, 0x4c3e, 0x7f, 0xc, 0x5c, 0x2, 0x4, 0x4, 0x68, 0x7, 0x0, 0x6, 0x1e7}], 0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) 1.311160375s ago: executing program 3 (id=4159): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010000000000000000001800"], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x4000004) 1.208040388s ago: executing program 3 (id=4160): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x5, 0x7, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000004c0), 0x83f, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r0, &(0x7f00000002c0), &(0x7f0000000200)=""/35}, 0x20) 1.121185016s ago: executing program 3 (id=4161): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000b40)={0x13c, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x110, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x108, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x34, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'vlan0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '(+$^r\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'vlan0\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'vlan0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fc0}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xad}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x13c}}, 0x10004000) 988.890562ms ago: executing program 3 (id=4162): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000d80)=ANY=[@ANYBLOB="ddf963efbeb08a", @ANYBLOB="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", @ANYRES64]) 504.029629ms ago: executing program 8 (id=4163): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xdffff010}, {0x6, 0x0, 0x1}]}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000b000680021"], 0x0) 452.832469ms ago: executing program 5 (id=4164): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000200)={@remote, @loopback}, &(0x7f00000002c0)=0xc) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x100) ioctl$SNDRV_PCM_IOCTL_DROP(r3, 0x4143, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) write$binfmt_aout(r4, &(0x7f0000000280)=ANY=[], 0xff2e) ioctl$TCFLSH(r4, 0x540b, 0x1) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="e00000001500010028bd7000fddbdf25637279707464286563622d6165732d6e656f6e290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000002000"/224], 0xe0}, 0x1, 0x0, 0x0, 0xc000}, 0x20040000) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0xffffffffffffffb6) 353.457923ms ago: executing program 8 (id=4165): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x391, 0x4) sendto$inet(r0, 0x0, 0x3ff, 0x4, &(0x7f0000001080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) 252.158281ms ago: executing program 8 (id=4166): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x30}}, 0x10004000) 120.821217ms ago: executing program 8 (id=4167): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260"], 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000440)=ANY=[@ANYBLOB='changeprofile ://&'], 0x17) 0s ago: executing program 7 (id=4168): socket(0xa, 0x80000, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000640)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r6, 0x3b82, &(0x7f0000000100)={0x18, r7, 0x2, 0x0, &(0x7f0000000180)=[{0xffffffffffffffa1, 0xfffffffffffffff9}, {0x400, 0x4f1}]}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000380)={0x28, 0x6, r7, 0x0, &(0x7f00002c0000/0x4000)=nil, 0x4000, 0x10}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000580)={0x48, 0x2, r5}) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000ac0)=@gcm_128={{0x304}, "629f2ad1e25e04f2", "bddff730a979d9b52e732fd6a9c1b085", "ace06e88", "747a2aaf941f2665"}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x3261e) r8 = syz_pidfd_open(r0, 0x0) setns(r8, 0x24020000) syz_clone(0xdda2b180, 0x0, 0x80, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r9 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io(r9, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000380)=ANY=[@ANYBLOB="1fd884094a26282c63a8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): T30] audit: type=1326 audit(1778884077.504:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22508 comm="syz.2.3346" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f239ce59 code=0x7ffc0000 [ 1570.733109][ T30] audit: type=1326 audit(1778884077.514:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22508 comm="syz.2.3346" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe6f239ce59 code=0x7ffc0000 [ 1570.789269][T15155] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1570.975752][ T30] audit: type=1326 audit(1778884077.514:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22508 comm="syz.2.3346" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f239ce59 code=0x7ffc0000 [ 1571.076832][ T8888] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 1571.084666][T15155] usb 9-1: Using ep0 maxpacket: 32 [ 1571.107845][T15155] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1571.145022][ T30] audit: type=1326 audit(1778884077.514:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22508 comm="syz.2.3346" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f239ce59 code=0x7ffc0000 [ 1571.199314][T15155] usb 9-1: config 0 has no interfaces? [ 1571.249271][T15155] usb 9-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1571.285982][T15155] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 1571.300893][ T8888] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1571.320253][T15155] usb 9-1: Product: syz [ 1571.324782][ T30] audit: type=1326 audit(1778884077.514:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22508 comm="syz.2.3346" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f239ce59 code=0x7ffc0000 [ 1571.350031][ T8888] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1571.363573][T15155] usb 9-1: Manufacturer: syz [ 1571.369409][T15155] usb 9-1: SerialNumber: syz [ 1571.374164][ T8888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1571.393469][T15155] usb 9-1: config 0 descriptor?? [ 1571.427529][ T30] audit: type=1326 audit(1778884077.514:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22508 comm="syz.2.3346" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f239ce59 code=0x7ffc0000 [ 1571.471500][ T30] audit: type=1326 audit(1778884077.514:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22508 comm="syz.2.3346" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe6f239ce59 code=0x7ffc0000 [ 1571.708012][T22531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1571.739981][T22531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1571.772960][T22531] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1571.782500][T22531] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1572.655921][ T8888] usb 9-1: USB disconnect, device number 32 [ 1572.814510][T22539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1572.845180][T22539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1572.904282][T22538] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1573.170795][T22542] netlink: 'syz.2.3352': attribute type 33 has an invalid length. [ 1573.179271][T22542] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3352'. [ 1573.189602][T22542] `: renamed from team0 (while UP) [ 1573.816892][T15155] usb 1-1: USB disconnect, device number 28 [ 1574.195550][T22561] kAFS: unable to lookup cell 'ÿ' [ 1575.482862][T22574] netlink: 212356 bytes leftover after parsing attributes in process `syz.3.3356'. [ 1575.700039][T22574] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1577.745140][T22595] syz.8.3360 (22595): drop_caches: 2 [ 1577.896172][T15155] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1578.058284][T15155] usb 9-1: Using ep0 maxpacket: 32 [ 1578.080292][T15155] usb 9-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1578.096604][T15155] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1578.115239][T15155] usb 9-1: Product: syz [ 1578.124272][T15155] usb 9-1: Manufacturer: syz [ 1578.134563][T15155] usb 9-1: SerialNumber: syz [ 1578.157049][T15155] usb 9-1: config 0 descriptor?? [ 1578.183436][T15155] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1578.201347][T15155] dvb-usb: bulk message failed: -22 (4/0) [ 1578.217723][T15155] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1578.242036][T15155] dvb-usb: bulk message failed: -22 (5/0) [ 1578.250907][T15155] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1578.297035][T15155] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1578.314712][T15155] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1578.330697][T15155] usb 9-1: media controller created [ 1578.360309][T15155] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1578.421246][T15155] usb 9-1: selecting invalid altsetting 3 [ 1578.424369][T22595] dvb-usb: bulk message failed: -22 (7/0) [ 1578.428495][T15155] ttusb2: set interface to alts=3 failed [ 1578.451625][T22595] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 1578.478869][T22595] ttusb2: i2c transfer failed. [ 1578.560350][T15155] DVB: Unable to find symbol tda10086_attach() [ 1578.566976][T15155] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1578.582028][T15155] dvb-usb: bulk message failed: -22 (4/0) [ 1578.590161][T15155] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1578.610405][T15155] dvb-usb: bulk message failed: -22 (5/0) [ 1578.626159][T15155] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1578.637079][T15155] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1579.079357][T22612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1579.098706][T22612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1579.127361][T22612] CUSE: unknown device info "" [ 1579.132797][T22612] CUSE: unknown device info "" [ 1579.139929][T22612] CUSE: unknown device info "ÿ" [ 1579.150782][T22612] CUSE: unknown device info "" [ 1579.161319][T22612] CUSE: unknown device info "ÿ" [ 1579.171402][T22612] CUSE: unknown device info "" [ 1579.183603][T22612] CUSE: unknown device info "" [ 1579.200753][T22612] CUSE: unknown device info "" [ 1579.223934][T22612] CUSE: DEVNAME unspecified [ 1579.307492][T22612] CUSE: unknown device info "" [ 1579.312825][T22612] CUSE: unknown device info "" [ 1579.319567][T22612] CUSE: unknown device info "ÿ" [ 1579.326546][T22612] CUSE: unknown device info "" [ 1579.332787][T22612] CUSE: unknown device info "ÿ" [ 1579.344247][T22612] CUSE: unknown device info "" [ 1579.350869][T22612] CUSE: unknown device info "" [ 1579.357343][T22612] CUSE: unknown device info "" [ 1579.362926][T22612] CUSE: DEVNAME unspecified [ 1579.410785][T22616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1579.446844][T22616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1580.314620][T22606] trusted_key: encrypted_key: insufficient parameters specified [ 1580.586189][T13785] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1580.816144][T13785] usb 5-1: Using ep0 maxpacket: 32 [ 1580.891288][T13785] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1580.975069][T13785] usb 5-1: config 0 has no interfaces? [ 1581.004502][T13785] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1581.025606][T13785] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 1581.042960][T22627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3366'. [ 1581.061397][T13785] usb 5-1: Product: syz [ 1581.072358][T13785] usb 5-1: Manufacturer: syz [ 1581.085285][T22627] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1581.110855][T13785] usb 5-1: SerialNumber: syz [ 1581.179179][T22632] kAFS: unable to lookup cell 'ÿ' [ 1581.186918][T13785] usb 5-1: config 0 descriptor?? [ 1582.702507][T22644] dummy0: entered allmulticast mode [ 1583.609011][T13785] usb 5-1: USB disconnect, device number 103 [ 1584.217563][T13785] usb 5-1: new full-speed USB device number 104 using dummy_hcd [ 1584.447496][T13785] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1584.484195][T13785] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1584.511990][T13785] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1585.099080][T22675] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3374'. [ 1585.250677][T22675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3374'. [ 1585.289388][T22675] bridge0: port 2(bridge_slave_1) entered disabled state [ 1585.321022][T22675] bridge_slave_1 (unregistering): left allmulticast mode [ 1585.350681][T22678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1585.382565][T22675] bridge_slave_1 (unregistering): left promiscuous mode [ 1585.383752][T22678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1585.430618][T22675] bridge0: port 2(bridge_slave_1) entered disabled state [ 1587.471831][T22689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3377'. [ 1587.743397][ T8888] usb 5-1: USB disconnect, device number 104 [ 1588.035051][T22709] binfmt_misc: register: failed to install interpreter file ./cgroup [ 1588.438850][T22711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3380'. [ 1589.749147][T22721] kAFS: unable to lookup cell 'ÿ' [ 1590.291309][T22728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1591.763393][T22738] binder_alloc: 22730: binder_alloc_buf, no vma [ 1592.203639][T22743] netlink: 'syz.2.3386': attribute type 10 has an invalid length. [ 1592.286929][T22743] `: Port device veth0_to_hsr added [ 1593.988573][T22765] binder: BINDER_SET_CONTEXT_MGR already set [ 1594.003095][T22765] binder: 22753:22765 ioctl 4018620d 200000004a80 returned -16 [ 1594.107787][T22765] binder: 22753:22765 ioctl c0306201 0 returned -14 [ 1594.317402][T13785] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1594.483487][T13785] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 1594.504020][T13785] usb 5-1: config 1 has no interface number 0 [ 1594.525759][T13785] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1594.550095][T13785] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1594.577705][T13785] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1594.619395][T13785] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1594.645359][T13785] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.665955][T13785] usb 5-1: Product: syz [ 1594.677046][T13785] usb 5-1: Manufacturer: syz [ 1594.687069][T13785] usb 5-1: SerialNumber: syz [ 1594.709242][T22767] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1594.950630][T22767] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1595.215365][T13785] sierra_net 5-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:02:07 [ 1595.644948][T22772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1595.695384][T22772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1595.839530][T22775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1595.859924][T22775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1595.887888][T22775] dvb-usb: bulk message failed: -22 (9/0) [ 1595.895112][T22775] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 1595.918364][T22775] ttusb2: i2c transfer failed. [ 1596.158024][T22782] kAFS: unable to lookup cell 'ÿ' [ 1596.909180][T22795] loop6: detected capacity change from 0 to 524288000 [ 1597.432157][ T8888] usb 5-1: USB disconnect, device number 105 [ 1597.481481][ T8888] sierra_net 5-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem [ 1597.609922][ T9] sierra_net 5-1:1.7 wwan0 (unregistering): Send SYNC failed, status -19 [ 1597.670726][ T9] sierra_net 5-1:1.7 wwan0 (unregistered): Send SYNC failed, status -19 [ 1597.710126][ T8888] sierra_net 5-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 1599.868151][T22875] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1600.081030][T22877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1600.110160][T22877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1600.159409][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1600.348264][ T9] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1600.369590][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.388891][ T9] usb 1-1: Product: syz [ 1600.397859][ T9] usb 1-1: Manufacturer: syz [ 1600.410865][ T9] usb 1-1: SerialNumber: syz [ 1600.429509][ T9] usb 1-1: config 0 descriptor?? [ 1600.444976][ T9] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 029 [ 1600.835872][T22882] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3404'. [ 1601.174857][T22886] kAFS: unable to lookup cell 'ÿ' [ 1601.774264][ T9] (null): failure setting delay to 10us [ 1601.802249][ T9] i2c-tiny-usb 1-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 1601.867038][ T9] usb 1-1: USB disconnect, device number 29 [ 1602.538662][T22891] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1602.628543][T22895] netlink: 'syz.2.3407': attribute type 4 has an invalid length. [ 1602.866999][T22897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1602.893235][T22897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1603.290820][T22906] dummy0: entered allmulticast mode [ 1605.075392][T22917] loop6: detected capacity change from 0 to 524288000 [ 1605.956804][T22928] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3411'. [ 1607.450704][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.463515][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.065706][T22950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1608.090010][T22950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1608.292483][T22956] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3418'. [ 1608.540240][T22960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1608.583410][T22960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1609.258520][T22970] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1609.508189][T22972] overlayfs: missing 'lowerdir' [ 1611.261240][T22988] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3425'. [ 1613.749558][T23015] fuse: Bad value for 'fd' [ 1615.029543][T23035] tipc: Started in network mode [ 1615.041199][T23035] tipc: Node identity ac14140f, cluster identity 4 [ 1615.057911][T23035] tipc: New replicast peer: 255.255.255.255 [ 1615.064758][T23035] tipc: Enabled bearer , priority 10 [ 1615.091654][T23038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3434'. [ 1615.101627][T23038] tipc: Disabling bearer [ 1615.153470][ T30] kauditd_printk_skb: 309 callbacks suppressed [ 1615.153492][ T30] audit: type=1326 audit(1778884122.214:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23032 comm="syz.0.3434" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02559ce59 code=0x7ffc0000 [ 1615.288209][ T30] audit: type=1326 audit(1778884122.254:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23032 comm="syz.0.3434" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02559ce59 code=0x7ffc0000 [ 1615.335231][ T30] audit: type=1326 audit(1778884122.254:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23032 comm="syz.0.3434" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fa02559ce59 code=0x7ffc0000 [ 1615.361641][T23039] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3435'. [ 1615.413348][ T30] audit: type=1326 audit(1778884122.254:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23032 comm="syz.0.3434" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02559ce59 code=0x7ffc0000 [ 1615.460611][ T30] audit: type=1326 audit(1778884122.254:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23032 comm="syz.0.3434" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fa02559ce59 code=0x7ffc0000 [ 1615.545570][ T30] audit: type=1326 audit(1778884122.254:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23032 comm="syz.0.3434" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02559ce59 code=0x7ffc0000 [ 1615.640923][ T30] audit: type=1326 audit(1778884122.254:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23032 comm="syz.0.3434" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02559ce59 code=0x7ffc0000 [ 1615.695924][ T30] audit: type=1326 audit(1778884122.254:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23032 comm="syz.0.3434" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa02559ce59 code=0x7ffc0000 [ 1615.800402][T23046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1615.813651][ T30] audit: type=1326 audit(1778884122.254:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23032 comm="syz.0.3434" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02559ce59 code=0x7ffc0000 [ 1615.868111][T23046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1615.927356][ T30] audit: type=1326 audit(1778884122.254:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23032 comm="syz.0.3434" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02559ce59 code=0x7ffc0000 [ 1617.135714][T23053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1617.147532][T23053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1617.314402][T23056] input: syz1 as /devices/virtual/input/input77 [ 1617.331229][T23056] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3439'. [ 1618.405489][T23078] trusted_key: encrypted_key: insufficient parameters specified [ 1618.866128][ T9] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1620.006128][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1620.063844][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1620.065416][T23081] fuse: Bad value for 'fd' [ 1620.094476][ T9] usb 5-1: config 0 has no interfaces? [ 1620.165816][T23082] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3444'. [ 1620.175807][ T9] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1620.193899][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 1620.250696][ T9] usb 5-1: Product: syz [ 1620.262361][ T9] usb 5-1: Manufacturer: syz [ 1620.272312][ T9] usb 5-1: SerialNumber: syz [ 1620.289385][ T9] usb 5-1: config 0 descriptor?? [ 1621.306134][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1621.436082][ T8888] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 1621.456927][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1621.465608][ T9] usb 1-1: config 0 has no interfaces? [ 1621.474520][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1621.484439][ T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1621.494410][ T9] usb 1-1: Manufacturer: syz [ 1621.525964][ T9] usb 1-1: config 0 descriptor?? [ 1621.649823][ T8888] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1621.666197][ T8888] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1621.676098][ T8888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1621.951409][T23099] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1621.970546][T13785] usb 5-1: USB disconnect, device number 106 [ 1622.617429][T23115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3450'. [ 1622.685512][T23116] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3450'. [ 1622.764197][T23115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1622.785041][T23115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1623.552365][T23121] pimreg3: entered allmulticast mode [ 1623.601063][T23121] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3451'. [ 1623.800089][ T8888] usb 4-1: USB disconnect, device number 81 [ 1624.328997][T13785] usb 1-1: USB disconnect, device number 30 [ 1624.400443][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1624.400462][ T30] audit: type=1800 audit(1778884131.464:2576): pid=23125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3452" name="bus" dev="tmpfs" ino=3486 res=0 errno=0 [ 1624.577975][T23129] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3453'. [ 1626.210822][T23139] hsr0: entered promiscuous mode [ 1626.224510][T23139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3455'. [ 1626.343741][T23139] hsr_slave_0: left promiscuous mode [ 1626.458809][T23139] hsr_slave_1: left promiscuous mode [ 1626.483157][T23139] hsr0 (unregistering): left promiscuous mode [ 1627.536112][ T8888] usb 5-1: new full-speed USB device number 107 using dummy_hcd [ 1627.720115][ T8888] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1627.731207][ T8888] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1627.747599][T23168] kAFS: unable to lookup cell 'ÿ' [ 1627.752750][ T8888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1627.770626][T23169] netlink: 80 bytes leftover after parsing attributes in process `syz.8.3461'. [ 1627.790922][T23168] kAFS: unable to lookup cell '(,c¾Ì' [ 1628.919890][T23178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1628.929291][T23178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1628.943878][T23178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1628.954553][T23178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1629.591779][T23162] trusted_key: encrypted_key: insufficient parameters specified [ 1629.886215][T13785] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1629.991917][T23190] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3466'. [ 1630.087232][T13785] usb 1-1: Using ep0 maxpacket: 32 [ 1630.101845][T13785] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1630.121167][ T8872] usb 5-1: USB disconnect, device number 107 [ 1630.143382][T13785] usb 1-1: config 0 has no interfaces? [ 1630.169638][T13785] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1630.183021][T13785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 1630.193622][T13785] usb 1-1: Product: syz [ 1630.231284][T13785] usb 1-1: Manufacturer: syz [ 1630.252917][T13785] usb 1-1: SerialNumber: syz [ 1630.294449][T13785] usb 1-1: config 0 descriptor?? [ 1630.466476][T22666] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 1630.650911][T22666] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1630.675831][T22666] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1630.714223][T22666] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1632.614910][T22666] usb 1-1: USB disconnect, device number 31 [ 1633.163234][ T8888] usb 4-1: USB disconnect, device number 82 [ 1633.522133][T23232] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1633.604187][T23232] overlayfs: missing 'lowerdir' [ 1633.650687][ T30] audit: type=1326 audit(1778884140.714:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23234 comm="syz.3.3476" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74159ce59 code=0x7ffc0000 [ 1633.767501][T23238] netlink: 'syz.3.3476': attribute type 4 has an invalid length. [ 1633.829573][ T30] audit: type=1326 audit(1778884140.714:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23234 comm="syz.3.3476" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74159ce59 code=0x7ffc0000 [ 1633.868796][T23240] netlink: 'syz.3.3476': attribute type 4 has an invalid length. [ 1633.952205][ T30] audit: type=1326 audit(1778884140.744:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23234 comm="syz.3.3476" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa74159ce59 code=0x7ffc0000 [ 1634.040051][ T30] audit: type=1326 audit(1778884140.744:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23234 comm="syz.3.3476" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74159ce59 code=0x7ffc0000 [ 1634.077264][ T30] audit: type=1326 audit(1778884140.744:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23234 comm="syz.3.3476" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74159ce59 code=0x7ffc0000 [ 1634.148321][ T30] audit: type=1326 audit(1778884140.784:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23234 comm="syz.3.3476" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa74159ce59 code=0x7ffc0000 [ 1634.223780][ T30] audit: type=1326 audit(1778884140.784:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23234 comm="syz.3.3476" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74159ce59 code=0x7ffc0000 [ 1634.386576][ T30] audit: type=1326 audit(1778884140.784:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23234 comm="syz.3.3476" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74159ce59 code=0x7ffc0000 [ 1634.510289][ T30] audit: type=1326 audit(1778884140.794:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23234 comm="syz.3.3476" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa74159ce59 code=0x7ffc0000 [ 1634.604837][ T30] audit: type=1326 audit(1778884140.794:2586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23234 comm="syz.3.3476" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74159ce59 code=0x7ffc0000 [ 1635.433884][T23246] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3478'. [ 1635.465665][T23254] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3480'. [ 1635.676202][T22666] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 1635.739198][T23264] fuse: Unknown parameter '0x0000000000000007' [ 1635.849042][T22666] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1635.869993][T23268] kAFS: unable to lookup cell 'ÿ' [ 1635.891820][T22666] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1635.931653][T22666] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1636.905481][T23276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1636.975736][T23276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1638.046840][ T8872] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 1638.311736][ T8872] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1638.364898][T13785] usb 1-1: USB disconnect, device number 32 [ 1638.402098][ T8872] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1638.488354][ T8872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1639.175216][T23307] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1639.984789][T23311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1640.003963][T23311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1641.089565][ T8888] usb 4-1: USB disconnect, device number 83 [ 1641.685751][T23338] fuse: Unknown parameter '0x0000000000000007' [ 1641.698833][T23333] IPVS: stopping backup sync thread 23337 ... [ 1641.709726][T23337] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 1642.101007][T23348] kAFS: unable to lookup cell 'ÿ' [ 1644.034846][T23362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3499'. [ 1644.564467][T23372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3499'. [ 1646.563897][T23386] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3505'. [ 1646.574448][T23386] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3505'. [ 1646.625892][T23388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3504'. [ 1646.636919][T23387] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3505'. [ 1646.655730][T23384] x_tables: duplicate underflow at hook 2 [ 1646.780166][T23389] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1647.219139][T23397] netlink: 51 bytes leftover after parsing attributes in process `syz.2.3507'. [ 1647.377291][T23396] xt_TCPMSS: Only works on TCP SYN packets [ 1647.750301][T23404] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3507'. [ 1647.875928][T23410] fuse: Unknown parameter 'fd0x0000000000000007' [ 1648.968209][T23423] kAFS: unable to lookup cell 'ÿ' [ 1650.051266][T23434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3513'. [ 1650.234580][T23438] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3513'. [ 1651.210625][T23451] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3517'. [ 1652.170045][T23460] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1652.238947][T23463] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1652.297956][T23460] loop9: detected capacity change from 0 to 524287936 [ 1652.399977][T23465] netlink: 'syz.3.3520': attribute type 4 has an invalid length. [ 1652.491345][T23467] netlink: 'syz.3.3520': attribute type 4 has an invalid length. [ 1653.845762][T23472] netlink: 'syz.2.3521': attribute type 1 has an invalid length. [ 1653.961371][T23474] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3521'. [ 1654.369887][T23478] fuse: Unknown parameter 'fd0x0000000000000007' [ 1654.851348][T23485] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3523'. [ 1655.191295][T23490] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1655.278688][T23491] overlayfs: missing 'lowerdir' [ 1655.782911][T23495] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3525'. [ 1657.272958][T23509] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1657.299643][T23508] tipc: Failed to remove unknown binding: 66,1,1/4:1142515013/1142515015 [ 1658.082677][T23525] netlink: 'syz.8.3532': attribute type 29 has an invalid length. [ 1658.141490][T23525] netlink: 'syz.8.3532': attribute type 29 has an invalid length. [ 1659.133150][T23530] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3533'. [ 1659.565328][T23531] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3533'. [ 1659.709831][T15155] usb 5-1: new full-speed USB device number 108 using dummy_hcd [ 1659.888822][T15155] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1659.904341][T15155] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1659.969167][T15155] usb 5-1: config 0 descriptor?? [ 1660.180091][T15155] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1660.441000][T15155] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 1660.469205][T15155] [drm] Initialized udl on minor 2 [ 1660.793280][T15155] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 1660.828775][T15155] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1660.879099][ T8888] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1660.901281][T15155] usb 5-1: USB disconnect, device number 108 [ 1660.927492][ T8888] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1661.211213][T23550] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1661.250157][T23550] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1661.298848][T23550] loop9: detected capacity change from 0 to 524287936 [ 1662.884990][T23562] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3540'. [ 1664.067578][T23582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1665.157573][T23582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1665.546081][ T8888] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1665.716703][ T8888] usb 4-1: Using ep0 maxpacket: 8 [ 1665.743898][ T8888] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1665.791154][ T8888] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1665.849143][ T8888] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1665.904790][ T8888] usb 4-1: New USB device found, idVendor=1235, idProduct=8217, bcdDevice= 0.40 [ 1665.945541][ T8888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1665.982106][ T8888] usb 4-1: Product: syz [ 1666.002234][ T8888] usb 4-1: Manufacturer: syz [ 1666.022352][ T8888] usb 4-1: SerialNumber: syz [ 1666.308666][ T8888] usb 4-1: 0:1 : does not exist [ 1666.333167][ T8888] usb 4-1: Focusrite Vocaster Mixer Driver enabled (pid=0x8217); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1666.383808][ T8888] usb 4-1: Error initialising Vocaster Mixer Driver: -22 [ 1666.533899][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033698800: rx timeout, send abort [ 1666.595429][ T8888] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1666.631951][ T8888] usb 4-1: USB disconnect, device number 84 [ 1666.700545][T10510] udevd[10510]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1667.034009][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803369bc00: rx timeout, send abort [ 1667.047745][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033698800: abort rx timeout. Force session deactivation [ 1667.542300][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803369bc00: abort rx timeout. Force session deactivation [ 1667.961212][T23607] netlink: 'syz.3.3550': attribute type 10 has an invalid length. [ 1667.977853][T23608] kAFS: unable to lookup cell 'ÿ' [ 1668.280800][T23616] kAFS: unable to lookup cell 'ÿ' [ 1668.291993][T23598] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1668.935790][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.966882][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.078588][T23636] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1670.089596][T23635] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 1670.172225][T23632] random: crng reseeded on system resumption [ 1670.263246][T23636] overlayfs: missing 'lowerdir' [ 1670.474174][T23641] dummy0: left allmulticast mode [ 1670.547734][T23641] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1671.338586][T23649] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3557'. [ 1672.587974][T23667] fuse: Bad value for 'fd' [ 1674.398012][T23662] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1674.422680][T23662] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1674.468683][T23685] kAFS: unable to lookup cell 'ÿ' [ 1676.072983][T23703] kAFS: unable to lookup cell 'ÿ' [ 1676.136188][T23705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3569'. [ 1676.410825][ T5628] Bluetooth: hci4: command 0x0406 tx timeout [ 1678.246223][T22666] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1678.406242][T22666] usb 4-1: Using ep0 maxpacket: 32 [ 1678.431540][T22666] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1678.454685][T22666] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1678.488799][ T5628] Bluetooth: hci4: command 0x0406 tx timeout [ 1678.499433][T22666] usb 4-1: Product: syz [ 1678.508823][T22666] usb 4-1: Manufacturer: syz [ 1678.518721][T22666] usb 4-1: SerialNumber: syz [ 1678.536274][T22666] usb 4-1: config 0 descriptor?? [ 1678.750613][T22666] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 085 [ 1679.020303][T23716] dvb-usb: bulk message failed: -22 (9/0) [ 1679.038463][T23716] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 1679.080681][T23716] ttusb2: i2c transfer failed. [ 1680.724282][T23763] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3577'. [ 1680.848536][T23764] netlink: 144 bytes leftover after parsing attributes in process `syz.8.3578'. [ 1681.647540][ T8888] usb 4-1: USB disconnect, device number 85 [ 1682.039240][T23769] trusted_key: encrypted_key: insufficient parameters specified [ 1682.357083][ T8888] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1686.450161][T23816] IPVS: stopping backup sync thread 16691 ... [ 1688.431886][T23825] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3589'. [ 1688.868827][T23833] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1688.931958][T23834] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1688.983914][T23834] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3592'. [ 1689.306277][T22666] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1689.366404][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1689.468707][T22666] usb 5-1: Using ep0 maxpacket: 8 [ 1689.498191][T23834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1689.510033][T23834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1689.559544][T22666] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1689.568371][T22666] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1689.579844][T22666] usb 5-1: can't read configurations, error -71 [ 1690.102064][T23846] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3596'. [ 1690.227872][T13785] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1690.398978][T13785] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1690.453400][T13785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1690.577014][T13785] usb 4-1: config 0 descriptor?? [ 1690.720294][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 1690.720313][ T30] audit: type=1326 audit(1778884197.744:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23853 comm="syz.4.3598" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f859ce59 code=0x7ffc0000 [ 1690.789556][T23852] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1690.877851][ T30] audit: type=1326 audit(1778884197.744:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23853 comm="syz.4.3598" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f859ce59 code=0x7ffc0000 [ 1691.029517][ T30] audit: type=1326 audit(1778884197.744:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23853 comm="syz.4.3598" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa0f855d68e code=0x7ffc0000 [ 1691.179217][ T30] audit: type=1326 audit(1778884197.754:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23853 comm="syz.4.3598" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f859ce59 code=0x7ffc0000 [ 1691.283456][ T30] audit: type=1326 audit(1778884197.754:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23853 comm="syz.4.3598" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fa0f859ce59 code=0x7ffc0000 [ 1691.408881][ T30] audit: type=1326 audit(1778884197.754:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23853 comm="syz.4.3598" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f859ce59 code=0x7ffc0000 [ 1691.602307][ T30] audit: type=1326 audit(1778884197.754:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23853 comm="syz.4.3598" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa0f859ce59 code=0x7ffc0000 [ 1691.773113][ T30] audit: type=1326 audit(1778884197.774:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23853 comm="syz.4.3598" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f859ce59 code=0x7ffc0000 [ 1691.809370][T23844] netlink: 'syz.3.3595': attribute type 10 has an invalid length. [ 1691.863583][ T30] audit: type=1326 audit(1778884197.774:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23853 comm="syz.4.3598" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f859ce59 code=0x7ffc0000 [ 1691.972515][ T30] audit: type=1326 audit(1778884197.884:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23853 comm="syz.4.3598" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa0f855d68e code=0x7ffc0000 [ 1693.872825][T23881] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3601'. [ 1693.897846][T23881] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3601'. [ 1694.892904][T23890] kAFS: unable to lookup cell 'ÿ' [ 1695.016884][T15155] usb 4-1: USB disconnect, device number 86 [ 1695.284315][T23896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3604'. [ 1695.414221][T23879] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3600'. [ 1695.706315][T13785] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1697.136160][T13785] usb 4-1: Using ep0 maxpacket: 32 [ 1697.152409][T13785] usb 4-1: config 0 has an invalid interface number: 151 but max is 0 [ 1697.172022][T13785] usb 4-1: config 0 has no interface number 0 [ 1697.186487][T13785] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1697.198023][T13785] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1697.213414][T13785] usb 4-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1697.223302][T13785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1697.231568][T13785] usb 4-1: Product: syz [ 1697.235854][T13785] usb 4-1: Manufacturer: syz [ 1697.240912][T13785] usb 4-1: SerialNumber: syz [ 1697.264808][T13785] usb 4-1: config 0 descriptor?? [ 1697.423202][T10510] udevd[10510]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1697.800990][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 1697.801008][ T30] audit: type=1326 audit(1778884204.854:2676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23900 comm="syz.0.3607" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02559ce59 code=0x7ffc0000 [ 1697.866078][ T30] audit: type=1326 audit(1778884204.924:2677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23900 comm="syz.0.3607" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02559ce59 code=0x7ffc0000 [ 1697.900777][T15155] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1697.925725][ T30] audit: type=1326 audit(1778884204.964:2678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23900 comm="syz.0.3607" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fa02559ce59 code=0x7ffc0000 [ 1697.989935][ T30] audit: type=1326 audit(1778884205.054:2679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23900 comm="syz.0.3607" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02559ce59 code=0x7ffc0000 [ 1698.027085][ T30] audit: type=1326 audit(1778884205.054:2680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23900 comm="syz.0.3607" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02559ce59 code=0x7ffc0000 [ 1698.052735][ T30] audit: type=1326 audit(1778884205.124:2681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23900 comm="syz.0.3607" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa02559ce59 code=0x7ffc0000 [ 1698.093935][T15155] usb 5-1: Using ep0 maxpacket: 32 [ 1698.108982][T15155] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1698.126296][ T30] audit: type=1326 audit(1778884205.124:2682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23900 comm="syz.0.3607" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02559ce59 code=0x7ffc0000 [ 1698.158001][T15155] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1698.179162][T15155] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1698.192283][ T30] audit: type=1326 audit(1778884205.124:2683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23900 comm="syz.0.3607" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02559ce59 code=0x7ffc0000 [ 1698.227235][T15155] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1698.237025][T15155] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1698.246775][ T30] audit: type=1326 audit(1778884205.214:2684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23900 comm="syz.0.3607" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fa02559ce59 code=0x7ffc0000 [ 1698.279097][T15155] usb 5-1: Product: syz [ 1698.288659][T15155] usb 5-1: Manufacturer: syz [ 1698.299497][T15155] usb 5-1: SerialNumber: syz [ 1698.312656][T15155] usb 5-1: config 0 descriptor?? [ 1698.318174][ T30] audit: type=1326 audit(1778884205.244:2685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23900 comm="syz.0.3607" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02559ce59 code=0x7ffc0000 [ 1698.353137][T15155] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input79 [ 1698.821166][T23902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3608'. [ 1699.040273][T15155] usb 5-1: USB disconnect, device number 112 [ 1699.046466][ C1] xpad 5-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 1699.046541][ C1] xpad 5-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19 [ 1699.540732][T23925] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3611'. [ 1700.995480][T23938] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3615'. [ 1701.154127][T15155] usb 4-1: USB disconnect, device number 87 [ 1701.338447][T23948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1701.351490][T23948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1701.445598][T23950] dummy0: left allmulticast mode [ 1701.497238][T23950] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1703.664981][T23965] binder: BINDER_SET_CONTEXT_MGR already set [ 1703.671271][T23965] binder: 23955:23965 ioctl 4018620d 200000004a80 returned -16 [ 1705.996446][T23985] ipvlan1: left allmulticast mode [ 1706.286171][ T8888] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1706.459720][ T8888] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 1706.475067][ T8888] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1706.505676][ T8888] usb 1-1: config 0 has no interface number 0 [ 1706.530090][ T8888] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1706.547861][ T8888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1706.576158][ T8888] usb 1-1: Product: syz [ 1706.586134][ T8888] usb 1-1: Manufacturer: syz [ 1706.599047][ T8888] usb 1-1: SerialNumber: syz [ 1706.613794][ T8888] usb 1-1: config 0 descriptor?? [ 1706.635549][ T8888] uvcvideo 1-1:0.64: probe with driver uvcvideo failed with error -22 [ 1706.840234][T23985] netlink: 'syz.0.3623': attribute type 1 has an invalid length. [ 1708.831512][T22666] usb 1-1: USB disconnect, device number 33 [ 1709.398474][T24017] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1709.545529][T24017] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3630'. [ 1709.713318][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1709.713336][ T30] audit: type=1326 audit(1778884216.774:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24021 comm="syz.4.3632" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f859ce59 code=0x7ffc0000 [ 1709.805166][ T30] audit: type=1326 audit(1778884216.844:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24021 comm="syz.4.3632" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fa0f859ce59 code=0x7ffc0000 [ 1709.878768][ T30] audit: type=1326 audit(1778884216.854:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24021 comm="syz.4.3632" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f859ce59 code=0x7ffc0000 [ 1709.930497][ T30] audit: type=1326 audit(1778884216.864:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24021 comm="syz.4.3632" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa0f859ce59 code=0x7ffc0000 [ 1709.965202][ T30] audit: type=1326 audit(1778884216.864:2700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24021 comm="syz.4.3632" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f859ce59 code=0x7ffc0000 [ 1709.991274][ T30] audit: type=1326 audit(1778884216.864:2701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24021 comm="syz.4.3632" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa0f859ce59 code=0x7ffc0000 [ 1710.018667][ T30] audit: type=1326 audit(1778884216.864:2702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24021 comm="syz.4.3632" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f859ce59 code=0x7ffc0000 [ 1710.171609][ T30] audit: type=1326 audit(1778884216.864:2703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24021 comm="syz.4.3632" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa0f859ce59 code=0x7ffc0000 [ 1710.349565][ T30] audit: type=1326 audit(1778884216.914:2704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24021 comm="syz.4.3632" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f859ce59 code=0x7ffc0000 [ 1710.435542][ T30] audit: type=1326 audit(1778884216.924:2705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24021 comm="syz.4.3632" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fa0f859ce59 code=0x7ffc0000 [ 1711.256355][ T8888] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1711.420196][ T8888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1711.460453][ T8888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1711.502532][ T8888] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1711.551428][ T8888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1711.592835][T24040] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1711.607305][ T8888] usb 4-1: config 0 descriptor?? [ 1711.816708][T24051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1711.880585][T24051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1712.068979][T24053] ttusb2: i2c wr len=147 too high [ 1712.105750][ T8888] hid-led 0003:1D34:000A.001B: item fetching failed at offset 0/3 [ 1712.130589][T24051] fuse: Bad value for 'fd' [ 1712.145305][ T8888] hid-led 0003:1D34:000A.001B: probe with driver hid-led failed with error -22 [ 1712.441494][T24055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1712.587944][T24055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1712.606880][T24031] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3633'. [ 1712.647064][T24055] netlink: 165 bytes leftover after parsing attributes in process `syz.2.3639'. [ 1714.198032][ T8888] usb 4-1: USB disconnect, device number 88 [ 1714.280164][T24083] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3645'. [ 1714.763044][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 1714.763058][ T30] audit: type=1326 audit(1778884221.824:2757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24084 comm="syz.3.3646" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74159ce59 code=0x7ffc0000 [ 1714.801366][ T30] audit: type=1326 audit(1778884221.824:2758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24084 comm="syz.3.3646" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74159ce59 code=0x7ffc0000 [ 1716.854097][T24119] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1718.616514][T24132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3653'. [ 1719.286105][T13785] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1719.456115][T13785] usb 5-1: Using ep0 maxpacket: 32 [ 1719.492052][T13785] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1719.534098][T13785] usb 5-1: config 0 has no interface number 0 [ 1719.577704][T13785] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1719.625181][T13785] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1719.663705][T13785] usb 5-1: Product: syz [ 1719.690915][T13785] usb 5-1: Manufacturer: syz [ 1719.708069][T13785] usb 5-1: SerialNumber: syz [ 1719.738728][T13785] usb 5-1: config 0 descriptor?? [ 1719.796592][T13785] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1719.844590][T13785] usb 5-1: selecting invalid altsetting 1 [ 1719.879510][T13785] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1719.907596][T22666] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1719.951832][T13785] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1719.999415][T13785] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1720.023968][T13785] usb 5-1: media controller created [ 1720.079110][T13785] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1720.106912][T22666] usb 1-1: Using ep0 maxpacket: 8 [ 1720.120698][T22666] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 1720.154885][T22666] usb 1-1: config 0 has no interface number 0 [ 1720.177166][T22666] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 1720.202045][T22666] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1720.217910][T13785] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1720.235508][T13785] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1720.244693][T22666] usb 1-1: config 0 descriptor?? [ 1720.273972][T13785] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1720.367330][T22666] viperboard 1-1:0.143: version 0.00 found at bus 001 address 034 [ 1720.463793][T13785] usb 5-1: USB disconnect, device number 113 [ 1720.531036][T22666] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1720.565776][T22666] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1721.119055][T24167] dummy0: left allmulticast mode [ 1721.179643][T24167] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1722.439992][ T8888] usb 1-1: USB disconnect, device number 34 [ 1722.965258][T24190] bond0: entered promiscuous mode [ 1722.985890][T24190] bond_slave_0: entered promiscuous mode [ 1723.011067][T24190] bond_slave_1: entered promiscuous mode [ 1723.084927][T24190] batadv0: entered promiscuous mode [ 1723.098923][T24195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1723.133072][T24195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1723.153637][T24190] bond0: left promiscuous mode [ 1723.170388][T24195] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3663'. [ 1723.181596][T24190] bond_slave_0: left promiscuous mode [ 1723.192719][T24190] bond_slave_1: left promiscuous mode [ 1723.231909][T24197] fuse: Bad value for 'fd' [ 1723.244210][T24190] batadv0: left promiscuous mode [ 1723.964516][T24209] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3665'. [ 1724.358132][T24213] dummy0: left allmulticast mode [ 1724.400449][T24213] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1725.033490][T24220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3667'. [ 1725.188907][T24225] kAFS: unable to lookup cell 'ÿ' [ 1726.272474][T24243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1726.297275][T24243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1726.349501][T24243] dvb-usb: bulk message failed: -22 (9/0) [ 1726.385164][T24243] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 1726.441153][T24243] ttusb2: i2c transfer failed. [ 1726.481818][T24237] netlink: zone id is out of range [ 1726.512895][T24237] netlink: zone id is out of range [ 1726.586573][T24237] netlink: zone id is out of range [ 1726.702193][T24237] netlink: zone id is out of range [ 1726.750955][T24237] netlink: zone id is out of range [ 1726.773624][T24237] netlink: zone id is out of range [ 1726.804632][T24237] netlink: zone id is out of range [ 1726.824773][T24237] netlink: zone id is out of range [ 1726.848093][T24237] netlink: zone id is out of range [ 1726.881555][T24237] netlink: zone id is out of range [ 1726.952629][T24250] RDS: rds_bind could not find a transport for ::ffff:172.30.0.9, load rds_tcp or rds_rdma? [ 1727.510726][T24257] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3686'. [ 1727.545650][T24257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3686'. [ 1727.731194][T24267] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1727.793453][T24267] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1727.849573][T24267] loop9: detected capacity change from 0 to 524287936 [ 1728.365999][T24280] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3678'. [ 1729.158762][T24283] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3680'. [ 1729.525912][ T30] audit: type=1326 audit(1778884236.584:2759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24282 comm="syz.2.3680" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f239ce59 code=0x7ffc0000 [ 1729.569079][T24292] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1729.585573][ T30] audit: type=1326 audit(1778884236.594:2760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24282 comm="syz.2.3680" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f239ce59 code=0x7ffc0000 [ 1729.673583][ T30] audit: type=1326 audit(1778884236.594:2761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24282 comm="syz.2.3680" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe6f239ce59 code=0x7ffc0000 [ 1729.708515][T24292] netlink: 'syz.4.3681': attribute type 10 has an invalid length. [ 1729.768321][ T30] audit: type=1326 audit(1778884236.594:2762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24282 comm="syz.2.3680" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f239ce59 code=0x7ffc0000 [ 1729.802408][ T30] audit: type=1326 audit(1778884236.594:2763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24282 comm="syz.2.3680" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f239ce59 code=0x7ffc0000 [ 1729.913002][ T30] audit: type=1326 audit(1778884236.594:2764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24282 comm="syz.2.3680" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fe6f239ce59 code=0x7ffc0000 [ 1729.998169][ T30] audit: type=1326 audit(1778884236.594:2765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24282 comm="syz.2.3680" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f239ce59 code=0x7ffc0000 [ 1730.057778][ T30] audit: type=1326 audit(1778884236.594:2766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24282 comm="syz.2.3680" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f239ce59 code=0x7ffc0000 [ 1730.123062][ T30] audit: type=1326 audit(1778884236.594:2767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24282 comm="syz.2.3680" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fe6f239ce59 code=0x7ffc0000 [ 1730.159997][ T30] audit: type=1326 audit(1778884236.594:2768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24282 comm="syz.2.3680" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f239ce59 code=0x7ffc0000 [ 1730.190229][T24292] team0 (unregistering): Port device team_slave_0 removed [ 1730.240248][T24292] team0 (unregistering): Port device team_slave_1 removed [ 1730.332705][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.339331][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.779409][T24306] kAFS: unable to lookup cell 'ÿ' [ 1732.151003][T24322] dummy0: entered allmulticast mode [ 1732.368118][T24327] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1732.735092][T24336] netlink: 'syz.0.3690': attribute type 10 has an invalid length. [ 1732.772181][T24336] netdevsim netdevsim0 netdevsim1: left allmulticast mode [ 1732.802655][T24337] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3690'. [ 1732.829204][T24336] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1732.908686][T24336] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 1732.962629][T24336] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1733.019593][T24337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1733.092711][T24337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1733.195433][T24337] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1733.237794][T24337] dummy0: left allmulticast mode [ 1733.272404][T24337] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 1733.324628][T24337] netdevsim netdevsim0 netdevsim1: left allmulticast mode [ 1733.375049][T24337] bond0 (unregistering): Released all slaves [ 1734.678310][T24353] kAFS: unable to lookup cell 'ÿ' [ 1734.900616][T24351] usb 9-1: USB disconnect, device number 33 [ 1735.400761][T24365] fuse: Unknown parameter '0xffffffffffffffff0xffffffffffffffff' [ 1737.719792][T24375] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3697'. [ 1737.796782][T24375] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3697'. [ 1738.720726][T24386] dummy0: entered allmulticast mode [ 1738.979891][T24394] dummy0: entered allmulticast mode [ 1739.063782][T24397] SET target dimension over the limit! [ 1740.518527][T24405] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3704'. [ 1740.532123][T24405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3704'. [ 1740.563481][T24405] loop9: detected capacity change from 0 to 2640 [ 1740.576476][T24405] buffer_io_error: 11 callbacks suppressed [ 1740.576494][T24405] Buffer I/O error on dev loop9, logical block 0, async page read [ 1740.590899][T24405] Buffer I/O error on dev loop9, logical block 0, async page read [ 1740.606810][T24405] Buffer I/O error on dev loop9, logical block 0, async page read [ 1740.621883][T24405] Buffer I/O error on dev loop9, logical block 0, async page read [ 1740.635205][T24405] Buffer I/O error on dev loop9, logical block 0, async page read [ 1740.649982][T24405] Buffer I/O error on dev loop9, logical block 0, async page read [ 1740.681724][T24405] loop9: unable to read partition table [ 1740.682032][T24405] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1740.689394][T24408] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 1740.689508][T24408] Buffer I/O error on dev loop9, logical block 1, lost async page write [ 1740.689589][T24408] Buffer I/O error on dev loop9, logical block 2, lost async page write [ 1740.689644][T24408] Buffer I/O error on dev loop9, logical block 3, lost async page write [ 1742.735268][T24427] trusted_key: encrypted_key: insufficient parameters specified [ 1743.423721][T24431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3708'. [ 1743.511222][T24431] bridge0: port 2(bridge_slave_1) entered disabled state [ 1743.522140][T24431] bridge0: port 1(1¾x9ÿ) entered disabled state [ 1744.409013][T24442] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3710'. [ 1744.883402][T24446] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3711'. [ 1746.288159][T24453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3713'. [ 1746.347196][T24453] netlink: 'syz.3.3713': attribute type 30 has an invalid length. [ 1746.473113][ T1158] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1746.487979][ T1158] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1746.517865][ T1158] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1747.546083][T15155] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1747.709105][T15155] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1747.730081][T15155] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1747.753570][T15155] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 1747.769920][T15155] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1747.789810][T15155] usb 4-1: Product: syz [ 1747.798677][T15155] usb 4-1: Manufacturer: syz [ 1747.808339][T15155] usb 4-1: SerialNumber: syz [ 1748.270171][T15155] usb 4-1: reset high-speed USB device number 89 using dummy_hcd [ 1748.504742][T24468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1748.519332][T24468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1749.918622][ T8888] usb 3-1: USB disconnect, device number 59 [ 1750.497382][T14891] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1750.543056][T14891] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1750.554233][T14891] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1750.597076][T14891] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1750.663154][T14891] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1751.200554][T15155] usb 4-1: USB disconnect, device number 89 [ 1751.264363][T24490] bond0: option arp_interval: invalid value (18446744072904038628) [ 1751.272574][T24490] bond0: option arp_interval: allowed values 0 - 2147483647 [ 1751.316811][T24490] bond0 (unregistering): Released all slaves [ 1752.289317][T24511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1752.344488][T24511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1752.397853][T24511] create_pit_timer: 21 callbacks suppressed [ 1752.397873][T24511] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1752.726207][ T5628] Bluetooth: hci2: command tx timeout [ 1753.015901][T24491] bridge0: port 1(bridge_slave_0) entered blocking state [ 1753.062674][T24491] bridge0: port 1(bridge_slave_0) entered disabled state [ 1753.098793][T24491] bridge_slave_0: entered allmulticast mode [ 1753.113568][T24491] bridge_slave_0: entered promiscuous mode [ 1753.184474][T24491] bridge0: port 2(bridge_slave_1) entered blocking state [ 1753.213185][T24491] bridge0: port 2(bridge_slave_1) entered disabled state [ 1753.258735][T24491] bridge_slave_1: entered allmulticast mode [ 1753.295548][T24491] bridge_slave_1: entered promiscuous mode [ 1753.768135][T24491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1753.823804][T24491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1754.091404][T24520] random: crng reseeded on system resumption [ 1754.447007][T24491] team0: Port device team_slave_0 added [ 1754.496539][T24491] team0: Port device team_slave_1 added [ 1754.670775][T24491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1754.694301][T24491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1754.781686][T24491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1754.816100][ T5628] Bluetooth: hci2: command tx timeout [ 1754.847322][T24491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1754.886999][T24491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1754.990973][T24491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1755.262341][T24491] hsr_slave_0: entered promiscuous mode [ 1755.291171][T24491] hsr_slave_1: entered promiscuous mode [ 1756.888359][ T5628] Bluetooth: hci2: command tx timeout [ 1758.733736][T24565] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3731'. [ 1758.969654][ T5628] Bluetooth: hci2: command tx timeout [ 1759.119108][T24585] netlink: 'syz.3.3732': attribute type 4 has an invalid length. [ 1760.796298][T13785] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1760.882547][T24610] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3734'. [ 1761.001141][T13785] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1761.014497][T13785] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1761.109203][T13785] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1761.120015][T13785] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1761.149700][T13785] usb 5-1: config 0 descriptor?? [ 1761.378743][T24491] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1761.574004][T24491] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1761.584992][T24491] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1761.644677][T13785] hid-led 0003:1D34:000A.001C: item fetching failed at offset 0/3 [ 1761.654721][T13785] hid-led 0003:1D34:000A.001C: probe with driver hid-led failed with error -22 [ 1761.713107][T24491] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1761.732337][T24491] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1761.750342][T24491] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1761.774782][T24491] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1761.827859][T24491] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1761.990131][T24605] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3733'. [ 1762.097270][T24491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1762.192919][T24491] 8021q: adding VLAN 0 to HW filter on device team0 [ 1762.290500][T22851] bridge0: port 1(bridge_slave_0) entered blocking state [ 1762.297669][T22851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1762.342159][T22851] bridge0: port 2(bridge_slave_1) entered blocking state [ 1762.349301][T22851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1762.609451][T24491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1762.819869][T24491] veth0_vlan: entered promiscuous mode [ 1762.858138][T24491] veth1_vlan: entered promiscuous mode [ 1762.953145][T24491] veth0_macvtap: entered promiscuous mode [ 1763.001943][T24491] veth1_macvtap: entered promiscuous mode [ 1763.014745][T24640] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3735'. [ 1763.282476][T24491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1763.295672][T24640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3735'. [ 1763.336565][T24491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1763.551427][ T1171] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1763.595213][ T1171] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1763.626430][T14772] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1763.660032][T14772] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1763.810218][T22666] usb 5-1: USB disconnect, device number 114 [ 1764.071408][T24656] kAFS: unable to lookup cell 'ÿ' [ 1764.848037][T22851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1764.904896][T22851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1764.986405][T22853] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1764.994978][T22853] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1765.881405][T24689] pimreg3: entered allmulticast mode [ 1767.306403][T24718] kAFS: unable to lookup cell 'ÿ' [ 1768.883709][T24742] xt_ecn: cannot match TCP bits for non-tcp packets [ 1769.741687][T24758] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3746'. [ 1770.128853][T24768] kAFS: unable to lookup cell 'ÿ' [ 1770.834414][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1770.834432][ T30] audit: type=1326 audit(1778884277.894:2783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24775 comm="syz.0.3748" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa02559ce59 code=0x0 [ 1771.879974][T24796] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3749'. [ 1773.945177][T24833] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 1775.031178][T24844] kAFS: unable to lookup cell 'ÿ' [ 1778.927014][T24896] kAFS: unable to lookup cell 'ÿ' [ 1780.735696][T24921] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3766'. [ 1782.098765][T24938] kAFS: unable to lookup cell 'ÿ' [ 1783.053694][ T30] audit: type=1800 audit(1778884290.114:2784): pid=24949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3773" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0 [ 1783.354234][T24952] binder: 24948:24952 ioctl c0306201 0 returned -14 [ 1783.524386][ T30] audit: type=1326 audit(1778884290.574:2785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24948 comm="syz.0.3773" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa02559ce59 code=0x0 [ 1784.359621][T24965] kAFS: unable to lookup cell 'ÿ' [ 1785.246072][ T8888] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1785.280447][T24949] ipvlan2: entered promiscuous mode [ 1785.288692][T24949] bridge0: port 3(ipvlan2) entered blocking state [ 1785.295500][T24949] bridge0: port 3(ipvlan2) entered disabled state [ 1785.310285][T24949] ipvlan2: entered allmulticast mode [ 1785.369621][T24949] ipvlan2: left allmulticast mode [ 1785.496103][ T8888] usb 4-1: Using ep0 maxpacket: 32 [ 1785.562297][ T8888] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 1785.582486][ T8888] usb 4-1: config 0 has no interface number 0 [ 1785.638271][ T8888] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1785.760630][ T8888] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1785.773538][ T8888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1785.782247][ T8888] usb 4-1: Product: syz [ 1785.791561][ T8888] usb 4-1: Manufacturer: syz [ 1785.826154][ T8888] usb 4-1: SerialNumber: syz [ 1785.865142][ T8888] usb 4-1: config 0 descriptor?? [ 1786.289161][T24973] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1786.617486][T24973] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1786.746508][T24991] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1786.845743][ T8888] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1786.885108][ T8888] asix 4-1:0.188: probe with driver asix failed with error -61 [ 1787.963075][T24998] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3783'. [ 1788.691748][T24662] usb 4-1: USB disconnect, device number 90 [ 1789.110124][T25015] fuse: Bad value for 'user_id' [ 1789.145694][T25015] fuse: Bad value for 'user_id' [ 1789.158793][T25012] dummy0: left allmulticast mode [ 1789.307600][T25012] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1789.589668][T25022] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1790.026567][ T8888] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1790.219904][ T8888] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 1790.243119][ T8888] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1790.285895][ T8888] usb 1-1: config 0 has no interface number 0 [ 1790.316104][ T8888] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1790.340573][ T8888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1790.367790][ T8888] usb 1-1: Product: syz [ 1790.382816][ T8888] usb 1-1: Manufacturer: syz [ 1790.399928][ T8888] usb 1-1: SerialNumber: syz [ 1790.431501][ T8888] usb 1-1: config 0 descriptor?? [ 1790.458864][ T8888] uvcvideo 1-1:0.64: probe with driver uvcvideo failed with error -22 [ 1790.662325][T24662] usb 1-1: USB disconnect, device number 35 [ 1791.124297][T25038] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1791.309273][T25046] kAFS: unable to lookup cell 'ÿ' [ 1791.476082][ T8888] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1791.566111][ T807] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1791.626130][ T8888] usb 1-1: Using ep0 maxpacket: 16 [ 1791.640818][ T8888] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1791.659130][ T8888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1791.676178][ T8888] usb 1-1: Product: syz [ 1791.689452][ T8888] usb 1-1: Manufacturer: syz [ 1791.699843][ T8888] usb 1-1: SerialNumber: syz [ 1791.714154][ T8888] usb 1-1: config 0 descriptor?? [ 1791.727447][ T807] usb 4-1: Using ep0 maxpacket: 32 [ 1791.740757][ T807] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1791.754773][ T8888] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 1791.766574][ T807] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1791.775370][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.785362][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.814758][ T807] usb 4-1: config 0 has an invalid descriptor of length 42, skipping remainder of the config [ 1791.845843][ T807] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1791.859260][T25048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3794'. [ 1791.952957][ T8888] usb 1-1: clie_3_5_startup: get config number failed: -71 [ 1791.991620][ T807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 11149, setting to 1024 [ 1792.005827][ T8888] visor 1-1:0.0: probe with driver visor failed with error -71 [ 1792.049065][ T807] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1792.059448][ T8888] usb 1-1: USB disconnect, device number 36 [ 1792.068711][ T807] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1792.138146][ T807] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1792.163692][ T807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1792.215167][ T807] usb 4-1: config 0 descriptor?? [ 1792.252757][T25049] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1792.433786][T25057] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3797'. [ 1792.515470][T25049] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3796'. [ 1792.591130][T25049] loop7: detected capacity change from 0 to 16384 [ 1793.283074][ C1] I/O error, dev loop7, sector 2560 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 1793.283996][T25049] loop7: detected capacity change from 16384 to 0 [ 1793.545620][T10330] vivid-000: reconnect [ 1793.577170][T13785] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1793.749328][T13785] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1793.779560][T13785] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1793.814121][T13785] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 1793.843035][T13785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1793.878510][T13785] usb 1-1: Product: syz [ 1793.900860][T13785] usb 1-1: Manufacturer: syz [ 1793.913392][T13785] usb 1-1: SerialNumber: syz [ 1793.976551][T13785] usb 1-1: 0:1 : does not exist [ 1794.131396][T14772] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1794.172066][T14772] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1794.195973][T14772] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1794.235844][T13785] usb 1-1: 3:0: failed to get current value for ch 0 (-71) [ 1794.258732][T13785] usb 1-1: unit 13 not found! [ 1794.444499][T13785] usb 1-1: USB disconnect, device number 37 [ 1794.524334][ T807] usb 4-1: USB disconnect, device number 91 [ 1794.773494][T10510] udevd[10510]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1794.890469][T25066] netdevsim netdevsim8: Direct firmware load for ./file0 failed with error -2 [ 1794.907349][T25066] netdevsim netdevsim8: Falling back to sysfs fallback for: ./file0 [ 1795.195744][T14891] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1795.211805][T14891] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1795.220393][T14891] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1795.238881][T14891] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1795.246857][T14891] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1795.308401][T25080] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3804'. [ 1795.362112][T25078] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1795.391441][T14772] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1795.462226][T14772] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1795.508495][T14772] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1795.634238][T13785] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 1795.828191][T13785] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 1795.856276][T13785] usb 1-1: config 0 has no interface number 0 [ 1795.877089][T13785] usb 1-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1795.906420][T13785] usb 1-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1795.940056][T13785] usb 1-1: config 0 interface 113 has no altsetting 0 [ 1795.978708][T13785] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1795.988513][T13785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1795.997193][T13785] usb 1-1: Product: syz [ 1796.002037][T13785] usb 1-1: Manufacturer: syz [ 1796.008540][T13785] usb 1-1: SerialNumber: syz [ 1796.017808][T13785] usb 1-1: config 0 descriptor?? [ 1796.046277][ C0] usb 1-1: NFC: Urb failure (status -71) [ 1796.060078][T13785] usb 1-1: NFC: Unable to get FW version [ 1796.067314][T13785] pn533_usb 1-1:0.113: probe with driver pn533_usb failed with error -90 [ 1796.379437][T25090] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1796.412280][T25090] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1796.965745][T14772] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1796.993709][T14772] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1797.019411][T14772] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1797.377153][ T5628] Bluetooth: hci1: command tx timeout [ 1798.259323][T25109] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3810'. [ 1798.496473][ T8872] usb 1-1: USB disconnect, device number 38 [ 1798.886318][ T8872] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1798.990735][T25081] bridge0: port 1(bridge_slave_0) entered blocking state [ 1799.000897][T25081] bridge0: port 1(bridge_slave_0) entered disabled state [ 1799.033246][T25081] bridge_slave_0: entered allmulticast mode [ 1799.048500][ T8872] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1799.068158][ T8872] usb 1-1: New USB device found, idVendor=249c, idProduct=932c, bcdDevice=f9.1b [ 1799.090299][T25081] bridge_slave_0: entered promiscuous mode [ 1799.105254][ T8872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1799.140791][ T8872] usb 1-1: config 0 descriptor?? [ 1799.221320][T25081] bridge0: port 2(bridge_slave_1) entered blocking state [ 1799.229890][T25081] bridge0: port 2(bridge_slave_1) entered disabled state [ 1799.230306][ T8872] usb 1-1: selecting invalid altsetting 0 [ 1799.244260][T25081] bridge_slave_1: entered allmulticast mode [ 1799.294299][ T8872] usb 1-1: can't set first interface for hiFace device. [ 1799.297453][T25081] bridge_slave_1: entered promiscuous mode [ 1799.327316][ T8872] snd-usb-hiface 1-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 1799.411833][T15155] usb 1-1: USB disconnect, device number 39 [ 1799.446227][ T5628] Bluetooth: hci1: command tx timeout [ 1799.592411][T25081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1799.925054][T14772] bridge_slave_1: left allmulticast mode [ 1799.961394][T14772] bridge_slave_1: left promiscuous mode [ 1799.993486][T14772] bridge0: port 2(bridge_slave_1) entered disabled state [ 1800.104208][T14772] ¾x9ÿ: left allmulticast mode [ 1800.152341][T14772] ¾x9ÿ: left promiscuous mode [ 1800.162734][T14772] bridge0: port 1(1¾x9ÿ) entered disabled state [ 1800.907511][T25146] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3816'. [ 1800.964535][T25147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1801.021043][T25147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1801.047343][T25147] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3816'. [ 1801.458022][T14772] lo: left allmulticast mode [ 1801.475472][T14772] pimreg3: left allmulticast mode [ 1801.526217][ T5628] Bluetooth: hci1: command tx timeout [ 1801.707960][T25157] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3818'. [ 1802.781238][T14772] bond4 (unregistering): (slave geneve2): Releasing backup interface [ 1802.854078][T14772] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1803.506141][T14772] bond2 (unregistering): (slave bond0): Releasing active interface [ 1803.521157][T14772] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1803.542334][T14772] bond0 (unregistering): Released all slaves [ 1803.596921][T14772] bond1 (unregistering): Released all slaves [ 1803.606240][ T5628] Bluetooth: hci1: command tx timeout [ 1803.623192][T14772] bond2 (unregistering): Released all slaves [ 1803.644049][T14772] bond3 (unregistering): Released all slaves [ 1803.675023][T14772] bond4 (unregistering): Released all slaves [ 1803.754144][T14772] bond5 (unregistering): Released all slaves [ 1803.785339][T14772] bond6 (unregistering): Released all slaves [ 1803.818278][T14772] bond7 (unregistering): Released all slaves [ 1803.837077][T14772] bond8 (unregistering): Released all slaves [ 1803.856922][T14772] bond9 (unregistering): Released all slaves [ 1803.891367][T25081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1803.961263][ T5289] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1804.096868][T25081] team0: Port device team_slave_0 added [ 1804.152045][T25081] team0: Port device team_slave_1 added [ 1804.232658][T14772] tipc: Left network mode [ 1804.255376][T25081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1804.264584][T25081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1804.376913][T25081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1804.461494][T25081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1804.494999][T25081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1804.581450][T25081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1804.647985][T25174] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3821'. [ 1805.082742][T25193] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3827'. [ 1805.471788][T25081] hsr_slave_0: entered promiscuous mode [ 1805.511508][T25081] hsr_slave_1: entered promiscuous mode [ 1805.559466][T25081] debugfs: 'hsr0' already exists in 'hsr' [ 1805.576555][T25081] Cannot create hsr debugfs directory [ 1806.424674][T14772] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1806.444411][T14772] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1806.477301][T14772] veth1_macvtap: left promiscuous mode [ 1806.486242][T14772] veth0_macvtap: left promiscuous mode [ 1806.590360][T25210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1806.615280][T25210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1806.659886][T14772] veth1_vlan: left promiscuous mode [ 1806.696189][T14772] veth0_vlan: left promiscuous mode [ 1806.746590][T25213] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3828'. [ 1806.975800][T25218] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3831'. [ 1807.594214][T25224] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3832'. [ 1808.529477][ T5289] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1809.493156][T25245] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3835'. [ 1810.063273][T14772] IPVS: stop unused estimator thread 0... [ 1810.226022][T25258] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3838'. [ 1810.703447][ T5289] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1810.714064][T25265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1810.734881][T25265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1811.915052][T25081] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1812.035659][T25081] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1812.047711][ T5289] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1812.094361][T25081] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1812.149155][T25290] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3842'. [ 1812.246427][T25081] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1812.282798][T25081] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1812.488294][T25301] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3843'. [ 1812.653399][T25081] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1812.723463][T25081] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1812.817799][T25081] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1813.161054][T25081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1813.255886][T25081] 8021q: adding VLAN 0 to HW filter on device team0 [ 1813.311127][T22853] bridge0: port 1(bridge_slave_0) entered blocking state [ 1813.318363][T22853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1813.395160][T22853] bridge0: port 2(bridge_slave_1) entered blocking state [ 1813.402384][T22853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1813.752881][T25081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1813.934277][T25335] tipc: Started in network mode [ 1813.939527][T25335] tipc: Node identity ac14140f, cluster identity 4711 [ 1813.988237][ T30] audit: type=1326 audit(1778884321.044:2786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25327 comm="syz.5.3847" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd05f99ce59 code=0x7ffc0000 [ 1813.989733][T25335] tipc: New replicast peer: 255.255.255.255 [ 1814.069070][T25335] tipc: Enabled bearer , priority 10 [ 1814.122117][T25341] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3846'. [ 1814.138181][ T30] audit: type=1326 audit(1778884321.084:2787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25327 comm="syz.5.3847" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fd05f99ce59 code=0x7ffc0000 [ 1814.184702][T25081] veth0_vlan: entered promiscuous mode [ 1814.228564][T25081] veth1_vlan: entered promiscuous mode [ 1814.264806][ T30] audit: type=1326 audit(1778884321.084:2788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25327 comm="syz.5.3847" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd05f99ce59 code=0x7ffc0000 [ 1814.321640][T25081] veth0_macvtap: entered promiscuous mode [ 1814.335449][ T30] audit: type=1326 audit(1778884321.084:2789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25327 comm="syz.5.3847" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd05f99ce59 code=0x7ffc0000 [ 1814.361441][T25081] veth1_macvtap: entered promiscuous mode [ 1814.394385][T25081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1814.406773][ T30] audit: type=1326 audit(1778884321.094:2790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25327 comm="syz.5.3847" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fd05f99ce59 code=0x7ffc0000 [ 1814.448080][T25081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1814.472443][T22853] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1814.483052][T22853] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1814.497049][ T30] audit: type=1326 audit(1778884321.094:2791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25327 comm="syz.5.3847" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd05f99ce59 code=0x7ffc0000 [ 1814.529501][T22853] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1814.550371][T22853] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1814.586885][ T30] audit: type=1326 audit(1778884321.094:2792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25327 comm="syz.5.3847" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd05f99ce59 code=0x7ffc0000 [ 1814.646784][ T30] audit: type=1326 audit(1778884321.094:2793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25327 comm="syz.5.3847" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd05f99ce59 code=0x7ffc0000 [ 1814.754531][ T30] audit: type=1326 audit(1778884321.094:2794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25327 comm="syz.5.3847" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd05f99ce59 code=0x7ffc0000 [ 1814.853084][ T30] audit: type=1326 audit(1778884321.094:2795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25327 comm="syz.5.3847" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd05f99ce59 code=0x7ffc0000 [ 1815.058328][ T7701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1815.077299][ T7701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1815.114849][ T7701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1815.124091][ T7701] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1815.345447][ T807] tipc: Node number set to 2886997007 [ 1817.244627][T25382] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3853'. [ 1819.701525][T25454] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3855'. [ 1819.988681][T25464] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3856'. [ 1820.524254][T25475] kAFS: unable to lookup cell 'ÿ' [ 1821.020700][T25484] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode [ 1821.028729][T25484] net_ratelimit: 3 callbacks suppressed [ 1821.028760][T25484] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1821.553863][T25498] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3862'. [ 1822.616128][T15155] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1822.788724][T15155] usb 1-1: Using ep0 maxpacket: 32 [ 1822.810714][T15155] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1822.872387][T15155] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1822.902481][T15155] usb 1-1: Product: syz [ 1822.918922][T15155] usb 1-1: Manufacturer: syz [ 1822.941203][T15155] usb 1-1: SerialNumber: syz [ 1822.994698][T15155] usb 1-1: config 0 descriptor?? [ 1823.233818][T15155] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 040 [ 1824.120914][T25543] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3868'. [ 1824.832247][T13785] IPVS: starting estimator thread 0... [ 1824.928241][T25568] IPVS: using max 30 ests per chain, 72000 per kthread [ 1825.431060][T25581] xt_ecn: cannot match TCP bits for non-tcp packets [ 1825.516040][T13785] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1825.709055][T13785] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1825.718714][T13785] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1825.729845][T13785] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1825.742303][T13785] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1825.763162][T13785] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1825.785195][T13785] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1825.793953][T13785] usb 4-1: Product: syz [ 1825.801078][T13785] usb 4-1: Manufacturer: syz [ 1825.819498][T13785] cdc_wdm 4-1:1.0: skipping garbage [ 1825.825025][T13785] cdc_wdm 4-1:1.0: skipping garbage [ 1825.833798][T13785] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1825.954331][T13785] usb 1-1: USB disconnect, device number 40 [ 1826.056251][T24665] usb 4-1: USB disconnect, device number 92 [ 1826.100895][T25588] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3874'. [ 1826.291491][T25590] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3873'. [ 1827.225701][T25601] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3879'. [ 1827.731336][T25608] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3880'. [ 1827.859350][T25619] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1828.159774][T25627] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3884'. [ 1828.369708][T25627] bond0 (unregistering): Released all slaves [ 1828.829562][T25630] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3885'. [ 1829.338302][T25637] kAFS: unable to lookup cell 'ÿ' [ 1830.139200][T25649] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1830.269008][T25650] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3891'. [ 1830.685650][T25668] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3896'. [ 1831.169755][T25679] dummy0: entered allmulticast mode [ 1831.909960][T25696] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1833.615402][T25713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3906'. [ 1833.967956][T25720] xt_ecn: cannot match TCP bits for non-tcp packets [ 1834.264810][T25726] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3909'. [ 1834.477873][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 1834.477887][ T30] audit: type=1800 audit(1778884341.544:2814): pid=25728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3910" name="SYSV00000000" dev="tmpfs" ino=7 res=0 errno=0 [ 1834.793914][T25735] binder: 25727:25735 ioctl c0306201 0 returned -14 [ 1834.924885][ T30] audit: type=1326 audit(1778884341.984:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25727 comm="syz.3.3910" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa74159ce59 code=0x0 [ 1835.716469][T25728] ipvlan2: entered promiscuous mode [ 1835.753141][T25728] bridge0: port 1(ipvlan2) entered blocking state [ 1835.780655][T25728] bridge0: port 1(ipvlan2) entered disabled state [ 1835.802237][T25728] ipvlan2: entered allmulticast mode [ 1835.809611][T25728] bridge0: entered allmulticast mode [ 1835.839609][T25728] ipvlan2: left allmulticast mode [ 1835.848856][T25728] bridge0: left allmulticast mode [ 1836.013312][T25750] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1836.305596][T25757] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3918'. [ 1836.723210][T25770] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3922'. [ 1836.846317][ T8891] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 1837.018664][ T8891] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1837.050282][ T8891] usb 1-1: not running at top speed; connect to a high speed hub [ 1837.077700][ T8891] usb 1-1: config 1 has too many interfaces: 35, using maximum allowed: 32 [ 1837.104901][ T8891] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1837.152944][ T8891] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 35 [ 1837.190803][ T8891] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1837.251582][ T8891] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1837.282320][ T8891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1837.312881][ T8891] usb 1-1: Product: syz [ 1837.333806][ T8891] usb 1-1: Manufacturer: syz [ 1837.345852][ T8891] usb 1-1: SerialNumber: syz [ 1837.374828][ T8891] cdc_ncm 1-1:1.0: skipping garbage [ 1837.391084][ T8891] cdc_ncm 1-1:1.0: invalid descriptor buffer length [ 1837.401539][ T8891] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 1837.431488][ T8891] cdc_ncm 1-1:1.0: bind() failure [ 1837.625129][ T8891] usb 1-1: USB disconnect, device number 41 [ 1837.912662][T25804] netlink: 4975 bytes leftover after parsing attributes in process `syz.3.3931'. [ 1837.933177][ T30] audit: type=1326 audit(1778884344.994:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25805 comm="syz.8.3932" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1019ce59 code=0x7ffc0000 [ 1837.958538][T25804] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1838.009814][ T30] audit: type=1326 audit(1778884344.994:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25805 comm="syz.8.3932" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1019ce59 code=0x7ffc0000 [ 1838.038952][ T30] audit: type=1326 audit(1778884345.034:2818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25805 comm="syz.8.3932" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7faa1019ce59 code=0x7ffc0000 [ 1838.101757][ T30] audit: type=1326 audit(1778884345.034:2819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25805 comm="syz.8.3932" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1019ce59 code=0x7ffc0000 [ 1838.160458][T25812] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3934'. [ 1838.834576][T25838] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1839.891445][T25870] netlink: 'syz.8.3950': attribute type 3 has an invalid length. [ 1840.329784][T25881] ip6tnl2: entered allmulticast mode [ 1840.713643][T25895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1840.724625][T25895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1841.648353][T25923] kAFS: unable to lookup cell 'ÿ' [ 1842.278017][T25926] dummy0: entered allmulticast mode [ 1842.788547][ T30] audit: type=1326 audit(1778884349.844:2820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25948 comm="syz.5.3980" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd05f99ce59 code=0x7ffc0000 [ 1842.870935][ T30] audit: type=1326 audit(1778884349.844:2821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25948 comm="syz.5.3980" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd05f99ce59 code=0x7ffc0000 [ 1842.925599][ T30] audit: type=1326 audit(1778884349.854:2822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25948 comm="syz.5.3980" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7fd05f99ce59 code=0x7ffc0000 [ 1842.982671][ T30] audit: type=1326 audit(1778884349.854:2823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25948 comm="syz.5.3980" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd05f99ce59 code=0x7ffc0000 [ 1843.040091][ T30] audit: type=1326 audit(1778884349.854:2824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25948 comm="syz.5.3980" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd05f99ce59 code=0x7ffc0000 [ 1844.243851][T25967] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3983'. [ 1844.382120][T25972] kAFS: unable to lookup cell 'ÿ' [ 1844.412196][T25974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1844.422204][T25974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1844.660379][T25983] kAFS: unable to lookup cell 'ÿ' [ 1844.821196][T25989] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3995'. [ 1845.047542][T25994] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3996'. [ 1845.198980][T25997] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 1845.211356][T25997] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1845.305833][T25997] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3997'. [ 1845.936299][T26003] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3998'. [ 1846.231512][T26007] bridge0: port 1(bridge_slave_0) entered disabled state [ 1846.273480][T26007] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1846.816965][T15155] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1846.998534][T15155] usb 6-1: Using ep0 maxpacket: 16 [ 1847.021288][T15155] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1847.069321][T15155] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1847.109488][T15155] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1847.167584][T15155] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1847.214001][T15155] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1847.265709][T15155] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1847.302780][T15155] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1847.353238][T15155] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1847.429435][T15155] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 1847.712828][T15155] ums-sddr09 6-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 1847.785451][T15155] usb 6-1: USB disconnect, device number 50 [ 1848.075032][T26027] xt_hashlimit: size too large, truncated to 1048576 [ 1848.956361][T26039] dummy0: entered allmulticast mode [ 1849.568507][T26059] trusted_key: encrypted_key: insufficient parameters specified [ 1849.832768][T26071] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4016'. [ 1849.955995][ T8891] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1850.119224][ T8891] usb 4-1: Using ep0 maxpacket: 32 [ 1850.138069][ T8891] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1850.165563][ T8891] usb 4-1: config 0 has no interfaces? [ 1850.184859][ T8891] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1850.196835][ T8891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 1850.206127][ T8891] usb 4-1: Product: syz [ 1850.210617][ T8891] usb 4-1: Manufacturer: syz [ 1850.215543][ T8891] usb 4-1: SerialNumber: syz [ 1850.242617][ T8891] usb 4-1: config 0 descriptor?? [ 1850.616054][ T8899] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1850.785996][ T8899] usb 6-1: Using ep0 maxpacket: 32 [ 1850.800354][ T8899] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1850.823521][ T8899] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1850.844851][ T8899] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 1850.857975][ T8899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1850.867030][ T8899] usb 6-1: Product: syz [ 1850.871648][ T8899] usb 6-1: Manufacturer: syz [ 1850.877027][ T8899] usb 6-1: SerialNumber: syz [ 1850.894548][ T8899] usb 6-1: config 0 descriptor?? [ 1851.140138][ T8899] snd-usb-6fire 6-1:0.0: unable to receive device firmware state. [ 1851.158343][ T8899] snd-usb-6fire 6-1:0.0: probe with driver snd-usb-6fire failed with error -121 [ 1851.344634][ T8899] usb 6-1: USB disconnect, device number 51 [ 1851.835199][T26105] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1852.278786][ T8891] usb 4-1: USB disconnect, device number 93 [ 1852.505279][T26119] binder: 26118:26119 ioctl c00c620f 200000000680 returned -22 [ 1852.736016][ T8891] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1852.901510][ T8891] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1852.924051][ T8891] usb 4-1: config 0 has no interface number 0 [ 1852.939136][ T8891] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1852.950712][ T8891] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1852.964709][ T8891] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1852.977774][ T8891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1852.995556][ T8891] usb 4-1: config 0 descriptor?? [ 1853.209132][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.215580][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.445859][ T8891] hid_parser_main: 2018 callbacks suppressed [ 1853.462626][ T8891] uclogic 0003:256C:006D.001D: unknown main item tag 0x0 [ 1853.480935][T26140] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1853.488160][ T8891] uclogic 0003:256C:006D.001D: unknown main item tag 0x0 [ 1853.503456][ T8891] uclogic 0003:256C:006D.001D: unknown main item tag 0x0 [ 1853.511512][T26140] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1853.518871][ T8891] uclogic 0003:256C:006D.001D: unknown main item tag 0x0 [ 1853.532666][ T8891] uclogic 0003:256C:006D.001D: unknown main item tag 0x0 [ 1853.570045][ T8891] uclogic 0003:256C:006D.001D: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input1 [ 1853.690788][ T8891] usb 4-1: USB disconnect, device number 94 [ 1854.267650][T26144] kAFS: unable to lookup cell 'ÿ' [ 1854.515798][T26148] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4043'. [ 1854.903042][T26155] trusted_key: encrypted_key: insufficient parameters specified [ 1855.756178][ T8899] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 1855.920617][ T8899] usb 1-1: config 0 has no interfaces? [ 1855.941325][ T8899] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1855.963052][ T8899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1855.971758][ T8899] usb 1-1: Product: syz [ 1855.977750][ T8899] usb 1-1: Manufacturer: syz [ 1855.983768][ T8899] usb 1-1: SerialNumber: syz [ 1855.994968][ T8899] usb 1-1: config 0 descriptor?? [ 1856.082351][T26170] dummy0: left allmulticast mode [ 1856.092394][T26170] netlink: 'syz.8.4049': attribute type 2 has an invalid length. [ 1856.110095][T26170] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4049'. [ 1856.137361][T26170] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1856.183827][T26171] dummy0: left allmulticast mode [ 1856.224106][T26171] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1856.283146][ T8899] usb 1-1: USB disconnect, device number 42 [ 1857.871517][T26197] kAFS: unable to lookup cell 'ÿ' [ 1858.028994][T26192] dummy0: entered allmulticast mode [ 1859.402647][T26213] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1859.421104][T26213] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1860.874061][T26236] dummy0: left allmulticast mode [ 1860.890915][T26236] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1861.110191][T26243] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4067'. [ 1862.225865][T26252] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4069'. [ 1862.426104][T15155] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 1862.588936][T15155] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1862.602316][T15155] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1862.618626][T15155] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1862.628130][T15155] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1862.637163][T15155] usb 4-1: Product: syz [ 1862.641412][T15155] usb 4-1: Manufacturer: syz [ 1862.646876][T15155] usb 4-1: SerialNumber: syz [ 1862.868536][T15155] usb 4-1: unit 68 not found! [ 1862.880945][T15155] usb 4-1: unit 1 not found! [ 1862.959588][T15155] usb 4-1: USB disconnect, device number 95 [ 1863.062252][T10510] udevd[10510]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1863.315116][T26272] tipc: Can't bind to reserved service type 0 [ 1863.625179][T26279] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1864.206641][T26290] trusted_key: encrypted_key: insufficient parameters specified [ 1864.298852][T24662] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1864.468842][T24662] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1864.492831][T24662] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1864.513480][T24662] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1864.526200][T24662] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1864.541764][T24662] usb 4-1: Product: syz [ 1864.564084][T24662] usb 4-1: Manufacturer: syz [ 1864.570466][T24662] usb 4-1: SerialNumber: syz [ 1864.576005][T15155] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1864.610191][T24662] usb 4-1: config 0 descriptor?? [ 1864.640857][T24662] usb 4-1: selecting invalid altsetting 0 [ 1864.736039][T15155] usb 6-1: Using ep0 maxpacket: 32 [ 1864.758547][T15155] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1864.778520][T15155] usb 6-1: config 0 has no interfaces? [ 1864.807500][T15155] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1864.843095][T15155] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 1864.869469][T15155] usb 6-1: Product: syz [ 1864.897510][T15155] usb 6-1: Manufacturer: syz [ 1864.918879][T15155] usb 6-1: SerialNumber: syz [ 1864.953079][T15155] usb 6-1: config 0 descriptor?? [ 1864.990496][T24662] usb 4-1: USB disconnect, device number 96 [ 1866.060148][T26311] dummy0: entered allmulticast mode [ 1866.088320][T26313] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4089'. [ 1867.108960][T26327] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1867.122292][T26327] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1867.320947][T26333] dummy0: left allmulticast mode [ 1867.346678][T26333] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1869.174276][ T8899] usb 6-1: USB disconnect, device number 52 [ 1869.480918][T26361] sock: sock_timestamping_bind_phc: sock not bind to device [ 1869.657838][T26370] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4109'. [ 1869.671526][T26370] netlink: 'syz.7.4109': attribute type 22 has an invalid length. [ 1869.679584][T26370] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4109'. [ 1869.928785][T26377] dummy0: left allmulticast mode [ 1869.952787][T26377] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1870.412507][T26390] bridge_slave_0: entered promiscuous mode [ 1870.631055][T26394] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4117'. [ 1871.770642][T26419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1871.807609][T26419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1872.302176][T26431] kAFS: unable to lookup cell 'ÿ' [ 1873.327702][T26449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1873.363158][T26449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1873.934217][T26459] dummy0: left allmulticast mode [ 1873.973978][T26459] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1874.338558][T26472] kAFS: unable to lookup cell 'ÿ' [ 1874.764980][T26479] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4144'. [ 1874.900931][T26482] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4145'. [ 1875.228560][T26484] kAFS: unable to lookup cell 'ÿ' [ 1875.751326][T26490] tipc: Enabling of bearer rejected, failed to enable media [ 1875.774923][ T5628] Bluetooth: hci2: command 0x0406 tx timeout [ 1876.250688][T26501] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4150'. [ 1876.572290][T26513] kAFS: unable to lookup cell 'ÿ' [ 1877.402332][T26525] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1877.961168][T26535] netlink: 'syz.3.4161': attribute type 1 has an invalid length. [ 1878.306069][ T8891] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1878.467413][ T8891] usb 4-1: Using ep0 maxpacket: 16 [ 1878.480486][ T8891] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1878.506186][ T8891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1878.518745][ T8891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1878.534485][ T8891] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1878.564304][ T8891] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1878.585195][ T8891] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1878.607522][ T8891] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1878.615856][ T8891] usb 4-1: Manufacturer: syz [ 1878.628484][ T8891] usb 4-1: config 0 descriptor?? [ 1878.900153][T26551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1878.920396][T26551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1878.970838][ T30] audit: type=1400 audit(1778884386.024:2825): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A2F2F26090260 pid=26550 comm="syz.8.4167" [ 1878.992328][ T8891] rc_core: IR keymap rc-hauppauge not found [ 1878.998575][ T8891] Registered IR keymap rc-empty [ 1879.005152][ T8891] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1879.036869][ T8891] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1879.058487][ T8891] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1879.075117][ T8891] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input80 [ 1879.092071][ T8891] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1879.116507][ T8891] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1879.156458][ T8891] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1879.176635][ T8891] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1879.197932][ T8891] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1879.226067][ T8891] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1879.246203][ T8891] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1879.266662][ T8891] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1879.277199][T26553] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1879.296281][ T8891] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1879.303794][T26553] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1879.326403][ T8891] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1879.368662][ T8891] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1879.387338][ T8891] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1879.411893][ T8891] usb 4-1: USB disconnect, device number 97 [ 1879.448698][ T31] INFO: task syz.2.3692:24351 blocked for more than 143 seconds. [ 1879.458169][ T31] Tainted: G L syzkaller #0 [ 1879.470593][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1879.483300][ T31] task:syz.2.3692 state:D stack:24192 pid:24351 tgid:24345 ppid:19012 task_flags:0x480040 flags:0x00080002 [ 1879.509693][ T31] Call Trace: [ 1879.541575][ T31] [ 1879.558570][ T31] __schedule+0x1821/0x5740 [ 1879.595538][ T31] ? __pfx___schedule+0x10/0x10 [ 1879.606953][ T31] ? schedule+0x90/0x360 [ 1879.632217][ T31] schedule+0x164/0x360 [ 1879.656175][ T31] schedule_timeout+0xc3/0x2c0 [ 1879.678425][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1879.704327][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1879.728312][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1879.744322][ T31] ? wait_for_completion+0x274/0x5e0 [ 1879.756592][ T31] wait_for_completion+0x2cc/0x5e0 [ 1879.762211][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 1879.775609][ T31] i2c_del_adapter+0x5c0/0x790 [ 1879.789679][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 1879.801232][ T31] ? kfree+0x4d/0x640 [ 1879.813775][ T31] dvb_usb_i2c_exit+0x64/0xb0 [ 1879.824793][ T31] dvb_usb_device_exit+0x1cb/0x360 [ 1879.838074][ T31] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 1879.852372][ T31] ? usb_disable_interface+0x31d/0x350 [ 1879.864586][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1879.883417][ T31] usb_unbind_interface+0x26e/0x910 [ 1879.901886][ T31] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1879.924932][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1879.954752][ T31] device_release_driver_internal+0x4d9/0x870 [ 1879.979121][ T31] bus_remove_device+0x455/0x570 [ 1879.995284][ T31] ? __pfx_bus_remove_device+0x10/0x10 [ 1880.013062][ T31] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1880.028198][ T31] device_del+0x527/0x8f0 [ 1880.038114][ T31] ? __pfx_device_del+0x10/0x10 [ 1880.050969][ T31] usb_disable_device+0x3d4/0x8d0 [ 1880.064974][ T31] usb_disconnect+0x32f/0x990 [ 1880.076831][ T31] hub_quiesce+0x171/0x330 [ 1880.088399][ T31] hub_disconnect+0xc8/0x470 [ 1880.099850][ T31] usb_unbind_interface+0x26e/0x910 [ 1880.111315][ T31] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1880.125259][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1880.140684][ T31] device_release_driver_internal+0x4d9/0x870 [ 1880.155501][ T31] proc_ioctl+0x294/0x6b0 [ 1880.170901][ T31] proc_ioctl_default+0xc4/0x110 [ 1880.183304][ T31] ? __pfx_proc_ioctl_default+0x10/0x10 [ 1880.195620][ T31] usbdev_ioctl+0x134c/0x2120 [ 1880.206706][ T31] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1880.217858][ T31] ? __fget_files+0x2a/0x420 [ 1880.229017][ T31] ? __fget_files+0x3a0/0x420 [ 1880.239310][ T31] ? __fget_files+0x2a/0x420 [ 1880.252392][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1880.264626][ T31] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1880.278457][ T31] __se_sys_ioctl+0xfc/0x170 [ 1880.290207][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1880.303468][ T31] do_syscall_64+0x15f/0xf80 [ 1880.314465][ T31] ? trace_irq_disable+0x3b/0x140 [ 1880.325679][ T31] ? clear_bhb_loop+0x40/0x90 [ 1880.335846][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1880.350993][ T31] RIP: 0033:0x7fe6f239ce59 [ 1880.363289][ T31] RSP: 002b:00007fe6f05d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1880.382844][ T31] RAX: ffffffffffffffda RBX: 00007fe6f2616180 RCX: 00007fe6f239ce59 [ 1880.403587][ T31] RDX: 0000200000000200 RSI: 00000000c0105512 RDI: 000000000000000c [ 1880.422297][ T31] RBP: 00007fe6f2432d6f R08: 0000000000000000 R09: 0000000000000000 [ 1880.439715][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1880.458416][ T31] R13: 00007fe6f2616218 R14: 00007fe6f2616180 R15: 00007fe6f273fa48 [ 1880.478200][ T31] [ 1880.488363][ T31] INFO: task syz.2.3692:24359 blocked for more than 144 seconds. [ 1880.505494][ T31] Tainted: G L syzkaller #0 [ 1880.539450][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1880.565144][ T31] task:syz.2.3692 state:D stack:28760 pid:24359 tgid:24345 ppid:19012 task_flags:0x400040 flags:0x00080002 [ 1880.600322][ T31] Call Trace: [ 1880.609260][ T31] [ 1880.615032][ T31] __schedule+0x1821/0x5740 [ 1880.625189][ T31] ? __pfx___schedule+0x10/0x10 [ 1880.638251][ T31] ? schedule+0x90/0x360 [ 1880.648213][ T31] schedule+0x164/0x360 [ 1880.657406][ T31] schedule_preempt_disabled+0x13/0x30 [ 1880.670621][ T31] __mutex_lock+0x7f7/0x1550 [ 1880.681803][ T31] ? __mutex_lock+0x608/0x1550 [ 1880.692491][ T31] ? usbdev_ioctl+0x140/0x2120 [ 1880.705050][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1880.720886][ T31] usbdev_ioctl+0x140/0x2120 [ 1880.733287][ T31] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1880.746671][ T31] ? __fget_files+0x2a/0x420 [ 1880.756890][ T31] ? __fget_files+0x3a0/0x420 [ 1880.768438][ T31] ? __fget_files+0x2a/0x420 [ 1880.779005][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1880.789675][ T31] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1880.800740][ T31] __se_sys_ioctl+0xfc/0x170 [ 1880.814041][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1880.829154][ T31] do_syscall_64+0x15f/0xf80 [ 1880.839137][ T31] ? trace_irq_disable+0x3b/0x140 [ 1880.852098][ T31] ? clear_bhb_loop+0x40/0x90 [ 1880.862310][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1880.876385][ T31] RIP: 0033:0x7fe6f239ce59 [ 1880.886124][ T31] RSP: 002b:00007fe6ef96c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1880.905258][ T31] RAX: ffffffffffffffda RBX: 00007fe6f2616450 RCX: 00007fe6f239ce59 [ 1880.924621][ T31] RDX: 0000200000000000 RSI: 00000000c0105512 RDI: 000000000000000c [ 1880.943883][ T31] RBP: 00007fe6f2432d6f R08: 0000000000000000 R09: 0000000000000000 [ 1880.963908][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1880.983120][ T31] R13: 00007fe6f26164e8 R14: 00007fe6f2616450 R15: 00007fe6f273fa48 [ 1880.999911][ T31] [ 1881.009170][ T31] [ 1881.009170][ T31] Showing all locks held in the system: [ 1881.044326][ T31] 1 lock held by khungtaskd/31: [ 1881.064946][ T31] #0: ffffffff8e95cde0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1881.094595][ T31] 2 locks held by getty/5380: [ 1881.105231][ T31] #0: ffff888036c360a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1881.126818][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 1881.140500][ T31] 3 locks held by kworker/1:12/8891: [ 1881.146949][ T31] #0: ffff88801eea0d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1881.169761][ T31] #1: ffffc900049efc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1881.182628][ T31] #2: ffff88802a02f1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 1881.195503][ T31] 4 locks held by kworker/u8:3/14770: [ 1881.205016][ T31] #0: ffff88801be8e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1881.221543][ T31] #1: ffffc90003637c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1881.234086][ T31] #2: ffffffff8fdc19a8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 1881.251887][ T31] #3: ffffffff8fdd0680 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x940 [ 1881.272721][ T31] 4 locks held by syz.2.3692/24351: [ 1881.287557][ T31] #0: ffff88802a27b1d8 (&dev->mutex){....}-{4:4}, at: usbdev_ioctl+0x140/0x2120 [ 1881.309440][ T31] #1: ffff88802a27a1a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 1881.333109][ T31] #2: ffff8880330e41d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x990 [ 1881.353070][ T31] #3: ffff8880330e21a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 1881.380483][ T31] 1 lock held by syz.2.3692/24359: [ 1881.394384][ T31] #0: ffff88802a27b1d8 (&dev->mutex){....}-{4:4}, at: usbdev_ioctl+0x140/0x2120 [ 1881.415637][ T31] 1 lock held by syz.0.4157/26520: [ 1881.427475][ T31] 2 locks held by syz.7.4168/26558: [ 1881.438623][ T31] #0: ffff8880b863aea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb6/0x150 [ 1881.449101][ T31] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 1881.460545][ T31] [ 1881.462987][ T31] ============================================= [ 1881.462987][ T31] [ 1881.474142][ T31] NMI backtrace for cpu 0 [ 1881.474173][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1881.474199][ T31] Tainted: [L]=SOFTLOCKUP [ 1881.474206][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1881.474219][ T31] Call Trace: [ 1881.474227][ T31] [ 1881.474237][ T31] dump_stack_lvl+0xe8/0x150 [ 1881.474264][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1881.474289][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1881.474313][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1881.474340][ T31] sys_info+0x135/0x170 [ 1881.474359][ T31] watchdog+0xfd3/0x1030 [ 1881.474396][ T31] ? watchdog+0x1c9/0x1030 [ 1881.474430][ T31] kthread+0x389/0x470 [ 1881.474457][ T31] ? __pfx_watchdog+0x10/0x10 [ 1881.474483][ T31] ? __pfx_kthread+0x10/0x10 [ 1881.474510][ T31] ret_from_fork+0x514/0xb70 [ 1881.474535][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1881.474557][ T31] ? __switch_to+0xc79/0x1410 [ 1881.474588][ T31] ? __pfx_kthread+0x10/0x10 [ 1881.474615][ T31] ret_from_fork_asm+0x1a/0x30 [ 1881.474655][ T31] [ 1881.474665][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1881.591421][ C1] NMI backtrace for cpu 1 [ 1881.591441][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1881.591465][ C1] Tainted: [L]=SOFTLOCKUP [ 1881.591472][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1881.591483][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1881.591512][ C1] Code: bb 7d 02 e9 93 f7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 82 20 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1881.591527][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 1881.591543][ C1] RAX: 0000000002e8b2ab RBX: ffffffff819a958a RCX: 0000000080000001 [ 1881.591556][ C1] RDX: 0000000000000001 RSI: ffffffff8dfaa81a RDI: ffffffff8c28af60 [ 1881.591568][ C1] RBP: ffffc90000197f10 R08: ffff8880b87339db R09: 1ffff110170e673b [ 1881.591581][ C1] R10: dffffc0000000000 R11: ffffed10170e673c R12: 0000000000000001 [ 1881.591593][ C1] R13: 1ffff11003bd3000 R14: 0000000000000001 R15: 1ffff11003bd3000 [ 1881.591605][ C1] FS: 0000000000000000(0000) GS:ffff88812538a000(0000) knlGS:0000000000000000 [ 1881.591619][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1881.591631][ C1] CR2: 0000200000396030 CR3: 00000000a2d64000 CR4: 00000000003526f0 [ 1881.591647][ C1] Call Trace: [ 1881.591654][ C1] [ 1881.591661][ C1] default_idle+0x9/0x20 [ 1881.591677][ C1] default_idle_call+0x72/0xb0 [ 1881.591695][ C1] do_idle+0x36a/0x5f0 [ 1881.591717][ C1] ? __pfx_do_idle+0x10/0x10 [ 1881.591741][ C1] cpu_startup_entry+0x43/0x60 [ 1881.591759][ C1] start_secondary+0x101/0x110 [ 1881.591776][ C1] common_startup_64+0x13e/0x147 [ 1881.591807][ C1] [ 1881.782744][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1881.789656][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1881.800353][ T31] Tainted: [L]=SOFTLOCKUP [ 1881.804695][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1881.814762][ T31] Call Trace: [ 1881.818059][ T31] [ 1881.821001][ T31] vpanic+0x56c/0xa60 [ 1881.824998][ T31] ? __pfx___schedule+0x10/0x10 [ 1881.829874][ T31] ? __pfx_vpanic+0x10/0x10 [ 1881.834401][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 1881.840580][ T31] panic+0xc5/0xd0 [ 1881.844335][ T31] ? __pfx_panic+0x10/0x10 [ 1881.848769][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1881.854172][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1881.860351][ T31] watchdog+0x102c/0x1030 [ 1881.864709][ T31] ? watchdog+0x1c9/0x1030 [ 1881.869155][ T31] kthread+0x389/0x470 [ 1881.873238][ T31] ? __pfx_watchdog+0x10/0x10 [ 1881.877935][ T31] ? __pfx_kthread+0x10/0x10 [ 1881.882548][ T31] ret_from_fork+0x514/0xb70 [ 1881.887161][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1881.892283][ T31] ? __switch_to+0xc79/0x1410 [ 1881.896981][ T31] ? __pfx_kthread+0x10/0x10 [ 1881.901610][ T31] ret_from_fork_asm+0x1a/0x30 [ 1881.906399][ T31] [ 1881.910248][ T31] Kernel Offset: disabled [ 1881.914583][ T31] Rebooting in 86400 seconds..