Extracting prog: 3m53.785197178s Minimizing prog: 17m51.908888089s Simplifying prog options: 0s Extracting C: 35.057932619s Simplifying C: 24m3.463205028s 30 programs, timeouts [30s 1m40s 6m0s] extracting reproducer from 30 programs first checking the prog from the crash report single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-ioctl$sock_SIOCGIFINDEX-socket$inet_udp-openat$snapshot-io_uring_setup-syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100002ec6601037210100352a010203010902120001000000000904"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (fail_nth: 8) io_uring_setup(0x67d2, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x44, 0xe2, 0x20, 0x8, 0x13d3, 0x3224, 0xcb0d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xe7, 0x0, 0x0, 0x20, 0x1, 0xd6}}]}}]}}, 0x0) program did not crash single: failed to extract reproducer bisect: bisecting 30 programs with base timeout 30s testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [29, 26, 30, 15, 30, 8, 30, 28, 30, 20, 26, 30, 7, 8, 28, 17, 30, 2, 17, 30, 3, 29, 2, 8, 40, 20, 30, 10, 6, 30] detailed listing: executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, 0x0}, 0x280) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102387, 0x18ff3}], 0x1, 0x4, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x44}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0x801c581f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r3, 0x1, 0x0, 0x0, {{}, {}, {0x5, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) socket$l2tp(0x2, 0x2, 0x73) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000240)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x3, {0x0, 0x1}, 0xff}, 0x18, &(0x7f0000000180)={&(0x7f0000000440)="922d5cc3", 0x4}, 0x1, 0x0, 0x0, 0x4000}, 0x2e) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0584000000000000010902240001000000000904040001030000000921000000012205000905810300"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(r7, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$MEDIA_REQUEST_IOC_REINIT(r0, 0x7c81, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x60482, 0x0) dup(r8) executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x10, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340)={0x100}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) timer_gettime(0x0, &(0x7f0000000300)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'gre0\x00', 0x0}) userfaultfd(0x80001) r5 = io_uring_setup(0xc8e, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES2(r5, 0xf, &(0x7f0000000380)={0x60, 0x1, 0x0, 0x0, 0x0}, 0x20) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000080)={0x2c, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r7, 0x1, &(0x7f0000000000)=0xf7ea) executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000640)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x18, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0x3, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}}}}}}, 0x0) fchdir(r0) openat(0xffffffffffffff9c, &(0x7f0000005880)='.\x00', 0x0, 0x0) unshare(0x4020400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = userfaultfd(0x801) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) r5 = syz_io_uring_setup(0x24f9, 0x0, &(0x7f0000000040), &(0x7f0000000180)) io_uring_enter(r5, 0xa3d, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f0000000240)=0x800, 0x4) r8 = memfd_create(&(0x7f00000002c0)='system.posix_acl_default\x00', 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x1, r6, 0x4, r8}, 0x10) r9 = msgget$private(0x0, 0x1) msgsnd(r9, &(0x7f0000001480)=ANY=[@ANYBLOB="000000000000000055d665ebd150bdf5dabda40c12af5a5205d73bce0bdbdd32fc173bc1505824e54f325991c78637f12bd88ab5002d9f85398877d31da3551bea67d15dd2aa5a23de7f99ddc915d5f85fca23f3d6ae36af1c33bb56f006860118dcad1f5fed5d7f4d7ef68c912301bfd52242a9bc9823550de37cd3f3d4dbb04b602473ba818a5def34aace325e8c00142cfb953deb3f1d18c2852beb24d6105243e3c30c07a07afee8e37949fd23bd9ce81fb4397e6a5dd2e34ce8d4b49b34cfc2cbdec36ebc148dc920aae54331bff9f23e1bea190cedf7b1b9e0be3eb02252c3850a2a7735f9d8f88e0d9dbd04559d49771b316d343f4613e4cd84d9250007e4d0918e37490af34840bb124bb9e080c810119fd14eb9bba8b096d41dd8981ac9538951fcde712993b3b6e71553468b9279d12e2a4f43ed499e012371e14fb76439f28e61f9c3664cafe499143ff7ee2f04f8cf6d78e321ad11c8f1ae7af5ce8a957c73f09bc10ef949686cff775e3818fd0f71707268e5599381d76d20f9803374f714b502b587472fcf746a44eedacae21349835eab8f6713dc040c89f9e44799f25de2188d632e4cb2263c7501bf54399a771fc1f5bd3555d41d2bcd3bc0cb54708b80f0805825d02912f60f19aa82b7b2d107931973c283432a1172f9c2be52e672fa4eefd2ae3cd64926de90b30b9de5b6221e2753140cc562dbe9716299bd66eeb1304c92945d31ba5a14c18f8233b259e5920ce4db52662c87bbc1881e8083e4a3044c057b97b4212dd58a37d1aa25209ecff1c5f2b8b22c15bdacca85c8242adf1598377ac76979eac6880deaa427c08a2480e32715ffaee653f28b84d262a01749cdb98799e219afa354b27297a82cce43a19849c855434932747673da4e689656c19a3eeb5b080e5f4bd10ae97525b33b3c3efe1b4c73ca852f55ab27b5bea3a73d2b2844dcf2da05e8c4073a6fa0939135c11e843db9ac3e8ddd6d749887d49e0e73b3c1e7f71eeba35e03751108afd6fd63d5f8c4fdeea75b7acef671335b64834d1d91b6a2b6128625bd5390d2b21766b257d928fa203731d496cfaaec579d1d10368e56c285998559814df6e5580e022fde7c31e6568fe4845a60f62015f91fd6058538a95d47b5b4c73a6b9cf090fcfdbe5c56f3d250274dbddcd59c5698a8e954ff566f306a5bf541a1fa915f1e5bac1b484b429feacd6dde7b335f0a9418c923e2284a67c7d4bb9b957133eed004756a1e6e00f147be1e06fce9a40a406c344cffaf6a978fbe06ef450879b8d9440b38400ecce95e17b00bfd78d61f77a188ede3b561b2c2745f5aa4f7223687c9ea3cf1368b6ccfd3735984ae603c559f2e0a87f03c300a77a6db7ce609fa3c83670735995418176bd6d2fb8ac60b645e4592a56d2f42dc82255ce240f59207f3ea60fa95c22baff6cebfb0b072ea407b94fe0a00657022f6860d3046c9ad4c5b52650aac8190c15951aef2d876d5d96727ff088f28f66f39673b0d31fdb42e6de25948b04a1c570a7306adac66eae062ab3a94a67cd1620333eba292f8bb7decbdf619623158a2cdf4b3a88fabc1abb1ef094d02a657607a4fa090d418f11679f31c890fb0062950f23b1f7915383ad6800d1f409bd57b7f8fc82c1c8874fb065fedfe2bc427435a44cf146fe88e5010bed2a2baf892726c015432be02fb9f5ac99eec919bb5a54df931bc440e6b044151841f0ae62fc182460b01b07da3ddeee9f660cb3a6fa481eb802ae47c5fbbd7c252623da7b463e976bf48203e0148a35c60df1838b472312e4c11a0e49ccf321c2f3dec70c71473fd082f51440420019a193bc3aca3feff63faa6b81a67bbc00f144c02ca6d331f5dc6bffb884dd33c3d20c4067dd051e9085dad408d62377b8a730feb665ca37dc8c6967f5f7e5192ba85628fc6b303369902958eea96d88d224b4cdce8cbdefc4f42a98de8bac4da8f6c3a3459353be5d5b096b1ea1211ec7f7954336cf7bbdd172ca7bb6aa5343894dc631212ebfdc93c6c9ec972201ce55a5f436e5c2e82399be5c9a6cf07eafd2c061ee559e260df4a7d8792c89713697eacc637f9638960e98fa3f033df707aab70f220fb2eeddf8942f4a6bbbd10113ae8a6ca63ca2eab713089a39d55a3c70f02602e2706cb14f474371e3fb5a3d0903f1540cbfa29d28cd24434d76b66ba6f0d66c859409b88cd82b78f8d9aa44f0c210a78f4b71ba4dbe0e0afb257eb22c744ada11ae2d80af258518607edab19cfe28ef34959527646eb9ea2d3945522dc8509d2161653713d7877096a9ff9e590c585c7ffe9a98944ca485f3c37f22bf32df8ce6ca9252faa411b2063c221ebda98fb622ac96fa321e2e29366197ff346c8299f4fc4022fe4c5d90da64b08df722982dfe474ef31b4dfff9785f00cd9db74c175c6fffc76ec447575677ab8da067a09c43cba5cb07fdb519f84df10078508bb763d23b37c9c0809b8296db5f087cab08ef677ad7da8b65f7c1ab6c470ff39146af1a624727b85a07231ee666299b2bd58c19972cd6827323a1adf0f6d6e7dd1b1f570482204491752a0dbacb73e8f174cf81ac2e193cf3234336a888d456ced44e79938062505c55c0f6e2ead742a8155567ecc4fc93a798f884f900879aefbc7a8bb8b81c3588b823fa3c77251197179992b8a547a6cc9bc0d8ba093ffcb88326bfde80d84ea8263c7f7f70140402fc23ba0c882f66a3da36d36fe5e0c9e9e78327bb27701ce2370f69d950a6656b390fbf242caf57b45388bf7ddc364d5b84992e7ab88334a6de92e5e7d2f252850a940a5fb4bb995d15e2f2c544846da3b286ef901cba943c3745e5da649cceadcc27af340eaea477fd19d379c1ecf42a7709974dfc057452b6f791ceb9369b897163b2279bd4aefbafad12e488e1934b4ca157fd131b1a7394a311055582731af137be5fa4c248876edf2447cc276eb36500f1645a936afa862b2b3353dafd558a85c2192c1c30159b9442b2020488feec6c1d18e1753078c63eda55d367fb7e2cab934b357d331fc5756b1daacb509437de986a2c3ed659a35bab21abf45ede24aa514aabada47f14590184fcd419a92e7d285f2f9629f71f6054bbf718f6f28c9a64e637f436d84b0d784dd6e88ea9db8323c71ef527ca9aa212089715c1df6bd5365d4a68dd4b6342051172fe042a3d92c691cc11443aaf35531891258aa798aed7028e59182516abf663d18734fc9c0366924f5c9e9de04c1aa11779291b86e6f95eacb04cdba93e931f6f10e737cd4d098d2f8989c8f3fd9e235ce96d4abf2eec8fb6d39bb6063b8e600dc22d7bfa58b2863a202830590a4b6b47cfb8a5628f73388c02fd621da501816cff06d2e1a42ceeefae8f53b739854988f9e1941e4370af492606b5a2c3e9a5c9bc59604dae57c164727066530c1de3f2018a24d2b16228dc8c8b2c2aaa3e85f8fe9c74338c8716374f553d779952021c97c3c613aa35d06b651ee21b099ccbd118b01e9c1f530a0ddeb0c29913b7717dc39101c09b61b49f5dad4e071a11821c9b18ce0325e1ce8ca10cb77236b1eb024ce7fbbd555dfe01d9037b3a090ea3cf0680b3a757d2f3b1e60d6badc619c29a2ee2c995ca8e2f1583f37d30d623fd937a0e33bf9136be0a461d62beabf3e793d32bdd6764d70ca330f26d841d5a572b6a8d1fd19ecef94a4b1fd2fbec15e30cdc6ff993999cc124de98255a2c840d484bea2faef9cd6f4e0065a469bf63bac7f878783693cbb8c39eaa3f00ca1e1e2b2c453e45664083ba63a9ab68cde795a9e4c3f8746c0dfc83acf9df457743ea1b50c4ff35d415bccc3787114745dd9260f6442709f595a3226764e0c1ca5b54169596b03230c31745abede510e55f7023dc86ecca2f6a888730ee8637f431624cce67d8d068f59df375a75099a23bbd867b793d6864609d7c3110210073cbbecf1bf60668d5b47d843bc012eb8ec505ccb6090d5e1c4e0ae7e8be58792613f0bb18c8be4cb9919d243d5e9e1f42decb1365497a08e5ee7116e78170b4b3bd76d5a7fd59603df6931df76b9192e735eb7ca61225bea8a15d425270267ee24fe77a41d90c0d0a2bdc1dc37c887174dd9b8671577116a8586a2f9adc0ed2fcced2dbaf3045b54020eb425d579e2caefd6af78876f45d21f5f7574619afd6f723d71155c8c1a35a92482cbbed42e980e29ba9c3f6277ea91ca1cfb9a9a4b658d74a9167c925cb26e48551b1cb1c1a5703e44df829b4f3a2d01c4d5c5180a90a8b293c8d4cd49b11e0df0af797418255d82363d6f34a9a4281d21a8e91d1fad83834ac12efbcc9ef7aa7dcc16e87ba5285d85682e219b0aea61fe2a31ddb1c884a961e8cd4952ca1164be9a8bb477c30a791c45c2a9949ae7e20fac18b55a830d4fb663c235c9ffaa47b12239ef3b766aebfb3cd93babebe2c086c1162a59aa19af4e20d59c97d819c53335fce1dfc98b4ea166d0b6ed69b2941600130ad5e9572710594a507024d5662b03cfd8aaac6e462b5f77ca7ba9c5cd42c34badbbb76f618d584a848932c1b30426729059becda30b3814f5c6b302bc726b4d1477f6d9e2ad793f3a5213c185aa2256e03542a039f4319e00fb996efa813fbe0cbe638653f0093267f1b34269a8ff6f7ca447259b37603c7e4e0a91e747c04d6dcc8c64fe37428d6291ea00f5e09919fe917d86a992af049e9a25f92ad0f41a2304205b69c6ded43244a83c5fbbbc0883ec07bf87e72a5799eb487399d7cd82ef33bad92e4602c250af24f4c61a6a2222507d3ee5b66df799bb1008810ac32449f7773156dcba9c40c80633ba0343c345e245fa757baeb0aa7d5bb9c844be1a8374400896002df1b482868284d8eceaf4ff03d6085d65f0ebdfcf0be7d4a31bda23e583dca1aa340dcd5b12f7acb87c64db2f15272bee7aa66e134796d92b29d97e7dbd454728c8d5c66971c398a934d42bc4cf924ac2f050a5d79a637f57e34310022fcdf3e735fa54fea8221f57b9a1d7ae3a36cc7778783a1113b7de099a6ceb178596b093ec57b4f72e13b206947b06dab60c9b77a4044d22b41df17b3365631ef230c00f416151096e4f46eda5dcc9755fa049497a236c72a9013481d5131495ba524fbbf8a14b0a55634950419b15913d0f6cb5366bf4d841156e048742d0d30189a7e569c338b3ba854e21aca0ef20d5b7bf0bdb384bb36831e43520740d67ef5b5e48f802748ebf7762cf7391467eb924dbc2d7864f69689231f1a144770c528c6c209ab9ea8a16bd090d9356518ed17f187be5e0f9af1c99b9c2e2d60ef4df6447018a117f87d97accd50d08a20acc5eab17deb53e79fd88c4abb40abe83ece0eb941361757a3dc5674e308ef07f485a2d6ab1b1a31acbeae66a057558470fc78e16fb01aafcc518de509af32bb8bb90cec589b30ab6b3a07fff1a0c71dfbd6398dbb1f6180ea75e40475c68a70457e6615e0f3dfabf03f08e04fa643f50c94fa97cb16cd7aedc5100a4fd795a3930f1b38c3946abdcf19d2396be0e2879907451f918c756f5cd22af880218bf577c9338ab8303e931dd8b796945b1c14b899b95933d20e0871224ededb90c7ccceed685b6e2e34be8279745e5bea74c1fadff279e1286ab433083fc5413f1c2b6f209fa63ba56c9f20c20802d578bcd83e4ae39b5bbaee72d6a20dc7c07c51b086a5a13f8ab076c384f1d39e6588149aba0cc8c9dcc613bc1fed574aea0b30d948b4a45db80f3308161116982295474745bea056100000000000000000000000000000000dfed833dcdaf159b3c23782bee5bf0bae61d75b1f1ac79ec3d6adb472cd472628c6acb039c842e662fc697599177d191b604b4624f29d4e06d1796cb929e2990b57fff5b99118aaca9484412b1a2548474416c8d948bb69dc8b5bda59020c995b22850b0bec7c092cc7fa82ab46e09f1a165ef824030b8077af53ad3e814fe3c20c5b0dcfe"], 0x1008, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x89030, 0x4) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r10 = syz_io_uring_setup(0x6908, &(0x7f0000000340)={0x0, 0xd156, 0x10100, 0x0, 0x2000}, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x1864, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10}, &(0x7f0000000000), &(0x7f0000000180)) r11 = syz_io_uring_setup(0x160c, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0) executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) unshare(0x2a020400) socket$inet6_tcp(0xa, 0x1, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[], 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000000)=0x4) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e00000000001010400000000000000000500000378000ddf0084459889803c000380060002004e230000060002004e200000060001004e220000060002004e2100000600010b1ad333ce7d6c21a576c121a66ec8fa7b568f2b801077004e230000060002004e220000060001004e2200001400d48eef8f489ab8251ad26b266d00000000000000000108000200ac1e0101080002000a010101140004000000000000000000000000000000000020001700000000077d102d9c7f1b35bef28afffffffe00000001000000400000000b00000003fffffff934001880080001400000000008000240000000050800024000000007080001400000040008000240ffffffff0800024000000001d9df89444d0a549b53d57396eb653b290bfc651e2146ab3054924c89eb5ab85e27a82be657651d4759ee3d22104d90fc54dc3010ec16639786f4d2705d44fe1d5eccd3310c2da28551f512470e1c39aea7c792e7bece2c353211bea75de7cd837b83691c35b84ae0d7c87126dc1f66392c41ec156272309be08f1afb6f9d17d681002544283d5e61396fca780000000000000000000000007b050ed3d5703aa5ec7334844c5272c64182057e212922c4293f761ddbc8f2a5a3896d046305040ceff4ed"], 0xe0}, 0x1, 0x0, 0x0, 0x4000801}, 0x8801) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_test={0x1a, 0x80000000, 0xffff, 0x1, [0x5]}}) sendmsg$key(r0, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="02060000020000e50000000000000000"], 0x10}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7216, 0x0) r3 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x4) fcntl$notify(r3, 0x402, 0x8000003d) fcntl$setsig(r3, 0xa, 0x21) setxattr$incfs_metadata(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="c9935f2bb8007f35e9836832e07e9b571d838b29621252ce5f8cf8388f1840b1442957c8f4e8d4492900dd9645d88454b74a36ebf3b8a4a634f733317480fabd1d833e4d47098b7a74f12149d1bb3ae19d91a12013a417567f187239c3940d5f89c391eb220a9b61d2bf04b5323b079caf3c19d098bf232a4796f0ec7bb8c10474f2eea0199e09363a0ed00dd3e9f759c20ea320feb7e6911d81", @ANYRES16=r4, @ANYBLOB="0500ffffffff000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000b00000060000000cf000e0080000000080211000001080211000001505050505050000000000000000000006400000000060101010101010301010602070005750000007adc21b58f24e0ee963a73f337a51c30819317c95b2bb6a0a870aae8a88f528ea67e7bc956aced2f3c31f8e7c0473cbe05a641f71c705c076ca4b8677b270519a4970295d3adbba2ed2c6f98ee5e162c7f0cb8b5c0c05ba5e5edfe8d13eddef3995dfe1eb15498eb2b1a88ed94412d4af59625030084042a0100720603030303030371070000000000005876060000000000000004000f00080026006c09000008000c006400000004000501"], 0x110}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r5) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000dc159217e6e2ec00", @ANYRES16=r6, @ANYBLOB="0106000000000000000045000000"], 0x14}, 0x1, 0x0, 0x0, 0x20044004}, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x7ff}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r9}, 0x38) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000280), 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r10, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000100)={r8, 0x9}, &(0x7f0000000340)=0x8) socket$inet6_sctp(0xa, 0x5, 0x84) executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$media(&(0x7f0000000080), 0x0, 0x1) pwritev(r1, &(0x7f00000002c0)=[{&(0x7f00000000c0)="97", 0x1}], 0x1, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="00000108000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0xe3, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd1, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@acm={0x4}, @mbim={0xc}, @mbim_extended={0x8}, @obex={0x5}, @acm={0x4}, @mdlm_detail={0x75, 0x24, 0x13, 0x0, "287d3c123aeac60053ad4e4102427a612f936b4ea2a0e23548bc0312c6915e9af7d8d43b7ac0ff735159d7d3b56e01866918ee059015e2540e92b262d27aec6ed0825a5339ad2379f84194f43f7cab1087bcfdfe94a96e015813e5689aaffd148dadf256c93cf46cf8e29ca178c8d53f67"}]}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64=0xffffffffffffffff], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001300)={0x2c, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) keyctl$reject(0x14, 0x0, 0xfffeffffffffff18, 0x1, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000180)={0x2c, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f00000004c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) unshare(0x24020400) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000200), 0xc0000, 0x0) ppoll(&(0x7f00000000c0)=[{r4, 0x46}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000a80)={0x14, &(0x7f0000000900)={0x0, 0x23, 0x102, {0x102, 0x31, "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"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3801}}}, &(0x7f0000000d40)={0x44, &(0x7f0000000ac0)={0x40, 0xc, 0x8e, "6db8719b9e2d1afcf881dfa87c274a2d85515f814c5658b274dd95ff9abf8e96b98cefa84bbf6550804d36e447b36d9646d56095178e214b7b56b59bca9df5aff4e337dea58922fdd36f75bdc85d6c43b8a3d6c0dfcde7616158d0f39e314398029a8fbba1fca28ff2893891f2dd4b90d8ac783a1bd3dc971ff099ffff51de27bcd154c87f6ea14070b013a27992"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000c00)={0x20, 0x81, 0x2, "73be"}, &(0x7f0000000c40)={0x20, 0x82, 0x2, "780e"}, &(0x7f0000000c80)={0x20, 0x83, 0x1, "85"}, &(0x7f0000000cc0)={0x20, 0x84, 0x4, "1bbe3770"}, &(0x7f0000000d00)={0x20, 0x85, 0x3, "74b34e"}}) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000080)="66b9320a00000f3226660f2859d2f0204616f30f09622266b9800000c00f326635000800000f30f20f01d8baf80c66b8cad0848d66efbafc0ced0f07f30f21dd", 0x40}], 0x1, 0x77, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vm(r5, 0x4018aee2, &(0x7f0000000740)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x2b}}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r7, 0x0, 0x20040081) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000001100)={0x44, &(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES32=r1, @ANYRES16, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in=@loopback, @in=@private, 0x4e20, 0x7fff, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0], 0x43a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x42) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fanotify_init(0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, 0x0) creat(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000821000/0x4000)=nil, 0x4000, 0x9) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYBLOB="ac14142ae0000001000000e837000000000000000000000007"], 0x58}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) accept4(r6, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x10, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff48) r8 = dup(r0) write$UHID_INPUT(r8, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) executing program 0: syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(r1, r1) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, 0x0) readv(r2, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/139, 0x8b}], 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) r3 = syz_open_dev$radio(&(0x7f00000093c0), 0x1, 0x2) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000001c0)=0xe) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000100)) syz_fuse_handle_req(r3, &(0x7f0000009900)="37fd1e2fc756d36da65ca9c8cecddd88bebd9ca3450e0e4f3cc2a143a173bb0532f342eb926939edc1714c6589e43f5b984110303f8241f18e4d6a7dd8aaa4e0096f19635c23e0313f0f445640d55e8d6d8290b94bd8e906118ffa30dd18ce1950cc4ad26633e42c47d2b94ad2e9aa1ef27802805668162b480aed0e9db6272fce1df33ddd97a39efc937ee02c570771960b891d61006c154eafcbeeb44de530e6a6405e9cd25fc15b521779a836461f14bb50ce3ce0db93f7c8545e8580a8295891c312eee1dc1e3df8fb03a49a10905067f2898a96df30ed8ca6ee020e0bd0f6efe8a22f92f6af156fb93e2c35404605a9af8edac329771cc86f099f5f51cfd4a7035afa754c567d18649f607a3f479e42af0bb60035353879ac69d4d2466f860a4e4e2e0360e4e7eb4fb0d5e2115594501a690b2d909c83d28e0aeba10ab25db12c4d4d9578b1da7701b838a7c713d630d9c217ad395976e9550248efbd7dbf6f3f729455c6075550b1cdb2fb23b034b87ce8270d0ffd67116076584284f54d7327773ff4c4da600170fb5e3945c96bf9fe935510c9cffddd73a466d6b686ab0e8e21beb43f6986186302984f3f9f9272ca7d7488f4b05f616491f56860267b7463e3a00ba2193ecd8eb005f722fafe450b54e0f8b446f72568fa9bf38f978479ae9c2aca6f120b6a6fed1db56ba034a067d5cc2585d0bd23970525b7f4688d88c0451021b5807fe31e7ca02c829e6dfe7794d2e27cb77fe9a47da1906dd79ea4fa4a6e14f116088acfe6ed0145459f64997da4a554a7cc534be6ac8a4976b3ee80e9ebacf78c174f37d0e4a5310af402e7c1e824d1821dd582b20607aefe10f560a018eb1adfb520b223cf25777c3a5b128580a3a503c9f79352406e0155a377a40f5260fad06fb376e95a979e1d365da367f980e55327ca7e48a5021a4e39845d5bb6354108de4234b479c46323093cc8daf9a7ba51f98049401a6668906bdd4430b158b43c8218ab377ba087529e7df5b94cb636ea242cdb2c672c26f018f183e8eb8397b1da75059452a26525a20d97109c96dfbec1d658243b02e6524675fe04a82be6e023d59c3f3c6cd60924dd56fd25ebb5ac49d341a4fc4955db3030106576af01bab07bed4918b120be3e902e84e14e45dfa3af79d2f4f9d23b348706c9109a5469178692771becd14e1f627d5aad152413558659d630357506b1f85de137357b4e9a8275e32c464f4d40c00016a14e215259628986f61694fe8689a94188e1878cef18a7683552c395a6bee1b03de2fd7ea2febd618a654afbce62abf1fc7232c0cb2883b7f06d16f07e13477409ef8fb8f234447da33741239348ae5c30c0ae0fa1aa4efb3c3d179d49e8c66b3ec1561c4de28f04790095d4c5c6f534ad119096ec94273965acf692e91784d8f9b552958f4e1a6c6a08291134312e56c4dc0065d724d9f0737aa178c511f3738c9cdc4542876792a79c92517e87c0f608c705f379d784479b1e4354213b84f15e2bf6f8df1875883da748a438ed2d584e51605149139d9687609906dc9c5dd3ee956b128dae8bb82f10555ed7e0a88d7c6296a3f67403fa03b3d4e204288d30c4b4edfa383eff1673991dedf23b0a6e2b92652add294877883b5b34621f074ee6dd8953e03afe53f37ec9778426a7cd5c346e14cdd9cea207bc6f3efeb5249416cdf44f964eda8abe9f6b26e5deb45f6023cf45d8a45813a21bb37c7fa6ce2fffd5c3780635fd8f693d93bb14edf718cc3991c5d0c4cce99c171dcc31692defb59364b8616bddcd3c80fa301746733a0e3abe31d7c4029331ce2c324dfc0c27fd7e2df9e62065f357db0b0d560941a4cc41d85e5eedbfe2322eef30cf74400dad3eb229205403eb74c20f5b45a4247074f5ddd16ee5acc72ba3ccebb2cffdc9ef2e0f2128a137d8986db2e07bdba005fed4758ee829eec8240519793c2dddcd79310edf7738180043598e0413158e03dfc56e9d75268817c894585c7e20bfecbc707208d956fb3d705a7690bb68e817e83b47a0da72b11a40c4cde8d9018155e28047c39b27b0ffd77dc220365b975bc9911c8fd20b3106d00decace7e5f555ae817528a8622b4e2937193a0628e756118761b290ae9d32e12cd33979f69e34fac9b734c38d26574fe613ec2edc5a2a62e75430e1e522cd3a527079435ebb7c2a9ef3b0651b41a6cb72f2bf7bfc593ce8ac8ecfa4351ba2316e7854f51c757f65225e2641edf238e3c803b5f7c5a9ee1e3dd59ebe478e69976a54f972c97d1d25c78a6c1f885217d055b4001de026c2a5ef93e7460192aa533ae678f16e4e2da1da1ab8164fbc9665b6579801fd24e6957e2587b7fb7fb31f86adb03f9806ed2fd6bd4eb5ebafc5be10399049ab780e3d1cc1bb1c77ec839d0a61522c183bd7ac544ed44f652ae12a9622a4c8828efdb778243e379f21b3b2ab5fc749c38c5b0fb68b55cdd122a5a0eefbdee7f25420e813ab5352f1d9b389846b7b5a0d76ce349adb41ec8f0291b0aba4576021c3fb6869de850e92302e13be2412a2537071f75637ea7ebc6fe06da6795658f7be1b9ffae3cc55bd2ee4c17fef7165492b5911ab249504a1c485e0c4298d42ec3442b8f7e82eeb0dd78e500094341e25b45e8282f637099b15cbe9919b6c3fe5048b58e4f86131221c83e6fc8802fd2a082340d3e97a08acf4e9865e473c8132131a6e7a3978a5d532eec554e7270c410ad12448a745dcbbe6f3752ee1f25464097be20ca72c3462b3db688afceb604774683c4d3ee95c534f85f150eadd2dcc1e3aac22e336fe3d2e4fe6440f5ed2a64f072ec6589c764f9f640d41b073dcd8c76b207e54017b56e9ea39f84b79ffa7de10905a1c85a94d2e4a0e001427e442245f097b3bb5b49eaa42557e937e58e176a67cb02d79acbe9107abd6df5a6e39af3a0214e509f6b0c23fee5953603b4d4c6c9d15228c2e800c581bdbb9f59a4ca03ce1735db543a2d4a6b2b3fea283e1212f0b702cacbc1165267464ecc311794f1746d6b2d71c2c69501d5a0adecafb622f2a4b945e7d72c8e8f5d8bc03fe5666f0d0cfa28eaf234e2658ffb33c59f7b2793dcca07a66980e15b6c809deecb530280ffae7668d6a257e5eca2754bcd2812f436d79c6b5867983301c8b1acc86091a58d03485eaeefea3c0d7c8db4c7cf9bf15c6dafa86bad393053ddc115bf68ce586534e1097f603beeabaf1f00be3c5f642decd09ec2a1ba7fb7389952478b61b2d511638fc96d1cc546f52413f201ad0b457508a1bde7fd4d878225c00e7de2e1fa1ef6518cd7244b30b9e291dfa95bef18e69b3db1856632ee9383b53906d357f4868747d083495dc87561303111ad5d7bcb5494545338551560a5ec347dc8999e9f53a3fec4079e598768e1682ea476d7dc031938b0dd6f797b063d5881701290e17e91cab578a67e549214d2ab0789bf564a63074a92eea818cf5298e396b7126fb8c883d265f164afc2803a114b2aa0532f101a2360e10f936673ac15eda133bcfabe8d1096080b81f8844d4aa4aee414a3c31dfd8840208144a0e5f97683a4f3f80d0b9a898e8ec65e95265c8b12d2e992acb7eea78edccad4654145fa803e90b016c9f068332f75ee9dc99e0f3696c3b738b4c1cc21d3f4c800d5d5ac6f2978e4ec7492d6519e8d7f40350ef0df4773d66b5b8327f85637f7b01e466b63d458fe509c403905c796337e231a1fe8f9bce12c2ac524295f1ae3b5627702450127169e8ef888803e5d4633f3aed593ac663a1f9d1f3ec50c4f2e4c8c5bded5b5387b7e256cbfc304af8ecb022f5b4174c9a46692803726521dae36eee6791ebf9aba749041b5be2e92410d64abd45db9dd2b79eee649ac3020e0ea153b85a885ddc4e1d6bf353691ad800629cf18826a79a4c1db1baff383cbc1edfaac57a1990d0fa6080053083b5446e42c1d9d535dbcaa518dfce5f60f2cb519e828ed7ab15942695f0fc494214216918d643a2157dafc087e62236a0bd112a6fe6b438c49df125618af0dd9ae51b98fd071d708ccd9214089bdc33a3f6f933eb903575614388d45cb8771d3a77538a5ec7dba8950a4f7c10256bfe03e50e87b0994dce4fa6d3caa99478a7b2e832ee5b70f8257ca19c8c4867c461012542d44b1e680cfa292c7c6f6c15a7f8eeed10df5d84ae7cc50762cf38baf9e569854b7c1d5774fd80c1174e9ebde0f9bc34def489c33f4da143f1ed7c896db1ec47e857b3d4572fd0d711a3de6749323a9124908c9a26d7498f70da2a42eaeb197dae89799e1a963e91b6f7743c21e4815e0a488f2260707e37006e09aff0b10fab6efc7b2d4afb306752e33e3ee5aa5d1acff3b23539dcde0696c9cbff0c42797c5b2b77b057dee52898929146a3efc04655ff1931a27a0eda23053a0ef2e5af3029f8947057bfcc4d62cdb133c52008df4c99b34163a4fa6d5353473164e9e7bea89fbe6fdf91a00cbc1b16a99ef662ceea21908cb63b8b195f17c65695e6ff69404bb636ebbc0aef64d576cdde4ad81a46243a2c5d833790e134a1eb9b0b7769eff54514c2f40baa1126d3c8167348a1687d1d1be710cb9284c3a1e153d2a8f88b0565ae1451be0a2be076058c5285508722440c0f1d9272d1e297cab70e251f59ea4d7af67a5f0071c7a6267235e3062ed07e2eb5673184fbdefbe7a143bf65cdf8b0210e5a1b2681048a6591d9d62081b8bac108e8cee8054148d802e7b86bbc22ac0dbe97b92c2302bc1f68271b7adef81cffd6fe783146494c907ee0acde2500c4944b334a093ba30a6a92a82a1d72ebd26aa532897265419c1194b7ec5a7ecf278aed7838200344509074790b51d77ee360855d416193a23e4d4a5b088d3ed1d5c850542cb07be907a3f17b019866476926c3b84f1ff8ffb2aa71d4430b06d65ab08da00b0cec99abbe26125f01c8b7d1eea9cc4488ba3691d2cbfc81d05102caec6b8ee3963c183c48933b059653fcfe8a2ab5ee4b5393a5d806b2955a9ba68b500638490ee13df83ec3a5fc36feb76efcf6bb81c1d0aa81a00cdcba2f824c28f32b352848d3999cdce15e779d5957bcef6eaf9d0c14fd8df7167e21be77348d11f0d9c0df8be3a8910b3c79ddfc49bdd3e507262a074e44a70b82a5c9035896379515902f29bb856e74003fb727b5232504c96a4a784553fb1ca253981aee181d65d699dc56a47f81bbf1d1bb4e31046067cb7ecfeace445dd3edf5677c4e2e3a3f6a86d9f424e8e13c0aa25e8c580277425f2f50b6b5f8f988a1ab2b91fbb8c1e68f06b1eca93377ca7ab390a5b917be54880e5f5f34cb0fa80dd107a18626b07f4ad900a3d1e02fc82ecb6cf1e18f8127f6a743ad026fd12f93a445e20932e94735a45321ca608322dfcddb7fd6d2e8d43dc82b428329934a3a0feb2b44cc31f1026593e7a3729813557d23aca0681003f6c8ac0c747af0ae895603a3be05d0412dbac9ed8a031a4a9ccea9e0bb419c2f824c91c223ae5fa0305cd3c74ac3b34d440898f1ae74b7dcee88d49982864c9ec6998b0e24a327b133650cafd7d6328020efec4e02aae5d5f2c2d551d4af210533be9e1d9e7c8269745d8edefb3ec3f721f8a2d1a6eead84ee67d45f994d0539b79bcc2341b467c2e9e9c75f51ec4daa8d696af4c1208aa2b2be1d1663655df36f016bf288bbc72fb7d5325fcc4404378da911a4b0c43f88b45fa88584e7ac0ec0ac6ca2e11e2a8bd1bb093dc6aae0d654a7222db4a5604c312c0b8d4b30f6a296549c53d474d25765ebd3b1d9866089e04ab5c5ee424fa6a93bd7a3fc3275fe358a20c979753e949425ce25768dd39ee78c04c449bc0e2cb320aaffa1492f852f790d5c93620accdff76a4f6c0b47d578912ecebb6271059c665b8b3646b96ecf05d942724e8193971e0b20c276b181c60f6c25ab00858629d1bf646cc745e11d2c03e9dcf9c163f7b1390adee59ffbc5134a82c53088bfe25259d79bce23ca1e4c00f0154df92f2ab76b2cf6d0e31ac9e7c588a9b0296801a0107d8277f11715d7e1af47bc3c2cf64ad80b2f80ca348d4c570f720a76b901722363642cacd0b65c93e0e80d982c7e1bdbf7b3be2616949aa0918bc35a352d2f4762403eed4005a55dd725ae2d02f85cbd06450c1685a8474046864c3e4c0bf6908dc998dbe8983faaea90fdea5c77b0dd5dc9adb2c0d7362df1aaa93e6c600117afb4f8b5ca462b3906341aeca1d1f902b4328a906429839ad8bd1684e99abb76402254e0859da4d3b1f74eacab1488929f576738bbd462ed7cb50b62d610bacaac88d37aa849731ce19f9baf0fdd2d747d693c08739ce71a8decf6435d32a091f54b7a14224756d66d3125d0b91bb619a49b4e1c67d3b63dae65cc2ae8b8fe51eeb3426faab455f5e92cd0615dcd0e50e753b4f711060126e45a2d912feecb9badbb5086fef32c69f68cf473eb168f511ea12724cec8582d3ace95928694527b7545b9f7deb261bde246f386431ef58e994e8ee97aa970991ef8af50dfc01573216ba3008587143ac9014e7bf6213e555dd2cdcf6892aae45aaecf869fbb2035614476bb736c44d90f0fd4340f276a3fde5a94ce09716858eeab95671dcddc864ee4282d26b8c6d66e4c8f6eead56d6c50c682dec0d05369c2f346f555e7eb2b8fd2cd656d45f42c66f2f39ff7fcdfe041395b7261354e38659eaec7632f872c15c698c138ecaa43adf0f6c323559cf0fd00934f8db3752491cfa22b6c20764150eb54bdeb6dacf9b0fde660c106c41f146465c435ba217aa0eab1568b2e8d72bcaf9996143d09eb03dd1b9088e028d67a925a4b4b113daf2f2615b4563d7067ededc4f2421ac9494388c8c5bd3eff7e714528d4c1c577e96692705b87e42e72111040a5ff518a1fe1db34dc462a9921a2a236d88ed1df24acd478077c6945a1ba897e9e85c4268acc6746fc04ba9717e9206b8d500d0dd564d36a09623f6fcc801c47d4d3afcf407d9cd9975f7a8be3cc5afaaed56ef90d5dba8bdb7ae165fb35e8a26b76007a3df9bfdea36d06c449f53c848e3da373e6d60f3160fff8138f9439ee26b88c6f546c808a50985c313b5ea057fdebbb868201c375e05ddecbdd1252e119ed3187271ce07b4e3ff5b21699b82310914e5a29aebb5fbc717bd170a7e7df0e0ea9d7021a3c9ac033b8a20adcf8b70c32fb5897d8fa2179c329721d22f5a77c93a2e7abe055f6cecf0d5714033c092cc6f85877ae10b2b07dbc8fed32b4b4d38816bb611537f3cd29963416c6c50751ac01786f790e6d63cb12c646dcf32834cbba3bd6b0a147641e0cba6342e1ae4d67def2605961facd9056350c5ca3184940b1cbef1c5759ae2857ce091b0e06c17e4348ee382decb95775edad4f705b8036e9a8c30fab3681fdb836c2cd03b70afe20e4d4ecc9467d5f8d3c268e6bf8f7fa817c83f6ab4440886937f1e92908f89820e45d0001e7a71e75e3802087cd7eb6b292f5ce903260b5cb4a1ba49531a1e9419a491b62d6d1362b2041e9671e9156867ac01ba25b56b8505b12a9035940435ce23ca1c804fdf0bbe5b7d174baeff8dd3f0588cfbd45ce6019701eb544343009c7797a838063ee464ea80057f9f59972f10874947073b642dba3529779ea8daa905c4cc78e7ffbb609f1c55f5b1c8fb6ec7b4d959ff644f3e940d9373f744608696afcc6559ea18f74a75107d4f067302735e82127b70b90d5a7528577d90eb79b31818cb3e19256cadf195bb40513096329c96d0a33e3f196904f8548e952160d559787b3b2ea4259f14c4ca23dcf24abb03c33c54b38f7a52646f9f948050857e15660b5a680f736b70e30fedba7676162f9da994722a958afda1b36a2ecb0bfefb0596cad411bc680034601a8a1637e9309f90643d7fb74157e6ef55b34c96d51d04d025b4fccdff04c972911cdb2b14ebd2b189d5922f744582972a6ab7f5f40c9fdaf1b23993d2cc2ffce3266b730e35af6d2bf58a15de86023688b43f39ba0c4d351e1ef88b2828b31a5879464acab98e687c1389ec1e5ea7d6b8e18e74dc4756e0e621fb6100b3580b4d2162eb44abff39425abf9a477e45b349ae9bfa7d5459bd1a5739b7e085b075800f0ca19b169755adc78c76d90a520ac60068c78dd3836d1d546aa38738378ba13a48eecbef7dfecd1bfa4a69cd2fa99091bc2840412360056a26d0302c95f4239f9d0f77339b00fddfe4e0051c614f27c1fef559990e693f1bc0f56a81f369c6c8c9573cf9be6db696578dd9384bb51ffc986386b5d4f7765d1142102817765f0ddb14c63fd148d8ac586bec81a558fc132b20fb250a5d336123ca217cb25a728583d752ed1fb5e64e76eb5e1c1f4a0b87300014b4630c808eb79e3464f7eb4be12beb4b7421f2a0a314b9a5b85e472e9e476a14d739de3787d1d56925aa46c646b57ecd69333b3dcc239262ec17ab5e4dbdda72ecd4057836cfaa1a4cfdd50cd0cdbc81c6ab60e88e74e3fd0a0d4f2e6aa81266578f7f4569281b833ef013c3b16f307c572d72c15c830ea11aac3ec001c0df9e9844c7d8d61334cf7a4a7eb003942f76d2639ed0ce677145688403851f095027800ec91a234c82e1aac7b1a058583191f079a1a76e2529fa62d671fee8299ea0a564e99c5abbf692adf26f821237437749e229ab05c763a68fc7abf6bf83493a3c4b2bb0e82fb3ecdf9183136299315098ce9ecf5e06bec7c3201c894d8182d25883da8a07faeeeb927c29c421bf2940a454c739f045f8e61b445dae9887f108404457b79d7113ce7f3aff53f9b96c55e798c3a3d9a7461aebbcc4b18e3cb98b5d4434fd7760065e92e90ac1b9b0cc002259f00af24cae301c8376994c1a87b8df0bc97fe1099d0ca02465c864b562cbf4c00b92df45366a2b05a8f552264b87d3380394ccbd93b20915e96022fd057b9dc1972298705aa3052d941d4c0e1183d08f8de60a76480705de140291b0a466bee5ac80a69a159d33a58dc2191fd605156d86f61201ac6231ee87bc37d6f58e2e94320586a515c3c25792f13e3a77949aa9f793c1d607903c73eb3b93befa8cc53d490ba5c834c05e1eb9550267f2da5ef20daa80537130bb2ce6e55294ce7c80c63a60e185d42737479c265c9535df25abdb245b3256210d81a35b79bd4e30d9892cf400095d9563c827127f2ab4916044dc24d793c8b2cd463f5a35559f969b132a837452be127ddce481f1c9d570732eda8eb28081132807cf67b527560bead1ac6c94aabf556ae742f41fceca4a05c3078364a4ae6c0471dbefbac0f3a4cb1e75dfc85f207fc9b474271e0d7ff25f9349cdf2328a9790ea2a64eaf89fd82f31780c6aee735204550c7eaaa4170be62e3b15b8b22d548d47794f21499c3d32882ed38910b2c70e70ae997d17658dc2e67d0818bb74801e310796856db149f8398ac60b432b70144008fa44e3d68a8b8e576c4828a9df980fcf11bd43f9e34400a96bdfba5dd4173d2bdf1ee14563e17a52952cd818822996d9ae5da00c8fc14f56d0fbbee8e5f8b98862deb2e78a7bf54a0523b3f62d26f6db99bbb07b4d600f042a2b866b9be2e9cf7cebc837e81a759d227e534e509ea7a116312b1a79d53a68dac4bb769c5775b667efb63f9650328949dda8693e806a4b4cbd8c24b1e2c966d12aaabf8a28d9235a2c745c40e8f00bfd3fceadb358c4862de7ea1d924c5f9e4c1a9072a71b1783768f62b16ed3f8b15905f7fb13766a2d61341d700bcbe1b10a5aff2c585a364cdb757cc17f75462cfb911cc2cbece7d0d1868292f35f6a190588635e89bda24e53a4a6e191c9762f854c534a215e38529aaaf94a9560381efe066dc5dd8525c1d83193491f50caf6bb7d8c2c9fb2aee953b6047f6408138fd93a32abead9bc8817d8c5349729b8e318a7035f1559d3e52c11c93facb7b500efdd6884444be05bee01ae8aca4f6db9948d9cc726c8d9cf1201aa44b8be54e67ea8527a75a82ace0dab76fa3015a06eb41d2adc842e0ac130153de7092f8d3689433b3ddd06b77cca67721d8506beee3e74e36d8cc0583368bfbc0af7641373704ffdd11b904d5687e7bd5a80c116de40dc9ba39abeea7f38add57e9c30805545f3c55d65fac96e3d300e6775cec36515aef95b30ca262607ac79218c8deb25e54ab19c9c80511efeeef674e286a9380b48030aff63e817295c347f10c341828a73bfa55e865ab6fd3ec1f530b39b4dd7b033b243250e64f311cdc08b977f9e8fcc30432b006138667b1b92425a852b9894aec2ba1be1431d759a1f2cd0a48eee6bd273735552de3a0ff853cb3b1f21491877381c440af20921fb91dedae8c9895edb70ee53e4b8de03571e363300ea0356c0d4940c71c91bada7f6bb8f6c715a72f600d53da66daff30cb8630e79925a4d395864d3e251287ae2bf7d841ae919c4d07f40769fd51f30e7a4256cf135f1d39e4e7fb3416397a302372fcb39e1a2fc53380b1065426eeedd7bdeceb9ca32ee6cf3edc036161bb954c04a3f35a49fc06e838419fd70527bf8ba0a8c99e855b3f864f561068f06d8fc98c13224e5529bcaba1606e75e969c0da35309849a98827ec32bb8a3bbeb1abecdc11274a5a8c6dc8c0c8961d9ea6fe33d35d1c47b2f9c9efc3012d142cef90e0ef1ac639ab40bf328806c5a34f7b4672be8a2f039cb41b603d1aba7fd89235a9db4035a0d27b6de54cd3215e3239c7b1ae299c19447157b6b238d4d486ee282bb2659b2ea144602abbe409499a1e0d24f20746285285dd20b6aa922d28f6922a970280f596fb2c18d94552fc052d705bd0eeb3daf66b69bf7382a35b1e6c985a0527a437fee544e03e69a814f1f0e9d324cd029ee0ecdd8d76615e1a5679cd5e6ab5c05431d6e2c39faa54cf07d8dd6e9c6f92d7419732dfb53ec4d56201e76e02e1df01a285395040532b78e76c4337d59d81065b1fe3f556900862ffc6c1a99d3d36eca9e5ddfd4bdf516e0fbe982249c94879a5492221d5632bf697653817fcb20f7b9b5e1292b7c8131c021c56df0959ad47ee2c716e29c687383812c3377ff2a257abd7af7148a2c52a53c4b288b515f4131cd5b692189dba708f4f16d06b2623841607758a66b94c5b3b37a74c515ab855b7ec318ccc79f93b20f3c000f2fd4f350f0fad14560cd776cd287bcfde48f495871e6faedd1af5738f25e78d487e7b4c70e42377a5b2cd313c53de7bbd3635456d6bf28d21068539cecc70548b1b9517460f4deae151c738198645538f514ee6f8056c6910ddcf6757b604d546dd1e24738e9f27e71f3b16c8717b2ac5d1f53f1edb69204c746a64f2178fb633883c9b36205264a75de42e51ed9e7e9689dada1b90b51cd94f40b329a40b9cc53c239175ac325a62743a301e57f1d9bfc55094d6dae561e9c730038991e6e2f32ba70271aad712cf983b70a1f8ecf868173c4be0d2c4e12cd2de84dcfeb18f9adc604e9f8a9e775aaebb58178e83ea2d876dd67ee0f7388b94cd784acc18966617946395771fb992911c48b667657e8a2101ebe92b6fea2f108bb00903d1570f14e8c710f403bc81fe78", 0x2000, &(0x7f000000c140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') statx(r5, &(0x7f0000000000)='.\x00', 0x0, 0x5c00, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f0000001080), &(0x7f00000010c0)}, 0x20) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r6, 0x48079000) syz_genetlink_get_family_id$devlink(&(0x7f0000005400), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x2b, 0x0, @loopback, @loopback}}}}}}}, 0x0) executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0xa9080, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x2, 0x41, &(0x7f0000001400)={{0x12, 0x1, 0x310, 0x23, 0xbf, 0xdd, 0x10, 0x497, 0xc001, 0x273, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x0, 0xa, 0x0, 0x81, [{{0x9, 0x4, 0x0, 0xff, 0x0, 0x58, 0x19, 0x30, 0x0, [@cdc_ncm={{0x5}, {0x5}, {0xd}, {0x6}}]}}]}}]}}, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xcc, 0xe5, 0xf3, 0x40, 0xb57, 0xd863, 0x2ebb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2}}]}}]}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xffffff14, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1b) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="2000000011000d04000000000800000000000000", @ANYRES32=r5], 0x20}, 0x1, 0x6}, 0x0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000400)=""/4096) executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) syz_emit_vhci(0x0, 0x22) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000440)=""/172, 0xac, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000580)=ANY=[], 0xd) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB], 0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB], 0x7) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r2, &(0x7f00000000c0)={'#! ', '', [{}, {0x20, '/dev/hwrng\x00'}, {0x20, '/dev/hwrng\x00'}]}, 0x1d) syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a0e000/0x3000)=nil, 0x3000, 0x18) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000ffe0f50571101800000000006600000000800080950000000000000872c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d63e4bdbf3cbdd4ff4738d969857122ea180b8b25ad6c006c3e4e86dd319c92d683f6d593cb860187c7640045af58adcfc943a215f12b50493e62b5a127771fc659f39d1470e7d85"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x5, &(0x7f0000000400)) listen(0xffffffffffffffff, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$P9_RMKDIR(r1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) write$P9_ROPEN(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mq_open(&(0x7f0000000000)='-#}\x00', 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0500003f514fd1f19a4c977360b0238700000000000000060000000800030052a15732ab9b70685ad530b92f9cd2b5dbf4be1fb2fa2333cc5a34e8b845f6c29e6ab4d749a845e3cd52e9d1a17d19345fba17822232", @ANYRES32=r4, @ANYBLOB="080005000b000000"], 0x24}}, 0x0) dup2(r2, r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x5, &(0x7f0000000100)=@framed={{}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0xb}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000ff0700"/17], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x82}, 0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[], 0x168}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r7, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000ec0)=""/224, 0xe0}, {&(0x7f0000000fc0)=""/252, 0xfc}, {&(0x7f0000002140)=""/4058, 0xfda}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f0000000a00)=""/203, 0xcb}, {&(0x7f0000000500)=""/190, 0xbe}, {&(0x7f0000000b00)=""/226, 0xe2}, {&(0x7f0000000e40)=""/21, 0x15}, {&(0x7f0000000400)=""/35, 0x23}, {&(0x7f0000000340)=""/183, 0xb7}, {&(0x7f0000000c00)=""/155, 0x9b}, {&(0x7f0000000880)=""/64, 0x40}, {&(0x7f00000008c0)=""/54, 0x36}, {&(0x7f0000001100)=""/236, 0xec}, {&(0x7f0000001200)=""/228, 0xe4}], 0xf}, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x1a, 0x0}, 0x0) (fail_nth: 1) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005140)=@newchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) (fail_nth: 5) executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000700)=ANY=[@ANYBLOB="02000000000000000010000002000100", @ANYRES16, @ANYRES16=r2], 0x34, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) unshare(0x0) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) fanotify_init(0x0, 0x0) unshare(0x0) fanotify_mark(r4, 0x1, 0x0, r6, 0x0) vmsplice(r6, &(0x7f0000008280)=[{&(0x7f0000006100)}], 0x1, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f0000000400)={0x0, "0af1784c4756434308e123c352fe741eb5aabe375a28c9b40be3ffc10e22cc89b3e00a725dfb89db7302d61e0d78f8a02fd4db020432f7550a8664579f66160e", 0x21}, 0x48, 0xfffffffffffffff9) keyctl$get_persistent(0x16, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r7, &(0x7f0000000180)='G', 0x1, 0x8001, 0x0, 0x0) add_key$keyring(&(0x7f00000021c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) shutdown(r7, 0x1) executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x6b33, 0x0, 0x2}, 0x0, 0x0) r1 = syz_io_uring_setup(0x49, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) r3 = syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000280)=[{&(0x7f0000000440)=""/189, 0xbd}, {&(0x7f0000000500)=""/134, 0x86}, {&(0x7f00000005c0)=""/164, 0xa4}, {&(0x7f0000000680)=""/162, 0xa2}], 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x18, 0x20000000, r5) r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000001700), 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r6, 0xc0485661, &(0x7f0000001740)={0x4, 0x1, @start={0x5, 0x3}}) syz_open_dev$usbfs(&(0x7f00000002c0), 0x1, 0x1c7802) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800e00010069703665727370616e00000024000280140005000000000000000000000000000000000105001600020000000400120008000400010081"], 0x60}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f0000000200)=0x1) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x252f, &(0x7f0000000280)={0x0, 0x0, 0x542, 0x2, 0xfffffffe}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x29) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4000000) r3 = socket$inet6(0xa, 0x6, 0xfe) r4 = epoll_create(0x200) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x20000002}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/address_bits', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x8) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c80, 0xffffffffffffffe4) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000180)=0x3) sendto$inet6(r3, 0x0, 0x0, 0x8001, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000340)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2c, 0x3a, 0xb, 0x0, 0x0, {0x2}, [@nested={0xfffffffffffffec1, 0x0, 0x0, 0x1, [@typed={0x13, 0x3, 0x0, 0x0, @str='\r4\xd8\x02j,'}]}]}, 0x2c}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYRESOCT=r1, @ANYRESHEX, @ANYRES8=r2, @ANYRESHEX], 0xffdc) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b70000000000000d7f0a0000000000001d000000010000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xb579, &(0x7f000000cf3d)=""/195}, 0x21) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffd, {0x0, 0x0, 0x3, 0x0, 0x203}}, 0x20}}, 0x8001) executing program 4: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500ff8505000000bf0900000000000055090100000000009500000000000000b702000000000000012af0ff00000000d609080000000000db9af0ff51000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x401) syz_emit_ethernet(0x3a, &(0x7f00000003c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x75}]}}}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x44}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', 0x10) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000003700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/115, 0x73}], 0x1}}], 0x2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="9e685760794f93d5148a96de6f79285dad5de4da19e0a4d207b64f033a3f27c70bc955fd751f9e1f13a2c61d47163cd62da5d4028d64286690bb810329051eac173b0970dbfa8ecfff2a81d9662ee2", 0x4f}], 0x1, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x3f}], 0x18}, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r6, 0x1, 0x0, 0x0, {0x1a}}, 0x14}}, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x2, &(0x7f00000000c0)={&(0x7f0000000000)=""/5}, 0x20) executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x4080, 0xe) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x4b}}}}, [@NL80211_ATTR_TESTDATA={0x21, 0x45, "99c78fb3b24c6f3bb44b34ec6c4e1b63bb46a3a28d4208f3cb4941b919"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x54000}, 0x4000090) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r3, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x70}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x8cc1}, 0x10) (async) poll(&(0x7f0000000340)=[{r0, 0x2080}], 0x1, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0xffffffff00000001) (async) r4 = socket$kcm(0x29, 0x7, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f00000003c0), 0x2, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x8002, 0x0) (async) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r3, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x28}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x65}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000081}, 0x4880) (async) close(r4) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000005c0)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f00000006c0)=0xe8) (async) statx(r1, &(0x7f0000000700)='./file0\x00', 0x100, 0x100, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) statx(r1, &(0x7f0000000840)='./file0/file0\x00', 0x0, 0x800, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x8c0005, &(0x7f0000000980)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x80}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x454b88eee2c57439}}, {@blksize={'blksize', 0x3d, 0x200}}, {@blksize={'blksize', 0x3d, 0xc00}}], [{@fsmagic={'fsmagic', 0x3d, 0xb5a}}, {@uid_gt={'uid>', r8}}]}}, 0x0, 0x0, &(0x7f0000000ac0)="1d18b5d30e4bec25184d5c423eb8dd08f60557e1b6fd9934229e4d31d7d845d78376978492ae42cbaf66400e743604b47a4ad21d8b610a9a0b28cea4b0135bee468370848d69537eca60d7d382e5292cd15652808cd3d4a493e9b89c8575372dd387b5de77706d88baffcc0db6529d640fa65e514a5e469f7e9a672c8215c4c275171633641fc89ce77c0b56531f225b821c77faba94f9147e0cfb8fbf43704cff1daacfb6a4433b41de755bbd8d55fa89d16d80127379c1ba478c2cf2efac8a21f4cf70687d98089747ea2840f68ee620d755ce966ea71a303f8c5f9fd059f53214ac575c8cfe6349721aa1") r9 = socket$inet_sctp(0x2, 0x0, 0x84) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000bc0)={0x0, @in6={{0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}, 0x7fff, 0x4, 0x7, 0x7fffffff, 0x4, 0x3, 0x2}, &(0x7f0000000c80)=0x9c) getsockopt$inet_sctp_SCTP_MAXSEG(r9, 0x84, 0xd, &(0x7f0000000cc0)=@assoc_value={r10, 0x2}, &(0x7f0000000d00)=0x8) (async) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000d40)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) (async) syz_open_dev$sg(&(0x7f0000000d80), 0x3, 0x41) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e00), r1) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x20, r11, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x840) (async) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x34, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async) r12 = syz_io_uring_complete(0x0) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc, 0x30, r12, 0xb) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@bloom_filter={0x1e, 0x3, 0xffffff80, 0x1, 0x70, 0xffffffffffffffff, 0x9, '\x00', r5, 0xffffffffffffffff, 0x4, 0x2, 0x0, 0xb}, 0x48) (async) lstat(&(0x7f0000001080)='./file0/file0\x00', &(0x7f00000010c0)) (async) sendmsg$NL80211_CMD_GET_POWER_SAVE(r12, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, r3, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000080}, 0x20004000) executing program 1: munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40004}}}, &(0x7f0000000200)='GPL\x00', 0x6, 0x100b, &(0x7f0000001e40)=""/4107}, 0x90) executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2004cb], 0x100000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$kcm(0x10, 0x3, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000001c0)={0x1, 0x8, 0x7}, 0x8) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="1e000000", @ANYRES16=r6, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r7, @ANYBLOB="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"], 0x25c}}, 0x8000) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r9 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) r13 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_AUTHENTICATE(r10, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000009c0)={0x44, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="d7872ac05d8c"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000653272107205410024d5010203010902120001000000000904000000c169dd00"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) executing program 0: r0 = socket$inet(0x2, 0x80003, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x3, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005140)=@newchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) (fail_nth: 6) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000000c1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x20323159}}) r1 = io_uring_setup(0x17c3, &(0x7f00000002c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'vcan0\x00'}) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000080)={0x60, 0x1, &(0x7f0000245000/0x2000)=nil, &(0x7f00004c7000/0x1000)=nil, 0x0, 0x0}) (async) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000080)={0x60, 0x1, &(0x7f0000245000/0x2000)=nil, &(0x7f00004c7000/0x1000)=nil, 0x0, 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x0, 0x2}, 0x48) r5 = getegid() socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000cc0)={0x0, 0x0}, &(0x7f0000000080)=0x39) keyctl$chown(0x4, 0x0, r7, r5) fchown(r2, 0xee00, 0x0) (async) fchown(r2, 0xee00, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{0x15, 0x0, 0x0, 0x10001}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{0x15, 0x0, 0x0, 0x10001}]}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r4, &(0x7f0000000480), &(0x7f0000000580)=@tcp=r8}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r4, &(0x7f0000000480), &(0x7f0000000580)=@tcp=r8}, 0x20) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0xb0a54e68b1cd2fdb, 0x103) (async) mknodat$null(0xffffffffffffff9c, 0x0, 0xb0a54e68b1cd2fdb, 0x103) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) (async) r9 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000040)='source', &(0x7f0000000000)=':.%:\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000040)='source', &(0x7f0000000000)=':.%:\x00', 0x0) r10 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r10, 0x891c, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, r11, 0x0, 0x7ffff000) r12 = socket$rxrpc(0x21, 0x2, 0xa) r13 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) listen(r13, 0x7ffc) recvmmsg(r12, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000080)=""/184, 0xb8}, {&(0x7f0000000a00)=""/209, 0xd1}, {&(0x7f0000000340)=""/72, 0x48}, {&(0x7f00000003c0)=""/137, 0x89}, {&(0x7f0000000280)=""/14, 0xe}, {0x0}, {&(0x7f00000004c0)=""/142, 0x8e}, {0x0}, {&(0x7f0000002b00)=""/4124, 0x101c}, {&(0x7f00000007c0)=""/64, 0x40}, {&(0x7f0000000800)=""/65, 0x41}, {&(0x7f0000000b00)=""/219, 0xdb}], 0xc}, 0x7fff}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000740)=[{&(0x7f0000000680)=""/129, 0x81}], 0x1, &(0x7f0000000900)=""/216, 0xd8}, 0x7}], 0x2, 0x10001, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@allocspi={0x144, 0x16, 0x411, 0x0, 0x0, {{{@in6=@private0, @in6=@private1}, {@in6=@private1, 0x0, 0x33}, @in=@empty}, 0x0, 0xfdfffefe}, [@algo_auth_trunc={0x4c, 0x14, {{'streebog256-generic\x00'}}}]}, 0x144}}, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) socket$kcm(0x2, 0x3, 0x2) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x34, 0x10, 0x44b, 0x0, 0x2, {0x7a, 0x0, 0x0, 0x0, 0x404c9}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}]}, 0x34}}, 0x20040000) (async) syz_emit_ethernet(0x6a, &(0x7f0000001480)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @private, {[@ra={0x94, 0x4}, @cipso={0x86, 0x25, 0x0, [{0x0, 0x10, "f79eb4cf48b5a5788fc15a45b5b1"}, {0x0, 0xf, "749018c9a54b61394327f11535"}]}]}}}}}}}, 0x0) mkdir(0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x4100, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) (async) chdir(0x0) r2 = inotify_init1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, &(0x7f0000000200)={0x20, 0x9, 0x8c, {0x8c, 0x9, "62ae362440210bf7af009a24f3d1adb12e3e66f1ab409e0d3329ffeff98dcb5e7e1be2bad072260ef549af295786b8ed586909c0df0426b0e61c2e4678190dbf6b1e9dafc9de98bec8a449c547e58c789ef18562bd71e0a7afbf546e8ab25eda5988b4806232f39a01480a793167d21f1a013ee018ff314d23021228ede54783135bb53e7bf9ff8ae8d1"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81a}}, &(0x7f00000002c0)={0x0, 0x22, 0x1d, {[@main=@item_012={0x1, 0x0, 0xc, "fa"}, @global=@item_012={0x0, 0x1, 0x3}, @main=@item_4={0x3, 0x0, 0xc, "f564b4dc"}, @local=@item_012={0x0, 0x2, 0x8}, @local=@item_4={0x3, 0x2, 0x4, "290abe73"}, @global=@item_4={0x3, 0x1, 0x4, "82dd1d22"}, @global=@item_4={0x3, 0x1, 0x0, "7ac66447"}, @local=@item_4={0x3, 0x2, 0x1, "4d7a8dcc"}]}}, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0xb, 0x3, 0x1, {0x22, 0xc62}}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000400)={0x0, 0x15, 0x14, "102530876c365baf4aa671f656e5d20d479b60fa"}, &(0x7f0000000480)={0x0, 0xa, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000500)={0x20, 0x1, 0xc7, "b713619bd338f7dc9a9dab7860a12feb132424b0c9a5fdc5a57bcc03e487cb08fce19a94d028bb201c2a314f89705fb7d0daf33e4a9abceea50560727651d7557a150dfe096490c1ea91d7887c5be12204630ec14112a71898cab3caaa649af2e5176b85012abeeff34d5fa47a0ab69831c3c96a40b4d01c209a8b0218771642aedf1950b0ac62d145d003473bbd24f8a751d0f8ff4232db2dbfbf45eeb0727609650151e6a12d3ed3e16dc2f763f3791629064230c3e15d16731d53c17937079acc1bbd393e8e"}, &(0x7f0000000600)={0x20, 0x3, 0x1, 0x4}}) (async) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000007cc684f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000002"], 0x210) (async) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) (async) inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x22000401) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file1\x00') r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201080000000040e70430000000000000010902240001000000000904000001030000000921000000012207000905810300000000004a45e2a2c3d38da127aff15e1341144da4c9b8f31da832"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000380)={0x2c, &(0x7f0000000140)={0x0, 0x0, 0x7, {0x7, 0x0, "4047bcd11c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) socket$inet6(0xa, 0x5, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) futex_waitv(0x0, 0x0, 0x2, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone3(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, 0x0}, 0x58) move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000a7a000/0x3000)=nil], &(0x7f00000001c0)=[0x1], 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000064000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a40b0b96fac48f87aafa230000000000800054000000021280011800a0001006d61746368000000180002800400030008000240000000eb0800024000000000140000001000010000000000000000000000000a"], 0xac}}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) pread64(0xffffffffffffffff, &(0x7f0000000300)=""/40, 0x28, 0xb76) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="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", 0x117}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000001080)="63c3b174ab06077f6ee67ac1310d86586b13d2c9e203a9da866b81e20e9fe5c43219396d489c1459ce9cd14fa3b43a0b", 0x30}, {&(0x7f00000003c0)}], 0x2}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="610cb4f6db2105b873df3f7652cc642b85afb69fc18178429903bb6e1ecd18186c", 0x21}, {&(0x7f0000000180)="6fe279d51047ff146af40b78b8d7ae53db8648c2090d72bcfeaf6fabbbfbe8dbc8b8f4cb22ac43d5a0fa87533bb375454751b8dd8aae4808a3", 0x39}, {&(0x7f00000001c0)="6d5edb4b883e266ba8c38aa9d13a78431c9d2cb6d8f4e1e80bb8a936aa105f46c914c46487522bc58054c4b0a523eeda0c76b595b36a515b6d30e34705733bb34bda2f89e92b2a98d2edbcffad9c5ccde0d723423cf07e4ffdbd568d3e263fb3b4086af3f2db1933785e59538bfd61f138ffac9eef7c8b34e4ce506220f43af449d3a72f48d9febe830b04cb3c99425de34cac503014ce74562667d8d6888edcc42fbbb6", 0xa4}, {&(0x7f00000002c0)}, {&(0x7f0000000540)}], 0x5}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb3bf10f3485e399c8b59df5b02c5f2702522", 0x3c}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2c691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d7d77ceefde94faf2e36c3920581691a79a6678db1e5e7fa1ca703ee7aa87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe", 0xc5}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472fd012198c3c61bb81e71ba62134303d2db9740143b0374a0d0be875789932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19645f7a1dcf1449fd34eecae5f52fba1e89d6d34b39297bbbc258c2ea547d47f2d89ad6e36e737691a1c6bdd164b2a85cbaaf648c910559f53581c60bd6c80f90c75f664e5b285c738881560f8ae89a4943141ac45fb6995cece6a2e0e62bd79213527a11c34a6e89ca41ead3e2589301279d9b0832d0b5a6ebe2cf0cbfa40ab948b0b9efe108aeded8d12388a459902261bb0d5ab83ed7ce81b8a59e", 0xe2}, {&(0x7f0000000840)="a1c3704ecc4399d294157fa2b9b8", 0xe}, {&(0x7f0000000880)}], 0x5}}], 0x4, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000340)=0x1, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0xffffffff, 0x0, &(0x7f0000000000)={0x0, 0x3}, 0xfffffffffffffdd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c0001801400030000000000000000f5000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe80000000000000000000000000003a0c000280050001000000000008000740000000001800068014000400ff010000000000000000000000000001"], 0xac}}, 0x0) executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100002ec6601037210100352a010203010902120001000000000904"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (fail_nth: 8) io_uring_setup(0x67d2, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x44, 0xe2, 0x20, 0x8, 0x13d3, 0x3224, 0xcb0d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xe7, 0x0, 0x0, 0x20, 0x1, 0xd6}}]}}]}}, 0x0) executing program 4: socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) ptrace$ARCH_SET_GS(0x1e, 0x0, &(0x7f00000003c0), 0x1001) r0 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x62, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a0100002c2b0000000000000000000000000000000000fe8000000000000000000000000000aa06020201"], 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xf6, 0x40, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x45}}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/134, 0x86}], 0x1, 0x0, 0x0) r4 = socket(0x1e, 0x4, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r3, 0xc1004111, &(0x7f0000000480)={0x2, [0x7fff, 0x5, 0xe], [{0x3, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x0, 0x9, 0x1, 0x1, 0x0, 0x1}, {0xa19, 0x5}, {0x9, 0x9, 0x0, 0x1}, {0xc10, 0xd683, 0x1, 0x0, 0x0, 0x1}, {0x3, 0x6, 0x1, 0x0, 0x1, 0x1}, {0x1e46, 0x3, 0x0, 0x1}, {0x6d52, 0x92f, 0x0, 0x1, 0x0, 0x1}, {0x3, 0x8, 0x0, 0x1, 0x1, 0x1}, {0x5, 0x2, 0x1, 0x0, 0x1, 0x1}, {0x2, 0x3, 0x1, 0x1, 0x1, 0x1}, {0xfffffe00, 0x5, 0x0, 0x1, 0x1, 0x1}], 0x3}) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fa}, 0x10) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000180)="c4", 0x1}], 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r7 = dup(r6) faccessat2(r7, &(0x7f00000000c0)='./mnt\x00', 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="120000001a0035", 0x7) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r1], 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) dup(r9) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) program did not crash replaying the whole log did not cause a kernel crash single: executing 1 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-ioctl$sock_SIOCGIFINDEX-socket$inet_udp-openat$snapshot-io_uring_setup-syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100002ec6601037210100352a010203010902120001000000000904"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (fail_nth: 8) io_uring_setup(0x67d2, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x44, 0xe2, 0x20, 0x8, 0x13d3, 0x3224, 0xcb0d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xe7, 0x0, 0x0, 0x20, 0x1, 0xd6}}]}}]}}, 0x0) program crashed: possible deadlock in assign_fw single: successfully extracted reproducer found reproducer with 6 syscalls minimizing guilty program testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-ioctl$sock_SIOCGIFINDEX-socket$inet_udp-openat$snapshot-io_uring_setup detailed listing: executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100002ec6601037210100352a010203010902120001000000000904"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (fail_nth: 8) io_uring_setup(0x67d2, 0x0) program crashed: possible deadlock in assign_fw testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-ioctl$sock_SIOCGIFINDEX-socket$inet_udp-openat$snapshot detailed listing: executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100002ec6601037210100352a010203010902120001000000000904"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (fail_nth: 8) program crashed: possible deadlock in assign_fw testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-ioctl$sock_SIOCGIFINDEX-socket$inet_udp detailed listing: executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100002ec6601037210100352a010203010902120001000000000904"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet_udp(0x2, 0x2, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-ioctl$sock_SIOCGIFINDEX-openat$snapshot detailed listing: executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100002ec6601037210100352a010203010902120001000000000904"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (fail_nth: 8) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-socket$inet_udp-openat$snapshot detailed listing: executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100002ec6601037210100352a010203010902120001000000000904"], 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (fail_nth: 8) program crashed: possible deadlock in assign_fw testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-openat$snapshot detailed listing: executing program 0: socket$inet_udp(0x2, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (fail_nth: 8) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-socket$inet_udp-openat$snapshot detailed listing: executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100002ec6601037210100352a010203010902120001000000000904"], 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-socket$inet_udp-openat$snapshot detailed listing: executing program 0: syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (fail_nth: 8) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-socket$inet_udp-openat$snapshot detailed listing: executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (fail_nth: 8) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-socket$inet_udp-openat$snapshot detailed listing: executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100002ec6601037210100352a010203010902120001000000000904"], 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0) (fail_nth: 8) program did not crash extracting C reproducer testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-socket$inet_udp-openat$snapshot program crashed: possible deadlock in assign_fw simplifying C reproducer testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-socket$inet_udp-openat$snapshot program did not crash testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-socket$inet_udp-openat$snapshot program crashed: possible deadlock in assign_fw testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-socket$inet_udp-openat$snapshot program crashed: possible deadlock in assign_fw testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-socket$inet_udp-openat$snapshot program did not crash testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-socket$inet_udp-openat$snapshot program crashed: possible deadlock in assign_fw testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-socket$inet_udp-openat$snapshot program crashed: possible deadlock in assign_fw testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-socket$inet_udp-openat$snapshot program did not crash testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-socket$inet_udp-openat$snapshot program crashed: possible deadlock in assign_fw testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-socket$inet_udp-openat$snapshot program crashed: possible deadlock in assign_fw testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-socket$inet_udp-openat$snapshot program crashed: possible deadlock in assign_fw testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-socket$inet_udp-openat$snapshot program crashed: possible deadlock in dpm_for_each_dev a never seen crash title: possible deadlock in dpm_for_each_dev, ignore testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-socket$inet_udp-openat$snapshot program crashed: possible deadlock in assign_fw testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-socket$inet_udp-openat$snapshot program crashed: possible deadlock in assign_fw testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-socket$inet_udp-openat$snapshot program crashed: possible deadlock in assign_fw testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-socket$inet_udp-openat$snapshot program crashed: possible deadlock in assign_fw testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-socket$inet_udp-openat$snapshot program crashed: possible deadlock in assign_fw testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-socket$inet_udp-openat$snapshot program did not crash reproducing took 46m24.215248822s repro crashed as (corrupted=false): RBP: 00007fcec2c5a180 R08: 00007fcec2b7efa7 R09: 0000000000000038 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcec2b7f210 R13: 0000000000000001 R14: 00746f687370616e R15: 616e732f7665642f ============================================ WARNING: possible recursive locking detected 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 Not tainted -------------------------------------------- syz-executor355/5231 is trying to acquire lock: ffffffff8f293008 (fw_lock){+.+.}-{3:3}, at: assign_fw+0x56/0x890 drivers/base/firmware_loader/main.c:700 but task is already holding lock: ffffffff8f293008 (fw_lock){+.+.}-{3:3}, at: device_cache_fw_images drivers/base/firmware_loader/main.c:1519 [inline] ffffffff8f293008 (fw_lock){+.+.}-{3:3}, at: fw_pm_notify+0x232/0x2f0 drivers/base/firmware_loader/main.c:1572 other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock(fw_lock); lock(fw_lock); *** DEADLOCK *** May be due to missing lock nesting notation 5 locks held by syz-executor355/5231: #0: ffffffff8f145568 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 drivers/char/misc.c:129 #1: ffffffff8e7eb608 (system_transition_mutex){+.+.}-{3:3}, at: lock_system_sleep+0x60/0xa0 kernel/power/main.c:56 #2: ffffffff8e80bab0 ((pm_chain_head).rwsem){++++}-{3:3}, at: blocking_notifier_call_chain_robust+0xac/0x1e0 kernel/notifier.c:352 #3: ffffffff8f293008 (fw_lock){+.+.}-{3:3}, at: device_cache_fw_images drivers/base/firmware_loader/main.c:1519 [inline] #3: ffffffff8f293008 (fw_lock){+.+.}-{3:3}, at: fw_pm_notify+0x232/0x2f0 drivers/base/firmware_loader/main.c:1572 #4: ffffffff8f28e0a8 (dpm_list_mtx){+.+.}-{3:3}, at: device_pm_lock drivers/base/power/main.c:113 [inline] #4: ffffffff8f28e0a8 (dpm_list_mtx){+.+.}-{3:3}, at: dpm_for_each_dev+0x2b/0xc0 drivers/base/power/main.c:1961 stack backtrace: CPU: 1 UID: 0 PID: 5231 Comm: syz-executor355 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 Call Trace: __dump_stack lib/dump_stack.c:93 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:119 check_deadlock kernel/locking/lockdep.c:3061 [inline] validate_chain+0x15d3/0x5900 kernel/locking/lockdep.c:3855 __lock_acquire+0x137a/0x2040 kernel/locking/lockdep.c:5142 lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5759 __mutex_lock_common kernel/locking/mutex.c:608 [inline] __mutex_lock+0x136/0xd70 kernel/locking/mutex.c:752 assign_fw+0x56/0x890 drivers/base/firmware_loader/main.c:700 _request_firmware+0xd0a/0x12b0 drivers/base/firmware_loader/main.c:917 request_firmware drivers/base/firmware_loader/main.c:963 [inline] cache_firmware drivers/base/firmware_loader/main.c:1301 [inline] __async_dev_cache_fw_image+0xe7/0x320 drivers/base/firmware_loader/main.c:1415 async_schedule_node_domain+0xdc/0x110 kernel/async.c:221 async_schedule_domain include/linux/async.h:72 [inline] dev_cache_fw_image+0x36d/0x3e0 drivers/base/firmware_loader/main.c:1471 dpm_for_each_dev+0x58/0xc0 drivers/base/power/main.c:1963 device_cache_fw_images drivers/base/firmware_loader/main.c:1521 [inline] fw_pm_notify+0x24a/0x2f0 drivers/base/firmware_loader/main.c:1572 notifier_call_chain+0x19f/0x3e0 kernel/notifier.c:93 notifier_call_chain_robust kernel/notifier.c:128 [inline] blocking_notifier_call_chain_robust+0xe8/0x1e0 kernel/notifier.c:353 pm_notifier_call_chain_robust+0x2c/0x60 kernel/power/main.c:102 snapshot_open+0x138/0x280 kernel/power/user.c:87 misc_open+0x313/0x390 drivers/char/misc.c:165 chrdev_open+0x5b0/0x630 fs/char_dev.c:414 do_dentry_open+0x970/0x1440 fs/open.c:959 vfs_open+0x3e/0x330 fs/open.c:1089 do_open fs/namei.c:3727 [inline] path_openat+0x2b3e/0x3470 fs/namei.c:3886 do_filp_open+0x235/0x490 fs/namei.c:3913 do_sys_openat2+0x13e/0x1d0 fs/open.c:1416 do_sys_open fs/open.c:1431 [inline] __do_sys_openat fs/open.c:1447 [inline] __se_sys_openat fs/open.c:1442 [inline] __x64_sys_openat+0x247/0x2a0 fs/open.c:1442 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fcec2bd3f29 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 31 1e 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fcec2b7f208 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007fcec2c5a188 RCX: 00007fcec2bd3f29 RDX: 0000000000000001 RSI: 00000000200000c0 RDI: ffffffffffffff9c RBP: 00007fcec2c5a180 R08: 00007fcec2b7efa7 R09: 0000000000000038 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcec2b7f210 R13: 0000000000000001 R14: 00746f687370616e R15: 616e732f7665642f final repro crashed as (corrupted=false): RBP: 00007fcec2c5a180 R08: 00007fcec2b7efa7 R09: 0000000000000038 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcec2b7f210 R13: 0000000000000001 R14: 00746f687370616e R15: 616e732f7665642f ============================================ WARNING: possible recursive locking detected 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 Not tainted -------------------------------------------- syz-executor355/5231 is trying to acquire lock: ffffffff8f293008 (fw_lock){+.+.}-{3:3}, at: assign_fw+0x56/0x890 drivers/base/firmware_loader/main.c:700 but task is already holding lock: ffffffff8f293008 (fw_lock){+.+.}-{3:3}, at: device_cache_fw_images drivers/base/firmware_loader/main.c:1519 [inline] ffffffff8f293008 (fw_lock){+.+.}-{3:3}, at: fw_pm_notify+0x232/0x2f0 drivers/base/firmware_loader/main.c:1572 other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock(fw_lock); lock(fw_lock); *** DEADLOCK *** May be due to missing lock nesting notation 5 locks held by syz-executor355/5231: #0: ffffffff8f145568 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 drivers/char/misc.c:129 #1: ffffffff8e7eb608 (system_transition_mutex){+.+.}-{3:3}, at: lock_system_sleep+0x60/0xa0 kernel/power/main.c:56 #2: ffffffff8e80bab0 ((pm_chain_head).rwsem){++++}-{3:3}, at: blocking_notifier_call_chain_robust+0xac/0x1e0 kernel/notifier.c:352 #3: ffffffff8f293008 (fw_lock){+.+.}-{3:3}, at: device_cache_fw_images drivers/base/firmware_loader/main.c:1519 [inline] #3: ffffffff8f293008 (fw_lock){+.+.}-{3:3}, at: fw_pm_notify+0x232/0x2f0 drivers/base/firmware_loader/main.c:1572 #4: ffffffff8f28e0a8 (dpm_list_mtx){+.+.}-{3:3}, at: device_pm_lock drivers/base/power/main.c:113 [inline] #4: ffffffff8f28e0a8 (dpm_list_mtx){+.+.}-{3:3}, at: dpm_for_each_dev+0x2b/0xc0 drivers/base/power/main.c:1961 stack backtrace: CPU: 1 UID: 0 PID: 5231 Comm: syz-executor355 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 Call Trace: __dump_stack lib/dump_stack.c:93 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:119 check_deadlock kernel/locking/lockdep.c:3061 [inline] validate_chain+0x15d3/0x5900 kernel/locking/lockdep.c:3855 __lock_acquire+0x137a/0x2040 kernel/locking/lockdep.c:5142 lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5759 __mutex_lock_common kernel/locking/mutex.c:608 [inline] __mutex_lock+0x136/0xd70 kernel/locking/mutex.c:752 assign_fw+0x56/0x890 drivers/base/firmware_loader/main.c:700 _request_firmware+0xd0a/0x12b0 drivers/base/firmware_loader/main.c:917 request_firmware drivers/base/firmware_loader/main.c:963 [inline] cache_firmware drivers/base/firmware_loader/main.c:1301 [inline] __async_dev_cache_fw_image+0xe7/0x320 drivers/base/firmware_loader/main.c:1415 async_schedule_node_domain+0xdc/0x110 kernel/async.c:221 async_schedule_domain include/linux/async.h:72 [inline] dev_cache_fw_image+0x36d/0x3e0 drivers/base/firmware_loader/main.c:1471 dpm_for_each_dev+0x58/0xc0 drivers/base/power/main.c:1963 device_cache_fw_images drivers/base/firmware_loader/main.c:1521 [inline] fw_pm_notify+0x24a/0x2f0 drivers/base/firmware_loader/main.c:1572 notifier_call_chain+0x19f/0x3e0 kernel/notifier.c:93 notifier_call_chain_robust kernel/notifier.c:128 [inline] blocking_notifier_call_chain_robust+0xe8/0x1e0 kernel/notifier.c:353 pm_notifier_call_chain_robust+0x2c/0x60 kernel/power/main.c:102 snapshot_open+0x138/0x280 kernel/power/user.c:87 misc_open+0x313/0x390 drivers/char/misc.c:165 chrdev_open+0x5b0/0x630 fs/char_dev.c:414 do_dentry_open+0x970/0x1440 fs/open.c:959 vfs_open+0x3e/0x330 fs/open.c:1089 do_open fs/namei.c:3727 [inline] path_openat+0x2b3e/0x3470 fs/namei.c:3886 do_filp_open+0x235/0x490 fs/namei.c:3913 do_sys_openat2+0x13e/0x1d0 fs/open.c:1416 do_sys_open fs/open.c:1431 [inline] __do_sys_openat fs/open.c:1447 [inline] __se_sys_openat fs/open.c:1442 [inline] __x64_sys_openat+0x247/0x2a0 fs/open.c:1442 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fcec2bd3f29 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 31 1e 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fcec2b7f208 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007fcec2c5a188 RCX: 00007fcec2bd3f29 RDX: 0000000000000001 RSI: 00000000200000c0 RDI: ffffffffffffff9c RBP: 00007fcec2c5a180 R08: 00007fcec2b7efa7 R09: 0000000000000038 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcec2b7f210 R13: 0000000000000001 R14: 00746f687370616e R15: 616e732f7665642f