last executing test programs: 22m35.903101569s ago: executing program 32 (id=534): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$key(0xf, 0x3, 0x2) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x48) splice(r0, 0x0, r2, 0x0, 0x3000, 0x100000000000000d) 21m11.98153262s ago: executing program 33 (id=1207): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) r3 = fsopen(&(0x7f0000000580)='debugfs\x00', 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) 20m59.548057222s ago: executing program 34 (id=1268): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 20m35.00263318s ago: executing program 35 (id=1427): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002940), 0x2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000002c40)=0x7) r1 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x498, 0x1000, 0x3, 0x164}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/212, 0xd4}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 20m12.868255203s ago: executing program 36 (id=1589): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ac0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x20, 0x4}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 19m39.214989372s ago: executing program 37 (id=1827): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x41000, 0x8, 0x9, 0x3, 0xe4, 0x40, 0x9, 0x0, 0x2e, 0xd}, {0x41000, 0x1, 0xf, 0x0, 0x40, 0x4, 0x7d, 0x7, 0x58, 0x1, 0x3}, {0x50000, 0x200000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x9, 0x1, 0xab, 0x5, 0x81}, {0x6000, 0x26000, 0x3, 0x5d, 0x4, 0x42, 0x9, 0x2, 0x6, 0x7, 0xe}, {0x0, 0x9000, 0xb, 0x3, 0x3, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x1000, 0x0, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0xfd}, {0x40000, 0x2, 0x4, 0x5, 0x7, 0x2, 0x5, 0x0, 0x1, 0x82, 0xff, 0x70}, {0xd000, 0x1000, 0xa, 0x5, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0xeeef0000, 0x30}, {0x10000, 0x86}, 0x80000031, 0x0, 0x8000000, 0x42004, 0xb, 0x0, 0x3000, [0x6840000000000000, 0xd, 0x5e, 0x100]}) 18m53.505373436s ago: executing program 38 (id=2116): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000180)=@x86={0x3, 0x5, 0x81, 0x0, 0x9, 0xe, 0x5, 0x2, 0x1, 0x1, 0x6, 0x5, 0x0, 0x1af2, 0x3, 0x8, 0xf, 0xf4, 0x6b, '\x00', 0x5, 0x8}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x3, 0x100000008, 0x7f, 0x1, 0x0, 0x2, 0xfffffffffffff804, 0x0, 0x0, 0x0, 0x2000000000000, 0x7, 0x2, 0x1, 0x8], 0xeeef0000, 0x4fb40}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18m38.86184608s ago: executing program 39 (id=2198): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000002100)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x65, 0x67, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x14}, {[@noop]}}, {0x4e20, 0x4e20, 0x4d, 0x0, @gue={{0x1, 0x0, 0x3, 0x4, 0x100, @void}, "8258b5c4edf34699b4ab562474af296aaf5ed0f3cdea37e43938e9527650a4ec9d20c157ae657075b6ac125087026a6f5d5eb3f053c581ce52fb5d4cdb35c12b67"}}}}, 0x73) 16m56.719417916s ago: executing program 40 (id=2855): socket$can_raw(0x1d, 0x3, 0x1) r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008000200000000001400", @ANYRES64=r1], 0x38}}, 0x0) 15m33.135486483s ago: executing program 41 (id=3418): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140), 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xcc00}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0xfffffffffffffe63, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x6, 0x0, &(0x7f0000000a00)='\x00\x00\x00\x00\ao', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2402, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000000500)={0x66666666666666d, 0x0, [{0x80000001, 0x3, 0x1, 0x7fffffff, 0x9, 0x3, 0x4}, {0x7, 0xb, 0x6, 0x7f, 0xd11, 0x4, 0xfffffffe}, {0xd, 0x9, 0x1, 0x4, 0x80, 0x81, 0x2}, {0x2, 0x40, 0x5, 0x5, 0x2, 0x4, 0x1}]}) 13m56.984870404s ago: executing program 9 (id=3938): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x0) 13m56.025512891s ago: executing program 9 (id=3945): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 13m54.745246654s ago: executing program 9 (id=3952): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) write$FUSE_INIT(r1, &(0x7f0000000400)={0x50, 0x0, r2, {0x7, 0x1f, 0x1, 0xffffffff80099070, 0x0, 0x0, 0x5, 0x100000}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008280)="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", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x2, {0x5, 0x0, 0x7, 0x0, 0x20004, 0x2, {0x2, 0x6, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x1000, 0x1fe, 0x0, 0xee01}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 13m54.435990697s ago: executing program 9 (id=3956): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 13m53.351936605s ago: executing program 9 (id=3961): openat$panthor(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) syz_emit_vhci(&(0x7f00000016c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x5, 0x4}, {0x9, 0x200}}}}, 0x11) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000003c40)={0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x1, 0x0, 0x0}) syz_emit_vhci(&(0x7f0000003c80)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) 13m52.759972701s ago: executing program 9 (id=3963): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff8000edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0xb0, 0x0, 0x7, [{{0x4, 0x0, 0x9, 0x2, 0x18f3, 0x5, {0x1, 0x8000, 0x2, 0x7681, 0xffffffff, 0x1000, 0x6, 0x9, 0xffff8000, 0x6000, 0x8, r2, r3, 0x1e0, 0xf6}}, {0x6, 0x1, 0x1, 0x2f04a, '.'}}]}, 0x0, 0x0, 0x0}) getdents64(r4, &(0x7f0000000100)=""/134, 0x86) 13m51.893257148s ago: executing program 42 (id=3963): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff8000edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0xb0, 0x0, 0x7, [{{0x4, 0x0, 0x9, 0x2, 0x18f3, 0x5, {0x1, 0x8000, 0x2, 0x7681, 0xffffffff, 0x1000, 0x6, 0x9, 0xffff8000, 0x6000, 0x8, r2, r3, 0x1e0, 0xf6}}, {0x6, 0x1, 0x1, 0x2f04a, '.'}}]}, 0x0, 0x0, 0x0}) getdents64(r4, &(0x7f0000000100)=""/134, 0x86) 10m53.36489474s ago: executing program 2 (id=5001): ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0x0, 0x6, 0x2, 0x3, 0x1, "a23cfa355c349d2900", '\x00', "02050201", "50fb45c5", ["8b0b35cb03004900004000", "8e1500", "1c2a4d743c970f00", "ff81000000008000"]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0, 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10m52.85271078s ago: executing program 2 (id=5005): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0xffff, 0xfff1}, {0xffe8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000805}, 0x4041080) 10m52.275357887s ago: executing program 2 (id=5007): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0x40405515, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x83, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x8000]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="440f20c03507000000440f22c067420f8f04000000c443ad68b60080000095c4828947b600000000b99d090000b82f624a48baf4e055500f30263636f3430fc73636f2360fa5a10050aa37f39066b817018ec8c4c1795a5100", 0x59}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10m51.936358598s ago: executing program 2 (id=5011): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(r2, &(0x7f0000000040)='./file0\x00', 0x81001) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000002240)='./file0\x00', 0x2) 10m50.871979954s ago: executing program 2 (id=5019): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x28, 0x40, 0x107, 0xfffffffe, 0x10000, {0x1, 0x7c}, [@nested={0x4, 0x1142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x32, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x3af4701e) sendfile(r2, r0, 0x0, 0x10000a007) 10m50.691895316s ago: executing program 2 (id=5021): syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x8181) syz_open_dev$evdev(&(0x7f0000000000), 0xaa1, 0x101002) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10m50.203096395s ago: executing program 43 (id=5021): syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x8181) syz_open_dev$evdev(&(0x7f0000000000), 0xaa1, 0x101002) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9m49.775353313s ago: executing program 8 (id=5309): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xb0615}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) 9m48.566575202s ago: executing program 8 (id=5317): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$PPPIOCGIDLE32(r3, 0x8008743f, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000106000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85fe, 0x101, 0x0, 0x0, 0x0, 0x0, 0x23880, 0x5, 0x4, 0x100000000], 0x3000, 0x280384}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m47.443079543s ago: executing program 8 (id=5322): socket$netlink(0x10, 0x3, 0x14) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 9m44.719187056s ago: executing program 8 (id=5331): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 9m43.660945455s ago: executing program 8 (id=5337): socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$packet(0x11, 0x3, 0x300) epoll_create(0x100806) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000500)) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x18a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) 9m43.112950001s ago: executing program 8 (id=5341): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') getdents64(r0, &(0x7f0000002f40)=""/4097, 0x1001) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) 9m42.713412341s ago: executing program 44 (id=5341): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') getdents64(r0, &(0x7f0000002f40)=""/4097, 0x1001) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) 6m22.602701541s ago: executing program 5 (id=5992): socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xa0}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x7, 0x2}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 6m22.370141383s ago: executing program 5 (id=5995): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syslog(0x3, 0xffffffffffffffff, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1201, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x48000000, 0x0, 0x14, 0x0, 0x0, 0x0) syslog(0x9, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000100)={0x0, 0x2, 0x6, 0xffffffffffffffff}) poll(&(0x7f00000000c0)=[{r2, 0x1040}, {r1, 0x2187}], 0x2, 0x3ff) 6m18.48290413s ago: executing program 5 (id=6008): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@local, 0x8000, 0xff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4000000000000001, 0xffffffffbffffffb}, {0x4, 0x2, 0x2, 0xc9f7}, 0x800, 0x0, 0x0, 0x0, 0x6}}, 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r2 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x1aa) getdents64(r4, &(0x7f0000004440)=""/4096, 0x1000) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x400000, 0x0, 0x9, 0x0, 0x0, 0x2, 0x2}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 6m16.773451118s ago: executing program 5 (id=6011): mkdir(0x0, 0x83) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x14) 6m14.243980977s ago: executing program 5 (id=6016): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x6c80effe, 0x3, 0x3, 0x410, 0x5, 0x6}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xe, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x84e56105723e644b}, @TCA_TBF_BURST={0x8, 0x6, 0x20000000}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x2, 0xa, 0x4}, {0x9c, 0x0, 0x7, 0x1, 0x6, 0x5}, 0x6, 0x71d, 0xa74}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 6m13.07761604s ago: executing program 5 (id=6018): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0xbb) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0xc048aec8, &(0x7f0000000700)={0x6, 0x0, @ioapic={0x4, 0x2, 0x100, 0x3, 0x0, [{0x1, 0x4, 0x5, '\x00', 0x81}, {0x7, 0x45, 0x0, '\x00', 0x7f}, {0x4, 0x5, 0x2, '\x00', 0x1}, {0xc6, 0x4, 0x3, '\x00', 0xf5}, {0x4, 0x0, 0xd, '\x00', 0x7}, {0x3, 0x5, 0x3e, '\x00', 0xa}, {0x81, 0x7, 0x5, '\x00', 0x9}, {0x1, 0xe, 0x6}, {0x6, 0x9, 0xf}, {0x6, 0x9, 0x2, '\x00', 0x5}, {0x4, 0x10, 0xc, '\x00', 0x4}, {0x1, 0x4, 0x0, '\x00', 0x3}, {0x4, 0x0, 0xde, '\x00', 0x80}, {0x2, 0x16, 0x40, '\x00', 0x9}, {0x80, 0x9, 0x6, '\x00', 0x49}, {0x2, 0x5, 0xa, '\x00', 0x4}, {0x60, 0x3, 0x5, '\x00', 0xb}, {0x16, 0x1, 0x9, '\x00', 0xfe}, {0x8c, 0x3, 0x7f}, {0x9, 0x0, 0x3, '\x00', 0x7}, {0x92, 0x4, 0xff, '\x00', 0x2}, {0x9, 0x10, 0x4, '\x00', 0x7}, {0x6, 0x9, 0x1}, {0x40, 0x0, 0x7, '\x00', 0xe}]}}) syz_usb_control_io$printer(r1, 0x0, 0x0) 6m12.086727589s ago: executing program 45 (id=6018): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0xbb) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0xc048aec8, &(0x7f0000000700)={0x6, 0x0, @ioapic={0x4, 0x2, 0x100, 0x3, 0x0, [{0x1, 0x4, 0x5, '\x00', 0x81}, {0x7, 0x45, 0x0, '\x00', 0x7f}, {0x4, 0x5, 0x2, '\x00', 0x1}, {0xc6, 0x4, 0x3, '\x00', 0xf5}, {0x4, 0x0, 0xd, '\x00', 0x7}, {0x3, 0x5, 0x3e, '\x00', 0xa}, {0x81, 0x7, 0x5, '\x00', 0x9}, {0x1, 0xe, 0x6}, {0x6, 0x9, 0xf}, {0x6, 0x9, 0x2, '\x00', 0x5}, {0x4, 0x10, 0xc, '\x00', 0x4}, {0x1, 0x4, 0x0, '\x00', 0x3}, {0x4, 0x0, 0xde, '\x00', 0x80}, {0x2, 0x16, 0x40, '\x00', 0x9}, {0x80, 0x9, 0x6, '\x00', 0x49}, {0x2, 0x5, 0xa, '\x00', 0x4}, {0x60, 0x3, 0x5, '\x00', 0xb}, {0x16, 0x1, 0x9, '\x00', 0xfe}, {0x8c, 0x3, 0x7f}, {0x9, 0x0, 0x3, '\x00', 0x7}, {0x92, 0x4, 0xff, '\x00', 0x2}, {0x9, 0x10, 0x4, '\x00', 0x7}, {0x6, 0x9, 0x1}, {0x40, 0x0, 0x7, '\x00', 0xe}]}}) syz_usb_control_io$printer(r1, 0x0, 0x0) 5m26.551604125s ago: executing program 3 (id=6147): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="3b76210fb6150f209e440f20c0663503000000440f22c00fa2660fc7b2d42af30fa7d0440f20c066350d000000440f22c06767f2caab12bad004ec", 0x3b}], 0x1, 0xd, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000080)={0x10000, 0x14000}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x10583a, 0x5, 0xa, 0x4000000000, 0x6, 0x2, 0x1041, 0x4, 0x7, 0x8000000000000000, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0xbe3, 0x6a], 0xeeee8000, 0x1000d6}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000) 5m24.943725591s ago: executing program 3 (id=6151): socket$inet6(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 5m24.024882032s ago: executing program 3 (id=6155): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000940)='A\xf9\xaf\xc2\xea\xe2\xc0\xe1\x8f.<#pk\x87\xf4s\xe5\xe5\x00\x00\x00\x00\'\x02\x82\x86\x17\xd6\x8ck\x9cx\xbe\v[\xc6\xcc\xd4B', &(0x7f0000000ac0)='%*.\x01\xdf\x16ec\r\x04\x00\x89\xc3\x1f\xfe\xb3?1\bO\xb5\xea~8\xac\xfb\x8e\xd5\x83x\xfe\xc2N\x0f\xc6\xc3\x80R\xab\xe3\xc2(nk\xaa\x81\xd7v\x84\x97paz\x1d\x15\xa6\x8cE\x00&\x15\xf7C\xc0\xb3\xd5e\x961\tM\x96d\xd7\xcb\x12\t\xfbD\xae\xf6}\xa2X6\x195-B\xe56f\xa3\x19\xa1\x14\xa5\x1d\xd9AV\xc0\xa2\xd8\xd1\xe6[v;mL\xf0\xa4\x94\x81\xd6\x8d\xb8\x99\xbb#\xb9\vtN\xca\xab\xda=\xf6\x93\xbbq\ah 8\xa7Or\x00@\x1e\'WoVF\xc5\xdc/)r\x8c\xa99\xa6\xc7\'sKZ\xc6\xc3\xber\xe0G2m\x13W\xf4g\xbfK\xd5\xb6\xf4|Iy\xc4\xfdu\xf8\'e\x01\xd6\xdc\x1b\x1a\xdc\xb0\x87\rW\xaf\na\x8d\xec\xac\\N\xf4\xd5\xe5\xa7\xb8=\x84\xe2\xfa\xc7k\x15\xd5u\xa2E\xe5\x9a\x89M\xb3\xff2f\xd1\xfbK^:\xd2`\x8bk\xb5pw0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8001, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044060}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 5m23.159725307s ago: executing program 3 (id=6161): r0 = memfd_create(&(0x7f00000000c0)=',\xea\xc9t\x8b\xb7\x04\x1d^s^\t5\xa1i\x01\x00\xd4\xd7\x02\x8dmbs\x0f3\x92\'\x94N\b\xe0m\xa4\x01\x00\xe5\x00\x00\x00\x00\x00-\xb3\x8d\xa1v\xe5\x8a0\x05\x00\xa4\xed\x94 \x15Y\x1f\xccY\xff\xb4\xa2\xa62:\xfa\xf9\xb7\x05q\xa4d\xda0y\xd3\xd6\x98\x9f\x11\n\xf44Q\xff\xff)\xb3|\x04\x00\x00\x80FD\xb8\xc2\x8a\x99Y\xf6:\xfeT\xa1', 0x4) ftruncate(r0, 0x7000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x8b28, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x41000, 0x8, 0x9, 0x3, 0xe4, 0x40, 0x2c, 0x0, 0x30, 0x19, 0xe0}, {0x41000, 0x3000, 0xe, 0x0, 0x40, 0x5, 0x7d, 0x8, 0x58, 0x3, 0x3, 0x1}, {0xdddd1000, 0x3000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x9, 0x1, 0xab, 0x5, 0x81}, {0x6000, 0x26000, 0x3, 0x5d, 0x4, 0x42, 0x9, 0xff, 0x6, 0x7, 0xe}, {0x0, 0x9000, 0xb, 0x1, 0x3, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x80a0000, 0x9, 0xa0, 0xb1, 0x8, 0x1, 0x2, 0x80, 0xf, 0x1, 0xfd}, {0x3000, 0x2, 0x4, 0x5, 0x7, 0x2, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0xeeef0000, 0x30}, {0x10000, 0x86}, 0x80000031, 0x0, 0x8000000, 0x42024, 0xb, 0x0, 0x3000, [0x6840000000000000, 0x3, 0x5e, 0xff]}) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x3, 0x0, 0x0) r5 = dup(r0) read$FUSE(r5, &(0x7f0000000140)={0x2020}, 0x2020) 5m22.471787064s ago: executing program 3 (id=6163): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0xffffffff, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x100000001}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b826, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x6691}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040e0}, 0x2880) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0x9c, 0x6, @random="48802e59d488"}, 0x14) 5m7.436730528s ago: executing program 46 (id=6163): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0xffffffff, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x100000001}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b826, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x6691}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040e0}, 0x2880) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0x9c, 0x6, @random="48802e59d488"}, 0x14) 11.603439444s ago: executing program 7 (id=6939): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b7060000000000012e400300000000006506020001cd00007118540000000000c3640010010000006b0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e6191a12bebf9f9804ea033388cd15b65877ad4b200000000000000000beca090f32050e436fe275daf51efd601b6bf01c8e8b1abe4fef3bef7074815ae98743d1ace4c46631256dd19aed0d600c0b6199fe3ff3128e599b0eaebbdbd7359a48f5b0afc3996792043a6787bac46aa7aa400000000000069669622208266f896ba2c9e73c2efeec2dc565fbafb2cb63f5fef9ab79ff8abaa8a08f54a062107e9bb3e980fff675c8d3e91df6648a7a6aebcb63e0867b75690152af27711f0cbb9c06018d21bf3f87b8eb65323b4267a526d53442db8e48dbc5ce47d67d07441a7975d5e41b14fd0154a8246249952a8b61633ce068220defe09d3b1136af6d03e9cf996c13d1bfcdc54567a9ca80dec2e943fe4ae7c617cc071f7add70cfbd48f8f6b50fe6a8297d88efa73e7e601040000b4a685969f28902bdecf66ef39755de79ed2c711477febc96231a53984d00877301d0ec62427a8e38618fdd1ce9aaed569ebc5f2e58d6028e66139a737cc7146a131d47dcebb32ed67021d76e983223c998aec22242ae54e87f438d26982876b58f9134366952f7399a733f07138a736924f3709000000e97f0c117ec439c6b7b965752bbc06eced08d97a32ae4b1ad4d11c5b6f68ee841975233e4cea13f3ef04b2cab9cc256d4539dbafd888c7097c1169e0bebcc81ca3da40bf34b6c9c1da2d6ed8acaf2a8091820ff4cf6be74ddca8bf2eed0e11b2139e8c3ec95436af5269d5792decda7d8b5dcf8640b504ba23c6d0a7f67cdfd27328100ebf9319a56f0f9cee17deecf747f3493f1dc39551f4c9a40b3e93fa80b8234ccbf39a9ef09bd97321f0dc20956f44ba2c5ec2e7569b05cf4690ddc189f174046a8b214acf23f42fb51ed4819e6b4cb5a8bf2b559d0c198fe0315483b8beb9801d06c58b22dd713fe3b7ef18e21081aacfd091b754125a488cea18255f79bebcb3051f622f8a1d9af1908e88a58774a24f35a4ccdbedea6212286c23dd89c2b4b90647f17231472af8dda7f3ab20f093aad3ce875f7458039ee6d0a50deb7bc8eb393f056a5e7725531c5485278e0362338e2e2710fe00465e0d182a322091022cf5b814eeb9b3cab21196581e4d92d0b6fe5525285eea359274f1f21d69233bbe94941f10ba292100000000000000000000000000000000c18e93a0c5231779f2ee201e9fe7e63e84b57b5f05ecd278919bad330ffcb594b8255b3085b352ca9533d6c31c1a30158c30352f8a126a65cb6582e58aa641007418611df53a601c3a8fb8d2286e86abf98136f345446730f68f5d6d1817a9e1b09e5650d2599fbe719a45337d29eb3fef5f7f565457660dec6fe903a1c2ea4f40a8ea1c179892afa219fc69a44163f0d731de418e9fd82a8c4661caea674b19242d1840d047882f640ea248457288c5ffb63e857da03ff5c0475c3cfff41c4806f1dc750eb1c45ec3a2a0b064834010604d6f88a29e8e9bda2bc9c18d1b53a08f25d62ccaa46bc0235c830a7b3fe64bc6031b431bcad6b698a1ba6027870ea9e55fafbbf140c5f82a33ee4ac793b989c12a5827a7957f4d8136cf918b7cbf5bc5fc64c8001992536584586edded6f65bdd371ac84fd5cc60ab79b84e9e85a1c54d5666a5d133e95eff121621dff14b9de7a188b8c5387f9da63c2cce405bc44079e34e2db2b275bfbb54841d647338cad74be91144b780cf381a6860f641446ef73bd11d45f5e4df8f3c6440d8425fd7382225cf8c2cada01bf3cd5cbc6a403173e0c89a491c75efc3c21b7825a521c6011945eef94abc3000000000000000000000000000000d71b794e9b4c145caf050429937eef4364d9e1cbe9150bccd9b2e73757f1f5e8ac50736cd3cbc029ede2869642841371bb4b9c1aaa8826889a909e6716b60e4b568b6761f8ccc7d35b0e66357746b10fc481b47e67f1e14408c1ef3e018a5e647e3f607654f3bf82bcfb42be038a272d82f8362944f608b3810000000019fda0b1b607f1ab34194ed954973f7a5accc0938d3364ab07574d0b32fc30f3ab73d012b63ee905e98ab6989ec2c840cd216eb18fedfb3b204e94e170bae930660368d3799c9b1bf7556ac57164966791626f06ad2e332341965f72141ec140b80efd7720ccdaa890b79bc4523386bd66553121543c9a35b7adcf2f6b257fefef1d6e1da2ee94d3f822bf45aad21e5b5a3788ab584090664065af39b0f43968dcd7c5f8e5a8dc6298691423fbf7e8e012260bc62f9422434a547ef7ca37953d435098d9b71edd1a03e46d0ade465d0c0db0a51f9e29cac05e5a04f94e"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000100010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x24004005}, 0x0) syz_emit_ethernet(0xa7, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa170800924500009900000000fd019078ac1e0001ac1414aa03009078032400004f0000000000000003010000ac1414bbac141436865c00080000000ce256b28c4cdfb7fd41fe04000000fb520009789607675ca6380006e706d30af005cfa11c0510c600000000000000000000000a65807fe97612fe86001273bc2300ad9d19a30000000000000000060ac8f46976e79e56c7860c00000202359bdea14b9b616f51c3854064b9c33d13093d13caa68c8c3759bb3881d9cda963ed5bc95c91b2b4d58310cfcadeacf58b626c925f5bdf000000000000000000"], 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064d0, &(0x7f0000000140)={0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f0000001340)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) 10.920310704s ago: executing program 6 (id=6944): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x1, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000440)=0xfff7fffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) r3 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x6, r3, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40010000}) r4 = syz_io_uring_setup(0x64d, &(0x7f0000000100)={0x0, 0x11f8, 0x8, 0x2, 0x801e7}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r4}) io_uring_enter(r4, 0x749d, 0x4, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) 10.231949342s ago: executing program 6 (id=6947): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x103902, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_usb_connect(0x0, 0x12, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x102, 0x0) dup(0xffffffffffffffff) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x2a11, 0x400, 0x1, 0x40000335}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) writev(0xffffffffffffffff, &(0x7f0000000240), 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 9.643074335s ago: executing program 0 (id=6948): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf09010000000400"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x23635de98487b93e) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/bus/input/handlers\x00', 0x1800, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000080)=""/228, 0xe4}], 0x1, 0x7, 0x9) 8.227355385s ago: executing program 7 (id=6950): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x145, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x4000804) sched_setattr(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='stack \\\x00'], 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f000047a000/0x3000)=nil, 0x3000, 0x300000e, 0x1010, 0xffffffffffffffff, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) syz_io_uring_setup(0x1000bdc, &(0x7f0000000640)={0x0, 0xec25, 0x10, 0x2, 0x203}, &(0x7f00000006c0), 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x124}}, 0x0) 8.052264087s ago: executing program 0 (id=6951): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xfffffffe) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019100)='net/udp6\x00') openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f00000004c0)=""/205) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "48b603de"}]}}, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0xc04c5349, &(0x7f00000000c0)={0x0, 0x10000, 0x2}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 7.597838524s ago: executing program 6 (id=6952): socket$nl_route(0x10, 0x3, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000900), 0x10, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000000)={0x14, 0x1}) r1 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r2 = syz_io_uring_setup(0xb77, &(0x7f0000000340)={0x0, 0xe824, 0x800, 0xffffffff, 0x3ce, 0x0, r1}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) syz_usb_connect(0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x10d3, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0xfffffffe, 0xd3}, &(0x7f00000000c0)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000100)) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 7.289123107s ago: executing program 1 (id=6953): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 5.85725882s ago: executing program 4 (id=6954): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xa406}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) close_range(r0, 0xffffffffffffffff, 0x0) 5.681996013s ago: executing program 1 (id=6955): syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$pptp(0x18, 0x1, 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000380)={0x0, 0x1, 0xbe}) close_range(r1, 0xffffffffffffffff, 0x0) 5.433483235s ago: executing program 7 (id=6956): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) 5.301990843s ago: executing program 1 (id=6957): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) getpeername$l2tp(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @private=0xa010101, 0x4e24, 0x1, 'none\x00', 0x5, 0x32bd, 0x9}, {@loopback, 0x4e25, 0x2, 0xfffffffe, 0x8, 0x12d5c}}, 0x44) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sync_file_range(r5, 0x7fff, 0x5, 0xf) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.273306888s ago: executing program 4 (id=6958): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r1}, &(0x7f0000000880)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x1083}, 0x1}) io_uring_enter(r2, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x8000000002}) fcntl$lock(r5, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) 5.217441181s ago: executing program 7 (id=6959): socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x45c, 0x40103) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) io_uring_setup(0xc71, 0x0) connect$unix(r0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffde6}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 5.124471413s ago: executing program 0 (id=6960): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x62c546b5a29e835}, {0xffff, 0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$unix(0x1, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 4.049839451s ago: executing program 0 (id=6961): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000003080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x8000, {0x0, 0x0, 0x0, r6, {0x5, 0xffff}, {}, {0x10}}, [@TCA_CHAIN={0x8, 0xb, 0x101}, @filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0xc010) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003040)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) 3.862203145s ago: executing program 6 (id=6962): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x145, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) sched_setattr(0x0, 0x0, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x480) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 3.041410489s ago: executing program 0 (id=6963): socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000100)="91641a", 0x3}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0}}], 0x2, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 2.600449829s ago: executing program 7 (id=6964): openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/diskstats\x00', 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000600)={0x0, 0x0, 0x54}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000290000002400001173988d5399ede141bc3400000000000000000000000000000b258e10d318589d221387229e20b7ebc577dadee20e46ed696b2ce809c3b5229d55be"], 0x30}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.449551863s ago: executing program 1 (id=6965): r0 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r0, 0x2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x40, 0x7, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x8000, 0x8, 0x2, 0x7}}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_AIE_ON(r1, 0x7001) ioctl$RTC_AIE_OFF(r1, 0x7002) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x11, &(0x7f0000000000)=0x7f, 0x4) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {0xffffffffffffffff, r4, 0x2}}, 0x18) ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f00000003c0)={0x8000001, 0x0, '\x00', {0x0, @bt={0x9, 0x10001ff, 0x4, 0x3, 0x8000000000000001, 0x1, 0x8, 0x6000005, 0x8, 0x8, 0x1, 0x9, 0x1, 0x7c, 0x10, 0x1d, {0x7, 0xd}, 0x1, 0x9}}}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000003200)={'ip6_vti0\x00', &(0x7f0000003180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) socket$can_bcm(0x1d, 0x2, 0x2) syz_emit_ethernet(0x46, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x8000, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x32, 0x0, @private, @remote}, '\b\x00\x00\x00\x00\x00 \x00'}}}}}, 0x0) 2.028089166s ago: executing program 1 (id=6966): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socket$kcm(0x10, 0x2, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2b00, 0x0) ppoll(&(0x7f0000000140)=[{r3, 0x4000}], 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f00000000c0)=@fd={0x2, 0x9, 0x4, 0x100, 0x5, {}, {0x3, 0xc, 0x3, 0x2, 0x2, 0x4, '<3`L'}, 0xaf, 0x4, {}, 0x67a80000, 0x0, r3}) write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e24, 0x2, @mcast2, 0x20000005}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1.456972101s ago: executing program 4 (id=6967): syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$pptp(0x18, 0x1, 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000380)={0x0, 0x1, 0xbe}) close_range(r1, 0xffffffffffffffff, 0x0) 1.348963852s ago: executing program 7 (id=6968): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r1}, &(0x7f0000000880)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x1083}, 0x1}) io_uring_enter(r2, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x8000000002}) fcntl$lock(r5, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000200)={0x1, 0x0, 0x81, 0xce}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) 1.149616505s ago: executing program 4 (id=6969): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) 1.100721173s ago: executing program 6 (id=6970): socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket(0x2000000000000021, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0xa, 0x5, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 904.859552ms ago: executing program 4 (id=6971): openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/diskstats\x00', 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000600)={0x0, 0x0, 0x54}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000290000002400001173988d5399ede141bc3400000000000000000000000000000b258e10d318589d221387229e20b7ebc577dadee20e46ed696b2ce809c3b5229d55be"], 0x30}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 893.586096ms ago: executing program 6 (id=6972): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000540)='-B\xd5NI\xc5j\x9appp\xf0\n\x84\xae\n\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1\x03\x00\x00\x00\xe3LS\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh\x9c\xea\xc9\x01c\x10d\xee\xa9\x1a\xcaR\xcf\xbcs\x86\xdf\xb9\xb9\x12\x8b\x04\xa3\xbd\xf2C\x93\xb8\x9a\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xd0\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04(\xcc\xce\x8b\x19\xea\xef\x17d\xc7d\xc5\xfa\b<\xe3?ip\x9dX4U\xd70\xfdM1\x17\xe1G\x81\xd1\x84\v{\x16\xcc7\xd8fP\x12\x0e\xe07)[;\xa4\xc1\x05S\xf9~\x8e7\xa8sKkR\x16\aA\x9a\xf4\x1a\x01\xe5vm\x18&\x8f.\x87\a\xde\xd7M\xda\xa1\xa2b\x0f)\xd0\xf1\x02;\x01\xd5\x94gD\x87\xd3E\xcf!\xf8K\xa4\xee\xb7rS\x8e\xbc`;\xb8\x8er\xe1\xb2\x8b\xb9wN\x87\xad\xd1W\xa7\xe7\xff_&\bv\xb46\xf6\x89\t\x1d\x8b@\xd63\x1d\x80\\\xef\xd0g`\xc6\xaem\n', 0x6) ppoll(&(0x7f0000000080)=[{r0, 0x200}], 0x1, 0x0, 0x0, 0x0) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x4800104c, r2, 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) sched_setaffinity(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x80000) epoll_create1(0x0) eventfd2(0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@deltclass={0x24, 0x29, 0x329, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x4}, {0xfff3, 0x10}, {0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x10) r4 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000000), 0x8000, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e11", @ANYRES64=r4], 0xfc) 487.136131ms ago: executing program 0 (id=6973): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) openat$audio1(0xffffffffffffff9c, 0x0, 0x100, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) 358.218435ms ago: executing program 4 (id=6974): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e24, 0x8c, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffcb91}}, 0x0, 0x0, 0xc, 0x0, "3f114438efdaca16d374b49a08003535d5bd9db3c8572560f4d1be5cd41f771666fd81baadb27900"}, 0xd8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) pipe2$9p(0x0, 0x80180) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023893) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x21, 0xc, 0x0, 0x75, 0x81, 0x10, 0x0, 0x0, 0x82, 0x9, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xff, 0x0, '\x00', 0x7}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 1 (id=6975): socket(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffe, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x4, 0xfffffffffffffffd, 0x0, 0xf3, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x6, 0x0, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3486, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800000, 0x0, 0x101, 0x0, 0xd721, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79a2, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4a44e74b]}) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000300)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f0000000880)=""/99, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0xfffffffe) kernel console output (not intermixed with test programs): >, priority 0 [ 1220.843575][T27527] tipc: Resetting bearer [ 1221.264239][T27527] tipc: Disabling bearer [ 1221.529384][T25294] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.533284][T27544] netlink: 'syz.0.6236': attribute type 10 has an invalid length. [ 1221.649403][T27544] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1222.328133][T25294] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.402321][T25294] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.445464][T27576] netlink: 'syz.0.6241': attribute type 10 has an invalid length. [ 1224.709896][T27576] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1224.820455][T27580] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1224.915908][T25294] bridge_slave_1: left allmulticast mode [ 1224.940660][T25294] bridge_slave_1: left promiscuous mode [ 1224.954712][T25294] bridge0: port 2(bridge_slave_1) entered disabled state [ 1225.285894][T25294] bridge_slave_0: left allmulticast mode [ 1225.309556][T25294] bridge_slave_0: left promiscuous mode [ 1225.322285][T25294] bridge0: port 1(bridge_slave_0) entered disabled state [ 1225.677002][ T5921] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 1225.988548][ T5921] usb 1-1: not running at top speed; connect to a high speed hub [ 1225.998096][ T5921] usb 1-1: config 68 has an invalid interface number: 25 but max is 0 [ 1226.009576][ T5921] usb 1-1: config 68 has no interface number 0 [ 1226.015902][ T5921] usb 1-1: config 68 interface 25 has no altsetting 0 [ 1226.171678][ T5921] usb 1-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice=8a.8c [ 1226.193571][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.204562][ T5921] usb 1-1: Product: syz [ 1226.215749][ T5921] usb 1-1: Manufacturer: syz [ 1226.226849][ T5921] usb 1-1: SerialNumber: syz [ 1226.233814][T25294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1226.284510][T25294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1226.326375][T25294] bond0 (unregistering): Released all slaves [ 1226.760776][ T5921] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:68.25/input/input92 [ 1227.416163][ T5174] bcm5974 1-1:68.25: could not read from device [ 1227.701798][ T5921] usb 1-1: USB disconnect, device number 52 [ 1227.701891][ T5174] bcm5974 1-1:68.25: could not read from device [ 1227.757285][ T5174] bcm5974 1-1:68.25: could not read from device [ 1227.916215][T25294] hsr_slave_0: left promiscuous mode [ 1228.024965][T25294] hsr_slave_1: left promiscuous mode [ 1228.064999][T25294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1228.109301][T25294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1228.241623][T25294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1228.379533][T25294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1228.648498][T25294] veth1_macvtap: left promiscuous mode [ 1228.654117][T25294] veth0_macvtap: left promiscuous mode [ 1228.683744][T25294] veth1_vlan: left promiscuous mode [ 1228.701821][T25294] veth0_vlan: left promiscuous mode [ 1229.426999][T27633] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.6251'. [ 1230.461804][T25294] team0 (unregistering): Port device team_slave_1 removed [ 1230.564585][T25294] team0 (unregistering): Port device team_slave_0 removed [ 1231.581195][T27632] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6251'. [ 1231.620666][T27650] bond_slave_1: entered promiscuous mode [ 1231.631502][T27650] bond_slave_1: left promiscuous mode [ 1231.776886][T27318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1231.843937][T27318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1232.216273][T27318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1232.237565][T27318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1232.673758][T27318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1232.714165][T27318] 8021q: adding VLAN 0 to HW filter on device team0 [ 1232.732617][T25294] bridge0: port 1(bridge_slave_0) entered blocking state [ 1232.739779][T25294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1232.968161][T25294] bridge0: port 2(bridge_slave_1) entered blocking state [ 1232.975303][T25294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1233.317425][T27318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1233.467029][T27318] veth0_vlan: entered promiscuous mode [ 1233.489111][T27318] veth1_vlan: entered promiscuous mode [ 1233.594778][T27318] veth0_macvtap: entered promiscuous mode [ 1233.611007][T27318] veth1_macvtap: entered promiscuous mode [ 1233.670279][T27318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1233.703615][T27318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1234.188512][T25294] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.211441][T25294] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.969876][T25294] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.018168][T25294] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.774497][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1235.824640][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.964907][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1235.982680][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1236.323689][T27733] syzkaller0: entered promiscuous mode [ 1236.363608][T27733] syzkaller0: entered allmulticast mode [ 1236.789399][T27737] syzkaller0: entered promiscuous mode [ 1236.796197][T27737] syzkaller0: entered allmulticast mode [ 1238.504273][T19073] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 1238.570471][T27762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6269'. [ 1238.648620][T27762] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6269'. [ 1238.660758][T27762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6269'. [ 1238.729879][T19073] usb 5-1: not running at top speed; connect to a high speed hub [ 1238.822261][T19073] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1238.865144][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.874933][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.896160][T19073] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1238.936030][T19073] usb 5-1: config 1 has no interface number 1 [ 1238.942232][T19073] usb 5-1: config 1 interface 2 has no altsetting 0 [ 1239.037789][T19073] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1239.070229][T19073] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.136181][T19073] usb 5-1: Product: syz [ 1239.156135][T19073] usb 5-1: Manufacturer: syz [ 1239.160812][T19073] usb 5-1: SerialNumber: syz [ 1239.487919][T19073] usb 5-1: selecting invalid altsetting 0 [ 1239.502953][T19073] usb 5-1: failed to enable PITCH for EP 0x82 [ 1239.539189][T19073] usb 5-1: selecting invalid altsetting 0 [ 1239.973753][T27779] kernel profiling enabled (shift: 5) [ 1239.998198][T19073] usb 5-1: USB disconnect, device number 78 [ 1240.043109][T27781] binder: 27776:27781 ioctl c0306201 0 returned -14 [ 1240.146074][T18761] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1240.169839][T27456] udevd[27456]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1240.388373][T18761] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1240.406142][T18761] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1240.418448][T18761] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1240.428777][T18761] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1240.477083][T18761] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1240.508304][T18761] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.545387][T18761] usb 7-1: config 0 descriptor?? [ 1241.309878][T18761] plantronics 0003:047F:FFFF.0040: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1241.346189][ T5921] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1241.598004][ T5921] usb 2-1: Using ep0 maxpacket: 32 [ 1241.682990][ T5921] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1241.715112][ T5921] usb 2-1: config 0 has no interfaces? [ 1241.727040][ T5921] usb 2-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=58.d6 [ 1241.756215][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.811902][ T5921] usb 2-1: Product: syz [ 1241.881466][ T5921] usb 2-1: Manufacturer: syz [ 1241.914776][ T5921] usb 2-1: SerialNumber: syz [ 1241.949822][ T5921] usb 2-1: config 0 descriptor?? [ 1242.144308][ T5921] usb 7-1: USB disconnect, device number 32 [ 1243.660456][T27658] usb 2-1: USB disconnect, device number 33 [ 1244.695132][T27846] syzkaller0: entered promiscuous mode [ 1244.741434][T27846] syzkaller0: entered allmulticast mode [ 1245.980237][T27869] mac80211_hwsim hwsim47 syzkaller0: entered promiscuous mode [ 1245.988225][T27869] mac80211_hwsim hwsim47 syzkaller0: entered allmulticast mode [ 1248.336111][T18761] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1248.496093][T18761] usb 5-1: Using ep0 maxpacket: 16 [ 1248.879639][T18761] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 1248.909882][T18761] usb 5-1: config 0 has no interface number 0 [ 1249.046130][T18761] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1249.143604][T27908] loop7: detected capacity change from 0 to 16384 [ 1249.164498][T18761] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1249.390598][T18761] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1249.436131][T18761] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.658951][T18761] usb 5-1: Product: syz [ 1249.679519][T18761] usb 5-1: Manufacturer: syz [ 1249.698473][T18761] usb 5-1: SerialNumber: syz [ 1249.792236][T18761] usb 5-1: config 0 descriptor?? [ 1249.806491][T27896] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1249.815078][T27896] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1250.056225][T27913] loop7: detected capacity change from 16384 to 16383 [ 1250.094708][T27896] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1250.156302][T27896] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1250.416718][T27913] Dev loop7: unable to read RDB block 8 [ 1250.458118][T27913] loop7: unable to read partition table [ 1250.464291][T27913] loop_reread_partitions: partition scan of loop7 ((õÉê—) failed (rc=-5) [ 1252.162542][T18761] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1252.595822][T18761] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0002: -71 [ 1252.738684][T18761] asix 5-1:0.251 (unnamed net_device) (uninitialized): Could not register MDIO bus [ 1252.813766][T18761] asix 5-1:0.251: probe with driver asix failed with error -5 [ 1252.907665][T18761] usb 5-1: USB disconnect, device number 79 [ 1253.700810][T27975] syzkaller0: entered promiscuous mode [ 1253.711378][T27975] syzkaller0: entered allmulticast mode [ 1257.296053][T18759] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1257.479697][T18759] usb 7-1: Using ep0 maxpacket: 32 [ 1257.489594][T18759] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 1257.500769][T18759] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1257.526107][T18759] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1257.543931][T18759] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1257.564225][T18759] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1257.606055][T18759] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1257.649723][T18759] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1257.677799][T18759] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.716537][T18756] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1257.729981][T18759] usb 7-1: config 0 descriptor?? [ 1257.886665][T18756] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1257.914337][T18756] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1257.950294][T18756] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1257.966489][T18759] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 33 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1257.995608][T18756] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1258.073243][T18756] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1258.096106][T18756] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.125745][T18756] usb 1-1: config 0 descriptor?? [ 1258.236290][T18759] usb 7-1: USB disconnect, device number 33 [ 1258.266966][T27658] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1258.274649][T18759] usblp0: removed [ 1258.439444][T27658] usb 2-1: Using ep0 maxpacket: 16 [ 1258.464959][T27658] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1258.511431][T27658] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1258.549676][T27658] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1258.568290][T27658] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.573228][T18756] plantronics 0003:047F:FFFF.0041: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1258.664681][T27658] usb 2-1: Product: syz [ 1258.686018][T27658] usb 2-1: Manufacturer: syz [ 1258.693081][T27658] usb 2-1: SerialNumber: syz [ 1258.725091][T27658] usb 2-1: config 0 descriptor?? [ 1258.818680][T27658] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1258.868944][T27658] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1259.059310][T28058] syzkaller0: entered promiscuous mode [ 1259.091629][T28058] syzkaller0: entered allmulticast mode [ 1259.174298][T28058] tipc: Started in network mode [ 1259.200746][T28058] tipc: Node identity ee13151b76fe, cluster identity 4711 [ 1259.236469][T28058] tipc: Enabled bearer , priority 0 [ 1259.286974][T28057] tipc: Resetting bearer [ 1259.353102][T27658] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1259.360514][T27658] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1259.385296][T28057] tipc: Disabling bearer [ 1259.588784][T18762] usb 1-1: USB disconnect, device number 53 [ 1260.017121][T27658] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 1260.025503][T27658] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 1260.158531][T28082] netlink: 'syz.7.6327': attribute type 11 has an invalid length. [ 1260.816096][T27658] em28xx 2-1:0.0: AC97 command still being executed: not handled properly! [ 1260.824777][T27658] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 1260.957896][T27658] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 1260.967259][T27658] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 1261.007299][T27658] usb 2-1: USB disconnect, device number 34 [ 1261.357824][T11704] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 1261.542315][T11704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1261.568000][T11704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1261.602918][T11704] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1261.618993][T11704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.646699][T11704] usb 1-1: config 0 descriptor?? [ 1261.667290][T11704] hub 1-1:0.0: USB hub found [ 1261.936167][T27658] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 1262.122886][T27658] usb 2-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 1262.128023][T18756] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1262.134853][T11704] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 1262.161203][T27658] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x84 has invalid maxpacket 19564, setting to 64 [ 1262.194046][T11704] usbhid 1-1:0.0: can't add hid device: -71 [ 1262.200416][T27658] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1262.217427][T11704] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1262.229602][T27658] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1262.260846][T27658] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1262.273816][T27658] usb 2-1: Product: syz [ 1262.281307][T11704] usb 1-1: USB disconnect, device number 54 [ 1262.287439][T27658] usb 2-1: Manufacturer: syz [ 1262.292084][T27658] usb 2-1: SerialNumber: syz [ 1262.326661][T27658] usb 2-1: config 0 descriptor?? [ 1262.327838][T18756] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1262.372109][T18756] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1262.382955][T18756] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1262.393127][T18756] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.519902][T28120] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 1262.555470][T27658] usb 2-1: selecting invalid altsetting 0 [ 1262.667443][T18756] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1263.523594][T27658] usb 7-1: USB disconnect, device number 34 [ 1264.370096][T28151] syzkaller0: entered promiscuous mode [ 1264.391525][T18756] usb 2-1: USB disconnect, device number 35 [ 1264.441536][T28151] syzkaller0: entered allmulticast mode [ 1264.455038][T28155] tipc: Enabled bearer , priority 0 [ 1264.769984][T28159] syzkaller0: entered promiscuous mode [ 1264.776709][T28159] syzkaller0: entered allmulticast mode [ 1264.877960][T28161] tipc: Resetting bearer [ 1264.897258][T28153] tipc: Resetting bearer [ 1264.990646][T28153] tipc: Disabling bearer [ 1265.614053][T28166] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1265.630692][T28169] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1265.644282][T28169] bond1: (slave macvlan2): Enslaving as a backup interface with a down link [ 1267.120140][T28202] syzkaller0: entered promiscuous mode [ 1267.125689][T28202] syzkaller0: entered allmulticast mode [ 1268.526134][T11704] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1268.928422][T11704] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1269.006150][T11704] usb 5-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 1269.015350][T11704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.109162][T11704] usb 5-1: config 0 descriptor?? [ 1269.158482][T11704] option 5-1:0.0: GSM modem (1-port) converter detected [ 1269.506426][T18761] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1269.667648][T18761] usb 1-1: Using ep0 maxpacket: 32 [ 1269.688769][T18761] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 1269.698681][T18761] usb 1-1: config 0 has no interface number 0 [ 1269.719775][T18761] usb 1-1: config 0 interface 196 has no altsetting 0 [ 1269.745800][T18761] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1269.770866][T18761] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.836142][T18761] usb 1-1: Product: syz [ 1269.840660][T18761] usb 1-1: Manufacturer: syz [ 1269.877911][T18761] usb 1-1: SerialNumber: syz [ 1269.902004][T18761] usb 1-1: config 0 descriptor?? [ 1270.145186][T18761] ipheth 1-1:0.196: Unable to find endpoints [ 1270.201229][T18761] usb 1-1: USB disconnect, device number 55 [ 1271.064083][T28252] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1271.064083][T28252] program syz.0.6360 not setting count and/or reply_len properly [ 1271.364377][T11704] usb 5-1: USB disconnect, device number 80 [ 1271.419695][T11704] option 5-1:0.0: device disconnected [ 1274.293107][T28301] fuse: Bad value for 'fd' [ 1279.794337][T28369] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1279.794337][T28369] program syz.1.6377 not setting count and/or reply_len properly [ 1281.563329][T28387] netlink: 'syz.7.6381': attribute type 61 has an invalid length. [ 1281.613111][T28387] netlink: 'syz.7.6381': attribute type 62 has an invalid length. [ 1281.724803][T28387] input: syz0 as /devices/virtual/input/input95 [ 1282.401540][T28401] syzkaller0: entered promiscuous mode [ 1282.426040][T28401] syzkaller0: entered allmulticast mode [ 1283.133228][T28420] netem: change failed [ 1285.691631][T28447] netlink: 'syz.4.6394': attribute type 4 has an invalid length. [ 1287.177280][T27658] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1287.471451][T27658] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1287.484064][T27658] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1287.493850][T27658] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.522645][T27658] usb 2-1: config 0 descriptor?? [ 1287.532903][T27658] pwc: Askey VC010 type 2 USB webcam detected. [ 1288.285619][T27658] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1288.338794][T27658] pwc: recv_control_msg error -32 req 02 val 2700 [ 1288.365105][T27658] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1288.429902][T27658] pwc: recv_control_msg error -32 req 04 val 1000 [ 1288.576121][T27658] pwc: recv_control_msg error -32 req 04 val 1300 [ 1288.750317][T27658] pwc: recv_control_msg error -32 req 04 val 1400 [ 1288.761087][T27658] pwc: recv_control_msg error -32 req 02 val 2000 [ 1288.792567][T27658] pwc: recv_control_msg error -32 req 02 val 2100 [ 1288.806660][T27658] pwc: recv_control_msg error -32 req 04 val 1500 [ 1288.814402][T27658] pwc: recv_control_msg error -32 req 02 val 2500 [ 1288.822236][T27658] pwc: recv_control_msg error -32 req 02 val 2400 [ 1288.829812][T27658] pwc: recv_control_msg error -32 req 02 val 2600 [ 1289.082772][T28483] tipc: Failed to remove unknown binding: 66,1,1/0:1053968488/1053968490 [ 1289.091651][T28483] tipc: Failed to remove unknown binding: 66,1,1/0:1053968488/1053968490 [ 1289.137131][T27658] pwc: recv_control_msg error -71 req 02 val 2800 [ 1289.166105][T27658] pwc: recv_control_msg error -71 req 04 val 1100 [ 1289.184555][T27658] pwc: recv_control_msg error -71 req 04 val 1200 [ 1289.239685][T27658] pwc: Registered as video103. [ 1289.250001][T27658] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input96 [ 1289.280545][T27658] usb 2-1: USB disconnect, device number 36 [ 1293.158316][T28529] mac80211_hwsim hwsim47 syzkaller0: left promiscuous mode [ 1293.165643][T28529] mac80211_hwsim hwsim47 syzkaller0: left allmulticast mode [ 1293.951677][T28536] create_pit_timer: 14 callbacks suppressed [ 1293.951703][T28536] kvm: requested 129066 ns i8254 timer period limited to 200000 ns [ 1293.991529][T28536] kvm: requested 38552 ns i8254 timer period limited to 200000 ns [ 1294.023423][T28536] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 1294.203590][T28536] kvm: requested 120685 ns i8254 timer period limited to 200000 ns [ 1294.380381][T28536] kvm: requested 55314 ns i8254 timer period limited to 200000 ns [ 1294.400332][T28545] mac80211_hwsim hwsim47 syzkaller0: entered promiscuous mode [ 1294.412751][T28536] kvm: requested 129066 ns i8254 timer period limited to 200000 ns [ 1294.430689][T28545] mac80211_hwsim hwsim47 syzkaller0: entered allmulticast mode [ 1294.439098][T28536] kvm: requested 182704 ns i8254 timer period limited to 200000 ns [ 1294.451836][T28550] netlink: 324 bytes leftover after parsing attributes in process `syz.1.6416'. [ 1294.485091][T28536] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 1294.518878][T28536] kvm: requested 122361 ns i8254 timer period limited to 200000 ns [ 1294.666480][T28536] kvm: requested 80457 ns i8254 timer period limited to 200000 ns [ 1295.094361][T28552] gre2: entered promiscuous mode [ 1295.130841][T28552] gre2: entered allmulticast mode [ 1295.243257][T28556] binder: 28553:28556 ioctl c0306201 0 returned -14 [ 1296.050586][T28566] syzkaller0: entered promiscuous mode [ 1296.106643][T28566] syzkaller0: entered allmulticast mode [ 1296.449175][T28584] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1296.940427][T28600] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1296.940427][T28600] program syz.0.6426 not setting count and/or reply_len properly [ 1298.393255][T28617] syzkaller0: entered promiscuous mode [ 1298.399359][T28617] syzkaller0: entered allmulticast mode [ 1298.599447][T28621] mac80211_hwsim hwsim47 syzkaller0: left promiscuous mode [ 1298.619651][T28621] mac80211_hwsim hwsim47 syzkaller0: left allmulticast mode [ 1298.880141][T28632] mac80211_hwsim hwsim47 syzkaller0: entered promiscuous mode [ 1299.047527][T28632] mac80211_hwsim hwsim47 syzkaller0: entered allmulticast mode [ 1299.368433][T28642] netlink: 'syz.0.6437': attribute type 1 has an invalid length. [ 1299.525296][T28645] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6437'. [ 1299.868343][T28642] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6437'. [ 1299.879809][T28645] bond3: (slave bridge2): making interface the new active one [ 1299.907462][T28645] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 1300.067487][T28642] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1300.100059][T28653] syzkaller0: entered promiscuous mode [ 1300.105598][T28653] syzkaller0: entered allmulticast mode [ 1300.305261][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.321906][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.386691][T28657] ptrace attach of "./syz-executor exec"[21095] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ /dev/kvm 8   € \x09    þÿÿú ªe [ 1300.401507][T28657] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6440'. [ 1302.796152][T18761] usb 7-1: new full-speed USB device number 35 using dummy_hcd [ 1303.004367][T18761] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1303.048877][T18761] usb 7-1: not running at top speed; connect to a high speed hub [ 1303.101348][T18761] usb 7-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 655, setting to 64 [ 1303.132779][T18761] usb 7-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1303.186293][T18761] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1303.206989][T18761] usb 7-1: New USB device found, idVendor=05ac, idProduct=025a, bcdDevice= 0.40 [ 1303.328616][T18761] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.376851][T18761] usb 7-1: Product: syz [ 1303.459449][T18761] usb 7-1: Manufacturer: syz [ 1303.464118][T18761] usb 7-1: SerialNumber: syz [ 1303.528032][T28693] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1304.461462][T28728] netlink: 'syz.4.6455': attribute type 13 has an invalid length. [ 1304.898166][T28732] vlan2: entered promiscuous mode [ 1304.918029][T28732] vlan2: entered allmulticast mode [ 1304.944960][T28732] hsr_slave_1: entered allmulticast mode [ 1306.666437][T28752] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1307.576501][T18761] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input97 [ 1307.678049][ T5174] bcm5974 7-1:1.0: could not read from device [ 1307.703249][ T5174] bcm5974 7-1:1.0: could not read from device [ 1307.723221][T18761] usb 7-1: USB disconnect, device number 35 [ 1309.968685][ T29] audit: type=1326 audit(1771754032.731:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28789 comm="syz.1.6468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1fb9c629 code=0x7ffc0000 [ 1310.233529][ T29] audit: type=1326 audit(1771754032.781:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28789 comm="syz.1.6468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f4e1fb9c629 code=0x7ffc0000 [ 1310.296973][ T29] audit: type=1326 audit(1771754032.781:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28789 comm="syz.1.6468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1fb9c629 code=0x7ffc0000 [ 1310.376358][ T29] audit: type=1326 audit(1771754032.781:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28789 comm="syz.1.6468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4e1fb9c629 code=0x7ffc0000 [ 1310.696249][ T29] audit: type=1326 audit(1771754032.801:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28789 comm="syz.1.6468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1fb9c629 code=0x7ffc0000 [ 1310.876577][ T29] audit: type=1326 audit(1771754032.801:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28789 comm="syz.1.6468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4e1fb9c629 code=0x7ffc0000 [ 1311.054131][ T29] audit: type=1326 audit(1771754033.091:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28789 comm="syz.1.6468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1fb9c629 code=0x7ffc0000 [ 1311.211593][ T29] audit: type=1326 audit(1771754033.091:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28789 comm="syz.1.6468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1fb9c629 code=0x7ffc0000 [ 1311.401497][ T29] audit: type=1326 audit(1771754033.171:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28789 comm="syz.1.6468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4e1fb9c629 code=0x7ffc0000 [ 1311.492807][ T29] audit: type=1326 audit(1771754033.171:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28789 comm="syz.1.6468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1fb9c629 code=0x7ffc0000 [ 1313.356095][T18761] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1313.576175][T18761] usb 1-1: Using ep0 maxpacket: 32 [ 1313.727748][T18761] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1313.742924][T18761] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1313.758986][T18761] usb 1-1: can't read configurations, error -71 [ 1313.926568][T28835] syzkaller0: entered promiscuous mode [ 1314.038567][T28835] syzkaller0: entered allmulticast mode [ 1316.163644][T28854] sg_write: data in/out 411065/130 bytes for SCSI command 0x89-- guessing data in; [ 1316.163644][T28854] program syz.7.6482 not setting count and/or reply_len properly [ 1316.198193][T28854] loop6: detected capacity change from 0 to 2640 [ 1316.206723][T28854] buffer_io_error: 49 callbacks suppressed [ 1316.206741][T28854] Buffer I/O error on dev loop6, logical block 0, async page read [ 1316.221382][T28854] Buffer I/O error on dev loop6, logical block 0, async page read [ 1316.229676][T28854] Buffer I/O error on dev loop6, logical block 0, async page read [ 1316.238493][T28854] Buffer I/O error on dev loop6, logical block 0, async page read [ 1316.246561][T28854] Buffer I/O error on dev loop6, logical block 0, async page read [ 1316.255781][T28854] Buffer I/O error on dev loop6, logical block 0, async page read [ 1316.264480][T28854] Buffer I/O error on dev loop6, logical block 0, async page read [ 1316.272924][T28854] Buffer I/O error on dev loop6, logical block 0, async page read [ 1316.280968][T28854] ldm_validate_partition_table(): Disk read failed. [ 1316.288083][T28854] Buffer I/O error on dev loop6, logical block 0, async page read [ 1316.296726][T28854] Buffer I/O error on dev loop6, logical block 0, async page read [ 1316.306064][T28854] Dev loop6: unable to read RDB block 0 [ 1316.312106][T28854] loop6: unable to read partition table [ 1316.321673][T28854] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1318.532416][T28861] syzkaller0: entered promiscuous mode [ 1318.543645][T28861] syzkaller0: entered allmulticast mode [ 1319.478162][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1319.478177][ T29] audit: type=1804 audit(1771754042.241:632): pid=28867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.6486" name="/newroot/138/file1" dev="tmpfs" ino=740 res=1 errno=0 [ 1320.886878][T28884] binder_alloc: 28883: binder_alloc_buf, no vma [ 1322.750729][T28912] tipc: Enabled bearer , priority 0 [ 1322.797162][T28912] syzkaller0: entered promiscuous mode [ 1322.816028][T28912] syzkaller0: entered allmulticast mode [ 1322.887115][ T5827] Bluetooth: hci5: command 0x0406 tx timeout [ 1323.070406][T28914] tipc: Resetting bearer [ 1323.194645][T28911] tipc: Resetting bearer [ 1323.417302][T28911] tipc: Disabling bearer [ 1324.616150][ T5921] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1324.777905][ T5921] usb 2-1: config 0 has no interfaces? [ 1324.798590][ T5921] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1324.820970][ T5921] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1324.840508][ T5921] usb 2-1: Manufacturer: syz [ 1325.006419][ T5921] usb 2-1: config 0 descriptor?? [ 1326.752383][T28955] netlink: 'syz.0.6505': attribute type 13 has an invalid length. [ 1327.426107][T19072] usb 2-1: USB disconnect, device number 37 [ 1328.498738][T28977] netlink: 'syz.1.6511': attribute type 1 has an invalid length. [ 1328.756042][T18761] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1328.936513][T18761] usb 5-1: Using ep0 maxpacket: 8 [ 1328.939591][T28990] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1328.948008][T18761] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1328.991053][T18761] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1329.049241][T18761] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.069946][T18761] usb 5-1: Product: syz [ 1329.074271][T18761] usb 5-1: Manufacturer: syz [ 1329.083261][T18761] usb 5-1: SerialNumber: syz [ 1329.092026][T18761] usb 5-1: config 0 descriptor?? [ 1329.129217][T18761] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1329.246924][T28997] tipc: Started in network mode [ 1329.252064][T28997] tipc: Node identity b6d937f9da1b, cluster identity 4711 [ 1329.262066][T28997] tipc: Enabled bearer , priority 0 [ 1329.272643][T28997] syzkaller0: entered promiscuous mode [ 1329.278752][T28997] syzkaller0: entered allmulticast mode [ 1329.347547][T28997] tipc: Resetting bearer [ 1329.362769][T28996] tipc: Resetting bearer [ 1329.391562][T28996] tipc: Disabling bearer [ 1329.505266][T29004] vlan3: entered promiscuous mode [ 1329.510659][T29004] team0: entered promiscuous mode [ 1329.517022][T29004] team_slave_0: entered promiscuous mode [ 1329.522981][T29004] team_slave_1: entered promiscuous mode [ 1329.530556][T29004] macvlan2: entered promiscuous mode [ 1329.602600][T19072] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1329.755998][T19072] usb 7-1: Using ep0 maxpacket: 32 [ 1329.763307][T19072] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 1329.772806][T19072] usb 7-1: config 0 has no interface number 0 [ 1329.854909][T19072] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1329.867010][T19072] usb 7-1: config 0 interface 85 has no altsetting 0 [ 1329.880816][T19072] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1329.890735][T19072] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.905470][T19072] usb 7-1: Product: syz [ 1329.912267][T19072] usb 7-1: Manufacturer: syz [ 1329.931122][T19072] usb 7-1: SerialNumber: syz [ 1329.945860][T19072] usb 7-1: config 0 descriptor?? [ 1330.816143][ T5921] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1330.934664][T19072] appletouch 7-1:0.85: Geyser mode initialized. [ 1330.966204][T19072] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input98 [ 1331.017828][ T5921] usb 1-1: Using ep0 maxpacket: 32 [ 1331.044430][ T5921] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 1331.059235][ T5921] usb 1-1: config 0 has no interface number 0 [ 1331.081336][ T5921] usb 1-1: config 0 interface 12 has no altsetting 0 [ 1331.102257][ T5921] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1331.118262][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.142965][ T5921] usb 1-1: Product: syz [ 1331.164946][ T5921] usb 1-1: Manufacturer: syz [ 1331.200517][ T5921] usb 1-1: SerialNumber: syz [ 1331.241161][ T5921] usb 1-1: config 0 descriptor?? [ 1331.464607][T18756] usb 7-1: USB disconnect, device number 36 [ 1331.504418][T18756] appletouch 7-1:0.85: input: appletouch disconnected [ 1332.406500][T18761] gspca_zc3xx: reg_r err -71 [ 1332.411773][T18761] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1332.467100][T18761] usb 5-1: USB disconnect, device number 81 [ 1332.960581][ T29] audit: type=1326 audit(1771754055.721:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29029 comm="syz.7.6528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f1319c629 code=0x7ffc0000 [ 1333.053973][ T29] audit: type=1326 audit(1771754055.721:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29029 comm="syz.7.6528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f7f1319c629 code=0x7ffc0000 [ 1333.084660][ T29] audit: type=1326 audit(1771754055.721:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29029 comm="syz.7.6528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f1319c629 code=0x7ffc0000 [ 1333.111754][ T29] audit: type=1326 audit(1771754055.721:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29029 comm="syz.7.6528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7f1319c629 code=0x7ffc0000 [ 1333.145729][ T29] audit: type=1326 audit(1771754055.721:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29029 comm="syz.7.6528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f1319c629 code=0x7ffc0000 [ 1333.172048][ T29] audit: type=1326 audit(1771754055.721:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29029 comm="syz.7.6528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7f1319c629 code=0x7ffc0000 [ 1333.200622][ T29] audit: type=1326 audit(1771754055.721:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29029 comm="syz.7.6528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f1319c629 code=0x7ffc0000 [ 1333.224156][ T29] audit: type=1326 audit(1771754055.721:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29029 comm="syz.7.6528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7f1319c629 code=0x7ffc0000 [ 1333.264043][T29037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6530'. [ 1333.305479][T29037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1333.516044][ T29] audit: type=1326 audit(1771754055.721:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29029 comm="syz.7.6528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f1319c629 code=0x7ffc0000 [ 1333.688557][ T29] audit: type=1326 audit(1771754055.721:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29029 comm="syz.7.6528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f7f1319c629 code=0x7ffc0000 [ 1334.090724][T29045] syzkaller0: entered promiscuous mode [ 1334.120402][T29045] syzkaller0: entered allmulticast mode [ 1334.420564][ T5921] f81534 1-1:0.12: f81534_set_register: reg: 1003 data: 58 failed: -71 [ 1334.434191][ T5921] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 1334.457723][ T5921] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1334.465415][ T5921] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 1334.551987][T29055] syzkaller0: entered promiscuous mode [ 1334.564324][ T5921] usb 1-1: USB disconnect, device number 58 [ 1334.567351][T29055] syzkaller0: entered allmulticast mode [ 1334.911479][T29065] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6538'. [ 1335.377703][T29072] syzkaller0: entered promiscuous mode [ 1335.383268][T29072] syzkaller0: entered allmulticast mode [ 1336.823090][T29084] netlink: 'syz.1.6543': attribute type 1 has an invalid length. [ 1337.121074][T29094] tipc: Enabled bearer , priority 0 [ 1337.122184][T29094] syzkaller0: entered promiscuous mode [ 1337.137908][T29094] syzkaller0: entered allmulticast mode [ 1337.167245][T29094] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1337.189504][T18762] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1337.212252][T29094] tipc: Resetting bearer [ 1337.218949][ T5883] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1337.337411][T29096] sit1: entered allmulticast mode [ 1337.426099][T18762] usb 5-1: Using ep0 maxpacket: 16 [ 1337.441721][T18762] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1337.470981][T18762] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1337.607473][T29091] tipc: Resetting bearer [ 1337.618349][T18762] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1337.618373][T18762] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.618387][T18762] usb 5-1: Product: syz [ 1337.618397][T18762] usb 5-1: Manufacturer: syz [ 1337.618407][T18762] usb 5-1: SerialNumber: syz [ 1337.683363][ T5883] usb 1-1: Using ep0 maxpacket: 8 [ 1337.754692][T29091] tipc: Disabling bearer [ 1337.762158][ T5883] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1337.762198][ T5883] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1337.762224][ T5883] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 46624, setting to 1024 [ 1337.762251][ T5883] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1337.762272][ T5883] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1337.762307][ T5883] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1337.762326][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.842946][T18762] usb 5-1: 0:2 : does not exist [ 1337.850787][T18762] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1338.138797][T18762] usb 5-1: USB disconnect, device number 82 [ 1338.200361][ T5883] usb 1-1: GET_CAPABILITIES returned 0 [ 1338.200420][ T5883] usbtmc 1-1:16.0: can't read capabilities [ 1338.306611][T28484] udevd[28484]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1338.698375][T29105] netlink: 'syz.4.6552': attribute type 13 has an invalid length. [ 1338.738565][T29107] tipc: Enabled bearer , priority 0 [ 1338.780485][T29107] syzkaller0: entered promiscuous mode [ 1338.786799][T29107] syzkaller0: entered allmulticast mode [ 1338.851727][T29107] tipc: Resetting bearer [ 1338.870895][T29106] tipc: Resetting bearer [ 1338.977673][T29106] tipc: Disabling bearer [ 1339.349745][T29114] team0: Port device vxlan0 added [ 1339.361911][ T143] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1339.403645][ T143] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1339.447555][ T143] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1339.482510][ T143] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1339.659821][T29118] tipc: Failed to remove unknown binding: 66,1,1/0:1669948929/1669948931 [ 1339.668695][T29118] tipc: Failed to remove unknown binding: 66,1,1/0:1669948929/1669948931 [ 1340.871776][T11704] usb 1-1: USB disconnect, device number 59 [ 1342.808335][T29144] tipc: Enabled bearer , priority 0 [ 1343.470142][T29148] mac80211_hwsim hwsim47 syzkaller0: Caught tx_queue_len zero misconfig [ 1343.526800][T29152] tipc: Resetting bearer [ 1343.539855][T29156] tipc: Enabled bearer , priority 0 [ 1343.588762][T29157] syzkaller0: entered promiscuous mode [ 1343.607456][T29157] syzkaller0: entered allmulticast mode [ 1343.694716][T29155] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6565'. [ 1343.756976][T29162] syzkaller0: entered promiscuous mode [ 1343.762533][T29162] syzkaller0: entered allmulticast mode [ 1343.791420][T29154] tipc: Resetting bearer [ 1343.835668][T18761] tipc: Node number set to 297853934 [ 1343.847509][T29153] tipc: Resetting bearer [ 1343.888550][T29153] tipc: Disabling bearer [ 1344.303503][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 1344.303518][ T29] audit: type=1804 audit(1771754067.061:668): pid=29172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.6570" name="/newroot/155/file1" dev="fuse" ino=1 res=1 errno=0 [ 1344.816020][T11704] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1345.035988][T11704] usb 1-1: Using ep0 maxpacket: 16 [ 1345.506950][T11704] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1345.517278][T11704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.537420][T11704] usb 1-1: Product: syz [ 1345.541618][T11704] usb 1-1: Manufacturer: syz [ 1345.556060][T11704] usb 1-1: SerialNumber: syz [ 1345.781122][T11704] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1345.793370][T11704] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1345.890363][T11704] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1345.946849][T11704] usb 1-1: media controller created [ 1346.021774][T11704] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1346.108804][T11704] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1346.266920][T11704] dvb_usb_gl861 1-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 1346.315547][T11704] usb 1-1: USB disconnect, device number 60 [ 1348.120467][T29209] IPVS: length: 255 != 792 [ 1348.402370][T29219] binder: BINDER_SET_CONTEXT_MGR already set [ 1348.417014][T29219] binder: 29218:29219 ioctl 4018620d 200000000100 returned -16 [ 1348.465258][T29219] binder: BINDER_SET_CONTEXT_MGR already set [ 1348.489282][T29219] binder: 29218:29219 ioctl 4018620d 200000004a80 returned -16 [ 1348.665023][ T29] audit: type=1326 audit(1771754071.321:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29220 comm="syz.4.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806979c629 code=0x7ffc0000 [ 1348.719564][ T29] audit: type=1326 audit(1771754071.321:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29220 comm="syz.4.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f806979c629 code=0x7ffc0000 [ 1348.811442][ T29] audit: type=1326 audit(1771754071.321:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29220 comm="syz.4.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806979c629 code=0x7ffc0000 [ 1348.884838][ T29] audit: type=1326 audit(1771754071.321:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29220 comm="syz.4.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f806979c629 code=0x7ffc0000 [ 1349.066201][ T29] audit: type=1326 audit(1771754071.321:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29220 comm="syz.4.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806979c629 code=0x7ffc0000 [ 1349.112290][ T29] audit: type=1326 audit(1771754071.321:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29220 comm="syz.4.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806979c629 code=0x7ffc0000 [ 1349.185705][ T29] audit: type=1326 audit(1771754071.321:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29220 comm="syz.4.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f806979dec7 code=0x7ffc0000 [ 1349.468920][ T29] audit: type=1326 audit(1771754071.321:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29220 comm="syz.4.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f806975cece code=0x7ffc0000 [ 1349.642897][ T29] audit: type=1326 audit(1771754071.321:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29220 comm="syz.4.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f806975cece code=0x7ffc0000 [ 1349.695336][T29238] syzkaller0: entered promiscuous mode [ 1349.701070][T29238] syzkaller0: entered allmulticast mode [ 1349.767664][ T29] audit: type=1326 audit(1771754071.321:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29220 comm="syz.4.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f806975cece code=0x7ffc0000 [ 1349.851814][ T29] audit: type=1326 audit(1771754071.321:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29220 comm="syz.4.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f806975cece code=0x7ffc0000 [ 1349.932297][ T29] audit: type=1326 audit(1771754071.321:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29220 comm="syz.4.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806979c629 code=0x7ffc0000 [ 1350.137781][ T29] audit: type=1326 audit(1771754071.331:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29220 comm="syz.4.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f806979c629 code=0x7ffc0000 [ 1350.263930][ T29] audit: type=1326 audit(1771754071.331:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29220 comm="syz.4.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806979c629 code=0x7ffc0000 [ 1350.373283][ T29] audit: type=1326 audit(1771754071.331:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29220 comm="syz.4.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f806979c629 code=0x7ffc0000 [ 1350.402222][T29240] netlink: 'syz.6.6588': attribute type 13 has an invalid length. [ 1350.458331][ T29] audit: type=1326 audit(1771754071.331:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29220 comm="syz.4.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806979c629 code=0x7ffc0000 [ 1350.495178][ T29] audit: type=1326 audit(1771754071.331:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29220 comm="syz.4.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806979c629 code=0x7ffc0000 [ 1350.973937][T29250] syzkaller0: entered promiscuous mode [ 1351.013259][T29250] syzkaller0: entered allmulticast mode [ 1351.196931][T29253] syzkaller0: entered promiscuous mode [ 1351.202581][T29253] syzkaller0: entered allmulticast mode [ 1353.029363][T29275] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6596'. [ 1355.891380][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1355.891414][ T29] audit: type=1326 audit(1771754078.641:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29295 comm="syz.0.6601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91799c629 code=0x7ffc0000 [ 1355.963951][ T29] audit: type=1326 audit(1771754078.641:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29295 comm="syz.0.6601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91799c629 code=0x7ffc0000 [ 1356.217609][ T29] audit: type=1326 audit(1771754078.771:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29295 comm="syz.0.6601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fb91799c629 code=0x7ffc0000 [ 1356.303369][ T29] audit: type=1326 audit(1771754078.771:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29295 comm="syz.0.6601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91799c629 code=0x7ffc0000 [ 1356.341733][ T29] audit: type=1326 audit(1771754078.771:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29295 comm="syz.0.6601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91799c629 code=0x7ffc0000 [ 1360.143080][T29288] dummy0: entered promiscuous mode [ 1360.148840][T29288] vlan3: entered promiscuous mode [ 1360.235376][T29307] tipc: Enabling of bearer rejected, failed to enable media [ 1361.427707][T18756] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 1361.688243][T18756] usb 2-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 1361.713320][T18756] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 1361.734740][T18756] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1361.754530][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.761141][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.775018][T18756] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1361.836639][T18756] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1361.868568][T18756] usb 2-1: Product: syz [ 1361.901272][T18756] usb 2-1: Manufacturer: syz [ 1361.924068][T18756] usb 2-1: SerialNumber: syz [ 1361.974078][T18756] usb 2-1: config 0 descriptor?? [ 1361.996708][T29336] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1362.032886][T18756] usb 2-1: selecting invalid altsetting 0 [ 1362.231178][T29336] usb 2-1: BOGUS urb xfer, pipe 0 != type 1 [ 1362.417190][T18756] usb 2-1: USB disconnect, device number 38 [ 1363.276584][T29358] netlink: 'syz.7.6612': attribute type 5 has an invalid length. [ 1363.299785][T29358] ip6erspan0: entered promiscuous mode [ 1364.356436][T29363] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6614'. [ 1365.036716][T29366] lo: Caught tx_queue_len zero misconfig [ 1365.300387][T29369] tipc: Enabled bearer , priority 0 [ 1365.318338][T29369] syzkaller0: entered promiscuous mode [ 1365.330878][T29369] syzkaller0: entered allmulticast mode [ 1365.399584][T29369] tipc: Resetting bearer [ 1365.419263][T29368] tipc: Resetting bearer [ 1365.444615][T29368] tipc: Disabling bearer [ 1365.483269][T29374] tipc: Enabled bearer , priority 0 [ 1365.498188][T29373] syzkaller0: entered promiscuous mode [ 1365.503918][T29373] syzkaller0: entered allmulticast mode [ 1365.535372][T29371] tipc: Enabled bearer , priority 0 [ 1365.572298][T29375] syzkaller0: entered promiscuous mode [ 1365.587949][T29375] syzkaller0: entered allmulticast mode [ 1365.609642][T29374] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1365.764521][T29378] tipc: Resetting bearer [ 1365.821829][T29372] tipc: Resetting bearer [ 1365.893854][T29372] tipc: Disabling bearer [ 1365.951341][T29375] tipc: Resetting bearer [ 1365.988672][T29370] tipc: Resetting bearer [ 1366.146758][T29370] tipc: Disabling bearer [ 1366.470010][T29385] syzkaller0: entered promiscuous mode [ 1366.596162][T29385] syzkaller0: entered allmulticast mode [ 1366.803098][T29392] syzkaller0: entered promiscuous mode [ 1366.812182][T29392] syzkaller0: entered allmulticast mode [ 1368.918499][T19072] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1369.097125][T19072] usb 2-1: Using ep0 maxpacket: 8 [ 1369.100402][T29423] tipc: Failed to remove unknown binding: 66,1,1/0:1153289377/1153289379 [ 1369.115614][T29423] tipc: Failed to remove unknown binding: 66,1,1/0:1153289377/1153289379 [ 1369.127521][T19072] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1369.216057][T19072] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1369.246013][T19072] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.254190][T19072] usb 2-1: Product: syz [ 1369.414843][T19072] usb 2-1: Manufacturer: syz [ 1369.452671][T19072] usb 2-1: SerialNumber: syz [ 1369.469845][T19072] usb 2-1: config 0 descriptor?? [ 1369.487897][T19072] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1371.986925][T29440] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1372.866654][T19072] gspca_zc3xx: reg_w_i err -71 [ 1372.916111][T19072] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1373.022888][T19072] usb 2-1: USB disconnect, device number 39 [ 1375.807610][T18762] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1376.016962][T18762] usb 2-1: Using ep0 maxpacket: 8 [ 1376.027913][T18762] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1376.040431][T18762] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1376.051151][T18762] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 46624, setting to 1024 [ 1376.065708][T18762] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1376.081527][T18762] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1376.095537][T18762] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1376.110267][T18762] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.372252][T18762] usb 2-1: GET_CAPABILITIES returned 0 [ 1376.378211][T18762] usbtmc 2-1:16.0: can't read capabilities [ 1376.850006][T29478] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1376.857426][T29478] IPv6: NLM_F_CREATE should be set when creating new route [ 1378.597690][T18762] usb 2-1: USB disconnect, device number 40 [ 1379.455616][T29487] kvm: kvm [29485]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x1000060e6 [ 1379.492505][T29487] kvm: kvm [29485]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x70c9 [ 1379.665081][T29487] kvm: kvm [29485]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x3043 [ 1380.067664][T29493] syzkaller0: entered promiscuous mode [ 1380.174655][T29493] syzkaller0: entered allmulticast mode [ 1380.191320][T25294] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1380.202704][T25294] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.976166][T19072] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1381.376334][T19072] usb 2-1: Using ep0 maxpacket: 16 [ 1381.466644][T19072] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1381.501444][T19072] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.596407][T19072] usb 2-1: Product: syz [ 1381.600688][T19072] usb 2-1: Manufacturer: syz [ 1381.605422][T19072] usb 2-1: SerialNumber: syz [ 1381.634355][T19072] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1381.641135][T19072] r8152-cfgselector 2-1: config 0 descriptor?? [ 1382.441495][T19072] r8152-cfgselector 2-1: USB disconnect, device number 41 [ 1388.089315][T25294] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1388.098307][T25294] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1388.107389][T25294] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1388.116561][T25294] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1388.162253][T29532] tipc: Enabling of bearer rejected, failed to enable media [ 1388.216040][T25294] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1388.226835][T25294] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1388.520189][T29576] binder_alloc: 29575: binder_alloc_buf, no vma [ 1388.655494][T29574] kvm: kvm [29573]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x166 [ 1388.797476][T29584] openvswitch: netlink: IP tunnel dst address not specified [ 1388.893338][T29583] netlink: 64 bytes leftover after parsing attributes in process `syz.7.6662'. [ 1389.297892][T29593] syzkaller0: entered promiscuous mode [ 1389.317237][T29593] syzkaller0: entered allmulticast mode [ 1389.894538][T29601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6667'. [ 1389.976745][T18761] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1390.186313][T18761] usb 7-1: Using ep0 maxpacket: 8 [ 1390.243640][T18761] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1390.259435][T18761] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1390.269987][T18761] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1390.280576][T18761] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1390.309472][T18761] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1390.351358][T18761] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1390.762696][T18761] usb 7-1: GET_CAPABILITIES returned 0 [ 1390.779645][T18761] usbtmc 7-1:16.0: can't read capabilities [ 1391.478732][T29622] netlink: 'syz.0.6673': attribute type 1 has an invalid length. [ 1392.623145][ T5921] usb 7-1: USB disconnect, device number 37 [ 1393.129757][T29638] tipc: Enabled bearer , priority 0 [ 1393.262050][T29641] syzkaller0: entered promiscuous mode [ 1393.306084][T29641] syzkaller0: entered allmulticast mode [ 1393.522931][T29651] tipc: Resetting bearer [ 1393.676384][T29635] tipc: Resetting bearer [ 1393.830573][T29635] tipc: Disabling bearer [ 1394.396296][ T29] audit: type=1804 audit(1771754116.681:692): pid=29662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.6680" name="bus" dev="ramfs" ino=178683 res=1 errno=0 [ 1395.648723][T29674] tipc: Enabled bearer , priority 0 [ 1395.665050][T29674] syzkaller0: entered promiscuous mode [ 1395.689162][T29674] syzkaller0: entered allmulticast mode [ 1395.736076][T18761] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1395.893688][T29674] tipc: Resetting bearer [ 1395.909251][T29673] tipc: Resetting bearer [ 1396.057227][T29673] tipc: Disabling bearer [ 1396.079703][T18761] usb 7-1: Using ep0 maxpacket: 16 [ 1396.116050][ T5921] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 1396.153137][T18761] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1396.183874][T18761] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1396.235269][T18761] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1396.249418][T18761] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.284334][T18761] usb 7-1: Product: syz [ 1396.295325][T18761] usb 7-1: Manufacturer: syz [ 1396.311146][T18761] usb 7-1: SerialNumber: syz [ 1396.323251][ T5921] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1396.348694][T18761] usb 7-1: config 0 descriptor?? [ 1396.363832][ T5921] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1396.385588][T18761] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1396.411451][T18761] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1396.432903][ T5921] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1396.462363][ T5921] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1396.590100][ T5921] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1396.610280][ T5921] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1396.663049][ T5921] usb 2-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 1396.673719][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.682270][ T5921] usb 2-1: Product: syz [ 1396.696908][ T5921] usb 2-1: Manufacturer: syz [ 1396.704872][ T5921] usb 2-1: SerialNumber: syz [ 1396.718169][T29690] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6688'. [ 1396.810335][ T5921] usb 2-1: config 0 descriptor?? [ 1396.827600][ T5921] ti_usb_3410_5052 2-1:0.0: required endpoints missing [ 1396.986794][T18762] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 1397.001569][T18761] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1397.010532][T18761] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 1397.399695][T18762] usb 1-1: config 7 has an invalid interface number: 101 but max is 0 [ 1397.410383][T18762] usb 1-1: config 7 has no interface number 0 [ 1397.419742][T18762] usb 1-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 1397.429708][T18762] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.440385][T18762] usb 1-1: Product: syz [ 1397.446859][T18762] usb 1-1: Manufacturer: syz [ 1397.472465][T18762] usb 1-1: SerialNumber: syz [ 1397.509129][T29697] binder: 29696:29697 ioctl c0306201 200000000180 returned -14 [ 1397.805773][T29702] tipc: Enabled bearer , priority 0 [ 1397.814549][T18761] em28xx 7-1:0.0: Unknown AC97 audio processor detected! [ 1397.823109][T18761] em28xx 7-1:0.0: couldn't setup AC97 register 2 [ 1397.833574][T18761] em28xx 7-1:0.0: couldn't setup AC97 register 4 [ 1397.848784][T18761] em28xx 7-1:0.0: couldn't setup AC97 register 6 [ 1397.863562][T29702] syzkaller0: entered promiscuous mode [ 1397.870891][T29702] syzkaller0: entered allmulticast mode [ 1398.045134][T29702] tipc: Resetting bearer [ 1398.057874][T29701] tipc: Resetting bearer [ 1398.134191][T29701] tipc: Disabling bearer [ 1398.334827][T18762] as10x_usb: device has been detected [ 1398.350955][T18762] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 1398.402701][T18762] usb 1-1: DVB: registering adapter 3 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 1398.486656][T18761] em28xx 7-1:0.0: AC97 command still being executed: not handled properly! [ 1398.531366][T29704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6689'. [ 1398.540957][T18761] em28xx 7-1:0.0: couldn't setup AC97 register 56 [ 1398.554146][T18762] as10x_usb: error during firmware upload part1 [ 1398.561308][T18762] Registered device Elgato EyeTV DTT Deluxe [ 1398.681564][T18762] usb 1-1: USB disconnect, device number 61 [ 1398.745707][T18761] usb 7-1: USB disconnect, device number 38 [ 1398.776022][T19072] usb 2-1: USB disconnect, device number 42 [ 1398.854602][T18762] Unregistered device Elgato EyeTV DTT Deluxe [ 1398.860646][T18762] as10x_usb: device has been disconnected [ 1399.207594][T29725] syzkaller0: entered promiscuous mode [ 1399.223053][T29725] syzkaller0: entered allmulticast mode [ 1399.503690][T29733] binder: BINDER_SET_CONTEXT_MGR already set [ 1399.519393][T29733] binder: 29732:29733 ioctl 4018620d 200000000100 returned -16 [ 1399.529925][T29733] binder: BINDER_SET_CONTEXT_MGR already set [ 1399.636484][T29733] binder: 29732:29733 ioctl 4018620d 200000004a80 returned -16 [ 1399.791404][T29741] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6703'. [ 1399.842742][T29743] netlink: 76 bytes leftover after parsing attributes in process `syz.6.6703'. [ 1400.154603][T29743] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6703'. [ 1400.234171][T29747] tipc: Enabled bearer , priority 0 [ 1400.258984][T29747] syzkaller0: entered promiscuous mode [ 1400.281546][T29747] syzkaller0: entered allmulticast mode [ 1400.385309][T29747] tipc: Resetting bearer [ 1400.402048][T29746] tipc: Resetting bearer [ 1400.485092][T29746] tipc: Disabling bearer [ 1401.736015][T11704] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1401.938738][T11704] usb 1-1: Using ep0 maxpacket: 16 [ 1401.985507][T11704] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1402.001841][T11704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1402.035370][T11704] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1402.056322][T11704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.672113][T11704] usb 1-1: Product: syz [ 1402.683409][T11704] usb 1-1: Manufacturer: syz [ 1402.713777][T11704] usb 1-1: SerialNumber: syz [ 1402.836974][T11704] usb 1-1: config 0 descriptor?? [ 1402.917269][T11704] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1402.943888][T11704] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1403.452836][T11704] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1403.465641][T11704] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1403.567986][T29772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6711'. [ 1403.582626][T29772] vlan2: entered promiscuous mode [ 1403.587816][T29772] batadv0: entered promiscuous mode [ 1404.393335][T11704] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 1404.739799][T11704] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 1404.748150][T11704] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 1405.421408][T11704] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 1405.651491][T11704] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 1405.702084][T11704] usb 1-1: USB disconnect, device number 62 [ 1406.830422][T29807] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6723'. [ 1407.326663][T29807] vlan3: entered promiscuous mode [ 1407.343739][T29807] team0: entered promiscuous mode [ 1407.377993][T29807] vlan2: entered promiscuous mode [ 1407.413383][T29807] vxlan0: entered promiscuous mode [ 1407.488106][T29807] batman_adv: batadv0: Adding interface: vlan3 [ 1407.494405][T29807] batman_adv: batadv0: The MTU of interface vlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1408.220984][T29807] batman_adv: batadv0: Interface activated: vlan3 [ 1408.760431][T29822] syzkaller0: entered promiscuous mode [ 1408.966021][T29822] syzkaller0: entered allmulticast mode [ 1409.116039][T18762] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1409.703072][T18762] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1409.733765][T18762] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1409.773690][T18762] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1409.783092][T18762] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1409.795923][T18762] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1409.823723][T18762] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1409.833335][T18762] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1409.869399][T18762] usb 7-1: Product: syz [ 1409.873624][T18762] usb 7-1: Manufacturer: syz [ 1409.896303][T18762] cdc_wdm 7-1:1.0: skipping garbage [ 1409.901578][T18762] cdc_wdm 7-1:1.0: skipping garbage [ 1409.937821][T18762] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1409.949311][T18762] cdc_wdm 7-1:1.0: Unknown control protocol [ 1410.497353][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1410.497910][T18762] usb 7-1: USB disconnect, device number 39 [ 1410.504017][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1410.504044][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1410.506399][T29841] cdc_wdm 7-1:1.0: Tx URB error: -19 [ 1410.866247][T19072] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1411.042907][T19072] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1411.078122][T19072] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1411.134529][T19072] usb 1-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 1411.152828][T19072] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.175974][T19072] usb 1-1: Product: syz [ 1411.180292][T19072] usb 1-1: Manufacturer: syz [ 1411.215617][T19072] usb 1-1: SerialNumber: syz [ 1411.250752][T19072] usb 1-1: config 0 descriptor?? [ 1411.263566][T29844] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1411.277436][T29844] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1411.308432][T19072] option 1-1:0.0: GSM modem (1-port) converter detected [ 1411.350975][T19072] usb 1-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 1411.409330][ T29] audit: type=1804 audit(1771754134.171:693): pid=29849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.6733" name="/newroot/540/file1" dev="fuse" ino=1 res=1 errno=0 [ 1411.622076][T18762] usb 1-1: USB disconnect, device number 63 [ 1411.639930][T18762] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 1411.670138][T18762] option 1-1:0.0: device disconnected [ 1414.236106][T29890] netlink: 'syz.7.6739': attribute type 1 has an invalid length. [ 1414.321531][T29895] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6739'. [ 1414.381886][T29890] bond2: entered promiscuous mode [ 1414.430338][T29890] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1414.461906][T29895] bond2: entered allmulticast mode [ 1414.727310][T19072] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1414.793424][T29890] bond2: (slave bridge2): making interface the new active one [ 1414.813137][T29890] bridge2: entered promiscuous mode [ 1414.819632][T29890] bridge2: entered allmulticast mode [ 1414.862155][T29904] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1414.896095][T19072] usb 7-1: Using ep0 maxpacket: 16 [ 1414.901801][T29890] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 1414.919977][T19072] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1414.932516][T19072] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1414.954267][T19072] usb 7-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1414.986848][T19072] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.080899][T19072] usb 7-1: config 0 descriptor?? [ 1415.161762][T29908] syzkaller0: entered promiscuous mode [ 1415.176469][T29908] syzkaller0: entered allmulticast mode [ 1415.992872][T18762] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1416.029826][T11704] IPVS: starting estimator thread 0... [ 1416.186242][T29927] IPVS: using max 50 ests per chain, 120000 per kthread [ 1416.206077][T18762] usb 5-1: Using ep0 maxpacket: 8 [ 1416.213536][T18762] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1416.234354][T18762] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 0 [ 1416.413945][T18762] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1416.555480][T18762] usb 5-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1416.576063][T18762] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1416.639228][T18762] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1416.662854][T18762] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.682242][T18762] usb 5-1: Product: syz [ 1416.693154][T18762] usb 5-1: Manufacturer: syz [ 1416.704516][T18762] usb 5-1: SerialNumber: syz [ 1416.756058][T18762] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 1416.764868][T18762] usb-storage 5-1:1.0: USB Mass Storage device detected [ 1416.799911][T18762] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1417.033027][T18762] usb 5-1: USB disconnect, device number 83 [ 1417.595600][ T5883] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1417.716774][T19072] usbhid 7-1:0.0: can't add hid device: -71 [ 1417.782632][T19072] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1417.805674][T19072] usb 7-1: USB disconnect, device number 40 [ 1417.875991][ T5883] usb 1-1: Using ep0 maxpacket: 32 [ 1417.924139][ T5883] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1418.132212][ T5883] usb 1-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=58.d6 [ 1418.194387][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.237751][ T5883] usb 1-1: Product: syz [ 1418.242137][ T5883] usb 1-1: Manufacturer: syz [ 1418.295374][ T5883] usb 1-1: SerialNumber: syz [ 1418.626102][ T5883] usb 1-1: config 0 descriptor?? [ 1418.797833][ T5883] snd_usb_variax 1-1:0.0: Line 6 Variax Workbench found [ 1418.804899][ T5883] usb 1-1: selecting invalid altsetting 1 [ 1418.839698][ T5883] snd_usb_variax 1-1:0.0: set_interface failed [ 1418.849128][ T5883] snd_usb_variax 1-1:0.0: Line 6 Variax Workbench now disconnected [ 1418.858422][ T5883] snd_usb_variax 1-1:0.0: probe with driver snd_usb_variax failed with error -22 [ 1420.441529][ T5883] usb 1-1: USB disconnect, device number 64 [ 1421.073886][T29965] loop5: detected capacity change from 0 to 2640 [ 1421.099656][T29965] buffer_io_error: 11 callbacks suppressed [ 1421.099676][T29965] Buffer I/O error on dev loop5, logical block 0, async page read [ 1421.228404][T29972] kvm: kvm [29966]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xbe [ 1421.485940][T29965] Buffer I/O error on dev loop5, logical block 0, async page read [ 1421.493937][T29965] Buffer I/O error on dev loop5, logical block 0, async page read [ 1421.575978][T29965] Buffer I/O error on dev loop5, logical block 0, async page read [ 1421.609212][T29977] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 1421.736465][T29965] loop5: unable to read partition table [ 1421.755783][T29980] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 1421.926252][T29977] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 1421.934811][T29977] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 1421.944195][T29977] Buffer I/O error on dev loop5, logical block 3, lost async page write [ 1421.946378][T29965] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 1422.052758][T29981] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 1422.832739][T29985] kvm: kvm [29983]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 1423.204440][T29985] kvm: kvm [29983]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1423.213502][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.232537][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.323106][T30003] binder: 30002:30003 ioctl c0306201 2000000003c0 returned -14 [ 1423.375306][T30003] binder: 30002:30003 ioctl c0306201 2000000003c0 returned -14 [ 1424.155396][T30015] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6771'. [ 1425.516632][T18761] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 1425.923502][T18761] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1425.932802][T18761] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.951496][T18761] usb 5-1: Product: syz [ 1425.958742][T18761] usb 5-1: Manufacturer: syz [ 1425.964419][T18761] usb 5-1: SerialNumber: syz [ 1426.011513][T30053] ip6t_srh: unknown srh invflags 4000 [ 1426.181816][T18761] usb 5-1: config 0 descriptor?? [ 1426.607347][T18761] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1427.727575][ T29] audit: type=1804 audit(1771754150.491:694): pid=30065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.6784" name="/newroot/195/file1" dev="fuse" ino=1 res=1 errno=0 [ 1428.355809][T18761] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1428.376274][T18761] usb 5-1: USB disconnect, device number 84 [ 1428.704343][T30082] tipc: Enabled bearer , priority 10 [ 1428.976395][T30082] syzkaller0: entered promiscuous mode [ 1429.101247][T30082] syzkaller0: entered allmulticast mode [ 1429.163931][T30082] tipc: Resetting bearer [ 1429.236379][T30080] tipc: Resetting bearer [ 1429.253323][T30089] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1429.665075][T30080] tipc: Disabling bearer [ 1430.754782][T18761] tipc: Node number set to 2565674267 [ 1430.956278][T18761] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1431.707669][T18761] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1431.719846][T18761] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1431.729242][T18761] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1431.837305][T18761] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1431.989581][T18761] usb 5-1: config 0 descriptor?? [ 1432.497153][T19072] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1432.709271][T19072] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1432.727358][T30116] kvm: kvm [30115]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xbe [ 1432.748745][T19072] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1432.785766][T19072] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1432.813294][T19072] usb 1-1: config 0 descriptor?? [ 1432.825380][T19072] pwc: Askey VC010 type 2 USB webcam detected. [ 1433.486935][T19072] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1433.533520][T19072] pwc: recv_control_msg error -32 req 02 val 2700 [ 1433.543642][T19072] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1433.564364][T19072] pwc: recv_control_msg error -32 req 04 val 1000 [ 1433.579136][T19072] pwc: recv_control_msg error -32 req 04 val 1300 [ 1433.749487][T19072] pwc: recv_control_msg error -32 req 04 val 1400 [ 1433.762241][T19072] pwc: recv_control_msg error -32 req 02 val 2000 [ 1433.771271][T19072] pwc: recv_control_msg error -32 req 02 val 2100 [ 1433.798717][T19072] pwc: recv_control_msg error -32 req 04 val 1500 [ 1433.815417][T19072] pwc: recv_control_msg error -32 req 02 val 2500 [ 1433.827306][T19072] pwc: recv_control_msg error -32 req 02 val 2400 [ 1433.850223][T19072] pwc: recv_control_msg error -32 req 02 val 2600 [ 1433.869476][T19072] pwc: recv_control_msg error -32 req 02 val 2900 [ 1434.047643][T19072] pwc: recv_control_msg error -32 req 02 val 2800 [ 1434.066178][T30130] netlink: 'syz.7.6799': attribute type 1 has an invalid length. [ 1434.460533][T19072] pwc: recv_control_msg error -71 req 04 val 1200 [ 1434.482326][T19072] pwc: Registered as video103. [ 1434.526744][T19072] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input99 [ 1434.531738][T30135] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1434.596910][T19072] usb 1-1: USB disconnect, device number 65 [ 1434.976683][T30130] veth5: entered promiscuous mode [ 1435.014286][T30130] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 1435.237452][T30143] netlink: 'syz.6.6801': attribute type 1 has an invalid length. [ 1435.267453][T30139] loop6: detected capacity change from 0 to 2640 [ 1435.404155][T30143] bond2: entered promiscuous mode [ 1435.411132][T30139] buffer_io_error: 326 callbacks suppressed [ 1435.411150][T30139] Buffer I/O error on dev loop6, logical block 0, async page read [ 1435.431890][T30143] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1435.451826][ T29] audit: type=1326 audit(1771754158.211:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30150 comm="syz.0.6803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91799c629 code=0x7ffc0000 [ 1435.451865][T30140] loop6: detected capacity change from 2640 to 524288000 [ 1435.509007][T30152] bond2: (slave bridge1): making interface the new active one [ 1435.554606][T30154] netlink: 76 bytes leftover after parsing attributes in process `syz.7.6802'. [ 1435.656045][T30152] bridge1: entered promiscuous mode [ 1435.662185][ T29] audit: type=1326 audit(1771754158.251:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30150 comm="syz.0.6803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb91799c629 code=0x7ffc0000 [ 1435.696158][T30139] Buffer I/O error on dev loop6, logical block 0, async page read [ 1435.727074][T30152] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 1435.746379][T30139] Buffer I/O error on dev loop6, logical block 0, async page read [ 1435.766120][ T29] audit: type=1326 audit(1771754158.251:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30150 comm="syz.0.6803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91799c629 code=0x7ffc0000 [ 1435.848398][T30139] Buffer I/O error on dev loop6, logical block 0, async page read [ 1435.863160][ T29] audit: type=1326 audit(1771754158.251:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30150 comm="syz.0.6803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91799c629 code=0x7ffc0000 [ 1435.869924][T30139] Buffer I/O error on dev loop6, logical block 0, async page read [ 1435.923852][ T29] audit: type=1326 audit(1771754158.251:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30150 comm="syz.0.6803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fb91799c629 code=0x7ffc0000 [ 1435.955473][T30139] Buffer I/O error on dev loop6, logical block 0, async page read [ 1435.977148][T30139] Buffer I/O error on dev loop6, logical block 0, async page read [ 1435.995571][ T29] audit: type=1326 audit(1771754158.251:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30150 comm="syz.0.6803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91799c629 code=0x7ffc0000 [ 1436.046108][T30139] Buffer I/O error on dev loop6, logical block 0, async page read [ 1436.059939][T30139] ldm_validate_partition_table(): Disk read failed. [ 1436.085394][ T29] audit: type=1326 audit(1771754158.251:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30150 comm="syz.0.6803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91799c629 code=0x7ffc0000 [ 1436.087986][T30139] Buffer I/O error on dev loop6, logical block 0, async page read [ 1436.154437][ T29] audit: type=1326 audit(1771754158.261:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30150 comm="syz.0.6803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb91799c629 code=0x7ffc0000 [ 1436.190347][T30139] Buffer I/O error on dev loop6, logical block 0, async page read [ 1436.200245][T30139] Dev loop6: unable to read RDB block 0 [ 1436.209045][T30139] loop6: unable to read partition table [ 1436.215272][T30139] loop_reread_partitions: partition scan of loop6 (ir¡c‡’ úÒVUŸX¯ÃG¨½›˜ñZtM<IÆ i8NL í á·ùWû@©àQ6ÒÝ%ž…û¥¡Úè) failed (rc=-5) [ 1436.499804][ T29] audit: type=1326 audit(1771754158.261:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30150 comm="syz.0.6803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91799c629 code=0x7ffc0000 [ 1436.592459][ T29] audit: type=1326 audit(1771754158.261:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30150 comm="syz.0.6803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91799c629 code=0x7ffc0000 [ 1438.113051][ T5883] usb 5-1: USB disconnect, device number 85 [ 1440.678907][T18762] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1440.838475][T30210] netlink: 'syz.4.6815': attribute type 1 has an invalid length. [ 1440.862742][T30210] bond9: entered promiscuous mode [ 1440.891356][T30210] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1440.911400][T18762] usb 1-1: Using ep0 maxpacket: 32 [ 1440.937356][T18762] usb 1-1: config 0 has an invalid interface number: 76 but max is 0 [ 1440.946940][T18762] usb 1-1: config 0 has no interface number 0 [ 1440.958097][T30212] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6815'. [ 1440.958538][T18762] usb 1-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 1440.998454][T18762] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.006843][T18762] usb 1-1: Product: syz [ 1441.011028][T18762] usb 1-1: Manufacturer: syz [ 1441.015612][T18762] usb 1-1: SerialNumber: syz [ 1441.077502][T18762] usb 1-1: config 0 descriptor?? [ 1441.088566][T30212] bond9: entered allmulticast mode [ 1441.110749][T18762] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 1441.122823][T18762] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1441.135336][T18762] dvb-usb: bulk message failed: -22 (2/0) [ 1441.143747][T18762] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1441.155407][T18762] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 1441.176782][T18762] usb 1-1: media controller created [ 1441.200257][T18762] dvb-usb: bulk message failed: -22 (6/0) [ 1441.210348][T18762] dw2102: i2c transfer failed. [ 1441.215469][T18762] dvb-usb: bulk message failed: -22 (6/0) [ 1441.221480][T18762] dw2102: i2c transfer failed. [ 1441.226373][T18762] dvb-usb: bulk message failed: -22 (6/0) [ 1441.232223][T18762] dw2102: i2c transfer failed. [ 1441.361334][T18762] dvb-usb: bulk message failed: -22 (6/0) [ 1441.441890][T18762] dw2102: i2c transfer failed. [ 1441.452785][T30210] bond9: (slave bridge0): making interface the new active one [ 1441.461956][T18762] dvb-usb: bulk message failed: -22 (6/0) [ 1441.596115][T30210] bridge0: entered promiscuous mode [ 1441.601720][T30210] bridge0: entered allmulticast mode [ 1441.615960][T18762] dw2102: i2c transfer failed. [ 1441.636072][T18762] dvb-usb: bulk message failed: -22 (6/0) [ 1441.655228][T18762] dw2102: i2c transfer failed. [ 1441.676016][T18762] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1441.682332][T30210] bond9: (slave bridge0): Enslaving as an active interface with an up link [ 1441.715214][T18762] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1441.800390][T18762] dvb-usb: bulk message failed: -22 (3/0) [ 1441.829205][T18762] dw2102: command 0x0e transfer failed. [ 1441.988567][T18762] dvb-usb: bulk message failed: -22 (3/0) [ 1441.994528][T18762] dw2102: command 0x0e transfer failed. [ 1442.616646][T18762] dvb-usb: bulk message failed: -22 (3/0) [ 1442.652554][T18762] dw2102: command 0x0e transfer failed. [ 1442.668891][T18762] dvb-usb: bulk message failed: -22 (3/0) [ 1442.683511][T18762] dw2102: command 0x0e transfer failed. [ 1442.843873][T18762] dvb-usb: bulk message failed: -22 (1/0) [ 1442.856094][T18762] dw2102: command 0x51 transfer failed. [ 1443.181869][T18762] DVB: Unable to find symbol ds3000_attach() [ 1443.203651][T18762] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 1443.481481][T18762] rc_core: IR keymap rc-su3000 not found [ 1443.492689][T18762] Registered IR keymap rc-empty [ 1443.686543][T18762] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 1443.779182][T18762] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input100 [ 1443.802512][T18762] dvb-usb: schedule remote query interval to 150 msecs. [ 1443.810150][T18762] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1443.821413][T18762] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 1443.842239][T18762] usb 1-1: USB disconnect, device number 66 [ 1444.036000][T24786] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1444.527321][T18762] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 1444.837714][T24786] usb 2-1: config 0 has no interfaces? [ 1444.860310][T24786] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1444.887764][T24786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1445.550197][T24786] usb 2-1: config 0 descriptor?? [ 1446.786802][T24786] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1446.820541][T30264] netlink: 'syz.6.6830': attribute type 1 has an invalid length. [ 1446.883996][T30268] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6830'. [ 1446.933248][T30264] bond3: entered promiscuous mode [ 1446.952166][T24786] usb 1-1: too many endpoints for config 0 interface 0 altsetting 144: 127, using maximum allowed: 30 [ 1446.965211][T30264] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1447.004460][T24786] usb 1-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1447.026928][T30268] bond3: entered allmulticast mode [ 1447.067749][T24786] usb 1-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1447.080900][T30264] bond3: (slave bridge2): making interface the new active one [ 1447.097349][T24786] usb 1-1: config 0 interface 0 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 1447.115192][T30264] bridge2: entered promiscuous mode [ 1447.121160][T30264] bridge2: entered allmulticast mode [ 1447.132383][T30264] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 1447.142947][T24786] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1447.155776][T24786] usb 1-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 1447.176689][T24786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1447.203312][T24786] usb 1-1: config 0 descriptor?? [ 1447.236538][ T5883] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1447.400693][ T5883] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1447.411408][ T5883] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1447.536182][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1447.556394][ T5883] usb 5-1: config 0 descriptor?? [ 1447.587017][ T5883] pwc: Askey VC010 type 2 USB webcam detected. [ 1447.752054][T11704] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1447.971724][ T5883] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1447.979134][T11704] usb 7-1: Using ep0 maxpacket: 32 [ 1448.061036][ T5883] pwc: recv_control_msg error -32 req 02 val 2700 [ 1448.099996][ T5883] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1448.108252][T11704] usb 7-1: config 0 has an invalid interface number: 76 but max is 0 [ 1448.122612][ T5883] pwc: recv_control_msg error -32 req 04 val 1000 [ 1448.129478][T11704] usb 7-1: config 0 has no interface number 0 [ 1448.137134][ T5883] pwc: recv_control_msg error -32 req 04 val 1300 [ 1448.144590][ T5883] pwc: recv_control_msg error -32 req 04 val 1400 [ 1448.154168][ T5883] pwc: recv_control_msg error -32 req 02 val 2000 [ 1448.166356][ T5883] pwc: recv_control_msg error -32 req 02 val 2100 [ 1448.167903][T24786] uclogic 0003:5543:004D.0042: failed retrieving Huion firmware version: -71 [ 1448.184704][T11704] usb 7-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 1448.198533][T27658] usb 2-1: USB disconnect, device number 43 [ 1448.211492][ T5883] pwc: recv_control_msg error -32 req 04 val 1500 [ 1448.229471][T11704] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.247233][ T5883] pwc: recv_control_msg error -32 req 02 val 2500 [ 1448.264120][T11704] usb 7-1: Product: syz [ 1448.269408][ T5883] pwc: recv_control_msg error -32 req 02 val 2400 [ 1448.276153][T11704] usb 7-1: Manufacturer: syz [ 1448.286685][ T5883] pwc: recv_control_msg error -32 req 02 val 2600 [ 1448.293340][T11704] usb 7-1: SerialNumber: syz [ 1448.298707][ T5883] pwc: recv_control_msg error -32 req 02 val 2900 [ 1448.306412][ T5883] pwc: recv_control_msg error -32 req 02 val 2800 [ 1448.334841][T24786] uclogic 0003:5543:004D.0042: failed probing parameters: -71 [ 1448.344401][T24786] uclogic 0003:5543:004D.0042: probe with driver uclogic failed with error -71 [ 1448.369951][T11704] usb 7-1: config 0 descriptor?? [ 1448.505997][T11704] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 1448.547114][ T5883] pwc: recv_control_msg error -71 req 04 val 1200 [ 1448.564020][ T5883] pwc: Registered as video103. [ 1448.568942][T11704] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1448.587515][T11704] dvb-usb: bulk message failed: -22 (2/0) [ 1448.655393][ T5883] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input101 [ 1448.667248][T11704] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1448.672708][T24786] usb 1-1: USB disconnect, device number 67 [ 1448.978916][T11704] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 1448.999858][ T5883] usb 5-1: USB disconnect, device number 86 [ 1449.034059][T11704] usb 7-1: media controller created [ 1449.039538][T11704] dvb-usb: bulk message failed: -22 (6/0) [ 1449.054455][T11704] dw2102: i2c transfer failed. [ 1449.114644][T11704] dvb-usb: bulk message failed: -22 (6/0) [ 1449.129674][T11704] dw2102: i2c transfer failed. [ 1449.251974][T11704] dvb-usb: bulk message failed: -22 (6/0) [ 1449.356013][T11704] dw2102: i2c transfer failed. [ 1449.371590][T11704] dvb-usb: bulk message failed: -22 (6/0) [ 1449.392249][T11704] dw2102: i2c transfer failed. [ 1449.410772][T11704] dvb-usb: bulk message failed: -22 (6/0) [ 1449.433116][T11704] dw2102: i2c transfer failed. [ 1449.454295][T11704] dvb-usb: bulk message failed: -22 (6/0) [ 1449.463000][T11704] dw2102: i2c transfer failed. [ 1449.469434][T11704] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1449.545439][T11704] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1449.577919][T11704] dvb-usb: bulk message failed: -22 (3/0) [ 1449.587882][T11704] dw2102: command 0x0e transfer failed. [ 1449.593786][T11704] dvb-usb: bulk message failed: -22 (3/0) [ 1449.603459][T11704] dw2102: command 0x0e transfer failed. [ 1449.661997][T30294] syzkaller0: entered promiscuous mode [ 1449.690391][T30294] syzkaller0: entered allmulticast mode [ 1449.926164][T11704] dvb-usb: bulk message failed: -22 (3/0) [ 1450.119815][T11704] dw2102: command 0x0e transfer failed. [ 1450.126954][T11704] dvb-usb: bulk message failed: -22 (3/0) [ 1450.136498][T11704] dw2102: command 0x0e transfer failed. [ 1450.144817][T11704] dvb-usb: bulk message failed: -22 (1/0) [ 1450.160854][T11704] dw2102: command 0x51 transfer failed. [ 1450.310398][T11704] DVB: Unable to find symbol ds3000_attach() [ 1450.321345][T11704] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 1450.536042][T11704] rc_core: IR keymap rc-su3000 not found [ 1450.542123][T11704] Registered IR keymap rc-empty [ 1450.579015][T11704] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 1450.635675][T11704] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input102 [ 1450.681767][T11704] dvb-usb: schedule remote query interval to 150 msecs. [ 1450.714583][T11704] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1450.728237][T11704] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 1450.870690][T11704] dvb-usb: bulk message failed: -22 (1/0) [ 1450.878052][T11704] dw2102: i2c transfer failed. [ 1451.004773][T18762] usb 7-1: USB disconnect, device number 41 [ 1451.463833][T18762] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 1452.544557][T30321] netlink: 72 bytes leftover after parsing attributes in process `syz.6.6843'. [ 1452.797635][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 1452.797656][ T29] audit: type=1326 audit(1771754175.561:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30323 comm="syz.4.6844" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f806979c629 code=0x0 [ 1456.863363][T30355] fuse: Bad value for 'fd' [ 1458.211958][T30313] tipc: Enabling of bearer rejected, already enabled [ 1458.226613][T30354] lo: Caught tx_queue_len zero misconfig [ 1458.449713][T30358] syzkaller0: entered promiscuous mode [ 1458.464794][T30358] syzkaller0: entered allmulticast mode [ 1458.487428][T30366] kernel read not supported for file /¡sxt (pid: 30366 comm: syz.0.6856) [ 1458.502900][T30358] 0: reclassify loop, rule prio 0, protocol 800 [ 1458.512092][T30364] create_pit_timer: 7 callbacks suppressed [ 1458.512112][T30364] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1458.533205][ T29] audit: type=1800 audit(1771754181.291:732): pid=30366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6856" name=A17378741A dev="mqueue" ino=182597 res=0 errno=0 [ 1458.556889][T30364] picdev_read: 26 callbacks suppressed [ 1458.556965][T30364] kvm: pic: non byte read [ 1458.569399][T30364] kvm: pic: level sensitive irq not supported [ 1458.569568][T30364] kvm: pic: non byte read [ 1458.627481][T30364] kvm: pic: level sensitive irq not supported [ 1458.627592][T30364] kvm: pic: non byte read [ 1458.639679][T30364] kvm: pic: level sensitive irq not supported [ 1458.639883][T30364] kvm: pic: non byte read [ 1458.652759][T30364] kvm: pic: level sensitive irq not supported [ 1458.652949][T30364] kvm: pic: non byte read [ 1458.756064][T11704] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1458.969565][T11704] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1458.994840][T11704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1459.014179][T11704] usb 2-1: config 0 descriptor?? [ 1459.038982][T11704] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1459.395649][T30383] netlink: 'syz.6.6859': attribute type 1 has an invalid length. [ 1459.516968][T30385] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6859'. [ 1460.026075][T11704] gspca_spca508: reg_read err -110 [ 1460.126941][T11704] gspca_spca508: reg_read err -32 [ 1460.134088][T30383] bond4: entered promiscuous mode [ 1460.206078][T11704] gspca_spca508: reg_read err -32 [ 1460.292646][T11704] gspca_spca508: reg_read err -32 [ 1460.308966][T11704] gspca_spca508: reg write: error -32 [ 1460.309431][T30383] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1460.325333][T11704] spca508 2-1:0.0: probe with driver spca508 failed with error -32 [ 1460.623985][T30385] bond4: entered allmulticast mode [ 1460.707944][T30388] bond4: (slave bridge3): making interface the new active one [ 1460.730516][T30388] bridge3: entered promiscuous mode [ 1460.749564][T30388] bridge3: entered allmulticast mode [ 1460.789048][T30388] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 1461.002307][T24786] usb 2-1: USB disconnect, device number 44 [ 1461.226163][T30392] syzkaller0: entered promiscuous mode [ 1461.231800][T30392] syzkaller0: entered allmulticast mode [ 1461.269039][T30394] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6860'. [ 1461.763682][T30403] syzkaller0: entered promiscuous mode [ 1461.779397][ T29] audit: type=1326 audit(1771754184.541:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30398 comm="syz.0.6863" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb91799c629 code=0x0 [ 1461.805243][T30403] syzkaller0: entered allmulticast mode [ 1461.831312][T30405] sctp: [Deprecated]: syz.0.6863 (pid 30405) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1461.831312][T30405] Use struct sctp_sack_info instead [ 1462.881748][T30422] netlink: 'syz.0.6868': attribute type 1 has an invalid length. [ 1463.191625][T30429] netlink: 'syz.6.6870': attribute type 1 has an invalid length. [ 1463.191769][T30415] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6868'. [ 1463.272265][T30431] gretap1: entered allmulticast mode [ 1463.272909][T30432] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6870'. [ 1463.320990][T30431] bond4: (slave gretap1): making interface the new active one [ 1463.535661][T30431] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 1463.707071][T30429] bond5: entered promiscuous mode [ 1463.733989][T30429] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1463.755163][T30432] bond5: entered allmulticast mode [ 1463.822757][T30440] bond5: (slave bridge4): making interface the new active one [ 1463.845066][T30440] bridge4: entered promiscuous mode [ 1463.888635][T30440] bridge4: entered allmulticast mode [ 1463.894827][T30440] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 1463.960603][T30447] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6874'. [ 1463.986831][T30447] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6874'. [ 1463.996184][T30447] netlink: 6 bytes leftover after parsing attributes in process `syz.4.6874'. [ 1464.107716][T30447] netlink: 6 bytes leftover after parsing attributes in process `syz.4.6874'. [ 1464.207434][T30449] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1464.241448][T30449] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1464.471751][T30449] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1464.479360][T30449] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1464.498650][T30449] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1464.512751][T30449] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1464.519796][T30449] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1464.533936][T30449] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1464.544904][T30449] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1464.562715][T30449] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1464.569695][T30449] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1464.935018][ T29] audit: type=1400 audit(1771754187.691:734): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="\" pid=30463 comm="syz.6.6878" [ 1464.954336][T30468] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6878'. [ 1465.005922][T30468] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6878'. [ 1465.176175][T11704] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1465.189383][T30473] syzkaller0: entered promiscuous mode [ 1465.195326][T30473] syzkaller0: entered allmulticast mode [ 1465.489267][T11704] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1465.525997][T11704] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1465.556685][T11704] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1465.570866][T11704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1465.726516][T11704] usb 5-1: SerialNumber: syz [ 1466.018216][T11704] usb 5-1: 0:2 : does not exist [ 1466.036041][T11704] usb 5-1: unit 255 not found! [ 1466.087028][T11704] usb 5-1: 5:0: cannot get min/max values for control 17 (id 5) [ 1466.226131][T23111] Bluetooth: hci2: command 0x0406 tx timeout [ 1466.282557][T11704] usb 5-1: USB disconnect, device number 87 [ 1466.546211][T23111] Bluetooth: hci1: command 0x0406 tx timeout [ 1466.546261][ T5827] Bluetooth: hci4: command 0x0406 tx timeout [ 1466.552282][T23111] Bluetooth: hci3: command 0x0406 tx timeout [ 1466.616513][T23111] Bluetooth: hci5: command 0x0406 tx timeout [ 1468.263963][T27658] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1468.296055][T23111] Bluetooth: hci2: command 0x0406 tx timeout [ 1468.388992][ T5883] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1468.416327][T27658] usb 7-1: Using ep0 maxpacket: 8 [ 1468.423464][T27658] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1468.432344][T27658] usb 7-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 1468.478341][T27658] usb 7-1: config 179 has no interface number 0 [ 1468.495063][T27658] usb 7-1: config 179 interface 65 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 1468.546119][T27658] usb 7-1: config 179 interface 65 has no altsetting 0 [ 1468.582400][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1468.592442][T27658] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1468.610621][ T5883] usb 1-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 1468.620398][T27316] Bluetooth: hci1: command 0x0406 tx timeout [ 1468.622137][T27658] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1468.626690][T27316] Bluetooth: hci3: command 0x0406 tx timeout [ 1468.643068][T23111] Bluetooth: hci4: command 0x0406 tx timeout [ 1468.655007][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1468.699456][T30507] Bluetooth: hci5: command 0x0406 tx timeout [ 1468.742082][ T5883] usb 1-1: config 0 descriptor?? [ 1468.987590][T27658] usb 7-1: USB disconnect, device number 42 [ 1468.997472][T30506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6887'. [ 1469.141164][T18761] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1469.360004][T18761] usb 2-1: Using ep0 maxpacket: 8 [ 1469.373542][T18761] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1469.382344][T18761] usb 2-1: config 0 has no interface number 0 [ 1469.390890][T18761] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1469.402397][T18761] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1469.415656][T18761] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1469.427027][T18761] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1469.441198][T18761] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1469.450418][T18761] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.474820][T18761] usb 2-1: config 0 descriptor?? [ 1469.519239][T18761] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1469.601137][T27658] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 1469.773540][T27658] usb 5-1: config 8 has an invalid interface number: 80 but max is 0 [ 1469.783081][T27658] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1469.809843][T27658] usb 5-1: config 8 has no interface number 0 [ 1469.817271][T27658] usb 5-1: config 8 interface 80 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 1469.822859][T18761] usb 2-1: USB disconnect, device number 45 [ 1469.830862][ C1] ldusb 2-1:0.55: usb_submit_urb failed (-19) [ 1469.837784][T27658] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 1469.856164][T30518] ldusb 2-1:0.55: Couldn't submit interrupt_out_urb -19 [ 1469.881398][T27658] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.890773][T18761] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1469.928435][T27658] usb 5-1: NFC: intf ffff8880601ae000 id ffffffff8f1d0c40 [ 1470.699007][T30507] Bluetooth: hci3: command 0x0406 tx timeout [ 1471.025426][T30532] xt_hashlimit: max too large, truncated to 1048576 [ 1472.624836][T27658] usb 5-1: USB disconnect, device number 88 [ 1472.810194][T30542] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6897'. [ 1473.207672][T27658] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1473.379043][T27658] usb 2-1: Using ep0 maxpacket: 32 [ 1473.400432][T27658] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1473.415999][T27658] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.434702][T27658] usb 2-1: Product: syz [ 1473.445988][T27658] usb 2-1: Manufacturer: syz [ 1473.450933][T27658] usb 2-1: SerialNumber: syz [ 1473.471891][T27658] usb 2-1: config 0 descriptor?? [ 1473.813625][T27658] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 046 [ 1473.832713][ T5883] usbhid 1-1:0.0: can't add hid device: -32 [ 1473.843793][ T5883] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 1474.079464][T30540] m920x_read = error: -19 [ 1474.967480][T30506] macvtap1: entered promiscuous mode [ 1474.972992][T30506] bond0: entered promiscuous mode [ 1474.979385][T30506] bond_slave_0: entered promiscuous mode [ 1474.985453][T30506] bond_slave_1: entered promiscuous mode [ 1474.993135][T30506] vxlan0: entered promiscuous mode [ 1475.014196][T30506] mac80211_hwsim hwsim47 wlan1: entered promiscuous mode [ 1475.041582][T30506] syz_tun: entered promiscuous mode [ 1475.048332][T30506] macvtap1: entered allmulticast mode [ 1475.063893][T30506] bond0: entered allmulticast mode [ 1475.079914][T30506] bond_slave_0: entered allmulticast mode [ 1475.093208][T30506] bond_slave_1: entered allmulticast mode [ 1475.101417][T30506] vxlan0: entered allmulticast mode [ 1475.107157][T30506] mac80211_hwsim hwsim47 wlan1: entered allmulticast mode [ 1475.114578][T30506] syz_tun: entered allmulticast mode [ 1475.122915][T30506] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1475.141764][T30511] bond0: left allmulticast mode [ 1475.147006][T30511] bond_slave_0: left allmulticast mode [ 1475.152721][T30511] bond_slave_1: left allmulticast mode [ 1475.159386][T30511] vxlan0: left allmulticast mode [ 1475.164568][T30511] mac80211_hwsim hwsim47 wlan1: left allmulticast mode [ 1475.171990][T30511] syz_tun: left allmulticast mode [ 1475.181812][T30511] bond0: left promiscuous mode [ 1475.187043][T30511] bond_slave_0: left promiscuous mode [ 1475.193938][T30511] bond_slave_1: left promiscuous mode [ 1475.200628][T30511] vxlan0: left promiscuous mode [ 1475.207749][T30511] mac80211_hwsim hwsim47 wlan1: left promiscuous mode [ 1475.215111][T30511] syz_tun: left promiscuous mode [ 1475.226689][T30542] kthread_run failed with err -4 [ 1475.232534][T30546] bond0: Caught tx_queue_len zero misconfig [ 1475.273123][T30547] veth15: entered allmulticast mode [ 1475.372736][T30559] syzkaller0: entered promiscuous mode [ 1475.396365][T30559] syzkaller0: entered allmulticast mode [ 1475.412501][T27658] usb 1-1: USB disconnect, device number 68 [ 1475.461717][T30564] syzkaller0: entered promiscuous mode [ 1475.478268][T30564] syzkaller0: entered allmulticast mode [ 1475.880968][T18761] usb 2-1: USB disconnect, device number 46 [ 1481.856113][T18761] usb 2-1: new low-speed USB device number 47 using dummy_hcd [ 1482.032334][T18761] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1482.040876][T18761] usb 2-1: config 0 has no interface number 0 [ 1482.054885][T18761] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1482.068495][T18761] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1482.080723][T18761] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1482.092996][T18761] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1482.104495][T18761] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1482.116108][T18761] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1482.129695][T18761] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1482.141251][T18761] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.157647][T18761] usb 2-1: config 0 descriptor?? [ 1482.178193][T30604] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1482.197954][T30604] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1482.225277][T18761] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1482.496388][T27658] usb 2-1: USB disconnect, device number 47 [ 1482.508342][T27658] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1483.477663][T30624] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6915'. [ 1483.888336][T30624] loop2: detected capacity change from 0 to 7 [ 1484.079127][T30607] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1484.285919][T30607] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1484.296411][T30607] Dev loop2: unable to read RDB block 7 [ 1484.348378][T30607] loop2: unable to read partition table [ 1484.354543][T30607] loop2: partition table beyond EOD, truncated [ 1484.372061][T30624] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1484.382552][ T5883] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 1484.402900][T30624] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1484.413365][T30624] Dev loop2: unable to read RDB block 7 [ 1484.420293][T30624] loop2: unable to read partition table [ 1484.430756][T30624] loop2: partition table beyond EOD, truncated [ 1484.440215][T30624] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1484.654701][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.661457][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.676226][ T5883] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 1484.684596][ T5883] usb 1-1: config 8 has no interface number 0 [ 1484.698537][ T5883] usb 1-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1484.711199][ T5883] usb 1-1: config 8 interface 223 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1484.727948][ T5883] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1484.766800][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.774981][ T5883] usb 1-1: Product: syz [ 1484.779310][ T5883] usb 1-1: Manufacturer: syz [ 1484.784007][ T5883] usb 1-1: SerialNumber: syz [ 1485.030379][ T5883] usb 1-1: USB disconnect, device number 69 [ 1485.043428][T18761] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 1485.247845][T18761] usb 5-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 1485.266077][T18761] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1485.284009][T18761] usb 5-1: config 0 descriptor?? [ 1485.554559][T30640] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6918'. [ 1485.720639][T18761] chicony 0003:04F2:1236.0043: unknown main item tag 0x0 [ 1485.730634][T18761] chicony 0003:04F2:1236.0043: unknown main item tag 0x0 [ 1485.745978][T18761] chicony 0003:04F2:1236.0043: unknown main item tag 0x0 [ 1485.778446][T18761] chicony 0003:04F2:1236.0043: unknown main item tag 0x0 [ 1485.815546][T18761] chicony 0003:04F2:1236.0043: unknown main item tag 0x0 [ 1485.847144][T18761] chicony 0003:04F2:1236.0043: hidraw0: USB HID v1.01 Device [HID 04f2:1236] on usb-dummy_hcd.4-1/input0 [ 1485.985409][T18761] usb 5-1: USB disconnect, device number 89 [ 1486.192937][T30644] fido_id[30644]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1486.258714][T30646] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6921'. [ 1486.435323][T30646] bridge0: entered promiscuous mode [ 1486.450471][T30646] macvtap1: entered promiscuous mode [ 1486.456272][T30646] macvtap1: entered allmulticast mode [ 1486.462532][T30646] bridge0: entered allmulticast mode [ 1486.500224][T30647] bridge0: left allmulticast mode [ 1486.505719][T30647] bridge0: left promiscuous mode [ 1487.101865][T30655] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1489.807943][ T1018] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 1489.829646][ T1018] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 1489.839102][ T1018] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 1489.852729][ T1018] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 1489.881660][T30692] syzkaller0: entered promiscuous mode [ 1489.895237][T30692] syzkaller0: entered allmulticast mode [ 1491.753519][T30716] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6938'. [ 1492.595142][T30718] vxcan1: entered promiscuous mode [ 1492.765660][T30724] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6939'. [ 1492.888751][T30726] netlink: 'syz.6.6942': attribute type 1 has an invalid length. [ 1492.913065][T30722] syzkaller0: entered promiscuous mode [ 1492.918769][T30722] syzkaller0: entered allmulticast mode [ 1492.932732][T30722] 0: reclassify loop, rule prio 0, protocol 700 [ 1492.988314][T30726] bond6: entered promiscuous mode [ 1492.997412][T30726] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1493.055155][T30726] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6942'. [ 1493.120279][T30726] bond6: entered allmulticast mode [ 1493.143811][T30726] bond6: (slave bridge5): making interface the new active one [ 1493.153272][T30726] bridge5: entered promiscuous mode [ 1493.159579][T30726] bridge5: entered allmulticast mode [ 1493.167077][T30726] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 1493.816846][T18762] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1494.009783][T18762] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1494.037583][T18762] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1494.069273][T18762] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1494.146430][T18762] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1494.352224][T18762] usb 2-1: config 0 descriptor?? [ 1496.020330][T18762] usbhid 2-1:0.0: can't add hid device: -71 [ 1496.036067][T18762] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1496.063827][T18762] usb 2-1: USB disconnect, device number 48 [ 1496.161850][T30757] kvm: kvm [30756]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x1000000f0 [ 1496.204350][T30766] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6950'. [ 1496.213501][T30766] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6950'. [ 1496.222668][ T29] audit: type=1400 audit(1771754218.951:735): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="\" pid=30759 comm="syz.7.6950" [ 1496.344883][T30757] kvm: kvm [30756]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1496.385503][T30757] kvm: kvm [30756]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x44 [ 1498.541032][T30777] netlink: 'syz.4.6954': attribute type 1 has an invalid length. [ 1499.166952][T30795] Lens A: ================= START STATUS ================= [ 1499.174686][T30795] Lens A: Focus, Absolute: 0 [ 1499.179994][T30795] Lens A: ================== END STATUS ================== [ 1503.415023][T30507] Bluetooth: hci1: unexpected subevent 0x0e length: 248 > 15 [ 1503.423417][T30507] Bluetooth: hci1: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 1503.805533][T30852] netlink: 'syz.0.6973': attribute type 1 has an invalid length. [ 1503.921616][T30857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6973'. [ 1503.959803][T30852] bond5: entered promiscuous mode [ 1503.990897][T30852] bond5: entered allmulticast mode [ 1504.005467][T30852] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1504.108357][T30854] erspan1: entered allmulticast mode [ 1504.160809][T30854] bond5: (slave erspan1): making interface the new active one [ 1504.182065][T30854] erspan1: entered promiscuous mode [ 1504.191295][T30854] [ 1504.193949][T30854] ============================================ [ 1504.200293][T30854] WARNING: possible recursive locking detected [ 1504.206578][T30854] syzkaller #0 Tainted: G L [ 1504.212568][T30854] -------------------------------------------- [ 1504.218824][T30854] syz.0.6973/30854 is trying to acquire lock: [ 1504.224995][T30854] ffff888020b21d58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 1504.234879][T30854] [ 1504.234879][T30854] but task is already holding lock: [ 1504.242258][T30854] ffff88807b05c158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 1504.252120][T30854] [ 1504.252120][T30854] other info that might help us debug this: [ 1504.260283][T30854] Possible unsafe locking scenario: [ 1504.260283][T30854] [ 1504.267835][T30854] CPU0 [ 1504.271117][T30854] ---- [ 1504.274391][T30854] lock(&qdisc_xmit_lock_key#4); [ 1504.279426][T30854] lock(&qdisc_xmit_lock_key#4); [ 1504.284463][T30854] [ 1504.284463][T30854] *** DEADLOCK *** [ 1504.284463][T30854] [ 1504.292693][T30854] May be due to missing lock nesting notation [ 1504.292693][T30854] [ 1504.301030][T30854] 10 locks held by syz.0.6973/30854: [ 1504.306316][T30854] #0: ffffffff90132748 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1504.315838][T30854] #1: ffffffff8fbcc348 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 1504.324911][T30854] #2: ffffffff8e760340 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x274/0x38a0 [ 1504.334850][T30854] #3: ffff888066aa4228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x1002/0x38a0 [ 1504.347488][T30854] #4: ffff88807b05c158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 1504.357868][T30854] #5: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 1504.366849][T30854] #6: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3c2/0x1070 [ 1504.377130][T30854] #7: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 1504.385934][T30854] #8: ffffffff8e760340 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x274/0x38a0 [ 1504.395871][T30854] #9: ffff888048f22228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x1002/0x38a0 [ 1504.408505][T30854] [ 1504.408505][T30854] stack backtrace: [ 1504.414509][T30854] CPU: 1 UID: 0 PID: 30854 Comm: syz.0.6973 Tainted: G L syzkaller #0 PREEMPT(full) [ 1504.414532][T30854] Tainted: [L]=SOFTLOCKUP [ 1504.414539][T30854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1504.414550][T30854] Call Trace: [ 1504.414559][T30854] [ 1504.414567][T30854] dump_stack_lvl+0xe8/0x150 [ 1504.414591][T30854] print_deadlock_bug+0x279/0x290 [ 1504.414615][T30854] __lock_acquire+0x253f/0x2cf0 [ 1504.414637][T30854] ? skb_network_protocol+0x23d/0x3f0 [ 1504.414662][T30854] ? netif_skb_features+0x9bc/0xe40 [ 1504.414687][T30854] ? validate_xmit_skb+0xc5f/0x14a0 [ 1504.414712][T30854] lock_acquire+0xf0/0x2e0 [ 1504.414732][T30854] ? sch_direct_xmit+0x15f/0x4c0 [ 1504.414753][T30854] _raw_spin_lock+0x2e/0x40 [ 1504.414773][T30854] ? sch_direct_xmit+0x15f/0x4c0 [ 1504.414788][T30854] sch_direct_xmit+0x15f/0x4c0 [ 1504.414805][T30854] ? __pfx_sch_direct_xmit+0x10/0x10 [ 1504.414822][T30854] ? arp_create+0x120/0xa00 [ 1504.414842][T30854] ? arp_send_dst+0xa7/0x2a0 [ 1504.414865][T30854] __dev_queue_xmit+0x1538/0x38a0 [ 1504.414891][T30854] ? __dev_queue_xmit+0x274/0x38a0 [ 1504.414916][T30854] ? arpt_do_table+0x261/0x1ec0 [ 1504.414936][T30854] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1504.414962][T30854] ? __pfx_arpt_do_table+0x10/0x10 [ 1504.414981][T30854] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1504.415011][T30854] ? NF_HOOK+0xa2/0x3c0 [ 1504.415033][T30854] NF_HOOK+0x33a/0x3c0 [ 1504.415055][T30854] ? __pfx_arp_xmit_finish+0x10/0x10 [ 1504.415076][T30854] ? NF_HOOK+0xa2/0x3c0 [ 1504.415096][T30854] ? __pfx_NF_HOOK+0x10/0x10 [ 1504.415123][T30854] ? __pfx_arp_xmit_finish+0x10/0x10 [ 1504.415148][T30854] arp_xmit+0x16c/0x270 [ 1504.415168][T30854] ? arp_xmit+0x23/0x270 [ 1504.415188][T30854] arp_solicit+0xbe0/0xe40 [ 1504.415212][T30854] ? arp_solicit+0x119/0xe40 [ 1504.415235][T30854] ? __pfx_arp_solicit+0x10/0x10 [ 1504.415259][T30854] ? __neigh_event_send+0xe9d/0x1530 [ 1504.415278][T30854] ? __pfx_arp_solicit+0x10/0x10 [ 1504.415300][T30854] __neigh_event_send+0xf05/0x1530 [ 1504.415322][T30854] neigh_resolve_output+0x198/0x750 [ 1504.415341][T30854] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 1504.415366][T30854] ? ip_finish_output2+0x3c2/0x1070 [ 1504.415387][T30854] ip_finish_output2+0xca9/0x1070 [ 1504.415411][T30854] ? ip_skb_dst_mtu+0x109/0xa50 [ 1504.415432][T30854] ? ip_finish_output+0x33a/0x3f0 [ 1504.415452][T30854] ip_output+0x29f/0x450 [ 1504.415471][T30854] ? ip_output+0x5b/0x450 [ 1504.415491][T30854] iptunnel_xmit+0x59f/0xa00 [ 1504.415509][T30854] ip_tunnel_xmit+0x193a/0x1f20 [ 1504.415537][T30854] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 1504.415560][T30854] ? __pfx_gre_build_header+0x10/0x10 [ 1504.415580][T30854] ? kmem_cache_free+0x187/0x630 [ 1504.415595][T30854] ? pskb_expand_head+0x4bb/0x1320 [ 1504.415620][T30854] __gre_xmit+0x19e/0x240 [ 1504.415639][T30854] ? __pfx___gre_xmit+0x10/0x10 [ 1504.415661][T30854] erspan_xmit+0xa81/0x1670 [ 1504.415685][T30854] ? __pfx_erspan_xmit+0x10/0x10 [ 1504.415708][T30854] dev_hard_start_xmit+0x2d8/0x870 [ 1504.415735][T30854] sch_direct_xmit+0x251/0x4c0 [ 1504.415753][T30854] ? __pfx_sch_direct_xmit+0x10/0x10 [ 1504.415769][T30854] ? bond_select_active_slave+0x8a0/0xd40 [ 1504.415792][T30854] ? bond_enslave+0x22a5/0x3c40 [ 1504.415815][T30854] __dev_queue_xmit+0x1538/0x38a0 [ 1504.415844][T30854] ? __dev_queue_xmit+0x274/0x38a0 [ 1504.415875][T30854] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1504.415900][T30854] ? rcu_is_watching+0x15/0xb0 [ 1504.415921][T30854] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1504.415945][T30854] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 1504.415973][T30854] ? alb_send_lp_vid+0x14e/0x550 [ 1504.415998][T30854] alb_send_lp_vid+0x348/0x550 [ 1504.416021][T30854] ? dev_addr_mod+0x354/0x520 [ 1504.416044][T30854] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 1504.416074][T30854] ? __pfx_alb_set_slave_mac_addr+0x10/0x10 [ 1504.416105][T30854] alb_send_learning_packets+0x12c/0x300 [ 1504.416130][T30854] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 1504.416155][T30854] ? alb_swap_mac_addr+0x230/0x340 [ 1504.416179][T30854] alb_fasten_mac_swap+0x639/0xf60 [ 1504.416205][T30854] bond_alb_handle_active_change+0xc6d/0xf30 [ 1504.416230][T30854] ? __pfx_bond_alb_handle_active_change+0x10/0x10 [ 1504.416261][T30854] ? __local_bh_enable_ip+0xd0/0x130 [ 1504.416286][T30854] bond_change_active_slave+0x106e/0x35f0 [ 1504.416314][T30854] ? __pfx_bond_change_active_slave+0x10/0x10 [ 1504.416336][T30854] ? try_to_wake_up+0x7fc/0x1390 [ 1504.416355][T30854] ? __queue_work+0x1a1/0x1020 [ 1504.416378][T30854] ? __queue_work+0xc76/0x1020 [ 1504.416400][T30854] ? mod_delayed_work_on+0xdf/0x190 [ 1504.416424][T30854] bond_select_active_slave+0x909/0xd40 [ 1504.416448][T30854] ? __pfx_bond_select_active_slave+0x10/0x10 [ 1504.416471][T30854] ? __pfx_bond_set_carrier+0x10/0x10 [ 1504.416492][T30854] ? netdev_is_rx_handler_busy+0x56/0x120 [ 1504.416508][T30854] ? __pfx_bond_handle_frame+0x10/0x10 [ 1504.416532][T30854] bond_enslave+0x22a5/0x3c40 [ 1504.416553][T30854] ? sock_def_readable+0x2ff/0x580 [ 1504.416576][T30854] ? __pfx_bond_enslave+0x10/0x10 [ 1504.416602][T30854] ? __pfx___dev_notify_flags+0x10/0x10 [ 1504.416622][T30854] ? __dev_change_flags+0x51e/0x690 [ 1504.416643][T30854] ? mutex_is_locked+0x17/0x50 [ 1504.416667][T30854] do_set_master+0x533/0x6d0 [ 1504.416691][T30854] rtnl_newlink_create+0x6af/0xb70 [ 1504.416716][T30854] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1504.416738][T30854] ? __pfx___mutex_lock+0x10/0x10 [ 1504.416756][T30854] ? ns_capable+0x89/0xe0 [ 1504.416777][T30854] rtnl_newlink+0x1666/0x1be0 [ 1504.416800][T30854] ? __pfx_rtnl_newlink+0x10/0x10 [ 1504.416821][T30854] ? __lock_acquire+0x6b5/0x2cf0 [ 1504.416842][T30854] ? __lock_acquire+0x6b5/0x2cf0 [ 1504.416861][T30854] ? __lock_acquire+0x6b5/0x2cf0 [ 1504.416883][T30854] ? unwind_next_frame+0xa5/0x23c0 [ 1504.416912][T30854] ? __lock_acquire+0x6b5/0x2cf0 [ 1504.416931][T30854] ? is_bpf_text_address+0x26/0x2b0 [ 1504.416948][T30854] ? kernel_text_address+0xa5/0xe0 [ 1504.416972][T30854] ? __pfx_rtnl_newlink+0x10/0x10 [ 1504.416991][T30854] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1504.417011][T30854] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1504.417029][T30854] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1504.417049][T30854] ? __lock_acquire+0x6b5/0x2cf0 [ 1504.417070][T30854] netlink_rcv_skb+0x232/0x4b0 [ 1504.417088][T30854] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1504.417114][T30854] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1504.417134][T30854] ? netlink_deliver_tap+0x2e/0x1b0 [ 1504.417154][T30854] netlink_unicast+0x80f/0x9b0 [ 1504.417172][T30854] ? __pfx_netlink_unicast+0x10/0x10 [ 1504.417188][T30854] ? netlink_sendmsg+0x650/0xb40 [ 1504.417205][T30854] ? skb_put+0x11b/0x210 [ 1504.417226][T30854] netlink_sendmsg+0x813/0xb40 [ 1504.417247][T30854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1504.417266][T30854] ? __se_sys_ioctl+0x47/0x170 [ 1504.417282][T30854] ? do_syscall_64+0x14d/0xf80 [ 1504.417304][T30854] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1504.417323][T30854] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1504.417340][T30854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1504.417359][T30854] ____sys_sendmsg+0xa68/0xad0 [ 1504.417383][T30854] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1504.417408][T30854] ? import_iovec+0x73/0xa0 [ 1504.417430][T30854] ___sys_sendmsg+0x2a5/0x360 [ 1504.417453][T30854] ? __pfx____sys_sendmsg+0x10/0x10 [ 1504.417477][T30854] ? tomoyo_path_number_perm+0x219/0x630 [ 1504.417501][T30854] ? __fget_files+0x2a/0x420 [ 1504.417522][T30854] ? __fget_files+0x3a0/0x420 [ 1504.417546][T30854] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1504.417569][T30854] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1504.417590][T30854] ? rcu_is_watching+0x15/0xb0 [ 1504.417614][T30854] ? __pfx_kcov_ioctl+0x10/0x10 [ 1504.417639][T30854] do_syscall_64+0x14d/0xf80 [ 1504.417662][T30854] ? trace_irq_disable+0x3b/0x150 [ 1504.417686][T30854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1504.417702][T30854] ? clear_bhb_loop+0x40/0x90 [ 1504.417720][T30854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1504.417736][T30854] RIP: 0033:0x7fb91799c629 [ 1504.417754][T30854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1504.417769][T30854] RSP: 002b:00007fb91887e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1504.417789][T30854] RAX: ffffffffffffffda RBX: 00007fb917c16090 RCX: 00007fb91799c629 [ 1504.417801][T30854] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1504.417812][T30854] RBP: 00007fb917a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1504.417822][T30854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1504.417832][T30854] R13: 00007fb917c16128 R14: 00007fb917c16090 R15: 00007fb917d3fa48 [ 1504.417849][T30854] [ 1505.333071][T30854] bond5: (slave erspan1): Enslaving as an active interface with an up link [ 1505.536692][T30857] bond5 (unregistering): (slave erspan1): Releasing active interface [ 1505.580815][T30857] erspan1: left promiscuous mode [ 1505.639670][T30857] bond5 (unregistering): Released all slaves [ 1506.736935][T30854] syz.0.6973 (30854) used greatest stack depth: 16616 bytes left