last executing test programs: 1m26.288671301s ago: executing program 2 (id=3307): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000003100)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x200e4ff, 0x9, 0x0, 0x8e, 0x9}, 0x2}, [{0x10001, 0x2, 0x2, 0x1, 0x3, 0x6}, {0x8, 0x5, 0x7, 0x1, 0xc, 0x1}, {0x10, 0x8, 0x6, 0x9, 0xf, 0x1ff}, {0x6, 0x4, 0x0, 0x9, 0x4, 0x7}, {0x1, 0x9, 0x8, 0x0, 0x10, 0x8}, {0x2, 0x5, 0x4, 0x57, 0x10, 0x21fb}, {0x1, 0x0, 0x0, 0x8, 0x4a9, 0x6}, {0x400, 0x8000, 0x0, 0x4, 0x0, 0x7}, {0x5a5, 0x8, 0xfffffff7, 0x4, 0x8, 0x7ff}, {0x2, 0x4, 0x5, 0x2, 0x80000000, 0x7f}, {0x6, 0xfffffffc, 0x0, 0x0, 0x400, 0x2}, {0x7, 0x8, 0x8, 0x0, 0x1, 0x4}, {0x8, 0x0, 0x4554, 0x3, 0x79a, 0xc}, {0x8, 0x876, 0x3, 0x8, 0x3, 0x8}, {0xac7a, 0xffffffff, 0x5, 0x8001, 0x0, 0x10000}, {0x6, 0x1, 0x4, 0x5, 0x66d, 0x3}, {0xe465, 0x7, 0x2005, 0x51, 0x1, 0x6c0}, {0x6, 0xd1e2, 0xffffb438, 0x0, 0x3, 0x2}, {0x80000000, 0x1, 0x8, 0x0, 0x53af1bbb, 0x8}, {0x7f, 0x7fffffff, 0xfffffff8, 0x81c, 0xcc}, {0x401, 0x4, 0x1, 0x7ff, 0x2, 0x4}, {0x7, 0x9, 0x1, 0x0, 0x4, 0x2}, {0x3, 0x0, 0x335, 0x2, 0x80, 0x8}, {0x7, 0x5, 0x5, 0x28e, 0x3, 0x8}, {0x0, 0xc, 0x8001, 0x1, 0x7, 0x6}, {0x56, 0x80, 0xc, 0xfffffff0, 0x3, 0x2}, {0x3, 0x2, 0x4, 0x17, 0x2, 0x3}, {0x4, 0xffffff81, 0x5, 0x8, 0xb, 0x6}, {0x8, 0x7, 0xf, 0xe, 0x1, 0x8}, {0x9ff, 0x10, 0xf71, 0x5, 0x9, 0xe17fe54}, {0xff, 0x0, 0x2, 0x6, 0x8, 0x6}, {0x3, 0x4, 0x1d4, 0x80000001, 0x0, 0x1773}, {0x4, 0x7, 0x10000007, 0x3, 0x5, 0xff}, {0x8000, 0x6fe, 0xfffffe01, 0x80, 0x8, 0x6}, {0x40, 0x58b, 0xfffffffe, 0xff, 0x101, 0xfffff679}, {0x0, 0xf8e2, 0x8, 0xffffffff, 0x0, 0x7f}, {0x0, 0x9, 0x10001, 0x8, 0x400, 0xfffff690}, {0x3, 0x570, 0xf, 0xffffb9f3, 0x5, 0x772}, {0xf6e3, 0x1, 0x85, 0x0, 0xfffffffd, 0x1000}, {0x6, 0x4, 0x0, 0x5, 0x2, 0xaa3f}, {0xffffffff, 0x1, 0x2e8, 0x7, 0x5, 0xcc184cd}, {0x9, 0xfffffff7, 0xfffffff8, 0x5, 0x7, 0x6}, {0x101, 0x7, 0x1, 0x7fff, 0x8, 0xfffffff7}, {0x10, 0x7fffffff, 0x7fffffff, 0x8, 0x2, 0xd9}, {0xbae1, 0xfdfe, 0x3, 0x4530, 0x0, 0x10000}, {0x8, 0x9, 0x1000, 0x3, 0x10, 0xd5}, {0x3, 0x80000001, 0x2, 0x5616, 0x7fff, 0x7}, {0x6, 0x9, 0x5, 0x40, 0x65f2, 0x5}, {0x6, 0x0, 0xfffffffc, 0x28d6, 0xa5a4, 0x337}, {0xffffff8d, 0x8, 0x4, 0x1ff, 0x3}, {0x0, 0x0, 0x8, 0xd726, 0x8, 0x46e4}, {0xffff, 0x401, 0x5, 0xa2, 0x5, 0x38}, {0x5, 0x200, 0x10, 0x0, 0x100, 0x9}, {0x40, 0x29, 0x1, 0x10000, 0x1, 0x3}, {0xb5, 0x3, 0x2, 0x2201ee1a, 0x9f25, 0x9}, {0x8, 0x9, 0x10000, 0x99, 0x1, 0x1ff}, {0x4, 0x2, 0xa53, 0x5, 0x239, 0xfffffffd}, {0x3, 0x0, 0x1, 0x3, 0x1, 0xa}, {0x5, 0x2, 0x0, 0x0, 0x0, 0x7}, {0xff, 0x4, 0x5, 0x0, 0x8, 0x800}, {0xfffffc00, 0x1, 0x0, 0x3d1, 0x8, 0x4}, {0x9, 0x1, 0x9, 0x100, 0x7f, 0x800}, {0xa, 0x800, 0x1, 0x5f, 0x6, 0x2}, {0x40, 0x7, 0x8000, 0x6, 0x3, 0x10001}, {0x7, 0x1, 0x5, 0x8001, 0x1, 0x5}, {0x61, 0xa, 0x2, 0x0, 0x4, 0x4}, {0x5, 0xb, 0x7a04, 0x8, 0xd, 0x9f4}, {0x7, 0xffffff81, 0x1, 0x0, 0x7, 0x9}, {0x3ff7, 0x7, 0x80, 0x3ff, 0x5, 0x6}, {0x4, 0x3, 0x9, 0x8, 0x1, 0x5}, {0x1, 0x9, 0x0, 0x4, 0x6, 0x6f04}, {0x8, 0x5, 0x2, 0x1, 0x5, 0xff}, {0xfffeffff, 0x6, 0x2, 0x1, 0x7, 0x80000001}, {0x2, 0xff, 0x8, 0x4, 0x3ff, 0x1}, {0x101, 0x5, 0xe8, 0x5, 0x8, 0x50}, {0x3, 0x800, 0x5, 0x1, 0x3, 0x1ff}, {0xdf7, 0x4, 0x4, 0x4, 0x1, 0xc2b2}, {0x0, 0x2d44, 0xa, 0xfff, 0x1, 0x4}, {0x1, 0x9, 0x8, 0x0, 0x7, 0x9}, {0xa0d, 0xcc7, 0xa, 0x4, 0x6, 0xae3}, {0x6c, 0x40, 0x2, 0x3, 0x7, 0x8}, {0x1, 0xfff, 0xa, 0xafa, 0xd8000000, 0x6}, {0x200, 0xfffffff9, 0x0, 0x1, 0x6, 0x4}, {0x2, 0x2, 0x3, 0x3, 0x4, 0xd}, {0x7, 0xfffffffc, 0x0, 0x3, 0x7fff, 0x9}, {0x5, 0x7f, 0x7, 0xfffffff9, 0x5, 0x9}, {0x8, 0x81, 0x6, 0x7, 0x4, 0xfffffd2a}, {0x9, 0x0, 0x7ff, 0x200, 0xf, 0x2df}, {0x200, 0xc3b8, 0xfffffff9, 0x80, 0xd}, {0x3, 0x0, 0x1, 0x8, 0x5, 0x7}, {0xff4, 0x8001, 0xfffff117, 0x1, 0x8368, 0xa6}, {0x4, 0x4, 0x101, 0x4, 0x80000001, 0x3}, {0x53, 0xa, 0x7, 0x4, 0x10, 0x7}, {0x3, 0x6, 0x66, 0x9, 0xffffffff, 0x6}, {0xffffffff, 0x10001, 0x0, 0x10000, 0x7f, 0x7f}, {0xfffffffb, 0x37c, 0x7, 0x5d, 0x7, 0xca}, {0x1, 0x800, 0x48000, 0x5, 0x2, 0x10000}, {0x6, 0x1, 0xfffffff9, 0x1, 0x0, 0x9}, {0x5b1ad289, 0x0, 0xe0000000, 0x3, 0x1000, 0x7fffffff}, {0x3, 0x1000, 0x5da, 0x0, 0x4, 0x1}, {0xffffffff, 0x7ff, 0x1fbd, 0x2, 0x2, 0x3}, {0x9, 0xd8, 0x9, 0x3, 0xff, 0x8}, {0x7fffffff, 0x2, 0x101, 0xd61c, 0x7, 0x3}, {0x0, 0xf2e, 0x66, 0x9e1, 0x5, 0x7}, {0x0, 0x0, 0x800, 0x5, 0x8, 0x101}, {0x5, 0x1, 0xfffffffc, 0x6, 0x7, 0xcf00000}, {0xfffffff9, 0xaa, 0x2, 0x9, 0x6, 0x4196020b}, {0x0, 0xfea, 0x9, 0x5, 0x3293, 0xffff}, {0x7, 0xfffffffa, 0x2, 0x9, 0x6, 0x7ff}, {0xee, 0xfffffffa, 0x7, 0xf, 0x10}, {0x0, 0x3, 0x1, 0x2, 0x2, 0xe}, {0x67bcd46a, 0xe8b, 0x3ff, 0xb4, 0x4, 0xa0}, {0x22b3, 0x3, 0x5, 0x78, 0x9, 0x26a5d5a4}, {0x401, 0x8005, 0x10, 0x9, 0x720, 0x8}, {0x6, 0x7f, 0x6, 0x101, 0x2, 0x3}, {0x6, 0x4, 0xff, 0xfffeffff, 0x1, 0x18000000}, {0x2, 0x7, 0xffffffff, 0xffffffff, 0x401, 0x7c}, {0x4, 0x8d, 0x1, 0x800, 0xf, 0xfffffff7}, {0x0, 0xffffffff, 0x4, 0x4b, 0x5, 0x4}, {0x1, 0x8000, 0x7, 0x9, 0x10000, 0xb6}, {0x0, 0x81, 0x9, 0x7, 0x401, 0x7}, {0x3, 0x8, 0x1400, 0x4c, 0x8, 0x7}, {0x0, 0x9, 0x9, 0x4, 0x9, 0x7}, {0x200, 0x9, 0x4, 0x1, 0x800, 0x2}, {0x143, 0x4, 0x6, 0x6, 0x400, 0x1}, {0x415, 0x8, 0x4, 0x9, 0xe}, {0x6, 0x5, 0x6, 0xfffffff8, 0x1, 0x7}, {0x0, 0x800, 0x1, 0x10000, 0xb, 0x318}], [{0x5}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x6}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x2}, {}, {0x5, 0x1}, {0x5}, {0x2}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x2}, {0x2}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x2}, {0x0, 0x1}, {}, {0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x3}, {0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x2}, {0x5}, {0x2}, {0x5}, {0x5}, {0x4, 0x1}, {0x3, 0x7a7e79f3715a24e4}, {0x3}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {}, {0x3, 0x4078d3a2fbf2a5ed}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x7a78bbe26a8b81d1}, {0x3}, {0x4, 0x1}, {0x2}, {}, {}, {0x0, 0x1}, {0x3}, {0x5}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x358bac3bb0c51439, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x6, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x80}, 0x800) 1m25.911410419s ago: executing program 2 (id=3309): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) r2 = open(&(0x7f0000002280)='./file1\x00', 0x400, 0x10) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x5, 0x3, 0x3d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000206000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000206000/0x3000)=nil) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[], 0x33fe0}}, 0x40010) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r9, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0x20000800}, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffa, @rand_addr, 0x5}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) socket(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000200), 0x800, 0x100000) syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) getsockname$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev}, &(0x7f0000000240)=0x10) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000180)=0x2000008) syz_io_uring_setup(0x4ce4, &(0x7f0000000300)={0x0, 0x3e1e, 0x400, 0x0, 0x184, 0x0, r7}, &(0x7f0000000040), &(0x7f00000002c0)) 1m25.225726355s ago: executing program 4 (id=3312): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000640)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0x0, 0x800, 0x3af, 0x35c, 0xc, 0x8, 0x101, 0x1ff, 0xfff8, 0x401, 0x3ff, 0xfff}}, 0x0, 0x0, 0x0, 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$unix(r3, &(0x7f0000002040)=[{{&(0x7f0000000b80)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4000}}, {{&(0x7f0000000e80)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4000}}], 0x2, 0x104) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r4, 0x80015b12, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x4001, 0x3, 0x228, 0x120, 0xb, 0x148, 0x0, 0x148, 0x1f8, 0x230, 0x242, 0x1f8, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {0x7f}, {}, 0x73, 0x0, 0x70}, 0x0, 0x70, 0xb8, 0x0, {0xff0f000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x4e, 0x6, 0x5eef6840, 'syz0\x00', {0xb}}}}, {{@uncond, 0xec010000, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x4, 0xffffffff, 0x101, 'pptp\x00', 'syz1\x00', {0x333}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0xfffffff7, 0x200000, 0x6eb, 0x0, 0x8, 0x8}) 1m24.884109733s ago: executing program 2 (id=3315): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000400)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x15, 0x3, 'rr\x00', 0x1, 0x3, 0x72}, 0x2c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x4, 0xcb, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0x54}, {@rand_addr=0x64010102, 0x4e26, 0x2000, 0x200, 0x8001, 0x1}}, 0x44) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0x1000, 0xb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x1}, {0x0, 0x60000, 0x3, 0x0, 0x0, 0x7, 0xf9, 0x9, 0x0, 0x0, 0x0, 0x42}, {0xeeef0000, 0x6000, 0x13, 0x8, 0x0, 0x0, 0x81, 0x0, 0x4, 0xe, 0x1, 0x3}, {0x8080000, 0x0, 0x4}, {0x7000, 0x1000, 0x3, 0x0, 0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x1a}, {0x100000, 0xd000, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x84}, {0x4, 0x5000, 0x9, 0x4, 0x3, 0x0, 0x0, 0x0, 0x3}, {0x1, 0x100000, 0x0, 0xf9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, {0x6000}, {0x1, 0xfffe}, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x1, 0x900, [0xfffffffffffffffc, 0x0, 0x0, 0x3]}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x2, 0x801) mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) (async) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000000c0)={0x7, 0x2, 0x2, r5, 0xb}) (async, rerun: 32) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) (rerun: 32) write$P9_RSTATu(r6, &(0x7f0000000580)={0x237, 0x7d, 0x2, {{0x500, 0xf6, 0x0, 0x5000000, {0x96346fe8a85d2583, 0x0, 0x8}, 0x41400000, 0x0, 0xe5e0, 0x5, 0x1b, '\x04nodev{evoo~\x05E\xc6\x00\x05\b\x007\xd9:\x8b\x92\x00\x00\x00', 0x33, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x37, '\xcf\xc3m\a\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e^\x98\x9c\xd5\xefMQ\xf6\r\xa7X,J\x05\xc8\xf8(\xf6\x8d\xc1wM]\xe2\xe8 \x86#\x81\xf6hm\xd1\xbb\x8f\xd7\x00\x00\x00', 0x3e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c<;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0w\xdct\x00\x00\x00\x00\x00\x00\x00\x00\a\xec!\xca\xbf\xf2\x0f\x9c\x00\x89\xf9\x06\x00\x00\x00\x00\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x13r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x237) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x7, 0x1, 0x6, 0xfa11, 0xffffffff}, 0x0) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) (async, rerun: 64) mlock(&(0x7f0000764000/0x3000)=nil, 0x3000) (async, rerun: 64) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000434000/0x4000)=nil) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4e23, 0x0, @empty, 0xfffffff8}, 0x0, {[0xfffffffe, 0x0, 0x0, 0x1, 0x50, 0x5]}}, 0x5c) (async) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={0x0}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m24.531627108s ago: executing program 2 (id=3319): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r3, &(0x7f0000000140)='.\x00', r2, 0x0, 0x41) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x24, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000480)="430f011d4b65000066430f010f470f09430fc79e0000000066baa00066b8090066ef420fc75eab440f0766ba4000ed0fc73ef30fc733", 0x36}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m23.890505887s ago: executing program 2 (id=3320): r0 = syz_usb_connect(0x5, 0x46, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300021007c109050c04400006030f07059acb"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000800)={0x14, 0x0, &(0x7f00000007c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='totmaps\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000140)={@my=0x1}) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1}, 0x10) shutdown(r4, 0x1) (async) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x8606, 0x8, 0x3}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x7, 0x1, 0x2, 0xe2, {{0x24, 0x4, 0x3, 0x1d, 0x90, 0x68, 0x0, 0x8, 0x29, 0x0, @remote, @local, {[@end, @end, @end, @generic={0x7, 0x7, "4fc4e78f2d"}, @timestamp_prespec={0x44, 0x2c, 0x4e, 0x3, 0x9, [{@loopback, 0xffff0000}, {@local, 0x7fffffff}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x1}, {@loopback, 0x5}, {@local, 0x3}]}, @timestamp={0x44, 0x14, 0x65, 0x0, 0xf, [0x8, 0x4, 0x0, 0x10]}, @timestamp={0x44, 0xc, 0xc3, 0x0, 0x0, [0xdc32, 0x0]}, @end, @timestamp={0x44, 0x24, 0xfb, 0x0, 0xd, [0x3, 0x7, 0x1000, 0x9, 0x3ff, 0x7fff, 0x2000000, 0x8]}, @noop]}}}}}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@mpls_getroute={0x158, 0x1a, 0x1, 0xfffffffc, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x0, 0xc8}, [@RTA_NEWDST={0x84, 0x13, [{0x1, 0x0, 0x1}, {0xc, 0x0, 0x1}, {0x5}, {0x3, 0x0, 0x1}, {}, {0x4}, {0x5, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x6}, {0x5}, {0x8}, {0x6}, {0x8, 0x0, 0x1}, {0x1}, {0xc8b6, 0x0, 0x1}, {0x3}, {0x8}, {0x52, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x1800}, {0x7}, {0x5b0}, {0xff073}, {0x4, 0x0, 0x1}, {0x101, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x6}, {0x0, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x5}]}, @RTA_OIF={0x8, 0x4, r6}, @RTA_NEWDST={0x84, 0x13, [{0x9}, {0x4}, {0x1}, {0x24, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0xf}, {0x0, 0x0, 0x1}, {0xc, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x21d}, {}, {0xe}, {0x3ff, 0x0, 0x1}, {0x2}, {0x9, 0x0, 0x1}, {0x1}, {0x2, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xfa52, 0x0, 0x1}, {0x8001}, {0x5}, {0x2}, {0x5, 0x0, 0x1}, {0xa0}, {0xff}, {0x6}, {0x1, 0x0, 0x1}, {0xc675, 0x0, 0x1}, {0xa0b, 0x0, 0x1}, {0xffff, 0x0, 0x1}]}, @RTA_OIF={0x8, 0x4, r6}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x8}, @RTA_OIF={0x8, 0x4, r6}, @RTA_VIA={0x14, 0x12, {0x15, "a1a6343dd03bea8785e9e1bdc8ce"}}]}, 0x158}}, 0x0) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@o_path={&(0x7f0000000780)='./cgroup\x00', 0x0, 0x4010, r1}, 0x18) 1m23.666940324s ago: executing program 2 (id=3321): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000)) (async) mmap(&(0x7f0000fec000/0x13000)=nil, 0x13000, 0x3, 0x10010, r0, 0x74e1000) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000240)={{r0, &(0x7f0000000040)='&!\x00', 0x40000, &(0x7f0000000080)={@align, {0x9, 0xab98, 0x2, 0xfff}}, 0x7, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x2}, {[0x9, 0x0, 0x7fffffff, 0x1]}, 0x100, 0xf5, &(0x7f0000000140)=""/245}) write$P9_RWRITE(r1, &(0x7f00000002c0)={0xb, 0x77, 0x1, 0xe2}, 0xb) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x10}}, './file0\x00'}) sendto$inet(r2, &(0x7f0000000340)="4a7a659f466edd96a29cd1934a54b999b4f237db4c31d13407699ed6ec1845c3ba73d092838187382b6b4d6e05f518237bbd6fdc8e5ab0548106ab40fff0596960e31f8f9d2f08667e3e7abb7dde82687eb4713ec2dacf1264a1ac6c4dee981adfcf53402082f9d49b15bb0c0b05949c8697b60bdc11ebc35a0c107313e93ca3c087d8bb", 0x84, 0x20040000, &(0x7f0000000400)={0x2, 0x4e22, @private=0xa010100}, 0x10) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000440)={0x4, 0x0}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000480)={0x0, r3}) recvmsg(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f00000004c0)=@caif=@dgm, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/248, 0xf8}, {&(0x7f0000000640)=""/213, 0xd5}, {&(0x7f0000000740)=""/163, 0xa3}, {&(0x7f0000000800)=""/223, 0xdf}, {&(0x7f0000000900)=""/182, 0xb6}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}, 0x40000000) (async) mknod$loop(&(0x7f0000001a80)='./file0\x00', 0x400, 0x1) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001ac0), 0xc02, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r4, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x24, 0x1, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x85) mknod$loop(&(0x7f0000001c00)='./file0\x00', 0x4, 0x0) (async, rerun: 64) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (rerun: 64) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$FIONREAD(r5, 0x541b, &(0x7f0000001c40)) ioctl$BTRFS_IOC_QUOTA_CTL(r5, 0xc0109428, &(0x7f0000001c80)={0x3, 0x8}) (async) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000001cc0)={0x7, 0x0, [{0x96ac92ec, 0x0, 0xbf16ac3}, {0x63a, 0x0, 0x2}, {0xd90, 0x0, 0x2}, {0x941, 0x0, 0x7}, {0x381, 0x0, 0xff}, {0x3fe, 0x0, 0xfffffffffffffff9}, {0x2a7fc4e73b60f81b, 0x0, 0x100000001}]}) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000001d40)={0x4, 0x6, 0x5}) (async) recvmsg$can_bcm(r2, &(0x7f00000020c0)={&(0x7f0000001d80)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000002080)=[{&(0x7f0000001e00)=""/151, 0x97}, {&(0x7f0000001ec0)=""/130, 0x82}, {&(0x7f0000001f80)=""/225, 0xe1}], 0x3}, 0x100) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000002100)={r4, 0x84, 0x3, r2}) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002140)='/sys/power/freeze_filesystems', 0x104000, 0x20) (async, rerun: 32) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000002180)={{0x2c, @broadcast, 0x4e22, 0x1, 'fo\x00', 0x8, 0x8000, 0x7d}, {@private=0xa010100, 0x4e22, 0x10000, 0x2, 0x1, 0x7}}, 0x44) (rerun: 32) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) (async, rerun: 64) ioctl$PTP_PIN_GETFUNC2(r2, 0xc0603d0f, &(0x7f0000002200)={'\x00', 0xfffffe00, 0x3, 0xfff}) (async, rerun: 64) write$vhost_msg(r6, &(0x7f0000002400)={0x1, {&(0x7f0000002280)=""/159, 0x9f, &(0x7f0000002340)=""/140, 0x3, 0x1}}, 0x48) (async) syz_io_uring_setup(0x7241, &(0x7f0000002480)={0x0, 0xdc, 0x80, 0x1, 0x16e, 0x0, r4}, &(0x7f0000002500), &(0x7f0000002540)) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000002580)) 1m23.318094804s ago: executing program 32 (id=3321): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000)) (async) mmap(&(0x7f0000fec000/0x13000)=nil, 0x13000, 0x3, 0x10010, r0, 0x74e1000) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000240)={{r0, &(0x7f0000000040)='&!\x00', 0x40000, &(0x7f0000000080)={@align, {0x9, 0xab98, 0x2, 0xfff}}, 0x7, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x2}, {[0x9, 0x0, 0x7fffffff, 0x1]}, 0x100, 0xf5, &(0x7f0000000140)=""/245}) write$P9_RWRITE(r1, &(0x7f00000002c0)={0xb, 0x77, 0x1, 0xe2}, 0xb) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x10}}, './file0\x00'}) sendto$inet(r2, &(0x7f0000000340)="4a7a659f466edd96a29cd1934a54b999b4f237db4c31d13407699ed6ec1845c3ba73d092838187382b6b4d6e05f518237bbd6fdc8e5ab0548106ab40fff0596960e31f8f9d2f08667e3e7abb7dde82687eb4713ec2dacf1264a1ac6c4dee981adfcf53402082f9d49b15bb0c0b05949c8697b60bdc11ebc35a0c107313e93ca3c087d8bb", 0x84, 0x20040000, &(0x7f0000000400)={0x2, 0x4e22, @private=0xa010100}, 0x10) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000440)={0x4, 0x0}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000480)={0x0, r3}) recvmsg(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f00000004c0)=@caif=@dgm, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/248, 0xf8}, {&(0x7f0000000640)=""/213, 0xd5}, {&(0x7f0000000740)=""/163, 0xa3}, {&(0x7f0000000800)=""/223, 0xdf}, {&(0x7f0000000900)=""/182, 0xb6}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}, 0x40000000) (async) mknod$loop(&(0x7f0000001a80)='./file0\x00', 0x400, 0x1) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001ac0), 0xc02, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r4, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x24, 0x1, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x85) mknod$loop(&(0x7f0000001c00)='./file0\x00', 0x4, 0x0) (async, rerun: 64) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (rerun: 64) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$FIONREAD(r5, 0x541b, &(0x7f0000001c40)) ioctl$BTRFS_IOC_QUOTA_CTL(r5, 0xc0109428, &(0x7f0000001c80)={0x3, 0x8}) (async) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000001cc0)={0x7, 0x0, [{0x96ac92ec, 0x0, 0xbf16ac3}, {0x63a, 0x0, 0x2}, {0xd90, 0x0, 0x2}, {0x941, 0x0, 0x7}, {0x381, 0x0, 0xff}, {0x3fe, 0x0, 0xfffffffffffffff9}, {0x2a7fc4e73b60f81b, 0x0, 0x100000001}]}) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000001d40)={0x4, 0x6, 0x5}) (async) recvmsg$can_bcm(r2, &(0x7f00000020c0)={&(0x7f0000001d80)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000002080)=[{&(0x7f0000001e00)=""/151, 0x97}, {&(0x7f0000001ec0)=""/130, 0x82}, {&(0x7f0000001f80)=""/225, 0xe1}], 0x3}, 0x100) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000002100)={r4, 0x84, 0x3, r2}) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002140)='/sys/power/freeze_filesystems', 0x104000, 0x20) (async, rerun: 32) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000002180)={{0x2c, @broadcast, 0x4e22, 0x1, 'fo\x00', 0x8, 0x8000, 0x7d}, {@private=0xa010100, 0x4e22, 0x10000, 0x2, 0x1, 0x7}}, 0x44) (rerun: 32) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) (async, rerun: 64) ioctl$PTP_PIN_GETFUNC2(r2, 0xc0603d0f, &(0x7f0000002200)={'\x00', 0xfffffe00, 0x3, 0xfff}) (async, rerun: 64) write$vhost_msg(r6, &(0x7f0000002400)={0x1, {&(0x7f0000002280)=""/159, 0x9f, &(0x7f0000002340)=""/140, 0x3, 0x1}}, 0x48) (async) syz_io_uring_setup(0x7241, &(0x7f0000002480)={0x0, 0xdc, 0x80, 0x1, 0x16e, 0x0, r4}, &(0x7f0000002500), &(0x7f0000002540)) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000002580)) 1m23.260001325s ago: executing program 4 (id=3323): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfff9, 0x8}, 0x8) (async) sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) (async) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000200)=0x4) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0x8001}, {0x400000b1, 0x0, 0x8}]}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000005c0)={0x1, 0x0, [{0x40000084, 0x0, 0x39}]}) 1m23.107651334s ago: executing program 4 (id=3326): r0 = syz_usb_connect(0x5, 0x73, &(0x7f0000000000)=ANY=[], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x67) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 1m20.016196619s ago: executing program 4 (id=3335): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000500)={0x9, 0x1, 0x2, "3bd9d3fe337649c318d3b5710fe89a0d9ec9b50e98bc2e00", 0x32315241}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8101, 0x0, 0x7, 0x0, 0x3ff, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r6, 0x0, 0x0) getsockopt(r6, 0x200000000114, 0x271e, &(0x7f0000032580)=""/102390, &(0x7f0000000040)=0x18ff6) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r5, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x2, @private1, 0x10000bfd}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000800000001, 0x2, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r5, 0x4734}}, 0x10) close_range(r4, r4, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x32, 0x0, &(0x7f0000002140)) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 1m18.90699467s ago: executing program 4 (id=3336): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x3}, 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x3, 0x0}, 0x8) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x141900) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f00000000c0)={0x1, 0x0, 0xfffffff7, 0x1}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=r0, 0x4) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=r0, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/partitions\x00', 0x0, 0x0) preadv2(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, 0x8, 0x2000007, 0x1b) r5 = timerfd_create(0x0, 0x800) syz_io_uring_setup(0xbdc, &(0x7f00000000c0)={0x0, 0x5edc, 0x1000, 0x1, 0x40000333}, &(0x7f0000000000), &(0x7f00000001c0)) (async) r6 = syz_io_uring_setup(0xbdc, &(0x7f00000000c0)={0x0, 0x5edc, 0x1000, 0x1, 0x40000333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000880)=[{&(0x7f0000000400)=""/245, 0xf5}], 0x1, 0x8}) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) (async) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r10 = epoll_create(0x80) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000240)={0x40000004}) epoll_pwait(r10, &(0x7f0000000040)=[{}], 0x1, 0x4, 0x0, 0x0) (async) epoll_pwait(r10, &(0x7f0000000040)=[{}], 0x1, 0x4, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f00000003c0)={@broadcast, @initdev, 0x0}, &(0x7f0000000500)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11}, 0x94) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r12, 0x7, 0x2e, 0x0, &(0x7f0000000200)="24c2afc3a2e0527bea330054165096fe838bfab80e83d34f30beffcc4de894b90e9593746ac3b86e64f70cf614a7", 0x0, 0xffaf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r13 = dup3(r3, r2, 0x0) r14 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r14, &(0x7f0000000600)=""/4093, 0x1049, 0xfffffffd) (async) pread64(r14, &(0x7f0000000600)=""/4093, 0x1049, 0xfffffffd) ioctl$BINDER_WRITE_READ(r14, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r14, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x15, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2d3b}, {{0x18, 0x1, 0x1, 0x0, r13}}, {}, [@jmp={0x5, 0x1, 0x9, 0x3, 0x5, 0x50, 0xfffffffffffffffc}, @exit, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, @map_fd={0x18, 0x1, 0x1, 0x0, r13}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m17.040249787s ago: executing program 4 (id=3344): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x102}) socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) write$dsp(r5, &(0x7f0000002000)='`', 0x88020) (async) write$dsp(r5, &(0x7f0000002000)='`', 0x88020) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000000)) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x121000) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r6, 0xc0105303, &(0x7f00000002c0)={0x81, 0x1, 0xff}) ioctl$SNDCTL_DSP_GETTRIGGER(r5, 0x80045010, &(0x7f0000000000)) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000002000000000000000000", @ANYRES32=r3], 0x20}}, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000440)={0x9, 0x0, '\x00', {0x0, @reserved}}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) bind$netlink(r7, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socket$inet6(0xa, 0x80003, 0x6) (async) r8 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x100}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x8000000, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) (async) r10 = openat$cgroup_ro(r9, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000040)=0xfffffffffffffffa, 0x10) (async) write$cgroup_int(r10, &(0x7f0000000040)=0xfffffffffffffffa, 0x10) sendmmsg(r8, &(0x7f0000000480), 0x2e9, 0x0) 1m1.483749117s ago: executing program 33 (id=3344): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x102}) socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) write$dsp(r5, &(0x7f0000002000)='`', 0x88020) (async) write$dsp(r5, &(0x7f0000002000)='`', 0x88020) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000000)) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x121000) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r6, 0xc0105303, &(0x7f00000002c0)={0x81, 0x1, 0xff}) ioctl$SNDCTL_DSP_GETTRIGGER(r5, 0x80045010, &(0x7f0000000000)) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000002000000000000000000", @ANYRES32=r3], 0x20}}, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000440)={0x9, 0x0, '\x00', {0x0, @reserved}}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) bind$netlink(r7, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socket$inet6(0xa, 0x80003, 0x6) (async) r8 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x100}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x8000000, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) (async) r10 = openat$cgroup_ro(r9, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000040)=0xfffffffffffffffa, 0x10) (async) write$cgroup_int(r10, &(0x7f0000000040)=0xfffffffffffffffa, 0x10) sendmmsg(r8, &(0x7f0000000480), 0x2e9, 0x0) 9.734693758s ago: executing program 0 (id=3573): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={0x0, 0xd38744271726f72b, 0x1800}, 0x20) 9.480136365s ago: executing program 0 (id=3574): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f0000000480)) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x30, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfff2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8001}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000003100)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x800) 8.379878807s ago: executing program 0 (id=3576): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 64) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x7, 0x301501) (rerun: 64) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r3 = socket$rds(0x15, 0x5, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x1) 7.691934758s ago: executing program 0 (id=3578): syz_clone3(&(0x7f0000000000)={0x4100, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x6f, 0x0, 0x9, 0x0, 0xe999, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000500), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) r5 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r8, 0xcccccccc}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r8], &(0x7f0000000200), &(0x7f00000000c0)=[r9], &(0x7f0000000040), 0x0, 0x300}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00') mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x400000000000e, 0x2) 5.373568116s ago: executing program 0 (id=3585): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESHEX=r1, @ANYRESHEX=0x0, @ANYRES64=r0, @ANYRES32=r0, @ANYRESHEX=r1, @ANYBLOB="4c2c7bff0c0be3cb5352b4c8a237a745c10bae9e3669e9bbb53395639313c0"], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io$uac2(r3, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x4}}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x5) sendfile(r6, r5, &(0x7f00000001c0)=0x1, 0x8) ioctl$VIDIOC_S_CROP(r6, 0x4014563c, 0x0) io_uring_enter(r5, 0x4807, 0xce4e, 0x40, &(0x7f0000000140)={[0x9]}, 0x8) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f00000024c0)) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.267922337s ago: executing program 6 (id=3586): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f0000000480)) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x30, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfff2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8001}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000003100)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x800) 5.021086567s ago: executing program 6 (id=3588): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd0, &(0x7f0000000000)=0xb, 0x4) sendto$inet(r1, &(0x7f0000000540)='v', 0x1, 0x4840, 0x0, 0x0) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.log\x00', 0x400, 0x1a0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x104, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="0aac0f00"}, @generic="e3e202c9e4719471d3e31207298aabf5a3654efebbe7704de27c96a88c2253d0aafb55fa15e78d9c9f897b4b9a6eb5f07d401610a716cb5d67058c5abafc93e5702952a85662d2b66e04a43f8f5cae354b0504d1cf5d198a9003b6cc2762ec24ef7e913c0689e4034e3dafb5dbe38dda210ca64f3cdd430efa585f84c5f630c17e290caa9977e452a41763181f1e825df14ef2592ef46d5bd73792659031c460506e5aedafdc03f0596a5813dfda89fcb0222a36a29a8224373bca4bb476b6cea09f37a2dfcb63a150b06fccff8dd8e73ad1e909404b154329c36d691a7bd4b7fb19d9dfeb55f85e"]}, 0x104}, 0x1, 0x0, 0x0, 0x42804}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000100)=@arm64={0x4, 0x0, 0xef, '\x00', 0x2}) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f80)=""/135, 0x87}, 0x82}], 0x1, 0x40012002, 0x0) 4.844027376s ago: executing program 6 (id=3589): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000780)="75c1ccd07a5210ca6c94e254649640be1983f79c5bfe88cd6a730000606759578db363f48925080034d4361384db13fd737428808940bcd0840dc930c81a8bd8b665cd232c5829977dd63ce2c88d43b177e47be6084fe6987e0000000000", 0x5e}, {&(0x7f0000000380)="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", 0x24e}, {&(0x7f0000000f00)="b62314417a72e12a7ab7f5601b3b351333f3a3b13679144b7cd8a483d6dbc75ded58ba6875841285b877303e9500", 0x2e}], 0x3}, 0x8000) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000180)=ANY=[@ANYBLOB="2a01000a20000040b708008000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000100000000000c2c0000e9fffff5ffffffff092403f3", @ANYRES8=r2, @ANYRESDEC=r2], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000000)="4427019862", 0x5}], 0x1, 0x0, 0x0, 0x40000}, 0x20000040) close(r3) write$cgroup_netprio_ifpriomap(r4, 0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x3) 4.343904326s ago: executing program 3 (id=3593): ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x9) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0xc, 0x0, "3f114438efdaca16d374b49a08003535d5bd9db3c8572560f4d1be5cd41f771666fd81baadb27900"}, 0xd8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000000085000000330000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14}}, 0x64}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f0000000780)={0x7, 0x1000000, [{0x4, 0xffffffff, 0x1, 0x7, 0x6, 0x6, 0x2}, {0x40000000, 0x4, 0x0, 0x7fff, 0x27, 0x7, 0x5}, {0x7, 0x8, 0x0, 0x2, 0x5, 0x5, 0xffff}, {0xb, 0xe5f, 0x0, 0x7, 0x8001, 0x6, 0x80000001}, {0xd, 0x2bb, 0x1, 0xd, 0x3, 0x7ff, 0x400}, {0x2, 0x1, 0x4, 0x6, 0x4, 0x4, 0x3}, {0x1, 0x8d3d, 0x6, 0x9, 0x3ff, 0x1, 0x3}]}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2$9p(0x0, 0x80180) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023893) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000200)="b9950a0000b8022c0000ba000000000f30c4c3016c2c070466baa100b8e2a30000efb9d40200000fc77a0aba000000000f3066ba4100ed66baf80cb83e57ce8aef66bafc0c66b80dc066ef0f060fc7180f01cf", 0x53}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x21, 0xc, 0x0, 0x75, 0x81, 0x10, 0x0, 0x0, 0x82, 0x9, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xff, 0x0, '\x00', 0x7}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.939686502s ago: executing program 1 (id=3595): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)={0x18, 0x5a, 0x30d, 0x0, 0x0, "", [@nested={0x4}, @nested={0x4, 0x3}]}, 0x18}], 0x1}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2402, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000500)={0x66666666666666d, 0x0, [{0x80000001, 0x3, 0x1, 0x7fffffff, 0x9, 0x3, 0x4}, {0x7, 0xb, 0x6, 0x7f, 0xd11, 0x4, 0xfffffffe}, {0xd, 0x9, 0x1, 0x4, 0x80, 0x81, 0x2}, {0x2, 0x40, 0x5, 0x5, 0x2, 0x4, 0x1}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0xe0, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x2}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xa}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2e}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3665}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xebc8f7f2a1439b21}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x5d}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x32}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xff}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000804}, 0xc084) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c0000001000210404000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888d226000024001280090001007866726d0000000014000280080001000300000008000200250000000a000100aaaaaaaaaa2b00000a0002000000f0"], 0x5c}}, 0xc080) 3.828758395s ago: executing program 1 (id=3596): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x6, 0x248, 0x9b99}, 0x4c, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0xfffffffe, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x80, 0x9, 0xf9a2, 0x80000001, 0xfe, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0x86, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000072, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x1e20, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x6, 0x1003, 0x8, 0xffffff7f, 0x400, 0x6, 0x400, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x80203, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x5, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x6, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x8000, 0x9, 0x3, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x2, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x401, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x100055, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x10009d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0xbd, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x8bdc, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0xfffffffd, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x800009, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x2000001, 0x9]}, 0x45c) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x40001, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0x6}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001180)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r4, {}, {0x0, 0xa}, {0x7ff9, 0x10}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xfffffc00}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000280)={[0xf000, 0x54000, 0x5000, 0x100000], 0x0, 0x10, 0xfffffffffffffeff}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x10, 0x80000001, 0x3, 0x1, 0xd, 0xefe, 0x0, 0x0, 0x8}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) exit(0xff) 3.817742424s ago: executing program 5 (id=3597): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3f}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}], {0x14, 0x10}}, 0x80}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @dstopts_2292={{0xe8, 0x29, 0x4, {0x4, 0x19, '\x00', [@generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x7, "e80ee304ecb784"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x80, 0x29, 0x36, {0x5e, 0xc, '\x00', [@pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x3, 0x6, 0x0, 0xfff, [0x966, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0x8000]}}, @generic={0x1}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x1e8}}], 0x1, 0x810) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) 3.797031162s ago: executing program 3 (id=3598): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x100, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xebd9}]}, 0x40}}, 0x0) 3.651317504s ago: executing program 3 (id=3599): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r3, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x0, 0x1, 0x6, 0x4, 0x2f, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x28, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x26}}, {0x4e26, 0x4e20, 0x14, 0x0, @gue={{0x2, 0x0, 0x0, 0x1, 0x100}, "08b87c75"}}}}, 0x36) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) (async) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (rerun: 64) syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffffb, 0x48b01) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000140)) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.271844177s ago: executing program 3 (id=3600): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) syz_open_dev$vim2m(0x0, 0x3, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x40010, r0, 0x0) syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r1, 0xc17a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0xfac7}) r5 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0xc0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r5, 0x4161, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)=""/4107, 0x100b}], 0x1) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(r6, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2000003, 0x2013, r7, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.674429031s ago: executing program 1 (id=3601): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) pipe2$watch_queue(0x0, 0x80) r2 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x45402, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="0b0196047f0300005a03000000010000670300000d0000000080000000000000"], 0x20) io_setup(0x4ba2b122, &(0x7f0000000080)=0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) io_submit(r5, 0x5, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x3, r2, &(0x7f0000000240)="88a8a2956e223790188100a4ee224978f26f6e33330ebcf0a045cf0f9241453e34351db8e502464c49999da5bfd8fe593aeb11d50ef0481def9f1a38cdbf2b7bc7ebe5c1062fe34d2fcc6a28db1f3eba530013da9af691eea56ee2f8029dc00080dde014579c3267", 0x68, 0x2, 0x0, 0x0, r4}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0xc, r3, &(0x7f0000000340)="0af29b94bf0b45d59333ad3538194a0065a7ce92c17e999c9f194a7cfdf1175f9eb247ab19db30afe29bb06e520cd23060b11caee7e989a0b32712bfdf45f96b807a39b2f592512b8a6be40b987443ce4c1c867b5bc3dcb8dead944474b76a2394086642e22d0e6623970054ed52928724c9a9df99a87bffbece382b26fde8cdbc4a27b9178c2044c1bac9f2a2786753", 0x90, 0x2, 0x0, 0x2, r4}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8, 0x491, r4, &(0x7f0000000480)="722ea8b69a78fa9df91b48f77e243f3d1ddf418d5ca7ed9c6dd6253d783eb04bac46e1b269d38f1fbf5dd823f2497dbdefb97f7f811d8c168c99ada6ac026a4256bf4b97c7ac8adf", 0x48, 0x1, 0x0, 0x2, r4}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x8, 0x9, r2, &(0x7f0000000400)="bd0ed7959d4376bb", 0x8, 0xefdf, 0x0, 0x3, r6}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, r3, &(0x7f0000000780)="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", 0x186, 0x60c, 0x0, 0x3, r4}]) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r7, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r7, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20040001, &(0x7f0000000680)={0xa, 0x4e20, 0x5, @mcast1, 0x8000}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) r8 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) shmctl$IPC_RMID(r8, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r9 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x0, 0x28b}) io_uring_register$IORING_REGISTER_FILES(r9, 0x20, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 2.591521116s ago: executing program 5 (id=3602): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0xffffffffffffffe0, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r0}}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="10000000140001"], 0x4c}, 0x1, 0x0, 0x0, 0x404c0c8}, 0x4040000) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) unshare(0x28000600) tee(r4, r6, 0x4e, 0x5) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r9, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r7, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x34}}, 0x800) 2.460238912s ago: executing program 5 (id=3603): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x8080, 0x0) r1 = fsopen(&(0x7f0000000340)='ocfs2_dlmfs\x00', 0x1) fcntl$setflags(r1, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0x541b, 0x0) 2.05998184s ago: executing program 0 (id=3604): syz_emit_ethernet(0x5e, &(0x7f00000004c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0xfffffffffffffff5}, @dev={0xfe, 0x80, '\x00', 0x2f}}}}}}}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000403810b61200000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010101, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in=@private=0xa010101, @in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x39}, @in=@dev={0xac, 0x14, 0x14, 0x34}, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_usb_disconnect(r0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xda, 0x35, 0x8e, 0x8, 0x46d, 0x900, 0x669e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = socket(0xa, 0x5, 0x0) listen(r5, 0x100) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000fedbdf251f000000080001004e00000008000300", @ANYRES32=r8], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x1400c004) sendmsg$inet_sctp(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@authinfo={0x18, 0x84, 0x6, {0x9}}], 0x18}, 0x20000000) syz_usb_control_io$printer(r4, &(0x7f0000000300)={0x14, &(0x7f00000000c0)={0x0, 0x23, 0x9, {0x9, 0xe, "8424d961449fd8"}}, 0x0}, 0x0) syz_usb_ep_write(r4, 0x6, 0xae, &(0x7f00000006c0)="3e1dc60e74b294d27dcbe2240a80296627018a1370cf5b64f9a78da104ff944fe19dd1c4d10643d583ef2745d6843ddef3b2637a2af89df7d3928c6b6f30090e4596b0f016965342cad293893457ed2d07253706dde3d1445d392e06ab336535668947dd43b8b408406c60862302dbab5de4bfff1eef400a737f8e77398bbbed8c26fe6133ee8fc34b3edf87acf46932e1133e5914b6770747e6c484687d8cfced602e457f304aaf424202a58d52") 1.676710835s ago: executing program 5 (id=3605): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x902) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0xec25, 0x400, 0x1, 0x1c2}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)={0xb0, 0x0, 0xfffffffffffffff9, [{{0x5, 0x2, 0xe08, 0x1, 0xc, 0x9, {0x0, 0xffffffff00000000, 0x8000, 0x6, 0x5, 0x200, 0x1, 0xe08, 0x8, 0x6000, 0x8, 0x0, 0x0, 0x1, 0x4}}, {0x5, 0x401, 0x2, 0x3, 'fd'}}]}, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f000000c580)='./file0\x00', &(0x7f000000c5c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2400) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001380)={{{@in6=@private0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f000000c740)=0xe8) fcntl$getownex(r2, 0x10, &(0x7f000000cd00)={0x0, 0x0}) fstat(r1, &(0x7f000000cd40)={0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(r8, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f00000000c0), 0x0, 0x300000, &(0x7f0000000540)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r10}, 0x2c, {[], [{@fsmagic={'fsmagic', 0x3d, 0x3}}, {@permit_directio}]}}, 0x1, 0x0, &(0x7f0000000400)="55767dd62d91d8bffff803eab6b78e0b4281e144") ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f000000d1c0)={0x5d, 0x7ff, {}, {0xee00}, 0x0, 0x1}) getgroups(0x1, &(0x7f000000d200)=[0xee01]) r13 = getpid() r14 = open(0x0, 0x2a4c0, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r14, 0x0, r15, 0x0, 0x1000) getresgid(&(0x7f000000d240), &(0x7f000000d280)=0x0, &(0x7f000000d2c0)) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000d340)=[{{&(0x7f00000000c0)=@file={0x1, '.\x00'}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000140)}, {&(0x7f0000000240)="af566e2f1dc2e33058df6443a22046cd8b6382fc8d2adf410efc1744212545e9d1ec2741e18b594aac357d618f68087488afeb3b6837a7f5c9a4add93a34b551f0b606604a2ed963237f6df9c8fd511ff08885b954f1c4f754e4944910fc4ea2df6046d7a77f479cd204f2fbf2172359731cff52b0e261a3e669dd458190425bf2516c1fadb8518d6ed70a4de02d96a28a21476df7ea99907a6a017d9eb8644588", 0xa1}, {&(0x7f0000000300)="f5997939201a1a1ecc485c48416083089ddc2ef9485a66d335f42481408477b2adbf6d72d4cb1647b18e0aa783a611b92f6e7c5a3a450b9fc1d2fc7db3d3f710e90a0d03040fd6521bae4f5e691d7f134c0732182c5b645dac25004a1059d6", 0x5f}, {&(0x7f0000000400)="daad6837f65578fd1c16f52e6f05250354c4efefe40298340bf83036fcf6796f93174158c209795e03c242a10c5e98535910b9426065e65f9679c075d5ef0c50e85349f803b10f0420e02bb2b523f815fcc646e5e51a8fdf619a5e5623ec02fbc10edf", 0x63}, {&(0x7f0000000480)="9d6824b15b81274ea51159ec493abc36799478472363968b60cc1f1378aa0976a9ac6298ea3db271ef685ed8790c6852f6ac657500749a7c47c44e42044dbe55eeb88f950a92193b090fd914b86c2c", 0x4f}, {&(0x7f0000001180)="d8d4f588262da45685afc80b591da5526207da181117d87b46d2bdcfdc3ea6e9009d8f94b436513f91629fc4ba7bd656ede96bda51010832a28a0767cd4e024044040c3de8aa624263fe3e0874a7737c0aa0dc1362dd93c72452d0a2c403ee7d3228d2bc68d6825454132c6ea6ef813343c8f5c341a89de3157711adde9b8a5377ffb79cf09e290abfff7468575306896ba2d20ad6120741e51bfc100b09c291fdac25be24204bbb4ea5d0369ae1d3e6dc4654a6aa29883bd6acecfde152b117e13dd00af66a7474e351f69d", 0xcc}], 0x6, &(0x7f0000001480)=[@rights={{0x20, 0x1, 0x1, [r8, r1, 0xffffffffffffffff, r9]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [r1, r2, r2, r2, r2, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}, @rights={{0x40, 0x1, 0x1, [r1, r1, r1, r0, r1, r2, r1, r2, r0, r2, 0xffffffffffffffff, r14]}}, @rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r2, r2, 0xffffffffffffffff, r2]}}, @rights={{0x1c, 0x1, 0x1, [r1, r2, r2]}}], 0x130, 0xc001}}, {{&(0x7f0000000840)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000c40)=[{&(0x7f00000008c0)="4c33e712f09b2ba1836894f5e6995416b5a3265f0ef90273b23cc29ac0276f0a04dea1f8e714c9b77d23c97cd3f7", 0x2e}, {&(0x7f0000000900)="08e167e699b82bac6b452ba1a96f4091d6fbf2d917c3a7d69021ae9eb39661342edea87e2662913d36bbdb59a956", 0x2e}, {&(0x7f0000000940)="8c6f2c2737df59b5d42962cc7dbe8029607e602791819a47b7bd0c1ab2372db496bdb5faed5fbd68d248cc94006011c06732df4ecc18560909121c9c8e626603b2f9dbfdc3815f9388c0d3c7b5981788d60f56c1e29e323592468cee9a4cc1b4b1736e54860ee76922bf0f0361ee0968ea4fad0df56518f94aaf46c1ab4d783e04528ae6bf23ced0225010da2f0714107715266d58bc0adce77e4b660d6b9305c73ac29c324b5d64802365fa27aa0c0861e17179c7fcf7ddead49441f97c42a3059d68673e071ab5209c7eb5ab462d6856c5375d3b53ea8b44232aee90b5250b816efb03faf586cc26857c6e17cd4e35b7cb3275ca", 0xf5}, {&(0x7f0000003940)="69a470395ff078b4942839e989ee23e723a956021ebac9f0071c46af008aed2984bf36f219121cca501776fb6ba362ebf822fccd5a65efc6242b34c30df5e7df0c0e34813574d8aaa13fdaad2e062e882c35730438f452ce3662cb83f544aac28a21aa457cc5f103e52362b92f81659e67e4067c2d9b42be91067739a0147331647e93323485c1710caacc5e4534e4c43d56e9343033b67635a2a05bbfa725d5ac4d6fa4e3c7d66ce82dcc4f2ccef966bfa41534871efe69e2554e746c185405e013934b5b79f1bed0c5a1e35c92b13ee57f668426c5b604fa40ba8b2c569b981130e40eb06567341b6ec0fbb6867ea6d213c0847d8fb7c0845d3e249268b6f757ecb0019c63013647a8675e164d79ff4f503dc45014939f13a2213c5c3b2ae682e3d1c60c22996ae8ee300f677dadb6a657b61e05481afd3136b12f26170ea81699cb6c0dec3bebb8fd42f86ae486088eabc2cae26aa3b7521f653d3f6c3ce96486dec93a77e9df3e628a03624ffa7febedee2704fdef5182464bf43bcac81d5b73ffb9b45b4fd87c460065995e7c457a31139493464529a3ecf998769c3eedd659f3779797376870109f64dc1f3bae958014253dfa50ad7c3eefaeed5f048cad4b93af8149d3afdc51aad583538276c5ef17f43964e1dc0d7dd29648758bfced2b4111d19e04ba5785277aaffa26bde9220a1315c576df4942dc18b7c16265241d7acdf010947efb47fa716ff0cd361abde6d8aba86c6317b9222f5a0e2b63d4e392374193b7993c7b0a5f4477f14a8300997c0c3a8aef30204c6c635109f2d9d04546d32b539b6b2c3aac25ade3342d9208e23a5c21f3b7eb720d08d53ef0adfee521bb5a1e37df8c08ee2c62536093ba89fd840367f1fb84128a8d50787e3f22e0083920c73f69f942b7979db5c03f58415a1ea4227304b10a0e5b813e8954afb248096bf0e6687e99289fa5246a22495e2b6ce9656ecb3c9494a987e2c5d03fc691ea2efe36d1def81f2f53fd6b71b3c8c04bc30865b6548a4ae9f685e6f559224c79fbd5ee86d9db17cb2c39c852d76072458815395cf8e0e721d4cfd30b59c6eedbec325f0d169108e7b128220a395101ecef7976d349bc6789c4f5ad49ad0841519d673d28b99c7fc10c4d10e23a67b8fcf798b2d9f70737b5df0f037a670f4ae2746ea65ef01b03f2e2f8db069a55c3d68bebd7f9aa51cd15dba43b20de94a4463c92699c1f49895a81d58d40eac335354efa31da01c9652a5649d6446481951f1d6d50e02c9479083b071ed5f540e550531df9761a2868cea545cb5a0ac54f465a8fdb7146a974f2e18acc35167a95b2ac234305cdbbd894dc8f88f1011298a356c8a4d0563ff7e4a307cdb3be66ca8eda7f807c1cd233e9f87159df716d7c1c9a9c84acb7b924a9663cff1808edb592be2479da807252b409191022454ff7097df0854afc5dbd065c8365541f7e03e92c99ae9dfcc47f68eb3ed56e9de9d24bbf9e56c87d1e3fba0b3abb9d61a242a6337974bafa4fe5f44c093b3c244c395701b2ef370172b631dc9df926857b24105853b8e83a09d3c455481cf9806845d36a09e61ff41bc0bde211bff907b73f4db29faa23be4ea49786e4aa71d22105c8ece736ade5600ddc1ba0ccd7dee18dd0aa0c9e702d98f8cb112de1ef1b3c1411a4ef8925b1c64d16b2da735e63edffab684d47c6e454b24a30d137cb1a3735f0d1e403d00ebce83be83c22437afe969b0b48c428e3e1cc475c2246f093c7a0ea561ae879bed36ad19eb9b0b120cb8b203e0ea035b6c514a5e8ef91afcb50f62183a58cf773a811f7d8743c598071bce16febbcc2df910644e82253a51ab16931e7626a8d961bf4d36557af89365e3496532555aa52c808363ff22f14bfad1b3e7c21004e96121b112d155c129c9691c16c3a0ee818e8948b01afa852ec73561042b860ce7a42f184ed7752564a8254344de1dd30db5ba584b38f5b6d024908ddb5efc763c03d10b1e497c7e4d98b1dfd619ec12eb51c15edec1f1b34e628c4023e516a8f8c308bdac3ed347b44de129ffc7ce833777edb29bbeefb52f308333b3ed2ea66106dae341fbe12218f4f6d84ea02bf049974e63e84be8187c4101eb4095c29f0bd5de9074e7bf73c317917f4084f9002a227a210176a14bb766f12e5b01980e7df2ab7f62fb424a8296103a345c6ab59b34c3ced8761663d6c181512aa13bb1301d675aa4bb6d6120be44043b168df875fc905ec44bf3620f6b27acf32d8d10c6477726e733f0b3701753fda62f5fc80c1e9c6252b3d37a26194a00eb2f2850b45d5eff10f6603c8d0f05c83aaf1555d93f9abddc3c3e6ef401dcd14d3a4a95b4f1b16b1bf6e2dbc0f45f03c562aaac2b3a5325cbb20d3ec3112e21eaf50d6c2a06c4df28be645a0af0a391d55f73aa4995ff5e122e0e6b4e38ab27da9e39bdc4e373bbd3a7ae803093256e6dae8f6a8b5b5053518c930e4429418596c21b0a565a75002df51955f6952e0c9c0a7cc5689b528fb352f6b1278458abbe3917541c9f03d55ea8ac977a9761b7b33f8df643b9175e8c767803fdf5f51d4884897b9159b87242aa9a4e03c03b4205b6f3c9ff4ce1dd2cc92a769d9accf975d99e29e5aca9ba4a6f57157ec82d3b8ddd20d87d1791c5a5d05eed788f897c280eeec7028d2e19f9a6797b7131d750ff96fb4649c4c19d813630b1d793a2244e5147eec7987cc1035724c1c4d75b32139284ffc23575155a4ef83ec692b836c5d567841d4cfb7607217327082c3d44f59be39eeaa34f74fa133383213061b7cd5b6c6b4e78ae4e2597537313738bfff5e86147738f3bcef4d96e8eb4d12100bd6a24cb6e6c566eacce0ae096f609179f82e4f66c17a953d21fa857b882d541f1a2b3659871590ece86aaaaff18be58738ccc5ecc0a519f944e6ddbc7fdcb1594d1d5ff0d2eac594a7d9880f8e4ce33bd7474d302dfcd90be3ab3169f15bb7bd7c845ff9fcddd66c4dc4ced8e3f1a0d7e6ee9c85c5fddab20ebab0e8c7fe6784d15dbaedb288704c0e82ad18388b9bdc892b489fbc65c0680000a504d028302022b582b63b11f6658eea751702ba7dd3acc59bdeb67e7310d06c9343cfc744e6f90a35b37395c5c595af268562a906e56259d73a2a9af4e29ea9b9940422d28741dfc97fc39a2606b5a5fc0922708ac56d2b1359ad9268a7a63f64774e044d92a407e163924ea57b5d7a53f8303d4e66358064ff5b1822210aa0cde01c527f41cacef0f0d20f6d2023669b3586c14baa1754d0cfb97cf6b3cdcf1f8e3aa3088e6bd3a91324fc6354732ceae6efd5c38c4243c614a5d81fde5ed7becba4a7a6505d88ecb2d87efeb85c780a9bbbd224786549dbe9af25d80c9bb8d7471e6dad83695c3066750352c53dd8325a5ee2799b7cb1c2f57f277137b38fc18c78895f232420e45e3a4389ea11a5e1e10884498c8f5e55778458e3c3f736544fc3d151db6d8f63f6a85123190541c380c5a28022b80792062d8fef23ca8487af7df96b86d44fc9000c0b3a8e493561cdb17a32ccf6f64465cbdc723a69c1c3754345b46fd9ec178ce07aa39e1af35bb2ec022586bbf30405bae4a4496ae067bd23b4aaacbdaec138ce127895393d1050a3f0a1d9ff03bc9b25c95e0e535b98ae3ca23d2060de08b85a9d5f4f28040156c6f9a367157f4ae107e0ebb0ea5c1737f9ffe1992e8efaacda0cc2ebbf0de02e2c36209f7eaceeae2d6dbb1fb3e2f492c90ff13ea49ca262ff4012c1764668c8d304f4e54f2e49f00b8ffc96ab1a95b237103cc7b8dba195e044bc18113c9f50d95bc5376b7151125a144f6c95430ed23cc042c610ef5851545bc53187c50f374164a937c90a1428f3830332d4b6298b7e2d26518073f4448f9ddcfea5779dbf3a19d5f5b11cee8665cc733a8fee3a32f6e29a548179ac7f77c2420124dfd8c62fc118603575cbcd0b548b730aae362a7a31e81e91f1a7779a7fa939f89165ca66299a0d0694e8ebd3c3f4163ef3d114737578e3b9c88280364bd014b44f64bb1ec667ab4b7437b64bc345058f8d7c505b148c476ff6e2dc2fac5c492b3e54487547661719928d56c5fd2ecd8b8cedfc80ab77eb6d6f9cc0bd9a8ede864e177b5414b90992746b5bdff5f3df9195d5a36cdb935fb9f8426ded6ee370c396018488fa9c7e0b7ff0476dff231aefd00744f780ac22bf5723299058cdace5a0dec9a56138a70fecd808762d6760ea5e0d2ea5efe71294fa708a2c4648410a0710876df8c9a3034269736c00d58f8e670415499a3cfa15967a29caeeb785df70d042b7406e29b3d7f031d85b863937782f9c97809c86f0986b741f2e6e91b5ce2efccdfa53a12624f7d4078aa274be7f40e3c3d2b06e5cd094f5f70d513e4ca0c0838fa5416fd9fd2e4e5da8853ad578c5a800d236419863011830ee6160f8ea3f6952809a483a73fb9dc1d3f5c72992fb77fc20f424c5dbcb5c693d92670a9cdc90ed228576ee2a0bc18a1ba8e23a1efd531d92341ae79b2dc6f93f451ce492eb9c9c0f42a8df03da4a4ed81ececcdacefa846993cb0c052bca532febe328d0fe337a181f2acfad0550974c78818fda33a8d9969fdd44b24fd74888eedda75327e03299d53740ddeb7b1929dcf45b9fb94897a9c0827ea5d749b82819e6cc2db7de710ed1a76b67a9d53e1a5b4dc8ee430d02f9067f180b28458c9d8d0efe46af700040b8669004c15ff722604347de59ad2af44cd3141a688772e38948ec5b3f7bfc99c7618b4b56fac26a48e02c86d2b76529f9c3e8867ca6119fa9a91aae3ef56919336bb763310c6cbb626b0f2f15b99a3b9f2c39e1ea961c6a0dee598f5c61a1962efab8aec79f1f5e54d15adbb04f0666053e3f71ab410c5a2f5d319fda1c1a853e808e1e51788a3f44d4a960e246b02957b29ec1e009f7aa21490c20234342eb80ad5e9a5bf0c882fd776f15cd7fdff2038d9a6b6dc3ea252afecfa65588bc929f3251b00e2fcd3c687f727cf693bbc5f98e30824ad8e9fc999f8a5c2442423428cb016eec4549dc4309b7d371af5e1d3190ff8f90392e0bc640eda7b8e86e3ba1166cf1139f72f3fd776c0c745460e8524d60008feda53f636b4a5866c7a6f3974f157e8ed488477317aff07188153893ddf8067420e879ef2751fdc88af7d453ad9ad9b8550197d8e022494bd57605a0240323d8503bdb4c173a3e2ce2b4edddc65031b6f121bfdfcc6e9972203352058aca4da3beac719ca0721b5e3ff447d5df3b6ec008e9929505d5f747dbef50c7d6e48f378267eb9f3dbfe8ca35c74a7191259a5ea1dded724bdc07981f64360f468929f6c42e5ae907134ca6bba16469f2b7a52df7de9307651dcdfa731af1ac86ce7e76086e13584c125e1893a2fe6dd9920acc99b108cb667a5857a9abd6ff34d12c39407534bf6bd9b507ecc77d48003e05e02886a68c561a2150917f0e18e5c9bbc95c2861d1a5ca94eca7ee3520932a4b7ba8178233bf0b03a0fe71667515f4edc747fda12e3f4567cfe297e7e0fe44a1dbb23b44c6b816940acb83fd546cb8c31e44f28fa5d727d1ba4b162f6b3029c482cf739c1e94f693eb56d600c0f2e0b9b829d4aa08cb28ae146eb9fbb390d520486628f452c92744d2c469ee0abe65b814d1a7923bafb313edb0f422bb7e3a159ca33eca57af6dd4a264716777ab730f307b0cebdbcbda39693ab69230c7f550c81622822c44e3c49cac21a7a2a86362e73a520ef13904f7e915f958723ba520f60047b2e801adf4a5", 0x1000}, {&(0x7f0000000a40)="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", 0xfa}, {&(0x7f0000000b40)="d865c02f56cadca25eece7f0a7ea772a6d132e8cd6a6f914f2b1b61f2fde1fbd01d0a3730d87c5f24b5dac79c07c2762d64b48bcc28899a3a85f5616c229f8e3c3fed1a50ee80ce058aaf0ddf3a23953caa6dac1555ce30ed56d70169c1673d9f1b932cd03a3be22a845e3ab849b1aa4deab49c9b6e66efd61b04b58a0d5b060fb871e0bdd7b27288bf20995d1a6cf43154f55fca717ad61c9aa4296126c8e5accf7c08344c437b78be29f87081f8b7cce11874b1c4d72fd7c75a6d13238d1bb52c7ed285468b66200a50d579a2fb44aff9321", 0xd3}], 0x6, &(0x7f0000000d00)=[@rights={{0x20, 0x1, 0x1, [r2, 0xffffffffffffffff, r2, r2]}}, @cred={{0x1c}}], 0x40, 0x20000000}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000d40)="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", 0xfc}, {&(0x7f0000000e40)="b42386e3e33d2cb9923d7a", 0xb}, {&(0x7f0000000e80)="5205cdad6b3816ac5e6cd466a879d7ca983023df09aa1d972210a9eec80b89c78b49fc15424991d16ba7c5f157c849e447c70918f1a37531b7c8bc4c350c171417de5712934e93db8cf09d461d96a73bee9ad0799adddd2b4f062032958260c43891e590343453fa94ca1f8bc42a3cddb64719c8a49806ea3c5dae13bcc8ad029b709bc7ad85243c969a14fd37", 0x8d}, {&(0x7f0000000f40)="cc6e2131a9783ae058aa62ecc27cb8fead3e2197111f422a35cd2f2f2254116dd3b2fde2b3355af4e570f4dbff43aa9c7a22a149f12ffc85ec847fff25dd6ddd3f43d059f2df9f7b4a8cfcbd0bed72136dfc792101d1b7092fe2a2d340160f051cefa94df391ca18fcd0169eb69f8efa457722225172f86dfb2e30ad216d75a662c84d3bb630b93d29c9a82aff1f07a0825eccff4081ab5d9872b50cf69ab847c3d78094e3e206fdf3fb40b1bf9521436c63618b4a591fcedd3d3be19546563ded13857415f871efaeb4484c6130f6dd3ec0fb656bdce10da8d32d71f6804e4b8a90", 0xe2}, {&(0x7f0000001040)="ef06b41f7372fd8d23025f5c6a558f03e6820f0bb2c25ac4d6a5d40399fe1b308d89207e8ad1579e2990aa61bd3d29b52b1079306a3f8b0160f0042ea15702ec5f743c1105490e00cf7f2139f7a87a04dadb0eba21c133b087f0caf582788ff45d2053dffa828cc2621ad6ecf2c9d1511549e70bbac736a81a681c2438adacdbc9be4fa8d4508459ebd1d5321fe3e789596835fc4908eb58fc4a91dedd22e92db721ac4c1b8168e10f29261554", 0xad}, {&(0x7f0000006980)="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", 0x1000}], 0x6, &(0x7f0000007a00)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r16}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r1]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x108, 0x4000001}}, {{&(0x7f0000007b40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000007dc0)=[{&(0x7f0000007bc0)="68a10d585d1bcc5de5aecd7a72946f73872d704cc46361da93ec462a19b10cc6cf331754f68ad265c93192a54a32779a3867cf01c474d0941712f156b567ba1a439b2a1d5403c5d9e7834f79cb04411d7bc049b2c9a2d6d8885da743565bbdda5cd6f58d293ff28f6a5daab19088e2f16b360d2baf63c2bc01fec05550b57e7064cb862daadda1d17fc59b0d64089a593189ce67547d7878bbe29dcc65a5d2166a034658bcac2afa8ca981bf002835882b854a80db74270fb11a506dc6c50ceb2b0ba71b509309d4", 0xc8}, {&(0x7f0000007cc0)="01ee708e8a89fadacfae271e4789c20db2ced6aed848a0e2664fd6d2e6403bfa91b97c5aec89c9c81e83d6bf8805", 0x2e}, {&(0x7f0000007d00)="4e3ede06cf1c8761046f0bef113e6d8a25c6b74401f62b9c3caf587feacbae703dd01b869b61c8db6628ddd718761358bed50d21b6931b96ea048f4689fbd1a741d91dc671af6e136a3c732d679a82069167c4c68267a43c5ac0b27a92b6da44a738a9b79684d726d2a88ef421f967a34c7840f17d50f87b9501fa6551928caf327c0a4554efc5399258aa7add646a273a0cd0e0a2227f6b7625bf20269ffc1311098aa605d7bdf85045a7424691ce1342e4f1dd5530b9cb07f7d3e39a0bba", 0xbf}], 0x3, &(0x7f0000008000)=[@cred={{0x1c, 0x1, 0x2, {0x0, r5}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60, 0x20000800}}, {{&(0x7f0000008080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000008200)=[{&(0x7f0000008100)="9362053402947a67e9c90d15c9afc7b26c077a8c1bc7c7aea5236346fad1cbbf84ffa620d4ffde314d4396f69cec16c2842a107b45d8373d5db1be9b1362bbad15c387a6de991f7dafa75e68fb9148c8f5791ce4288f7a724a33c6c0e225d8645ded5738a94c23ef9ad0a5f1d51ae1d9c3e3c114b126656b5f1a03ea10b3f0313294aa13e222735318e441f17a360647026b18e24bcb151a9617df1a5ffd5e39e5ec56a6a8f00151ee573f1a879fa72f2553c95bffa204512579db752aa372817dc0ed258cda7893b52e5b933ff90dc067a1b4304183ba59b672c652ea1a05e834bb738b6a97b78b4701", 0xea}], 0x1, &(0x7f00000085c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r0, r2]}}], 0xb8, 0x80}}, {{&(0x7f0000008680)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000009c40)=[{&(0x7f0000008700)="b9f605f681d415e4e17e8cc3bb5f2632fb3221f6", 0x14}, {&(0x7f0000008740)="687c91a074b6e448d86b5b26ab9ffb20c876f16aefc5b11ae566bb6f9a40b16ac1a80a5306b056b7d77d65e003b45f21c44ada83e476c63d5eadb58d90bee283453dc9b578ae7283f86561b6dbf2b42fe9722a8e7e291de35b", 0x59}, {&(0x7f00000087c0)="ebfd1b773a46f90e049e1745d3a2f60969643a07697afc2fb4a95fef30ff76a55ee6ed96ad6be0081168bd1cc0435d1f3fe606d1a35c9fe01f981065b5537f4c31e46ed65b2fbe5ca1a129f4c78dfe215784211f1de787eb4d12e01b4266e0a0cae14e95a40c669015e4355260ddeb36e2786e33d9d5b06350bfdf0f", 0x7c}, {&(0x7f0000008840)="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", 0x1000}, {&(0x7f0000009840)="66bf852a9f271a83b46d0143b228394ea85e550737b7b4e45d26b7a5b7d5aa6f9fe4c7d374d7e8366638a0f81f4c05b40fc28aced76c519888ccbc0c17c0adcb299a46e3a350571ede7ce09a319cb421766d0cc84ff7fe28554fe061424213d927997f211074cd31545f1ecbbe28b52d8b205580a8103910ed302129ee39fba9c1af8aff13cac155", 0x88}, {&(0x7f0000009900)="a4f7d5d1fb19350eb728603e33568f696f83821fe2fe78554cf945b78c66ec03f268a194e67f72a18e38e2c4ca0d3ce7d562f052b53cd2b2d44d5a499406c6cda7c0bf5452ef1e24db56717dbc7eebc5ea78e325028844992c14279077cc548bad2decec96ec1379eeeb30b7151becd9a16b50b591004f5c755f9b83c9c5d2af4e70f36e40d2e045d0e8ad8cf7", 0x8d}, {&(0x7f00000099c0)="821e4a42add399eaae9be79872add6fc00e4ac1625c93246429fce4ad4471b28128393a5100e93b47666f487c0d0ab22f786561805c829a2f3ff5bfb4e359b68b4c4027f8f78108030e9de0cd38b7ed6f9c573b136e2c245348708ca10e12626bfcd7b465d9c7ebb071a", 0x6a}, {&(0x7f0000009a40)="e5b6dff7d7b244849bf1f0114667f91fe342a0cb201093eba39f04c27a96ddc8f0197fadad3b797042aacb902981fc3e7b40471ff0f7146cadae0648f7944d5ca2c317601b6fca10e973db1067b5e74513095f037b608ed202c171710a681c1c40df1dcd3482821c70255c7f3811582c6e67ccb3652debe28fe6228bfcbcc9ae575e62ad83bf1c6927cdfcb5330863dbf6a51924c144a8f8c8a711d140214053a3d0c80d30bd", 0xa6}, {&(0x7f0000009b00)="559dc5673a52a45946d3b75ceae7c5e509b386676846da879d6925b5617a2db448f42835fad59349add05a9b8fde7ec54e54421a19deafbc37df1bddfe5128edce17b8e89dc36afa43248ece6fe2501aaa95b90b703e3149821f460cd32f561f264d92", 0x63}, {&(0x7f0000009b80)="4f72a2c2f6b8857e6d1ee1d493619d86d79bc3dcd268d5320958b06754ba79bf3218d17ac1efc114a00ac2cbdb04f7b2509d990b0648a625a08d022eae5830a43b8dc4ec059917188bc07372efdb280a5f37a1ad57d84c5ba80711789ad1489c73abaa4ea04f53658094c57156c5f09dbf18715a3555f9146a5431755a6dc087d7ea3e34c59ed575593cd9a24a0f7d9d6aa2", 0x92}], 0xa, &(0x7f0000000700)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [r2, 0xffffffffffffffff, r2, r0]}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, r8, r1, r8]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r0, r2, r0, r0]}}], 0xa8, 0x4008000}}, {{&(0x7f000000bf40)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000140)=[{&(0x7f000000bfc0)="9bfa69b5e3841a8386962cb1f52128258a0ab7c8c463dd8b6ab2fd1d3d884f8e911c12c26b08b69f078eecb63353288f7f6593909eb563c651cf2121d0915be5fd97e0d91108ec2db94c3512a4ef99536da6bfd823d3b3f427c989c746972a4a74df8b53631f4ef287c69b2e4d17afd71fc3c8972da2ef5db3352f38923213aa9898f52e3e939891a3cad27b44f5603146e1a8004251a8124a29a2be8e660e214de9abf787d319a4f79b6c8171d7291f94828d14c9185d8bf274da5e746bb5a1c029bff1e42587831a94afb9725766e276eca3e74d79b03582e44e4a65d68bb659c7ba58f2f256ca6932a5378bcaa203d2a0b1f71a857d40e1f991", 0xfb}, {&(0x7f000000c0c0)="d20d3faffb7abf42f1e2ce60df11926c91fe55a22c6c622df0a3ab310fa2fe1204938ffa18c079a09bb93265cfc6059f28ac146b3b9a2049176fa641faad61fde7f6301046a06ae85dbef3f8d35d4cd70078edbf221342f15d2b64995ae9451802cde0248d57c44f208d3f58b56299ff60512e57451ba044629f704850c2344671818ff049985d02897a8a6514cd667d11b5a9", 0x93}, {&(0x7f000000c180)="b52aef768cf361888cd2d69eb9880563321281f4383c0980347fd40ebeb22b50de2c758df4db3530c7f93674400df3fb189b636de1f0b4eb110ce4b7582af22e6332b869bf35154f293f5a9578042d0454e912b2935732dfc88ea75c6af141ac599f4225f04b92778a229a27795e7e75e9f322170ecbf8bc83d7f3cc", 0x7c}], 0x3, &(0x7f000000c440)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x20, 0x1, 0x1, [r1, r2, r2, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0, 0x20000000}}, {{0x0, 0x0, &(0x7f000000c500), 0x0, &(0x7f000000c780), 0x0, 0x9804}}, {{&(0x7f000000c7c0)=@abs={0x0, 0x0, 0x7}, 0x6e, &(0x7f000000cc80)=[{&(0x7f000000c840)="1e8a7d30eb73fb166c8034ad9cd6cf6350a6a44f78a5a835f9ad6c9a8e0dbbcf519b95682165900d7583ebf43fce4f3cc4182bf8c798ae72e67d3f127017cb1a2b014a3038cbe08b45e6efd6d0c8f564589deddc272915868f295147fb5a809e866bd02003026793d5b808708955d658866c9612e4bf5bb1755d0ce0d8b9e77a9b8147b36a5cb17791e7c91a61079a79267b23da7278b4104080399a936beb79629fc776fdc74eb85c9074e73d2c4f9231d80a71c1b304cf7f2160ea95cf653cd995c769407354ff38927322e4d5e64b173ec775074bad8ebe4d117096bc76d5b7f65b9efaf7f73488a6a4e05ddaa06ced1ec4632a", 0xf5}, {&(0x7f000000c940)="b8823ae094756432bbf4c8822f708343cc21439e4e48588c9d3cbcea2cb3fbda56715df1103256d5d0348205b0d5b866e48c5923d7a1a2264683ebd4d7959010bec55b4c3e8fad144fcf12a7e770e0095e8e9058829d8413afebd950d5fc0a6f948182f0117381a0fbe68fe5d3cd5e87abb87f12455157ae70c486fc86cb2852df55b66c9964c1c747bf61ccb81f7b375bbc1afebfbf14f788447e967b6ab830ce0d2c6f46a4c0e5bce416a49616478f676eb105f52c676606e068c140051ee06744", 0xc2}, {&(0x7f000000ca40)="c980241b0f81fe34d6a2672cdbb65c58b4dbfe18ce10b53e9386a8a26b723a5fcd953d8209370df97472b7008db0c2fa785ba4a0d8fb4c6abc3ce4dea629f17a754e2a3a78862584a7cc7644202352ce7b20b1eafe7722903dc76f633806f9fb7c22e03e8b3e8ae24e2d95efaea6fd7b5b244a4efeae6aeb4d4d6a528fbfd1460322ce60e356ab6d", 0x88}, {&(0x7f000000cb00)="c1338a9c47b4de5f9d2f2a237a2fa96952c983c6349693a29d2c1cc5c3d11276f0c92e1fc6e0d7d1469f35078b7b03583417520d200120a849062ca76116d9", 0x3f}, {&(0x7f000000cb40)}, {&(0x7f000000cb80)="e9a085e073b82965679162b59acf8a168bd940f8d375b6615cf6fe16bde4fd383c081982a9c13dcdac9dd7b9b8b5ac6076cbedd1d6016bc3a799f4", 0x3b}, {&(0x7f000000cbc0)="4ccc5f210691b22265bd8f8818c438bc8f15402f778060817b12f00b178f6b85d341f947bcb9a6e3aa85ad85b2373928442ee6f2be43674ff814b8749874538d671dc9087f0244e947d889774c97a40bb82234b8f946b267b795e43cff02d65bebcee1c7391e050145d58fddece2001e3dbaf131db40a99ca861e381d610f7701dabe76f0fec254780cc81d031c1fb131e12abe69a5465b15a93fe73768b9567d10f8c2231df59164978bfac69e84ebb3e511cb5a7", 0xb5}], 0x7, &(0x7f000000cdc0)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, r10}}}, @rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, r2, r0]}}], 0x40, 0x1}}, {{&(0x7f000000ce00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000d140)=[{&(0x7f000000ce80)="c94801584e4f1dca4b61869379be6f5ec515a58a351dbd507db0e22bb6c93e6874e771749355d53fb3db3a831c740f773f619ce2c6e9add7ee029c1bc04cf7d0c741299143fb272dc60e481e2eec", 0x4e}, {&(0x7f000000cf00)="a5968abb4fcb141f516ae7fefe236db32a33b20b5e77d5967cf7bd3fe1d6fc4a9aeb7954cbf46b575299dd8760ede6d378db2c265300ff414f18e1d2fd50081360270058c11f496bba5f54f40f8fd41c3d88061662e056f80768f58222fc5bd0bfa3078344f56488902c08a7741d3cb9178bc98d6f107b00dab24f33f7a3a6615039d366074e6cc88ba2442d9680150b3fc33edaa9", 0x95}, {&(0x7f000000cfc0)="a9b98b3fef3b4a71941162e3c2c5215470170cacdec17f297bf94b1300e3b6f9223caf32408d043525c52da090a2ff96dfcb8c05848e6725be46b1f9d61a5aa312cf2e798a4530ead42399eec21043c3f7af", 0x52}, {&(0x7f000000d040)="006a20a7e0aeff8abb7b36ddb538e02a7406a338cca3e3dd9588d857089abe80590931fc9cc4472fd7ef9b6bd8edb2db11ba0ff395036b3dc64f8b75019a4e657fc396a305de59c221e1f1babe", 0x4d}, {&(0x7f000000d0c0)="ca82e772fb9d97d93f38af3ac443a8626134d308632cf13be7f0967d68c880b4201d9b88886eee5cf2fc", 0x2a}, {&(0x7f000000d100)="9a77f40f03586bc3bb505c32a002f45b0d8f1999f62864c002141825d642e369f13411143d13c70832d728b8e160", 0x2e}], 0x6, &(0x7f000000d300)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r11, r12}}}, @cred={{0x1c, 0x1, 0x2, {r13, r15, r17}}}], 0x40, 0x3a17685ad448a883}}], 0xa, 0x404c080) r18 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x11, r18) ptrace$setregs(0x1a, r18, 0xc, &(0x7f0000000000)) capset(&(0x7f0000000080)={0x20071026, r18}, &(0x7f0000000200)={0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000380)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.543865306s ago: executing program 6 (id=3606): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000ac0)=@gcm_128={{0x304}, "629f2ad1e25e04f2", "bddff730a979d9b52e732fd6a9c1b085", "ace06e88", "747a2aaf941f2665"}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x4, &(0x7f0000000280)=@gcm_128={{0x304}, "41c000", "0cfcb67ecace717eb34a87013860510f", "15f4a07f", "1600"}, 0x1a) sched_getattr(r1, &(0x7f0000000080)={0x38}, 0x38, 0x0) io_uring_setup(0x2f83, &(0x7f00000025c0)={0x0, 0x8eb5, 0x400, 0x1, 0x25f, 0x0, r0}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002640), 0x2, 0x0) read$FUSE(r4, &(0x7f0000002680)={0x2020}, 0x2020) sendmsg$sock(r0, &(0x7f0000002580)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x80, &(0x7f00000024c0)=[{&(0x7f00000001c0)="3548af13783474adc72e48cd074e505869f77793f4ebe4a5df74eecd0e814f1c1236eb5ba43ebf55a3a57bd747e013741a52cc292ab36a0d195068c3c950979867a68a2b127fa00286207d02556c43df33c4b1126dc878d772df31", 0x5b}, {&(0x7f0000000240)="6bcb33ed236ceef5f2ffc8559e9a50fd0bc7f0f547346046cfc6653256ec2a9094992e1c3c460c692f4e6083624ccaf1f8c5c9e2d5b8550d902fabc0c8466cfce866f2ce0dfaa42b6962f1490535379f0146131c784405", 0x57}, {&(0x7f00000000c0)="c38b20e3670c17c7bf3dc022f3f63e9b38d2b6d46938ad595938cde1", 0x1c}, {&(0x7f0000000300)="329800e2aa6b9932e077ffcab81967473e94f9bfe9066cbfcda3b41cec2112cad2334caf501c6091db42d31c4128dd2287ec58dd141c977675b53c4a4c5b01316b4a38238623f90e4b84c6e570194824e8d2d6da0f389bb96d7b6302c4062a109e347b49bdfdc4700c8d73f208f2738e95365117152908ba4852dc5187e3ffb8ea4b731cb533", 0x86}, {&(0x7f00000003c0)="6002982ca7771c47e189aa9d310343aab6166a810afdf20907b49651fc0d543472639e9e248bcaba8a93fd8098fae6fbc630237785c2467161fbc988ebf4666a1b0ddf625440877b6d8e7df01fc0b59a08511b0b8831ce98eba3702ac51110753b651856e730eb4c25ba8c502ad46bb355d8d9e5e75cda50c84a0dea252eb3196ed61ab3807a034222c8751197c15c5b1aed431bc493c7e53fcdc2ad1f71318b7872a4470b17fd30b0e0774d5c71753ecf6b3e93a69c26bc68be946f226655940431fd60ca4313c6e809e4b6", 0xcc}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="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", 0x1000}], 0x7, &(0x7f0000002540)=[@mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x30}, 0x4000) write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12) 1.099149198s ago: executing program 1 (id=3607): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0x1, 0x70bd26, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0xf8, 0x0, 0x0, 0x3, 0x21}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x9}]}, 0x24}}, 0x4004014) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000001500)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8f30fc733", 0x51}], 0x1, 0x43, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1ca0040}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0xbc, 0x0, 0x2, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_NAT={0x3c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast2}}}]}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x6}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x7021}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x80000008, 0x6, 0x0, 0x1f2e, 0x2, 0x3, 0x56}]}) r5 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x800) r6 = io_uring_setup(0x6b02, &(0x7f0000000280)={0x0, 0xc206, 0x80, 0x2, 0x31c}) io_uring_enter(r6, 0x5f8, 0x35db, 0x10, &(0x7f0000000300)={[0x2]}, 0x8) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r5, 0x40045730, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000840)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.096022368s ago: executing program 3 (id=3608): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x1a7a40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$P9_RCREATE(r1, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x4, 0x3, 0x7}, 0x8}}, 0x18) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd0000000000000000004b53445200", [0x100000000, 0x7]}}) 952.081047ms ago: executing program 6 (id=3609): socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) r0 = socket$key(0xf, 0x3, 0x2) (rerun: 32) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="d83ecc902350f75944fb58e43ed4470fa214f6fa05"], 0x10}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000048c0)=[{{&(0x7f0000000280)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x0, &(0x7f0000001780)=[{&(0x7f00000006c0)=""/4096}, {&(0x7f0000000440)=""/57}, {&(0x7f0000000480)=""/148}, {&(0x7f0000000540)=""/166}, {&(0x7f0000000600)=""/9}, {&(0x7f00000016c0)=""/19}, {&(0x7f0000001700)=""/103}], 0x0, &(0x7f0000001800)=""/51}, 0x2}, {{&(0x7f0000001840)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x0, &(0x7f0000001b80)=[{&(0x7f00000018c0)=""/173}, {&(0x7f0000001980)=""/248}, {&(0x7f0000001a80)=""/110}, {&(0x7f0000001b00)=""/124}], 0x0, &(0x7f0000001bc0)=""/1}, 0x3ff}, {{&(0x7f0000001c00)=@in, 0x0, &(0x7f0000002080)=[{&(0x7f0000001c80)=""/200}, {&(0x7f0000001d80)=""/127}, {&(0x7f0000001e00)=""/195}, {&(0x7f0000001f00)=""/183}, {&(0x7f0000002000)=""/80}], 0x0, &(0x7f0000002100)=""/4096}, 0x3}, {{&(0x7f0000003100)=@ethernet={0x0, @local}, 0x0, &(0x7f0000003240)=[{&(0x7f0000003180)=""/165}], 0x0, &(0x7f0000003280)=""/4090}, 0x7f}, {{&(0x7f0000004280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x0, &(0x7f0000004340)=[{&(0x7f0000004300)=""/9}], 0x0, &(0x7f0000004380)=""/112}, 0xaf}, {{&(0x7f0000004400)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x0, {0x2, 0x0, @multicast2}}, 0x0, &(0x7f0000004740)=[{&(0x7f0000004480)=""/116}, {&(0x7f0000004500)=""/110}, {&(0x7f0000004580)=""/58}, {&(0x7f00000045c0)=""/83}, {&(0x7f0000004640)=""/42}, {&(0x7f0000004680)=""/89}, {&(0x7f0000004700)=""/28}], 0x0, &(0x7f00000047c0)=""/254}, 0xc1}], 0x6f, 0x10042, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='gid_map\x00') write$P9_RVERSION(r3, 0x0, 0x500) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r4, &(0x7f0000000400)='X', 0x1, 0x4000004, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x8000, 0x1) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000240)=[0x0, 0x0]}) (async, rerun: 64) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e21, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "d7280e651e26a974cc133129578b651a8de213eb94cd46e19d9c65a018444a131f4de58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df600"}, 0xd8) (async) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) (async) ioctl$int_in(r6, 0x5421, &(0x7f0000000140)=0x1) writev(r6, &(0x7f0000000600), 0x0) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000240)={0x2, 0x4e21, @multicast1}, 0x10) (async, rerun: 32) close(r6) (rerun: 32) bind$alg(r3, &(0x7f0000000640)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) (async) madvise(&(0x7f000009e000/0x3000)=nil, 0x3000, 0x80000000e) (async) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x4000, 0x7, &(0x7f000009d000/0x4000)=nil) 892.974289ms ago: executing program 3 (id=3610): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x28}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xa614}]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589", @ANYRESHEX, @ANYRES8=0x0], 0x0) process_mrelease(0xffffffffffffffff, 0x2) syz_usb_connect$uac2(0x1, 0x103, &(0x7f00000000c0)={{0x12, 0x1, 0x150, 0x0, 0x0, 0x0, 0x40, 0x499, 0x1024, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf1, 0x3, 0x1, 0x4, 0x20, 0x8, {0x8, 0xb, 0x0, 0x0, 0x1, 0x8, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0xb, 0x27, 0x42}, [@multiply_unit={0x7, 0x24, 0xc, 0x9, 0xff, 0x7, 0x3}, @extension_unit={0x8, 0x24, 0x9, 0x5, 0x0, 0x8, "eb"}, @source_unit={0x8, 0x24, 0xa, 0x1, 0x2, 0x5, 0x5, 0x4}, @multiply_unit={0x7, 0x24, 0xc, 0x81, 0x80, 0xe, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0xf6, 0x0, 0xf8, 0x5}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x100, 0x7ff, 0x5, "a4726a"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x40}, @as_header={0x10, 0x24, 0x1, 0xe, 0xc2, 0x3, 0x5, 0xe3, 0xfffffffe, 0x4}, @as_header={0x10, 0x24, 0x1, 0x0, 0x8f, 0x3, 0x1002, 0x3, 0x95, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x6, 0x4d, 0x7, {0x8, 0x25, 0x1, 0x0, 0x17, 0x2, 0xf}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x9, 0x4, 0x7, 0x7}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x7f}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x0, 0x7f}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x101, 0x5, 0xa3}, @as_header={0x10, 0x24, 0x1, 0x6, 0x40, 0x1, 0x1001, 0x10, 0x8001, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x4, 0x7, 0xa2, {0x8, 0x25, 0x1, 0x3, 0xc, 0x1, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x7, 0x9, 0x85, 0x10, 0x8}, 0x10, &(0x7f0000000200)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0x8d, 0x8, 0x77, 0x2, 0x2}]}, 0x7, [{0x49, &(0x7f0000000240)=@string={0x49, 0x3, "e790ffaa33dc0704bb627e5a8b9900e50bf3368b6f32e670b1ec5d42657b971e939d86a569f4aee34b222cbb6eb390c3dfaacb4af5e77795d9e5b6d833488cf39ddd6fb8317d5f"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x3401}}, {0x6c, &(0x7f0000000300)=@string={0x6c, 0x3, "59f499290e7ca63fda048a68794aa7e43a257eedf2a0e74da36b9388a0acbfc2eb657f8d6fd627fd7baed7326917ac3265bbeae09a3f33bdf94e034f46fee3b30a61f4e3513689e5837ae25f11f20a7b5969fb8691f0bb8d9d0fce62fed9f4570b16d4b0d6e84b6441b8"}}, {0x74, &(0x7f0000000380)=@string={0x74, 0x3, "01b533da7643c412739117cceac00c66d7da2c5fe5b4b10f881e8d4e23ec15b519c92508353fea92ca8304665839cfcec3956f8fb6867c6694843cfc070507803282f784537b35b690af2ba803747af2c9400cb691191b558c67bbe636acd2806ab5784b0577c330553b5e16eec305b6ead6"}}, {0x85, &(0x7f0000000400)=@string={0x85, 0x3, "2c0f83c98bcd05a2122f1de6bc769098f6f17a828601f056ab55c4b7bf0d26b686ef31d86a7f461d0eea24d553fd40d790833630be51c76125dc9d9be5f6154b8ded219cd3d83f8e2ba73e39b9f8be5f254203c4a49c686694215ac86f5f191bd883cdad8b50deff31fba09bb54228517e22105500fc9be34233186830e287948eff47"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xdc62533682dff6c1}}]}) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB=':\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="efd9"], 0x20) pread64(r1, 0x0, 0x0, 0xe88) unshare(0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x28}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xa614}]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589", @ANYRESHEX, @ANYRES8=0x0], 0x0) (async) process_mrelease(0xffffffffffffffff, 0x2) (async) syz_usb_connect$uac2(0x1, 0x103, &(0x7f00000000c0)={{0x12, 0x1, 0x150, 0x0, 0x0, 0x0, 0x40, 0x499, 0x1024, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf1, 0x3, 0x1, 0x4, 0x20, 0x8, {0x8, 0xb, 0x0, 0x0, 0x1, 0x8, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0xb, 0x27, 0x42}, [@multiply_unit={0x7, 0x24, 0xc, 0x9, 0xff, 0x7, 0x3}, @extension_unit={0x8, 0x24, 0x9, 0x5, 0x0, 0x8, "eb"}, @source_unit={0x8, 0x24, 0xa, 0x1, 0x2, 0x5, 0x5, 0x4}, @multiply_unit={0x7, 0x24, 0xc, 0x81, 0x80, 0xe, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0xf6, 0x0, 0xf8, 0x5}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x100, 0x7ff, 0x5, "a4726a"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x40}, @as_header={0x10, 0x24, 0x1, 0xe, 0xc2, 0x3, 0x5, 0xe3, 0xfffffffe, 0x4}, @as_header={0x10, 0x24, 0x1, 0x0, 0x8f, 0x3, 0x1002, 0x3, 0x95, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x6, 0x4d, 0x7, {0x8, 0x25, 0x1, 0x0, 0x17, 0x2, 0xf}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x9, 0x4, 0x7, 0x7}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x7f}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x0, 0x7f}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x101, 0x5, 0xa3}, @as_header={0x10, 0x24, 0x1, 0x6, 0x40, 0x1, 0x1001, 0x10, 0x8001, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x4, 0x7, 0xa2, {0x8, 0x25, 0x1, 0x3, 0xc, 0x1, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x7, 0x9, 0x85, 0x10, 0x8}, 0x10, &(0x7f0000000200)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0x8d, 0x8, 0x77, 0x2, 0x2}]}, 0x7, [{0x49, &(0x7f0000000240)=@string={0x49, 0x3, "e790ffaa33dc0704bb627e5a8b9900e50bf3368b6f32e670b1ec5d42657b971e939d86a569f4aee34b222cbb6eb390c3dfaacb4af5e77795d9e5b6d833488cf39ddd6fb8317d5f"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x3401}}, {0x6c, &(0x7f0000000300)=@string={0x6c, 0x3, "59f499290e7ca63fda048a68794aa7e43a257eedf2a0e74da36b9388a0acbfc2eb657f8d6fd627fd7baed7326917ac3265bbeae09a3f33bdf94e034f46fee3b30a61f4e3513689e5837ae25f11f20a7b5969fb8691f0bb8d9d0fce62fed9f4570b16d4b0d6e84b6441b8"}}, {0x74, &(0x7f0000000380)=@string={0x74, 0x3, "01b533da7643c412739117cceac00c66d7da2c5fe5b4b10f881e8d4e23ec15b519c92508353fea92ca8304665839cfcec3956f8fb6867c6694843cfc070507803282f784537b35b690af2ba803747af2c9400cb691191b558c67bbe636acd2806ab5784b0577c330553b5e16eec305b6ead6"}}, {0x85, &(0x7f0000000400)=@string={0x85, 0x3, "2c0f83c98bcd05a2122f1de6bc769098f6f17a828601f056ab55c4b7bf0d26b686ef31d86a7f461d0eea24d553fd40d790833630be51c76125dc9d9be5f6154b8ded219cd3d83f8e2ba73e39b9f8be5f254203c4a49c686694215ac86f5f191bd883cdad8b50deff31fba09bb54228517e22105500fc9be34233186830e287948eff47"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xdc62533682dff6c1}}]}) (async) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB=':\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="efd9"], 0x20) (async) pread64(r1, 0x0, 0x0, 0xe88) (async) unshare(0x80) (async) 738.460984ms ago: executing program 6 (id=3611): socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000040)) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) mlock(&(0x7f0000905000/0x1000)=nil, 0x1000) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) read$FUSE(r6, &(0x7f0000002c80)={0x2020}, 0x2020) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r5, 0xae80, 0x0) 591.265558ms ago: executing program 5 (id=3612): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x6a4}]}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r3, r3, 0x0, 0x7) 454.060228ms ago: executing program 1 (id=3613): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1, 0x10, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x5000000}}, {}, [@alu={0x4, 0x0, 0x2, 0xa, 0x5, 0xffffffffffffffe0, 0xfffffffffffffff0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 209.78813ms ago: executing program 5 (id=3614): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3) (async) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x2, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x80008, 0xffffffff}, 0xd0, 0x9}}) (async) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x2, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x80008, 0xffffffff}, 0xd0, 0x9}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0xb) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10f, 0x4}) syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) open(&(0x7f0000000040)='./file1\x00', 0x0, 0x4) (async) r2 = open(&(0x7f0000000040)='./file1\x00', 0x0, 0x4) flock(r2, 0x2) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002140)={0xf, {"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", 0x1000}}, 0x1006) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r5, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000440)=[{0x29, '\x00', @st={0x4, [{0x3, @svalue=0x6}, {0x2, @svalue=0x7fffffff}, {0x1, @uvalue=0x200000007fffffff}, {0x1, @uvalue=0x7}]}, 0x4004}, {0x2, '\x00', @st={0x4, [{0x2, @uvalue=0x101}, {0x1, @uvalue=0x40}, {0x2, @uvalue=0x2}, {0x0, @uvalue=0x2}]}, 0x9}, {0x22, '\x00', @st={0x4, [{0x2, @svalue=0x7}, {0x0, @uvalue=0xffffffffffffffff}, {0x3, @svalue=0x10000}, {0x1, @svalue=0x4f}]}, 0xe6}]}) (async) ioctl$FE_SET_PROPERTY(r5, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000440)=[{0x29, '\x00', @st={0x4, [{0x3, @svalue=0x6}, {0x2, @svalue=0x7fffffff}, {0x1, @uvalue=0x200000007fffffff}, {0x1, @uvalue=0x7}]}, 0x4004}, {0x2, '\x00', @st={0x4, [{0x2, @uvalue=0x101}, {0x1, @uvalue=0x40}, {0x2, @uvalue=0x2}, {0x0, @uvalue=0x2}]}, 0x9}, {0x22, '\x00', @st={0x4, [{0x2, @svalue=0x7}, {0x0, @uvalue=0xffffffffffffffff}, {0x3, @svalue=0x10000}, {0x1, @svalue=0x4f}]}, 0xe6}]}) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000400)) (async) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000400)) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)=0x7) (async) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)=0x7) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) (async) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x2324e5) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r8, 0xc0884113, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r9, r1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) 0s ago: executing program 1 (id=3615): r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000000008d82, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7"], 0x0, 0x4}, 0x94) (async) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) (async) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000540)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000191c00049000000000000000e5ffff08000400000000000000000a87d5e1402e3e241faa0b6a521684", 0x49}], 0x1) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0x10, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc000}, 0x4c014) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) (async) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000010001fff03000080121427ff00000000", @ANYRES32=0x0, @ANYBLOB="8000000040cc0300300012800b00010067656e6576650000200002801400070000000000000000000000000000000001050009000100000008000a00", @ANYRES32=r8, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) ioctl$VIDIOC_QUERY_EXT_CTRL(r5, 0xc0445624, &(0x7f00000000c0)={0x140980001, 0x102, "bb5dff0f251ed600f60800000000000000ce1ced49e8981e103268fadc1433ae", 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xff, [0x0, 0x9, 0x0, 0x840]}) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000008010400000000000000008008000840000001a0080008400000ffff0800054000000003080009407fffffff0900010073007a310000000091cd79be93cf2c6537a5e2a3aeaf259aa961b3936cfecd4f3481fd927bc8d986a4d77dcdcc6a9c00000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) (async) ioctl$SG_SET_KEEP_ORPHAN(r4, 0x2287, &(0x7f0000000040)=0x47a4) (async) r9 = syz_io_uring_setup(0x59d4, &(0x7f0000000640)={0x0, 0xecc0, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r7, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10080001}, 0xc, &(0x7f0000000580)={&(0x7f0000000700)={0x148, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_NODE={0x130, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xc4, 0x3, "530d14e7ce3155556152f41619314cb528d2e4f031919de681fbefaf70e45ec65e4e1db80f4f90c9d66d26df60251039e9397d896685365aa1e6be33d2a4975137eb39e76df0b1e49be252080e48a19cf636adb799c124083343fc6b7b009b0c2d33a652b7c2dd690b216aeefb61a09abc5c33ffca299228700b6c4cd528e374769ccc4c023868062923166433a9c88739f2898ce576f5da4a61325c09b4b41ad4af32524a39a46992108882708c5b0ee5f1ffd47acc39d26d860ead059ab10a"}, @TIPC_NLA_NODE_ID={0x58, 0x3, "f02b271d23705819adc51807710d205f8a3e9411fbba0fe9f06893ddc6b54512b0f5d727da6b175c4aa516363db0fea7f99b1fc93085baa79cd2a3543c466569ea2bdfe559756f10f0ee4b74b8171b5099942818"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x23}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4004}, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) r12 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r12, 0x84, 0xa, &(0x7f00000004c0)={0xe422, 0xc5, 0x4, 0x1349f8b9, 0x1, 0x0, 0x8, 0xffffff80, r13}, &(0x7f0000000500)=0x20) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0), 0x1000) (async) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x1, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}, {0x0}], 0x2}) (async) io_uring_enter(r9, 0x847ba, 0x0, 0xc, 0x0, 0x0) (async) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000400)={0x4, 0x2, 0x0, {0x5, 0x3, 0x3, 0x3ff}}) kernel console output (not intermixed with test programs): 03e syscall=230 compat=0 ip=0x7f06f0b5cfce code=0x7ffc0000 [ 848.380753][ T29] audit: type=1326 audit(1772884546.323:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17899 comm="syz.1.3198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f06f0b5cfce code=0x7ffc0000 [ 848.409386][ T8117] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 848.409845][ T29] audit: type=1326 audit(1772884546.323:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17899 comm="syz.1.3198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f06f0b5cfce code=0x7ffc0000 [ 848.441887][ T796] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 848.465262][ T796] usb 5-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=22.4e [ 848.474950][ T796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.484390][ T796] usb 5-1: Product: syz [ 848.489283][ T796] usb 5-1: Manufacturer: syz [ 848.495386][ T796] usb 5-1: SerialNumber: syz [ 848.520137][ T796] usb 5-1: config 0 descriptor?? [ 848.548653][T13717] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 848.582893][ T796] peak_usb 5-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 848.591684][ T796] peak_usb 5-1:0.0: unable to read PCAN-USB serial number (err -22) [ 848.597117][ T8117] usb 3-1: Using ep0 maxpacket: 32 [ 848.609834][ T8117] usb 3-1: config index 0 descriptor too short (expected 241, got 72) [ 848.618760][ T8117] usb 3-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config [ 848.645937][ T8117] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 848.659262][ T8117] usb 3-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 848.673462][ T8117] usb 3-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 848.683154][ T8117] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.694439][ T796] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22 [ 848.695403][ T8117] usb 3-1: config 0 descriptor?? [ 848.718116][ T8117] mos7840 3-1:0.0: missing endpoints [ 848.726838][T13717] usb 4-1: Using ep0 maxpacket: 16 [ 848.746424][T13717] usb 4-1: config 0 has no interfaces? [ 848.755683][T13717] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 848.765408][T17897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.774287][T13717] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 848.788889][T13717] usb 4-1: Manufacturer: syz [ 848.806378][T13717] usb 4-1: config 0 descriptor?? [ 848.818505][T17897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.853337][ T5191] usb 5-1: USB disconnect, device number 48 [ 848.927793][T13717] usb 3-1: USB disconnect, device number 31 [ 849.330670][T17917] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3201'. [ 849.676755][T13717] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 849.840214][T13717] usb 5-1: config 0 has an invalid interface number: 11 but max is 0 [ 849.852339][T13717] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 849.864950][T13717] usb 5-1: config 0 has no interface number 0 [ 849.872118][T13717] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 849.889579][T13717] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid wMaxPacketSize 0 [ 849.900646][T13717] usb 5-1: config 0 interface 11 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 849.915269][T13717] usb 5-1: config 0 interface 11 has no altsetting 0 [ 849.922508][T13717] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 849.933708][T13717] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.952059][T13717] usb 5-1: config 0 descriptor?? [ 849.964351][T13717] keyspan 5-1:0.11: Keyspan 2 port adapter converter detected [ 849.973486][T13717] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 87 [ 849.987134][T13717] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 81 [ 849.996816][T13717] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 82 [ 850.005172][T13717] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 1 [ 850.014043][T13717] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 2 [ 850.021934][T13717] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 85 [ 850.031112][T17938] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3209'. [ 850.041446][T13717] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 5 [ 850.094574][T13717] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 850.111619][T13717] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 83 [ 850.121562][T13717] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 84 [ 850.131958][T13717] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 3 [ 850.140185][T13717] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 4 [ 850.148597][T13717] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 86 [ 850.156725][T13717] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 6 [ 850.176414][T17919] tipc: MTU too low for tipc bearer [ 850.247253][T13717] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 850.344771][T17946] netlink: 'syz.2.3212': attribute type 1 has an invalid length. [ 850.379493][T17946] bond1: entered promiscuous mode [ 850.385374][T17946] 8021q: adding VLAN 0 to HW filter on device bond1 [ 850.400658][T17946] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3212'. [ 850.417785][T17946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3212'. [ 850.430061][ T796] usb 5-1: USB disconnect, device number 49 [ 850.467226][ T796] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 850.494139][ T796] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 850.543495][ T796] keyspan 5-1:0.11: device disconnected [ 850.664958][ T5939] usb 4-1: USB disconnect, device number 66 [ 850.912461][ T5191] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 851.068476][ T5191] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 851.078228][ T5191] usb 3-1: config 1 has no interface number 0 [ 851.084537][ T5191] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.097636][ T5191] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 851.116742][ T5191] usb 3-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 851.130419][ T5191] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 851.143857][ T5939] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 851.156565][ T5191] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 851.171962][ T5191] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 851.181483][ T5191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.190472][ T5191] usb 3-1: Product: syz [ 851.194762][ T5191] usb 3-1: Manufacturer: syz [ 851.203438][ T5191] usb 3-1: SerialNumber: syz [ 851.318974][ T5939] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 851.336915][ T5939] usb 4-1: config 0 has no interface number 0 [ 851.343371][ T5939] usb 4-1: config 0 interface 41 has no altsetting 0 [ 851.364325][ T5939] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 851.374009][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.398100][ T5939] usb 4-1: Product: syz [ 851.402545][ T5939] usb 4-1: Manufacturer: syz [ 851.413772][ T5939] usb 4-1: SerialNumber: syz [ 851.419634][T17953] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 851.439553][ T5939] usb 4-1: config 0 descriptor?? [ 851.714801][T17952] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 851.876216][ T5191] cdc_ncm 3-1:1.1: bind() failure [ 851.909796][ T5191] usb 3-1: USB disconnect, device number 32 [ 852.024684][ T5939] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 852.086172][ T5939] usb 4-1: USB disconnect, device number 67 [ 852.496895][ T5939] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 852.673891][ T5939] usb 4-1: Using ep0 maxpacket: 16 [ 852.692842][ T5939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 852.714798][ T5939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 852.732276][ T5939] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 852.746128][ T5939] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 852.755251][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.775607][ T5939] usb 4-1: config 0 descriptor?? [ 853.023794][T17995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 853.037282][T17995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 853.253280][T18001] MPI: mpi too large (107144 bits) [ 853.339271][ T5939] usbhid 4-1:0.0: can't add hid device: -71 [ 853.350093][ T5939] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 853.363362][ T5939] usb 4-1: USB disconnect, device number 68 [ 853.686768][ T5191] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 853.877867][ T5191] usb 5-1: unable to get BOS descriptor or descriptor too short [ 853.921975][ T5191] usb 5-1: config 176 has an invalid descriptor of length 0, skipping remainder of the config [ 853.937720][ T5191] usb 5-1: config 176 has 0 interfaces, different from the descriptor's value: 1 [ 853.947754][ T5191] usb 5-1: language id specifier not provided by device, defaulting to English [ 854.058837][ T5191] usb 5-1: New USB device found, idVendor=05ac, idProduct=b231, bcdDevice=85.00 [ 854.067999][ T5191] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.075996][ T5191] usb 5-1: Product: syz [ 854.080774][ T5191] usb 5-1: Manufacturer: 搾笌킽䄱䷩悎磭񵿙 [ 854.087542][ T5191] usb 5-1: SerialNumber: syz [ 854.167005][ T8117] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 854.343143][ T8117] usb 2-1: Using ep0 maxpacket: 16 [ 854.361139][ T8117] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 854.369926][ T8117] usb 2-1: config 0 has no interface number 0 [ 854.386245][ T8117] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 854.421165][ T8117] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 854.482486][ T8117] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 854.513000][ T8117] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.543195][ T8117] usb 2-1: config 0 descriptor?? [ 855.380220][ T8117] input: HID 28bd:0071 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.0020/input/input78 [ 855.593643][ T8117] input: HID 28bd:0071 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.0020/input/input79 [ 855.707677][ T8117] uclogic 0003:28BD:0071.0020: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.1-1/input1 [ 855.786160][ T8117] usb 2-1: USB disconnect, device number 57 [ 856.275257][ T5191] usb 5-1: USB disconnect, device number 50 [ 856.368312][T18025] fido_id[18025]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 856.702841][T18038] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 859.173771][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 859.173790][ T29] audit: type=1326 audit(1772884557.743:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18075 comm="syz.1.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f0b9c799 code=0x7ffc0000 [ 859.207188][ T29] audit: type=1326 audit(1772884557.763:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18075 comm="syz.1.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f0b9c799 code=0x7ffc0000 [ 859.236436][ T29] audit: type=1326 audit(1772884557.763:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18075 comm="syz.1.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f0b9c799 code=0x7ffc0000 [ 859.276808][T13717] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 859.301278][ T29] audit: type=1326 audit(1772884557.783:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18075 comm="syz.1.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f0b9c799 code=0x7ffc0000 [ 859.331277][ T29] audit: type=1326 audit(1772884557.783:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18075 comm="syz.1.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f06f0b9c799 code=0x7ffc0000 [ 859.359016][ T29] audit: type=1326 audit(1772884557.783:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18075 comm="syz.1.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f0b9c799 code=0x7ffc0000 [ 859.382234][ T29] audit: type=1326 audit(1772884557.783:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18075 comm="syz.1.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f06f0b9c799 code=0x7ffc0000 [ 859.405631][ T29] audit: type=1326 audit(1772884557.783:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18075 comm="syz.1.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f0b9c799 code=0x7ffc0000 [ 859.450701][T13717] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 859.456798][ T29] audit: type=1326 audit(1772884557.783:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18075 comm="syz.1.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f06f0b9c799 code=0x7ffc0000 [ 859.556927][T13717] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 859.563925][ T29] audit: type=1326 audit(1772884557.783:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18075 comm="syz.1.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f0b9c799 code=0x7ffc0000 [ 859.612842][T13717] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 859.653541][T13717] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.696499][T13717] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 859.718161][T13717] usb 3-1: invalid MIDI out EP 0 [ 859.965824][T17881] udevd[17881]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 860.261621][T18101] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3251'. [ 860.418257][T13717] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 860.433650][T13717] usb 3-1: USB disconnect, device number 33 [ 860.811957][T18109] ======================================================= [ 860.811957][T18109] WARNING: The mand mount option has been deprecated and [ 860.811957][T18109] and is ignored by this kernel. Remove the mand [ 860.811957][T18109] option from the mount to silence this warning. [ 860.811957][T18109] ======================================================= [ 861.281022][T18120] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 862.587977][ T5903] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 862.616759][T13717] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 862.757693][ T5903] usb 2-1: Using ep0 maxpacket: 16 [ 862.798038][ T5903] usb 2-1: config index 0 descriptor too short (expected 526, got 367) [ 862.812668][ T5903] usb 2-1: config 0 has an invalid interface number: 209 but max is 0 [ 862.829479][T13717] usb 4-1: config 0 has an invalid descriptor of length 57, skipping remainder of the config [ 862.843685][T13717] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 862.855345][ T5903] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 862.855374][ T5903] usb 2-1: config 0 has no interface number 0 [ 862.855437][ T5903] usb 2-1: config 0 interface 209 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 862.855466][ T5903] usb 2-1: config 0 interface 209 altsetting 2 endpoint 0xE has invalid wMaxPacketSize 0 [ 862.855491][ T5903] usb 2-1: config 0 interface 209 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 9 [ 862.855519][ T5903] usb 2-1: config 0 interface 209 has no altsetting 0 [ 862.860722][ T5903] usb 2-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=a4.96 [ 862.933846][T13717] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 2176, setting to 64 [ 862.954424][T13717] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 862.995212][T13717] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 863.005262][T13717] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 863.023820][T13717] usb 4-1: Manufacturer: syz [ 863.025760][T13717] usb 4-1: config 0 descriptor?? [ 863.058618][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.086730][ T5903] usb 2-1: Product: syz [ 863.093022][ T5903] usb 2-1: Manufacturer: syz [ 863.106799][ T5903] usb 2-1: SerialNumber: syz [ 863.128574][ T5903] usb 2-1: config 0 descriptor?? [ 863.349430][T13717] rc_core: IR keymap rc-hauppauge not found [ 863.358909][T13717] Registered IR keymap rc-empty [ 863.396428][T13717] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 863.437205][T13717] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 863.469595][T13717] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 863.502940][T13717] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input80 [ 863.538379][T13717] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 863.607194][T13717] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 863.768191][T13717] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 863.786883][T13717] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 863.817614][T13717] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 863.857723][T13717] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 863.936315][T13717] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 864.008255][T13717] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 864.077317][T13717] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 864.387042][T13717] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 864.447179][T13717] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 864.469415][T13717] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 864.505274][T13717] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 864.527222][T13717] usb 4-1: USB disconnect, device number 69 [ 865.346290][T18171] netlink: 'syz.3.3270': attribute type 1 has an invalid length. [ 865.536444][T18178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3270'. [ 865.684536][T18178] bond1 (unregistering): Released all slaves [ 866.086746][T13717] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 866.316896][T13717] usb 3-1: Using ep0 maxpacket: 32 [ 866.333981][T13717] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 866.408406][T13717] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 866.418641][T13717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.437888][T13717] usb 3-1: Product: syz [ 866.452613][T13717] usb 3-1: Manufacturer: syz [ 866.466571][T13717] usb 3-1: SerialNumber: syz [ 866.508698][T13717] usb 3-1: config 0 descriptor?? [ 866.539431][T13717] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 866.948561][T13717] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 866.955504][T13717] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 866.973926][T13717] usb 3-1: USB disconnect, device number 34 [ 867.415518][ T5191] usb 2-1: USB disconnect, device number 58 [ 867.616376][T18205] netlink: 'syz.2.3279': attribute type 10 has an invalid length. [ 867.627571][T18205] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3279'. [ 867.670637][T18202] pimreg: entered allmulticast mode [ 867.685283][T18205] batadv0: entered promiscuous mode [ 867.699284][T18205] batadv0: entered allmulticast mode [ 867.718629][T18205] bridge0: port 3(batadv0) entered blocking state [ 867.731822][T18205] bridge0: port 3(batadv0) entered disabled state [ 867.739158][T18205] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 867.956932][ T10] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 868.206966][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 868.230401][ T10] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 868.246789][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 868.264155][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 868.287743][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 868.376950][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 868.446809][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 868.488246][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.741894][T18199] syzkaller0: entered promiscuous mode [ 868.747796][ T10] usb 2-1: usb_control_msg returned -32 [ 868.757658][T18199] syzkaller0: entered allmulticast mode [ 868.763869][ T10] usbtmc 2-1:16.0: can't read capabilities [ 868.917344][ T5903] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 868.967568][ T42] usb 2-1: USB disconnect, device number 59 [ 869.101000][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 869.139600][ T5903] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 869.208475][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.247790][ T5903] usb 5-1: config 0 descriptor?? [ 869.470094][ T5903] usbhid 5-1:0.0: can't add hid device: -71 [ 869.476561][ T5903] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 869.533979][ T5903] usb 5-1: USB disconnect, device number 51 [ 869.808467][T18254] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 869.914000][T18256] loop6: detected capacity change from 0 to 7 [ 869.928775][T18256] Dev loop6: unable to read RDB block 7 [ 869.945177][T18256] loop6: unable to read partition table [ 869.951484][T18256] loop6: partition table beyond EOD, truncated [ 869.976783][T18256] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 870.006964][ T5903] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 870.190000][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 870.210100][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.216904][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.236959][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 256, setting to 64 [ 870.256758][ T5903] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 870.266034][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.297776][ T5903] usb 5-1: config 0 descriptor?? [ 870.314817][T18225] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 870.338592][ T5903] hub 5-1:0.0: USB hub found [ 870.539594][ T5903] hub 5-1:0.0: 1 port detected [ 871.010224][T10432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 871.032883][T18269] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 871.104025][ T5903] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 871.121387][T10432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 871.193647][ T5903] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 871.265646][ T5903] usbhid 5-1:0.0: can't add hid device: -71 [ 871.289331][ T5903] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 871.378421][ T5903] usb 5-1: USB disconnect, device number 52 [ 872.495601][T18288] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3300'. [ 873.513987][T18313] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 873.981306][T18321] syzkaller0: entered promiscuous mode [ 874.043219][T18321] syzkaller0: entered allmulticast mode [ 874.423528][ T5903] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 874.597484][ T8117] IPVS: starting estimator thread 0... [ 874.617038][ T5903] usb 5-1: Using ep0 maxpacket: 8 [ 874.627915][ T5903] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 874.641836][ T5903] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 874.656702][ T5903] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 874.667114][ T5903] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 874.686333][ T5903] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 874.704733][T18339] IPVS: using max 29 ests per chain, 69600 per kthread [ 874.713297][ T5903] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 874.722667][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.826750][ T8117] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 874.954316][ T5903] usb 5-1: usb_control_msg returned -32 [ 874.965372][ T5903] usbtmc 5-1:16.0: can't read capabilities [ 875.100697][ T8117] usb 4-1: Using ep0 maxpacket: 8 [ 875.108636][ T8117] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 875.130886][ T8117] usb 4-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 875.145924][ T8117] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.162072][T18354] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3318'. [ 875.380302][T18355] usbtmc 5-1:16.0: control status returned 0 [ 875.403843][ T8117] usb 4-1: config 0 descriptor?? [ 875.413001][ T8117] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 875.595710][ T5939] usb 5-1: USB disconnect, device number 53 [ 875.641762][ T42] usb 4-1: USB disconnect, device number 70 [ 876.388071][T15053] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 876.400113][T15053] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 876.408827][T15053] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 876.418146][T15053] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 876.449962][T15053] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 876.616733][ T5191] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 876.636735][ T5903] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 876.739858][T18369] chnl_net:caif_netlink_parms(): no params data found [ 876.747510][ T5191] usb 5-1: device descriptor read/64, error -71 [ 876.818866][ T5903] usb 2-1: Using ep0 maxpacket: 16 [ 876.833776][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 876.833796][ T29] audit: type=1326 audit(1772884575.403:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18372 comm="syz.3.3327" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbe5df9c799 code=0x0 [ 876.842265][ T5903] usb 2-1: unable to get BOS descriptor or descriptor too short [ 876.874452][ T5903] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 876.887840][T18369] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.889380][ T5903] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 876.895354][T18369] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.905871][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.921670][ T5903] usb 2-1: Product: syz [ 876.925897][ T5903] usb 2-1: Manufacturer: syz [ 876.931039][T18369] bridge_slave_0: entered allmulticast mode [ 876.932286][ T5903] usb 2-1: SerialNumber: syz [ 876.954218][T18369] bridge_slave_0: entered promiscuous mode [ 876.974951][T18369] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.989880][T18369] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.006914][T18369] bridge_slave_1: entered allmulticast mode [ 877.018686][T18369] bridge_slave_1: entered promiscuous mode [ 877.046774][ T5191] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 877.070289][T18369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 877.082862][T18369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 877.112027][T18369] team0: Port device team_slave_0 added [ 877.120219][T18369] team0: Port device team_slave_1 added [ 877.145294][T18369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 877.152491][T18369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 877.181601][T18369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 877.195375][T18369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 877.202621][ T5191] usb 5-1: device descriptor read/64, error -71 [ 877.209335][T18369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 877.210623][ T8117] usb 2-1: USB disconnect, device number 60 [ 877.235930][T18369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 877.294368][T18369] hsr_slave_0: entered promiscuous mode [ 877.301110][T18369] hsr_slave_1: entered promiscuous mode [ 877.307722][T18369] debugfs: 'hsr0' already exists in 'hsr' [ 877.313512][T18369] Cannot create hsr debugfs directory [ 877.336994][ T5191] usb usb5-port1: attempt power cycle [ 877.495667][T18369] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 877.506754][T18369] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 877.517412][T18369] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 877.528276][T18369] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 877.677429][ T5191] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 877.702208][T18369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 877.721581][ T5191] usb 5-1: device descriptor read/8, error -71 [ 877.746905][T18369] 8021q: adding VLAN 0 to HW filter on device team0 [ 877.841748][ T9004] bridge0: port 1(bridge_slave_0) entered blocking state [ 877.849118][ T9004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 877.879561][ T9004] bridge0: port 2(bridge_slave_1) entered blocking state [ 877.886994][ T9004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 877.987527][ T5191] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 878.010162][ T5191] usb 5-1: device descriptor read/8, error -71 [ 878.549076][ T51] Bluetooth: hci0: command tx timeout [ 878.565934][ T5191] usb usb5-port1: unable to enumerate USB device [ 878.803047][T18369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 878.970228][T18369] veth0_vlan: entered promiscuous mode [ 879.040186][T18369] veth1_vlan: entered promiscuous mode [ 879.115526][T18369] veth0_macvtap: entered promiscuous mode [ 879.164730][T18369] veth1_macvtap: entered promiscuous mode [ 879.310665][T18413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3334'. [ 879.361370][T18413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3334'. [ 879.646764][ T5903] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 879.741427][T18418] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3333'. [ 880.586436][T18413] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 880.602641][T15053] Bluetooth: hci0: command tx timeout [ 880.661283][T18369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 880.716009][T18369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 880.756874][T13717] usb 5-1: new low-speed USB device number 58 using dummy_hcd [ 881.400047][T13717] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 881.418742][T13717] usb 5-1: config 0 has no interface number 0 [ 881.440826][T13717] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 881.458441][T13717] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 881.483039][T13717] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 881.499568][T13717] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.517389][T13717] usb 5-1: config 0 descriptor?? [ 881.532360][T18427] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 881.560716][T13717] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 881.680841][ T1146] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.694389][ T1146] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.750816][ T1146] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.773819][ T1146] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.787417][T13717] usb 5-1: USB disconnect, device number 58 [ 882.093190][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 882.109451][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.219949][T10432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 882.249972][T10432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.271077][ T5939] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 882.484651][ T5939] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 882.526890][T15053] Bluetooth: hci5: command 0x0406 tx timeout [ 882.592452][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.632484][ T5939] usb 2-1: config 0 descriptor?? [ 882.654306][ T5939] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 882.686694][ T51] Bluetooth: hci0: command tx timeout [ 883.092429][ T5939] gp8psk: usb out operation failed. [ 883.110602][ T5939] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 883.144985][ T5939] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 883.233379][ T5939] usb 2-1: USB disconnect, device number 61 [ 883.826811][T16003] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 884.025822][T16003] usb 6-1: Using ep0 maxpacket: 32 [ 884.211477][T16003] usb 6-1: config 0 has no interfaces? [ 884.218576][T16003] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 884.304788][T16003] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.344299][T16003] usb 6-1: config 0 descriptor?? [ 884.455324][T18481] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 884.567676][T18474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.580505][T18474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.691782][T16003] usb 6-1: USB disconnect, device number 2 [ 884.804922][ T51] Bluetooth: hci0: command tx timeout [ 884.815919][T18490] macvlan0: entered promiscuous mode [ 884.825812][T18490] netlink: 'syz.3.3352': attribute type 2 has an invalid length. [ 885.156721][ T796] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 885.231862][T15053] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 885.242880][T15053] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 885.247329][T16003] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 885.262589][T15053] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 885.271880][T15053] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 885.283510][T15053] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 885.339055][ T796] usb 4-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 885.370189][ T796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.400233][ T796] usb 4-1: Product: syz [ 885.428537][T16003] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 885.446911][ T796] usb 4-1: Manufacturer: syz [ 885.459780][ T796] usb 4-1: SerialNumber: syz [ 885.470441][T16003] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 885.485956][ T796] usb 4-1: config 0 descriptor?? [ 885.498001][ T796] usb 4-1: selecting invalid altsetting 1 [ 885.505132][T16003] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 885.516848][ T796] technisat-usb2: could not set alternate setting to 0 [ 885.524061][T16003] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 885.543220][T16003] usb 6-1: string descriptor 0 read error: -22 [ 885.550235][T16003] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 885.589652][T16003] usb 6-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 885.721961][ T796] technisat-usb2: firmware version: 0.0 [ 885.730737][ T796] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 885.756863][T16003] usb 6-1: config 0 descriptor?? [ 885.914444][ T796] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 885.997495][T16003] rc_core: IR keymap rc-imon-rsc not found [ 886.051840][T16003] Registered IR keymap rc-empty [ 886.062339][ T796] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) error while loading driver (-19) [ 886.075179][T18474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 886.088193][T16003] rc rc0: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 886.099134][T18474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 886.126853][ T796] usb 4-1: USB disconnect, device number 72 [ 886.142870][T16003] input: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input81 [ 886.217062][T16003] imon_raw 6-1:0.0: probe with driver imon_raw failed with error -90 [ 886.273330][T16003] usb 6-1: USB disconnect, device number 3 [ 886.925695][T18511] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3356'. [ 887.329144][ T51] Bluetooth: hci2: command tx timeout [ 887.364634][ T1124] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.587748][ T1124] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.739451][ T1124] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.776858][T13717] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 887.784737][T18494] chnl_net:caif_netlink_parms(): no params data found [ 887.855764][ T1124] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 887.868332][ T1124] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 887.894821][ T1124] bridge0: port 3(netdevsim0) entered disabled state [ 887.927478][ T1124] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.960540][T13717] usb 6-1: Using ep0 maxpacket: 8 [ 887.997597][T13717] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 888.005951][T13717] usb 6-1: config 0 has no interface number 0 [ 888.052046][T13717] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 888.106705][T13717] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 888.186787][T13717] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 888.246581][T13717] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 888.326396][T13717] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 888.335579][T13717] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.356219][T13717] usb 6-1: config 0 descriptor?? [ 888.376168][T13717] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 888.514590][T18494] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.532446][T18494] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.540879][T18494] bridge_slave_0: entered allmulticast mode [ 888.553723][T18494] bridge_slave_0: entered promiscuous mode [ 888.844130][T18534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.878566][T18534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.911120][T18494] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.935268][T18494] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.944906][T18494] bridge_slave_1: entered allmulticast mode [ 888.955872][T18494] bridge_slave_1: entered promiscuous mode [ 888.962686][T18534] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=33554656 (67109312 ns) > initial count (504 ns). Using initial count to start timer. [ 889.116293][T18494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 889.139564][T18494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 889.397154][ T51] Bluetooth: hci2: command tx timeout [ 890.359582][ T1124] bond3 (unregistering): (slave gretap1): Releasing active interface [ 890.847674][ T1124] bond2 (unregistering): (slave bridge5): Releasing backup interface [ 890.856005][ T1124] bridge5 (unregistering): left promiscuous mode [ 890.887808][ T5903] usb 6-1: USB disconnect, device number 4 [ 890.917995][ T5903] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 890.980998][ T1124] team0: Port device macvlan2 removed [ 891.000726][ T1124] bond0 (unregistering): Released all slaves [ 891.014149][ T1124] bond1 (unregistering): Released all slaves [ 891.133715][T18564] fuse: Bad value for 'fd' [ 891.146225][ T1124] bond2 (unregistering): Released all slaves [ 891.199608][ T1124] bond3 (unregistering): Released all slaves [ 891.250081][T18564] ipip0: entered promiscuous mode [ 891.255190][T18564] ipip0: entered allmulticast mode [ 891.479084][T18494] team0: Port device team_slave_0 added [ 891.485093][ T51] Bluetooth: hci2: command tx timeout [ 891.493540][ T1124] tipc: Left network mode [ 891.503527][T18494] team0: Port device team_slave_1 added [ 891.675787][T18494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 891.986790][T18494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 892.070085][T18494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 892.122777][T18494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 892.145261][T18494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 892.256800][T18494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 892.408453][T18494] hsr_slave_0: entered promiscuous mode [ 892.428779][T18494] hsr_slave_1: entered promiscuous mode [ 892.447837][T18494] debugfs: 'hsr0' already exists in 'hsr' [ 892.453609][T18494] Cannot create hsr debugfs directory [ 892.575792][ T1124] hsr_slave_0: left promiscuous mode [ 892.582516][ T1124] hsr_slave_1: left promiscuous mode [ 892.621970][ T1124] veth1_macvtap: left promiscuous mode [ 892.656751][ T1124] veth0_macvtap: left promiscuous mode [ 892.662671][ T1124] veth1_vlan: left promiscuous mode [ 892.676728][ T1124] @: left promiscuous mode [ 892.772118][T18589] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3369'. [ 893.557809][ T51] Bluetooth: hci2: command tx timeout [ 894.092108][T18603] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 894.142739][T18605] netdevsim netdevsim1: Direct firmware load for .. failed with error -2 [ 894.155888][T18605] netdevsim netdevsim1: Falling back to sysfs fallback for: .. [ 894.290731][T18606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3370'. [ 895.098368][ T1124] IPVS: stop unused estimator thread 0... [ 895.187690][ T5903] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 895.359943][ T5903] usb 6-1: device descriptor read/64, error -71 [ 895.616811][ T5903] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 895.868718][ T5903] usb 6-1: device descriptor read/64, error -71 [ 895.880312][T18494] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 895.897981][T18494] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 895.920084][T18494] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 895.939150][T18494] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 896.009225][ T5903] usb usb6-port1: attempt power cycle [ 896.316750][T16003] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 896.357160][ T5903] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 896.368814][T18494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 896.407384][ T5903] usb 6-1: device descriptor read/8, error -71 [ 896.438602][T18494] 8021q: adding VLAN 0 to HW filter on device team0 [ 896.458452][ T8989] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.465611][ T8989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 896.498352][ T8989] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.505736][ T8989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 896.587039][T16003] usb 4-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40 [ 896.596366][T16003] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.625667][T16003] usb 4-1: Product: syz [ 896.641306][T16003] usb 4-1: Manufacturer: syz [ 896.647885][ T5903] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 896.668984][T16003] usb 4-1: SerialNumber: syz [ 896.674365][ T5903] usb 6-1: device descriptor read/8, error -71 [ 896.690611][T18494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 896.787315][ T5903] usb usb6-port1: unable to enumerate USB device [ 896.823043][T18494] veth0_vlan: entered promiscuous mode [ 896.862977][T18494] veth1_vlan: entered promiscuous mode [ 896.939086][T18642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 896.949294][T18642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 896.976333][T18494] veth0_macvtap: entered promiscuous mode [ 897.001200][T18494] veth1_macvtap: entered promiscuous mode [ 897.083409][T18494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 897.142381][T18494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 897.202048][ T1111] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.224859][ T1111] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.243511][ T1111] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.260838][ T1111] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.511100][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.523119][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.663653][T10432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.685993][T10432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 899.137605][T18680] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3377'. [ 899.469356][T18684] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 899.567421][T15053] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 899.581033][T15053] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 899.593755][T15053] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 899.605941][T15053] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 899.634454][T15053] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 899.727011][T16003] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 899.785490][T16003] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 899.857390][T16003] usb 4-1: 0:3 : does not exist [ 899.874143][T16003] usb 4-1: 0:4 : does not exist [ 899.900145][T16003] usb 4-1: 0:5 : does not exist [ 899.919105][T16003] usb 4-1: 0:6 : does not exist [ 899.934421][T16003] usb 4-1: 0:7 : does not exist [ 899.948581][T16003] usb 4-1: 0:8 : does not exist [ 899.974702][T16003] usb 4-1: 0:9 : does not exist [ 899.986499][T16003] usb 4-1: 0:10 : does not exist [ 899.992317][T16003] usb 4-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8215); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 900.017056][T16003] usb 4-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 900.169213][T16003] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 900.209581][T16003] usb 4-1: USB disconnect, device number 73 [ 900.260385][ T5880] udevd[5880]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 901.721474][T18713] sit1: entered allmulticast mode [ 901.730793][ T51] Bluetooth: hci1: command tx timeout [ 902.228341][T18690] chnl_net:caif_netlink_parms(): no params data found [ 902.509560][T18736] loop4: detected capacity change from 0 to 7 [ 902.557144][T18736] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 902.621068][T18736] loop4: partition table partially beyond EOD, truncated [ 902.664399][T18736] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 902.751623][T18690] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.762856][ T5880] udevd[5880]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 902.774330][T18690] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.794173][T18690] bridge_slave_0: entered allmulticast mode [ 902.809680][T18690] bridge_slave_0: entered promiscuous mode [ 902.838920][T18690] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.864431][T18690] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.884776][T18690] bridge_slave_1: entered allmulticast mode [ 902.905345][T18690] bridge_slave_1: entered promiscuous mode [ 902.962732][T18750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 902.992952][T18750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.011381][T18690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 903.024722][T18690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 903.122204][T18690] team0: Port device team_slave_0 added [ 903.131799][T18690] team0: Port device team_slave_1 added [ 903.192977][T18690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 903.226715][T13717] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 903.311804][T18690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 903.342358][T18690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 903.356286][T18690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 903.363790][T18690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 903.393328][T18690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 903.538326][T18690] hsr_slave_0: entered promiscuous mode [ 903.545858][T18690] hsr_slave_1: entered promiscuous mode [ 903.553310][T18690] debugfs: 'hsr0' already exists in 'hsr' [ 903.598489][T18690] Cannot create hsr debugfs directory [ 903.797660][ T51] Bluetooth: hci1: command tx timeout [ 904.477763][ T5939] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 904.485690][T18773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 904.600255][T18690] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 904.626849][ T5939] usb 2-1: device descriptor read/64, error -71 [ 904.657715][T18690] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 904.711509][T18690] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 904.744990][T18690] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 904.867693][ T5939] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 905.046878][ T5939] usb 2-1: device descriptor read/64, error -71 [ 905.103370][T18690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 905.128245][T18690] 8021q: adding VLAN 0 to HW filter on device team0 [ 905.157033][ T5939] usb usb2-port1: attempt power cycle [ 905.190931][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state [ 905.198263][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 905.394829][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state [ 905.402299][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 905.417067][ T5903] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 905.627688][ T5939] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 905.657646][ T5939] usb 2-1: device descriptor read/8, error -71 [ 905.660335][ T5903] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 905.685921][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.710180][T18690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 905.722788][ T5903] usb 6-1: Product: syz [ 905.734205][ T5903] usb 6-1: Manufacturer: syz [ 905.747389][ T5903] usb 6-1: SerialNumber: syz [ 905.772828][ T5903] r8152-cfgselector 6-1: Unknown version 0x0000 [ 905.805037][ T5903] r8152-cfgselector 6-1: config 0 descriptor?? [ 905.873448][T18690] veth0_vlan: entered promiscuous mode [ 905.887735][ T51] Bluetooth: hci1: command tx timeout [ 905.929428][ T5939] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 905.974030][ T5939] usb 2-1: device descriptor read/8, error -71 [ 906.021627][T18690] veth1_vlan: entered promiscuous mode [ 906.033731][ T5903] r8152-cfgselector 6-1: Unknown version 0x1850 [ 906.081587][ T5903] r8152-cfgselector 6-1: bad CDC descriptors [ 906.087092][ T5939] usb usb2-port1: unable to enumerate USB device [ 906.866056][T18690] veth0_macvtap: entered promiscuous mode [ 906.904035][T18690] veth1_macvtap: entered promiscuous mode [ 906.948112][T18690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 906.980594][T18690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 907.020684][ T1111] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.037004][ T1111] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.133144][ T1111] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.171103][ T1111] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.329751][T18807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3405'. [ 907.398772][ T796] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 907.493409][ T9004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 907.535469][ T9004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 907.573090][ T796] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 907.615171][ T796] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 907.675633][ T796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.695427][ T8989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 907.726095][ T8989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 907.753692][ T796] usb 4-1: config 0 descriptor?? [ 907.832569][ T796] pwc: Askey VC010 type 2 USB webcam detected. [ 907.909934][ T5903] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 907.960291][ T51] Bluetooth: hci1: command tx timeout [ 908.092759][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.102897][ T5191] r8152-cfgselector 6-1: USB disconnect, device number 9 [ 908.120529][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 908.180513][T18816] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 908.182612][T18814] syzkaller0: entered promiscuous mode [ 908.199964][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 908.243217][T18814] syzkaller0: entered allmulticast mode [ 908.251601][ T5903] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 908.282503][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.300647][ T5903] usb 2-1: config 0 descriptor?? [ 908.570849][ T5903] hid-steam 0003:28DE:1142.0021: unknown main item tag 0x0 [ 908.593809][ T5903] hid-steam 0003:28DE:1142.0021: unknown main item tag 0x0 [ 908.658127][ T5903] hid-steam 0003:28DE:1142.0021: unknown main item tag 0x0 [ 908.665516][ T5903] hid-steam 0003:28DE:1142.0021: unknown main item tag 0x0 [ 908.731633][ T5903] hid-steam 0003:28DE:1142.0021: unknown main item tag 0x0 [ 908.731997][T18821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 908.773657][ T5903] hid-steam 0003:28DE:1142.0021: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 908.826860][ T5903] usb 2-1: USB disconnect, device number 66 [ 909.120948][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.193169][T18828] fido_id[18828]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 909.513690][T18838] loop3: detected capacity change from 0 to 7 [ 909.560008][T18838] Dev loop3: unable to read RDB block 7 [ 909.599239][T18838] loop3: AHDI p3 p4 [ 909.612123][T18838] loop3: partition table partially beyond EOD, truncated [ 909.643202][T18838] loop3: p3 start 1702000233 is beyond EOD, truncated [ 909.760266][T18842] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3414'. [ 909.879928][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.016889][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 910.066414][T18851] xt_TCPMSS: Only works on TCP SYN packets [ 910.168254][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 910.179216][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 910.195243][ T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1032, setting to 1024 [ 910.207556][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.228311][ T10] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 59, changing to 7 [ 910.354524][ T10] usb 6-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 910.497285][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.505721][ T10] usb 6-1: Product: syz [ 910.524567][ T10] usb 6-1: Manufacturer: syz [ 910.530498][ T10] usb 6-1: SerialNumber: syz [ 911.014063][ T796] pwc: recv_control_msg error -71 req 02 val 2b00 [ 911.045046][ T796] pwc: recv_control_msg error -71 req 02 val 2700 [ 911.067090][ T796] pwc: recv_control_msg error -71 req 02 val 2c00 [ 911.085247][ T796] pwc: recv_control_msg error -71 req 04 val 1000 [ 911.129844][ T796] pwc: recv_control_msg error -71 req 04 val 1300 [ 911.145990][ T796] pwc: recv_control_msg error -71 req 04 val 1400 [ 911.211679][T18859] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3417'. [ 911.217557][ T796] pwc: recv_control_msg error -71 req 02 val 2000 [ 911.237845][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.257808][ T796] pwc: recv_control_msg error -71 req 02 val 2100 [ 911.287863][ T796] pwc: recv_control_msg error -71 req 04 val 1500 [ 911.304736][ T796] pwc: recv_control_msg error -71 req 02 val 2500 [ 911.311845][ T796] pwc: recv_control_msg error -71 req 02 val 2400 [ 911.324777][ T10] usb 6-1: unit 128 not found! [ 911.326072][ T796] pwc: recv_control_msg error -71 req 02 val 2600 [ 911.337270][ T796] pwc: recv_control_msg error -71 req 02 val 2900 [ 911.344364][ T796] pwc: recv_control_msg error -71 req 02 val 2800 [ 911.377250][ T796] pwc: recv_control_msg error -71 req 04 val 1100 [ 911.394358][ T796] pwc: recv_control_msg error -71 req 04 val 1200 [ 911.415182][ T796] pwc: Registered as video103. [ 911.432932][ T796] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input83 [ 911.476919][ T796] usb 4-1: USB disconnect, device number 75 [ 911.514859][ T10] usb 6-1: USB disconnect, device number 10 [ 911.600017][ T5880] udevd[5880]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 911.798472][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.986722][ T796] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 912.169477][ T796] usb 4-1: Using ep0 maxpacket: 16 [ 912.181344][ T796] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 912.221666][ T796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 912.240935][ T796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 912.277662][T16003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.289104][ T796] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 912.350593][ T796] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 912.376137][ T796] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 912.392082][ T796] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 912.400990][ T42] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 912.417025][ T796] usb 4-1: Manufacturer: syz [ 912.444805][ T796] usb 4-1: config 0 descriptor?? [ 912.566733][ T42] usb 6-1: Using ep0 maxpacket: 8 [ 912.580937][ T42] usb 6-1: unable to get BOS descriptor or descriptor too short [ 912.604408][ T42] usb 6-1: config 7 has an invalid interface number: 115 but max is 0 [ 912.622622][ T42] usb 6-1: config 7 has no interface number 0 [ 912.649738][ T42] usb 6-1: config 7 interface 115 altsetting 7 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 912.684183][ T42] usb 6-1: config 7 interface 115 has no altsetting 0 [ 912.710720][ T42] usb 6-1: New USB device found, idVendor=0675, idProduct=0200, bcdDevice=e1.e3 [ 912.731211][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.760481][ T42] usb 6-1: Product: syz [ 912.775954][ T42] usb 6-1: Manufacturer: syz [ 912.789692][ T42] usb 6-1: SerialNumber: syz [ 912.803790][ T796] rc_core: IR keymap rc-hauppauge not found [ 912.822420][ T796] Registered IR keymap rc-empty [ 912.840565][ T796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 912.896827][ T796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 912.918217][ T8117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.940231][ T796] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 913.008310][ T796] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input84 [ 913.035873][T18873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 913.055793][T18873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 913.067945][T18873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 913.082164][ T8117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.117272][T18873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 913.146478][ T796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 913.150479][T18873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 913.196815][ T796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 913.210654][T18873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 913.235990][T18873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 913.248527][ T796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 913.274329][T18873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 913.282864][ T796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 913.306824][ T796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 913.317016][T18873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 913.325807][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.335426][T18873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 913.355021][ T796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 913.385968][T18883] loop3: detected capacity change from 0 to 7 [ 913.397001][ T796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 913.401738][T18883] Dev loop3: unable to read RDB block 7 [ 913.420625][T18883] loop3: AHDI p3 p4 [ 913.424629][T18883] loop3: partition table partially beyond EOD, truncated [ 913.428985][ T796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 913.451330][ T42] cxacru 6-1:7.115: cxacru_bind: interface has incorrect endpoints [ 913.457010][T18883] loop3: p3 start 1702000233 is beyond EOD, truncated [ 913.462185][ T42] cxacru 6-1:7.115: usbatm_usb_probe: bind failed: -19! [ 913.485139][ T796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 913.506783][ T8117] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 913.509905][ T42] usb 6-1: USB disconnect, device number 11 [ 913.523318][ T796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 913.580180][ T796] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 913.600630][ T796] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 913.696778][ T8117] usb 2-1: Using ep0 maxpacket: 32 [ 913.706290][ T8117] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 913.718421][ T8117] usb 2-1: config 0 has no interface number 0 [ 913.729300][ T8117] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 913.742663][ T8117] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 913.753839][ T8117] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.768300][ T8117] usb 2-1: Product: syz [ 913.772769][ T8117] usb 2-1: Manufacturer: syz [ 913.807087][ T8117] usb 2-1: SerialNumber: syz [ 913.891235][ T8117] usb 2-1: config 0 descriptor?? [ 913.900269][ T8117] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 914.292752][ T8117] em28xx 2-1:0.132: Video interface 132 found: [ 914.357362][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.701830][ T8117] em28xx 2-1:0.132: chip ID is em2874 [ 914.787015][ T5903] usb 4-1: USB disconnect, device number 76 [ 914.837203][ T796] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 914.903657][T18880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 914.932128][T18880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 915.070768][ T796] usb 6-1: config 2 has an invalid interface number: 207 but max is 2 [ 915.079838][ T796] usb 6-1: config 2 has an invalid interface number: 220 but max is 2 [ 915.099475][ T796] usb 6-1: config 2 has an invalid interface number: 223 but max is 2 [ 915.120186][ T796] usb 6-1: config 2 has no interface number 0 [ 915.136808][ T796] usb 6-1: config 2 has no interface number 1 [ 915.146474][ T796] usb 6-1: config 2 has no interface number 2 [ 915.173706][ T796] usb 6-1: config 2 interface 207 altsetting 125 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 915.206174][ T796] usb 6-1: config 2 interface 220 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 915.267031][ T796] usb 6-1: config 2 interface 220 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 915.299371][ T796] usb 6-1: config 2 interface 220 altsetting 11 has a duplicate endpoint with address 0xD, skipping [ 915.300437][T18899] hsr0: entered promiscuous mode [ 915.349370][ T796] usb 6-1: config 2 interface 223 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 915.386794][ T796] usb 6-1: config 2 interface 223 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 915.403702][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.434006][ T796] usb 6-1: config 2 interface 223 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 915.473530][ T796] usb 6-1: config 2 interface 223 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 915.551161][ T796] usb 6-1: config 2 interface 223 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 915.596734][ T796] usb 6-1: config 2 interface 223 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 915.624918][ T796] usb 6-1: config 2 interface 223 altsetting 5 has an invalid endpoint descriptor of length 5, skipping [ 915.639319][ T8117] em28xx 2-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 915.667459][ T8117] em28xx 2-1:0.132: failed to read eeprom (err=-5) [ 915.690582][ T8117] em28xx 2-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 915.699749][ T796] usb 6-1: config 2 interface 223 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 915.712669][T18903] fuse: Bad value for 'user_id' [ 915.728443][T18903] fuse: Bad value for 'user_id' [ 915.733595][ T796] usb 6-1: config 2 interface 223 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 915.742954][T18903] Cannot find add_set index 46338 as target [ 915.767658][ T8117] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 915.787154][ T8117] em28xx 2-1:0.132: analog set to bulk mode. [ 915.788825][ T796] usb 6-1: config 2 interface 223 altsetting 5 has 11 endpoint descriptors, different from the interface descriptor's value: 10 [ 915.797269][ T5903] em28xx 2-1:0.132: Registering V4L2 extension [ 915.856008][ T8117] usb 2-1: USB disconnect, device number 67 [ 915.884407][ T796] usb 6-1: config 2 interface 207 has no altsetting 0 [ 915.888128][ T8117] em28xx 2-1:0.132: Disconnecting em28xx [ 915.909588][ T796] usb 6-1: config 2 interface 220 has no altsetting 0 [ 915.955813][ T796] usb 6-1: config 2 interface 223 has no altsetting 0 [ 915.968711][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.984389][ T796] usb 6-1: New USB device found, idVendor=041e, idProduct=041e, bcdDevice=25.62 [ 915.993879][ T796] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.002162][ T29] audit: type=1326 audit(1772884614.563:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18905 comm="syz.0.3432" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27b619c799 code=0x0 [ 916.044674][ T796] usb 6-1: Product: Ј [ 916.049096][ T796] usb 6-1: Manufacturer: ᕧᩒ቎உ㦉⏩㮖廂蜪읥૝䶘酝䷱靖잵޲黯巡栌ヌ䅵섫ड़Ѱ⊜낣≘ [ 916.077260][ T796] usb 6-1: SerialNumber: ఊ [ 916.113110][T18909] netlink: 'syz.0.3432': attribute type 1 has an invalid length. [ 916.185215][ T5903] usb 2-1: Decoder not found [ 916.225671][ T5903] em28xx 2-1:0.132: failed to create media graph [ 916.247725][ T5903] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 916.274384][ T5903] em28xx 2-1:0.132: Remote control support is not available for this card. [ 916.320105][ T8117] em28xx 2-1:0.132: Closing input extension [ 916.351161][ T8117] em28xx 2-1:0.132: Freeing device [ 916.390921][ T796] usb 6-1: USB disconnect, device number 12 [ 916.438102][T16003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.497335][ T5903] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 916.646834][ T5903] usb 4-1: Using ep0 maxpacket: 8 [ 916.658831][ T5903] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 916.668255][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.676278][ T5903] usb 4-1: Product: syz [ 916.680823][ T8117] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 916.688773][ T5903] usb 4-1: Manufacturer: syz [ 916.694816][ T5903] usb 4-1: SerialNumber: syz [ 916.702512][ T5903] usb 4-1: config 0 descriptor?? [ 916.938710][ T8117] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 916.951002][ T5903] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 916.966785][ T8117] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 917.000107][ T8117] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 917.035649][ T8117] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 917.055347][ T8117] usb 2-1: Manufacturer: syz [ 917.090860][ T8117] usb 2-1: config 0 descriptor?? [ 917.155785][ T9004] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.314348][ T9004] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.355084][T18911] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3434'. [ 917.367594][T18911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3434'. [ 917.432150][ T9004] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.482189][T16003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.522227][ T8117] pyra 0003:1E7D:2CF6.0022: unknown main item tag 0x0 [ 917.536668][ T8117] pyra 0003:1E7D:2CF6.0022: unknown main item tag 0x0 [ 917.550370][ T9004] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.564187][ T8117] pyra 0003:1E7D:2CF6.0022: unknown main item tag 0x0 [ 917.584291][ T8117] pyra 0003:1E7D:2CF6.0022: unknown main item tag 0x0 [ 917.601930][ T8117] pyra 0003:1E7D:2CF6.0022: unknown main item tag 0x0 [ 917.617010][ T8117] pyra 0003:1E7D:2CF6.0022: unknown main item tag 0x0 [ 917.642621][ T8117] pyra 0003:1E7D:2CF6.0022: unknown main item tag 0x0 [ 917.710220][ T8117] pyra 0003:1E7D:2CF6.0022: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 917.851500][ T9004] bridge_slave_1: left allmulticast mode [ 917.862741][ T9004] bridge_slave_1: left promiscuous mode [ 917.875637][ T9004] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.905583][ T9004] bridge_slave_0: left allmulticast mode [ 917.925509][ T9004] bridge_slave_0: left promiscuous mode [ 917.946198][ T9004] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.185591][T18913] xt_CT: You must specify a L4 protocol and not use inversions on it [ 918.295403][ T8117] pyra 0003:1E7D:2CF6.0022: couldn't init struct pyra_device [ 918.303812][ T8117] pyra 0003:1E7D:2CF6.0022: couldn't install mouse [ 918.352688][ T8117] pyra 0003:1E7D:2CF6.0022: probe with driver pyra failed with error -5 [ 918.398757][ T5903] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 918.484491][ T5903] usb 4-1: USB disconnect, device number 77 [ 918.536310][T16003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.857034][T16003] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 918.991175][ T9004] bond0 (unregistering): left promiscuous mode [ 919.011075][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.012949][ T9004] bond_slave_0: left promiscuous mode [ 919.059191][T16003] usb 6-1: config 0 has an invalid interface number: 231 but max is 0 [ 919.077093][T16003] usb 6-1: config 0 has no interface number 0 [ 919.083638][ T9004] bond_slave_1: left promiscuous mode [ 919.096777][T16003] usb 6-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 919.124566][ T9004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 919.149812][T16003] usb 6-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 919.175529][T16003] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.194782][ T9004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 919.213679][T16003] usb 6-1: Product: syz [ 919.226179][T16003] usb 6-1: Manufacturer: syz [ 919.234613][ T9004] bond0 (unregistering): Released all slaves [ 919.246459][T16003] usb 6-1: SerialNumber: syz [ 919.291102][T18931] pim6reg: entered allmulticast mode [ 919.297672][T16003] usb 6-1: config 0 descriptor?? [ 919.303612][T18941] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 919.324846][T18934] syz_tun: entered allmulticast mode [ 919.360707][T18959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 919.373415][T18936] pim6reg: left allmulticast mode [ 919.398998][T18959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 919.409797][T18936] syz_tun: left allmulticast mode [ 919.545432][T18941] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3439'. [ 919.558320][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.571780][T16003] plusb 6-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.5-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 12:f1:e7:02:09:0e [ 919.591382][T18941] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3439'. [ 919.642190][T18941] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3439'. [ 919.812129][T18941] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3439'. [ 919.835685][T18613] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 919.917828][T18962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 919.927838][T18969] MPI: mpi too large (112776 bits) [ 919.928476][T18962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 920.119005][T16003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.174035][T18613] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 920.188009][ T8117] usb 6-1: USB disconnect, device number 13 [ 920.207790][ T8117] plusb 6-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.5-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 920.254530][T18613] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 920.549597][T18613] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 920.597254][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.676295][ T9004] batadv0: left promiscuous mode [ 920.695267][ T9004] hsr_slave_0: left promiscuous mode [ 920.702445][ T9004] hsr_slave_1: left promiscuous mode [ 920.709115][ T9004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 920.732509][ T9004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 920.764571][ T9004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 920.775479][ T9004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 920.809276][ T9004] veth1_macvtap: left promiscuous mode [ 920.835303][ T8117] usb 2-1: USB disconnect, device number 68 [ 920.871462][ T9004] veth0_macvtap: left promiscuous mode [ 920.906968][ T9004] veth1_vlan: left promiscuous mode [ 920.914451][ T9004] veth0_vlan: left promiscuous mode [ 921.005178][T18980] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3446'. [ 921.065055][T18982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.137616][T18980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.147266][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.203092][ T9004] pimreg (unregistering): left allmulticast mode [ 921.226079][T18982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.474743][T18982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.499587][T18982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.644248][T16003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.791767][ T9004] team0 (unregistering): Port device team_slave_1 removed [ 921.819424][ T9004] team0 (unregistering): Port device team_slave_0 removed [ 924.807607][ T796] net_ratelimit: 7 callbacks suppressed [ 924.807630][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.957664][T19057] binder_alloc: 19049: binder_alloc_buf, no vma [ 925.136841][ T796] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 925.364456][ T796] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 925.385421][ T796] usb 4-1: config 0 has no interface number 0 [ 925.411389][ T796] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 925.612585][ T796] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 925.646694][ T796] usb 4-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 925.708441][ T796] usb 4-1: config 0 interface 1 has no altsetting 0 [ 925.805642][ T796] usb 4-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 925.880774][T16003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.910296][ T796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.958060][ T796] usb 4-1: config 0 descriptor?? [ 926.201406][T13717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.558851][T19088] netlink: 'syz.1.3469': attribute type 1 has an invalid length. [ 926.640384][ T796] input: HID 145f:0212 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:145F:0212.0023/input/input86 [ 926.650218][T19098] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3470'. [ 926.869891][ T796] input: HID 145f:0212 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:145F:0212.0023/input/input87 [ 926.917806][T16003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.003686][ T796] uclogic 0003:145F:0212.0023: input,hidraw0: USB HID v4.06 Keypad [HID 145f:0212] on usb-dummy_hcd.3-1/input1 [ 927.082154][T19107] binder: 19103:19107 ioctl c0306201 2000000003c0 returned -14 [ 927.131495][ T796] usb 4-1: USB disconnect, device number 78 [ 927.369030][T19109] fido_id[19109]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 927.729026][T19124] ipt_REJECT: TCP_RESET invalid for non-tcp [ 927.960002][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.145586][T19133] sctp: [Deprecated]: syz.3.3478 (pid 19133) Use of struct sctp_assoc_value in delayed_ack socket option. [ 928.145586][T19133] Use struct sctp_sack_info instead [ 928.304615][T19134] sctp: [Deprecated]: syz.3.3478 (pid 19134) Use of struct sctp_assoc_value in delayed_ack socket option. [ 928.304615][T19134] Use struct sctp_sack_info instead [ 928.479506][T19143] fuse: Bad value for 'group_id' [ 928.505653][T19143] fuse: Bad value for 'group_id' [ 928.517754][ T796] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 928.529873][ T29] audit: type=1326 audit(1772884627.093:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19141 comm="syz.0.3480" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27b619c799 code=0x0 [ 928.698047][ T29] audit: type=1326 audit(1772884627.273:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19151 comm="syz.3.3484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe5df9c799 code=0x7ffc0000 [ 928.731539][ T796] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 928.745727][ T29] audit: type=1326 audit(1772884627.293:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19151 comm="syz.3.3484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbe5df9c799 code=0x7ffc0000 [ 928.770064][ T796] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 928.783915][ T796] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 928.796516][ T29] audit: type=1326 audit(1772884627.293:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19151 comm="syz.3.3484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe5df9c799 code=0x7ffc0000 [ 928.797732][T19155] loop3: detected capacity change from 0 to 7 [ 928.832883][ T796] usb 2-1: config 0 interface 0 has no altsetting 0 [ 928.874380][ T796] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 928.885535][ T796] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 928.899889][ T29] audit: type=1326 audit(1772884627.293:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19151 comm="syz.3.3484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe5df9c799 code=0x7ffc0000 [ 928.904991][T19155] Dev loop3: unable to read RDB block 7 [ 928.925096][ T796] usb 2-1: config 0 interface 0 has no altsetting 0 [ 928.943360][ T29] audit: type=1326 audit(1772884627.293:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19151 comm="syz.3.3484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbe5df9c799 code=0x7ffc0000 [ 928.956716][T19155] loop3: AHDI p3 p4 [ 928.968045][ T29] audit: type=1326 audit(1772884627.293:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19151 comm="syz.3.3484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe5df9c799 code=0x7ffc0000 [ 928.995134][ T796] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 929.003423][ T5903] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 929.005137][T16003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.022782][ T796] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 929.036327][ T796] usb 2-1: config 0 interface 0 has no altsetting 0 [ 929.043554][ T29] audit: type=1326 audit(1772884627.313:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19151 comm="syz.3.3484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe5df9c799 code=0x7ffc0000 [ 929.074171][T19155] loop3: partition table partially beyond EOD, truncated [ 929.081065][ T796] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 929.093515][ T796] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 929.113544][T19155] loop3: p3 start 1702000233 is beyond EOD, truncated [ 929.120900][ T796] usb 2-1: config 0 interface 0 has no altsetting 0 [ 929.125108][ T796] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 929.130148][ T29] audit: type=1326 audit(1772884627.313:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19151 comm="syz.3.3484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fbe5df9c799 code=0x7ffc0000 [ 929.171476][ T796] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 929.176888][ T29] audit: type=1326 audit(1772884627.313:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19151 comm="syz.3.3484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe5df9c799 code=0x7ffc0000 [ 929.201790][ T796] usb 2-1: config 0 interface 0 has no altsetting 0 [ 929.228843][ T796] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 929.238205][ T796] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 929.247106][T13717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.257816][ T5903] usb 4-1: Using ep0 maxpacket: 32 [ 929.263259][ T796] usb 2-1: config 0 interface 0 has no altsetting 0 [ 929.265406][ T5903] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 929.291889][ T5903] usb 4-1: config 0 has no interface number 0 [ 929.294093][ T796] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 929.325861][ T5903] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 929.334343][ T796] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 929.382074][ T796] usb 2-1: config 0 interface 0 has no altsetting 0 [ 929.389119][ T5903] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 929.389163][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.389185][ T5903] usb 4-1: Product: syz [ 929.389201][ T5903] usb 4-1: Manufacturer: syz [ 929.389218][ T5903] usb 4-1: SerialNumber: syz [ 929.393630][ T5903] usb 4-1: config 0 descriptor?? [ 929.411419][T19164] FAULT_INJECTION: forcing a failure. [ 929.411419][T19164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 929.438506][T19153] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 929.447183][T19164] CPU: 1 UID: 0 PID: 19164 Comm: syz.5.3486 Tainted: G L syzkaller #0 PREEMPT(full) [ 929.447223][T19164] Tainted: [L]=SOFTLOCKUP [ 929.447230][T19164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 929.447242][T19164] Call Trace: [ 929.447250][T19164] [ 929.447259][T19164] dump_stack_lvl+0xe8/0x150 [ 929.447291][T19164] should_fail_ex+0x412/0x560 [ 929.447322][T19164] _copy_from_user+0x2d/0xb0 [ 929.447351][T19164] sctp_setsockopt+0x1c4/0x12c0 [ 929.447378][T19164] ? sock_common_setsockopt+0x36/0xc0 [ 929.447414][T19164] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 929.447439][T19164] do_sock_setsockopt+0x17c/0x1b0 [ 929.447471][T19164] __x64_sys_setsockopt+0x13d/0x1b0 [ 929.447503][T19164] do_syscall_64+0x14d/0xf80 [ 929.447521][T19164] ? trace_irq_disable+0x3b/0x150 [ 929.447547][T19164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.447577][T19164] ? clear_bhb_loop+0x40/0x90 [ 929.447600][T19164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.447619][T19164] RIP: 0033:0x7fe66319c799 [ 929.447637][T19164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 929.447654][T19164] RSP: 002b:00007fe664100028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 929.447676][T19164] RAX: ffffffffffffffda RBX: 00007fe663415fa0 RCX: 00007fe66319c799 [ 929.447690][T19164] RDX: 0000000000000083 RSI: 0000000000000084 RDI: 0000000000000005 [ 929.447702][T19164] RBP: 00007fe664100090 R08: 0000000000000008 R09: 0000000000000000 [ 929.447714][T19164] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000001 [ 929.447726][T19164] R13: 00007fe663416038 R14: 00007fe663415fa0 R15: 00007fe66353fa48 [ 929.447755][T19164] [ 929.448702][ T796] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 929.653285][ T796] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 929.674602][ T796] usb 2-1: config 0 interface 0 has no altsetting 0 [ 929.684660][ T796] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 929.694204][ T796] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 929.714705][ T796] usb 2-1: Product: syz [ 929.731542][ T796] usb 2-1: Manufacturer: syz [ 929.738682][T19153] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 929.749914][ T796] usb 2-1: SerialNumber: syz [ 929.765432][ T796] usb 2-1: config 0 descriptor?? [ 929.807972][ T796] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 930.037185][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.069802][T19137] netlink: 'syz.1.3479': attribute type 1 has an invalid length. [ 930.165418][ T796] usb 2-1: USB disconnect, device number 69 [ 930.192265][ T796] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 930.818158][T19196] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3494'. [ 930.882378][T19200] loop3: detected capacity change from 0 to 7 [ 930.894308][T19200] Dev loop3: unable to read RDB block 7 [ 930.901328][T19200] loop3: AHDI p3 p4 [ 930.905292][T19200] loop3: partition table partially beyond EOD, truncated [ 930.913681][T19200] loop3: p3 start 1702000233 is beyond EOD, truncated [ 931.070672][T19204] FAULT_INJECTION: forcing a failure. [ 931.070672][T19204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 931.087333][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.088349][T19204] CPU: 0 UID: 0 PID: 19204 Comm: syz.6.3498 Tainted: G L syzkaller #0 PREEMPT(full) [ 931.088378][T19204] Tainted: [L]=SOFTLOCKUP [ 931.088386][T19204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 931.088397][T19204] Call Trace: [ 931.088405][T19204] [ 931.088413][T19204] dump_stack_lvl+0xe8/0x150 [ 931.088460][T19204] should_fail_ex+0x412/0x560 [ 931.088491][T19204] _copy_to_user+0x31/0xb0 [ 931.088521][T19204] simple_read_from_buffer+0xe1/0x170 [ 931.088553][T19204] proc_fail_nth_read+0x1bb/0x230 [ 931.088582][T19204] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 931.088611][T19204] ? rw_verify_area+0x2a6/0x4d0 [ 931.088630][T19204] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 931.088657][T19204] vfs_read+0x20c/0xa70 [ 931.088676][T19204] ? fdget_pos+0x246/0x320 [ 931.088707][T19204] ? __pfx___mutex_lock+0x10/0x10 [ 931.088727][T19204] ? __pfx_vfs_read+0x10/0x10 [ 931.088749][T19204] ? __fget_files+0x2a/0x420 [ 931.088779][T19204] ? __fget_files+0x3a0/0x420 [ 931.088803][T19204] ? __fget_files+0x2a/0x420 [ 931.088837][T19204] ksys_read+0x150/0x270 [ 931.088859][T19204] ? __pfx_ksys_read+0x10/0x10 [ 931.088890][T19204] do_syscall_64+0x14d/0xf80 [ 931.088907][T19204] ? trace_irq_disable+0x3b/0x150 [ 931.088933][T19204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.088952][T19204] ? clear_bhb_loop+0x40/0x90 [ 931.088975][T19204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.088994][T19204] RIP: 0033:0x7f803bb5cfce [ 931.089013][T19204] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 931.089029][T19204] RSP: 002b:00007f803c9e3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 931.089051][T19204] RAX: ffffffffffffffda RBX: 00007f803c9e46c0 RCX: 00007f803bb5cfce [ 931.089065][T19204] RDX: 000000000000000f RSI: 00007f803c9e40a0 RDI: 0000000000000006 [ 931.089077][T19204] RBP: 00007f803c9e4090 R08: 0000000000000000 R09: 0000000000000000 [ 931.089089][T19204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 931.089101][T19204] R13: 00007f803be16038 R14: 00007f803be15fa0 R15: 00007f803bf3fa48 [ 931.089131][T19204] [ 931.659073][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.665460][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.671959][T13717] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 931.816733][T13717] usb 2-1: device descriptor read/64, error -71 [ 932.067138][T13717] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 932.117084][T16003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.201696][T13717] usb 2-1: device descriptor read/64, error -71 [ 932.288702][ T8117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.302807][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.331307][T13717] usb usb2-port1: attempt power cycle [ 932.426469][ T5903] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 932.454860][ T5903] asix 4-1:0.188: probe with driver asix failed with error -71 [ 932.534799][ T5903] usb 4-1: USB disconnect, device number 79 [ 932.706882][T13717] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 932.759424][T13717] usb 2-1: device descriptor read/8, error -71 [ 932.937761][T19224] netlink: 'syz.5.3503': attribute type 8 has an invalid length. [ 933.008395][T13717] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 933.060290][T13717] usb 2-1: device descriptor read/8, error -71 [ 933.099792][T19228] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 933.107245][T19228] IPv6: NLM_F_CREATE should be set when creating new route [ 933.114535][T19228] IPv6: NLM_F_CREATE should be set when creating new route [ 933.121926][T19228] IPv6: NLM_F_CREATE should be set when creating new route [ 933.158942][T16003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.197118][T13717] usb usb2-port1: unable to enumerate USB device [ 933.814180][T19240] loop3: detected capacity change from 0 to 7 [ 933.844334][T19240] Dev loop3: unable to read RDB block 7 [ 933.918348][T19240] loop3: AHDI p3 p4 [ 933.927395][T19240] loop3: partition table partially beyond EOD, truncated [ 934.100940][T19240] loop3: p3 start 1702000233 is beyond EOD, truncated [ 934.221871][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.384565][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 934.384580][ T29] audit: type=1326 audit(1772884632.953:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19243 comm="syz.1.3508" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f06f0b9c799 code=0x0 [ 935.236985][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.328993][ T8117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.560734][T13717] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 935.637164][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.726731][T13717] usb 4-1: Using ep0 maxpacket: 16 [ 935.742441][T13717] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 935.754078][T13717] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 935.765873][T13717] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 935.781348][T13717] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 935.791881][T13717] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 935.807177][T13717] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 935.816407][T13717] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 935.828958][T13717] usb 4-1: Manufacturer: syz [ 935.851766][T13717] usb 4-1: config 0 descriptor?? [ 935.866741][ T796] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 936.037366][ T1124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.046390][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.137543][ T5903] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 936.166665][T13717] rc_core: IR keymap rc-hauppauge not found [ 936.186708][ T796] usb 2-1: Using ep0 maxpacket: 32 [ 936.187768][T13717] Registered IR keymap rc-empty [ 936.199415][T13717] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 936.231817][T13717] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 936.273571][T13717] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 936.294246][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.302915][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.312227][T16003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.322621][ T796] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 936.339602][ T796] usb 2-1: config 0 has no interface number 0 [ 936.362837][ T796] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 936.380098][ T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.400390][ T796] usb 2-1: Product: syz [ 936.404613][ T796] usb 2-1: Manufacturer: syz [ 936.416752][ T796] usb 2-1: SerialNumber: syz [ 936.448491][ T796] usb 2-1: config 0 descriptor?? [ 936.516914][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 936.632361][T19283] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3512'. [ 936.644965][T13717] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input88 [ 936.657321][ T5903] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 936.686969][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 936.728990][T19283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3512'. [ 936.763881][ T5903] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 936.773343][T13717] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 936.893048][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.901273][ T5903] usb 6-1: Product: syz [ 936.905472][ T5903] usb 6-1: Manufacturer: syz [ 936.910518][T13717] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 936.918241][ T5903] usb 6-1: SerialNumber: syz [ 936.926348][ T5903] usb 6-1: config 0 descriptor?? [ 936.932458][T19279] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 936.940042][T13717] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 936.949648][ T5903] usb 6-1: ucan: probing device on interface #0 [ 936.956140][ T5903] usb 6-1: ucan: invalid in_ep MaxPacketSize [ 936.976759][T13717] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 936.997666][ T5903] usb 6-1: ucan: probe failed; try to update the device firmware [ 937.030691][T13717] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 937.102669][T13717] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 937.124805][ T796] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 937.139453][ T796] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 937.237452][T13717] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 937.257171][T13717] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 937.293100][T13717] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 937.317117][T13717] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 937.324661][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.333008][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.544565][ T796] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 937.556028][ T796] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 937.574583][ T796] usb 2-1: USB disconnect, device number 74 [ 937.640698][T13717] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 937.650880][T13717] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 937.669118][T13717] usb 4-1: USB disconnect, device number 80 [ 938.778953][T16003] usb 6-1: USB disconnect, device number 14 [ 940.028103][ T5939] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 940.192176][T13717] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 940.210060][ T5939] usb 2-1: Using ep0 maxpacket: 32 [ 940.217497][ T5939] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 940.226379][ T5939] usb 2-1: config 0 has no interface number 0 [ 940.233384][ T5939] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 940.266201][ T5939] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 940.302255][ T5939] usb 2-1: config 0 interface 85 has no altsetting 0 [ 940.341554][ T5939] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 940.367283][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.391659][ T5939] usb 2-1: Product: syz [ 940.396026][ T5939] usb 2-1: Manufacturer: syz [ 940.398231][T13717] usb 4-1: Using ep0 maxpacket: 32 [ 940.401359][ T5939] usb 2-1: SerialNumber: syz [ 940.441764][ T5939] usb 2-1: config 0 descriptor?? [ 940.442459][T13717] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 940.480089][T13717] usb 4-1: language id specifier not provided by device, defaulting to English [ 940.547538][T13717] usb 4-1: New USB device found, idVendor=0582, idProduct=0023, bcdDevice= 0.40 [ 940.553741][T16003] net_ratelimit: 10 callbacks suppressed [ 940.553775][T16003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.586692][T13717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.593976][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.605653][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.683570][T13717] usb 4-1: Product: С [ 940.692977][T19334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 940.716746][T13717] usb 4-1: Manufacturer: щ [ 940.719837][T19356] loop6: detected capacity change from 0 to 7 [ 940.721321][T13717] usb 4-1: SerialNumber: Ё [ 940.733032][T19334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 940.754987][ T6300] Dev loop6: unable to read RDB block 7 [ 940.764300][ T5939] appletouch 2-1:0.85: Failed to read mode from device. [ 940.773339][ T6300] loop6: unable to read partition table [ 940.789742][ T6300] loop6: partition table beyond EOD, truncated [ 940.802958][ T5939] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 940.835404][T19356] Dev loop6: unable to read RDB block 7 [ 940.862943][T19356] loop6: unable to read partition table [ 940.893619][T19356] loop6: partition table beyond EOD, truncated [ 940.930554][T19356] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 940.975116][T13717] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 941.023662][T13717] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 941.091117][ T5939] usb 2-1: USB disconnect, device number 75 [ 941.174626][T13717] usb 4-1: USB disconnect, device number 81 [ 941.221927][T19366] syz_tun: entered allmulticast mode [ 941.254642][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.481035][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.566617][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.639088][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.647605][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.717194][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.878484][ T1146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.341645][T19402] loop6: detected capacity change from 0 to 7 [ 942.371813][T19402] Dev loop6: unable to read RDB block 7 [ 942.391158][T19402] loop6: unable to read partition table [ 942.397099][ T10] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 942.423492][T19402] loop6: partition table beyond EOD, truncated [ 942.454065][T19402] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 942.531450][ T5195] Dev loop6: unable to read RDB block 7 [ 942.537270][ T10] usb 6-1: device descriptor read/64, error -71 [ 942.544175][ T5195] loop6: unable to read partition table [ 942.550958][ T5195] loop6: partition table beyond EOD, truncated [ 942.786689][ T10] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 942.936872][ T10] usb 6-1: device descriptor read/64, error -71 [ 943.074993][ T10] usb usb6-port1: attempt power cycle [ 943.443904][ T10] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 943.502186][ T10] usb 6-1: device descriptor read/8, error -71 [ 943.504138][T19441] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3554'. [ 943.756747][ T10] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 943.787542][ T10] usb 6-1: device descriptor read/8, error -71 [ 943.907187][ T10] usb usb6-port1: unable to enumerate USB device [ 943.946732][T13717] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 944.088087][T13717] usb 2-1: device descriptor read/64, error -71 [ 944.337606][T13717] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 944.492339][T13717] usb 2-1: device descriptor read/64, error -71 [ 944.627253][T13717] usb usb2-port1: attempt power cycle [ 944.998137][T13717] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 945.027301][T13717] usb 2-1: device descriptor read/8, error -71 [ 945.296692][T13717] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 945.317334][T13717] usb 2-1: device descriptor read/8, error -71 [ 945.447152][T13717] usb usb2-port1: unable to enumerate USB device [ 945.466700][ T5939] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 945.587174][T13717] net_ratelimit: 18 callbacks suppressed [ 945.587198][T13717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.656751][ T5939] usb 6-1: Using ep0 maxpacket: 8 [ 945.665136][ T5939] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 945.697084][ T5939] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 945.719250][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.794201][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.803033][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.811496][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.820325][ T5939] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 945.839561][ T5939] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 945.853062][ T5939] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 945.865861][ T5939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.196241][ T5939] usb 6-1: GET_CAPABILITIES returned 0 [ 946.206787][ T5939] usbtmc 6-1:16.0: can't read capabilities [ 946.847103][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.855623][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.867299][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.999084][ T9004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.007767][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.173525][ T5939] usb 6-1: USB disconnect, device number 19 [ 948.779277][ T10] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 948.832132][ T29] audit: type=1326 audit(1772884647.393:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19513 comm="syz.0.3567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b619c799 code=0x7ffc0000 [ 948.863121][T19517] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3567'. [ 948.984338][ T10] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 948.986695][ T29] audit: type=1326 audit(1772884647.393:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19513 comm="syz.0.3567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b619c799 code=0x7ffc0000 [ 948.993785][ T10] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 949.130667][ T10] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 949.172984][ T10] usb 4-1: config 220 has no interface number 2 [ 949.182794][ T10] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 949.199726][ T10] usb 4-1: config 220 interface 0 has no altsetting 0 [ 949.214958][ T10] usb 4-1: config 220 interface 76 has no altsetting 0 [ 949.214980][ T29] audit: type=1326 audit(1772884647.393:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19513 comm="syz.0.3567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f27b619c799 code=0x7ffc0000 [ 949.233390][ T10] usb 4-1: config 220 interface 1 has no altsetting 0 [ 949.284591][ T10] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 949.294790][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.303610][ T10] usb 4-1: Product: syz [ 949.308517][ T10] usb 4-1: Manufacturer: syz [ 949.323031][ T10] usb 4-1: SerialNumber: syz [ 949.352709][ T29] audit: type=1326 audit(1772884647.393:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19513 comm="syz.0.3567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b619c799 code=0x7ffc0000 [ 949.406729][ T5939] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 949.444237][ T29] audit: type=1326 audit(1772884647.393:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19513 comm="syz.0.3567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b619c799 code=0x7ffc0000 [ 949.516760][ T29] audit: type=1326 audit(1772884647.393:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19513 comm="syz.0.3567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f27b619c799 code=0x7ffc0000 [ 949.633932][ T29] audit: type=1326 audit(1772884647.393:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19513 comm="syz.0.3567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b619c799 code=0x7ffc0000 [ 949.669924][ T5939] usb 6-1: config 0 has an invalid interface number: 182 but max is 1 [ 949.678761][ T5939] usb 6-1: config 0 has no interface number 1 [ 949.694699][ T5939] usb 6-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 949.708179][ T29] audit: type=1326 audit(1772884647.393:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19513 comm="syz.0.3567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b619c799 code=0x7ffc0000 [ 949.731150][ T5939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.847513][ T5939] usb 6-1: config 0 descriptor?? [ 950.016218][ T29] audit: type=1326 audit(1772884647.393:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19513 comm="syz.0.3567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f27b619c799 code=0x7ffc0000 [ 950.067691][ T29] audit: type=1326 audit(1772884647.393:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19513 comm="syz.0.3567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b619c799 code=0x7ffc0000 [ 950.125180][T19522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 950.134507][T19522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 950.235398][ T5939] usb 6-1: USB disconnect, device number 20 [ 950.837545][ T8117] net_ratelimit: 14 callbacks suppressed [ 950.837570][ T8117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.927286][T13717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.003356][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.012755][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.022673][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.312662][ T10] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 951.322537][ T10] uvcvideo 4-1:220.0: No valid video chain found. [ 951.329745][ T10] usb 4-1: selecting invalid altsetting 0 [ 951.638166][ T10] usb 4-1: selecting invalid altsetting 0 [ 951.643987][ T10] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 951.707191][T19548] loop2: detected capacity change from 0 to 7 [ 951.717371][ T8117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.736511][ T10] usb 4-1: USB disconnect, device number 82 [ 951.756562][T19548] Dev loop2: unable to read RDB block 7 [ 951.783064][T19548] loop2: unable to read partition table [ 951.801960][T19548] loop2: partition table beyond EOD, truncated [ 951.847110][T19548] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 952.043943][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.052317][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.061016][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.117760][T18613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.328852][T19561] loop2: detected capacity change from 0 to 7 [ 952.344548][T19561] Dev loop2: unable to read RDB block 7 [ 952.350438][T19561] loop2: AHDI p2 p3 [ 952.354575][T19561] loop2: partition table partially beyond EOD, truncated [ 952.696693][ T796] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 952.907787][ T796] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 952.919225][ T796] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 58398, setting to 1024 [ 952.936282][ T796] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 952.961181][ T796] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 952.985081][ T796] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.237324][T19566] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 953.288994][ T796] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 953.532154][ T796] usb 6-1: USB disconnect, device number 21 [ 954.418977][T19588] netlink: 232 bytes leftover after parsing attributes in process `syz.6.3588'. [ 955.381020][T19609] loop3: detected capacity change from 0 to 7 [ 955.405596][ T5880] Dev loop3: unable to read RDB block 7 [ 955.411805][ T5880] loop3: AHDI p3 p4 [ 955.415869][ T5880] loop3: partition table partially beyond EOD, truncated [ 955.424295][ T5880] loop3: p3 start 1702000233 is beyond EOD, truncated [ 955.461987][T19609] Dev loop3: unable to read RDB block 7 [ 955.469920][T19609] loop3: AHDI p3 p4 [ 955.477702][T19609] loop3: partition table partially beyond EOD, truncated [ 955.478020][T19611] netlink: 'syz.1.3595': attribute type 3 has an invalid length. [ 955.485233][T19609] loop3: p3 start 1702000233 is beyond EOD, truncated [ 955.510374][T19611] xfrm1: entered allmulticast mode [ 956.283018][T16003] net_ratelimit: 13 callbacks suppressed [ 956.283035][T16003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.597867][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.871637][T19636] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3602'. [ 956.889862][T19636] netlink: 'syz.5.3602': attribute type 3 has an invalid length. [ 956.938875][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 956.938898][ T29] audit: type=1326 audit(1772884655.513:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19632 comm="syz.1.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f0b9c799 code=0x7ffc0000 [ 957.059490][ T29] audit: type=1326 audit(1772884655.513:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19632 comm="syz.1.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f06f0b9c799 code=0x7ffc0000 [ 957.307527][ T29] audit: type=1326 audit(1772884655.513:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19632 comm="syz.1.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f0b9c799 code=0x7ffc0000 [ 957.735164][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.905720][ T29] audit: type=1326 audit(1772884655.553:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19632 comm="syz.1.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f06f0b9c799 code=0x7ffc0000 [ 957.937531][ T29] audit: type=1326 audit(1772884655.553:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19632 comm="syz.1.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f0b9c799 code=0x7ffc0000 [ 957.969861][ T29] audit: type=1326 audit(1772884655.553:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19632 comm="syz.1.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f06f0b9c799 code=0x7ffc0000 [ 957.996841][ T29] audit: type=1326 audit(1772884655.553:2291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19632 comm="syz.1.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f0b9c799 code=0x7ffc0000 [ 958.022022][ T29] audit: type=1326 audit(1772884655.553:2292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19632 comm="syz.1.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f06f0b9c799 code=0x7ffc0000 [ 958.045921][ T29] audit: type=1326 audit(1772884655.553:2293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19632 comm="syz.1.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f0b9c799 code=0x7ffc0000 [ 958.070387][ T29] audit: type=1326 audit(1772884655.553:2294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19632 comm="syz.1.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f06f0b9c799 code=0x7ffc0000 [ 958.337383][T19655] loop3: detected capacity change from 0 to 7 [ 958.347363][ T5880] Dev loop3: unable to read RDB block 7 [ 958.355521][ T5880] loop3: AHDI p3 p4 [ 958.362109][ T5880] loop3: partition table partially beyond EOD, truncated [ 958.377546][ T5880] loop3: p3 start 1702000233 is beyond EOD, truncated [ 958.396940][T19655] Dev loop3: unable to read RDB block 7 [ 958.406030][T19655] loop3: AHDI p3 p4 [ 958.419334][T19655] loop3: partition table partially beyond EOD, truncated [ 958.439535][T19655] loop3: p3 start 1702000233 is beyond EOD, truncated [ 958.768655][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.836172][ T8117] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 958.844707][T13717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.064901][ T8117] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 959.097155][ T8117] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 959.123138][ T8117] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 26232, setting to 64 [ 959.169666][ T8117] usb 4-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 959.289823][ T8117] usb 4-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 959.309939][ T8117] usb 4-1: Manufacturer: syz [ 959.338134][ T8117] usb 4-1: config 0 descriptor?? [ 959.371283][ T8117] smsusb:smsusb_probe: board id=9, interface number 0 [ 959.380261][ T8117] smsusb:siano_media_device_register: media controller created [ 959.403227][ T8117] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 959.611342][ T8117] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 959.614275][T19661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.623770][ T8117] ------------[ cut here ]------------ [ 959.633390][ T8117] !PageLargeKmalloc(page) [ 959.633409][ T8117] WARNING: mm/slub.c:6396 at free_large_kmalloc+0xa3/0x140, CPU#0: kworker/0:7/8117 [ 959.647470][ T8117] Modules linked in: [ 959.647995][T19661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 959.651946][ T8117] CPU: 0 UID: 0 PID: 8117 Comm: kworker/0:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 959.671090][ T8117] Tainted: [L]=SOFTLOCKUP [ 959.675430][ T8117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 959.685632][ T8117] Workqueue: usb_hub_wq hub_event [ 959.690797][ T8117] RIP: 0010:free_large_kmalloc+0xa3/0x140 [ 959.696659][ T8117] Code: f8 ff 74 17 25 00 00 00 ff 3d 00 00 00 f8 0f 85 a0 00 00 00 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 ee c7 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 45 f4 f0 8d 5b 41 5e 5d e9 b7 dc 03 ff [ 959.717523][ T8117] RSP: 0018:ffffc900039f6b40 EFLAGS: 00010206 [ 959.723634][ T8117] RAX: 00000000ff000000 RBX: ffffea00025ef880 RCX: 0000000000100001 [ 959.732766][ T8117] RDX: ffffc9001ab9d000 RSI: ffff888097be2000 RDI: ffffea00025ef880 [ 959.740973][ T8117] RBP: 0000000000000000 R08: ffff888088d1cd03 R09: 1ffff110111a39a0 [ 959.748999][ T8117] R10: dffffc0000000000 R11: ffffed10111a39a1 R12: 1ffff1100aac3282 [ 959.757190][ T8117] R13: 0000000000000000 R14: ffff888088d1cd60 R15: dffffc0000000000 [ 959.765444][ T8117] FS: 0000000000000000(0000) GS:ffff888125461000(0000) knlGS:0000000000000000 [ 959.774744][ T8117] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 959.781464][ T8117] CR2: 00007f06f194da08 CR3: 0000000029a1a000 CR4: 00000000003526f0 [ 959.789490][ T8117] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 959.798110][ T8117] DR3: 00000000ffff000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 959.807200][ T8117] Call Trace: [ 959.810490][ T8117] [ 959.813414][ T8117] usb_free_urb+0xd0/0x120 [ 959.818392][ T8117] smsusb_term_device+0x1d7/0x3e0 [ 959.823445][ T8117] smsusb_probe+0x1aba/0x2280 [ 959.828173][ T8117] ? __pfx_smsusb_probe+0x10/0x10 [ 959.833284][ T8117] ? do_raw_spin_lock+0x12b/0x2f0 [ 959.838393][ T8117] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 959.844147][ T8117] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 959.850044][ T8117] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 959.855965][ T8117] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 959.861727][ T8117] usb_probe_interface+0x668/0xc90 [ 959.867056][ T8117] ? __pfx_usb_probe_interface+0x10/0x10 [ 959.872703][ T8117] really_probe+0x267/0xaf0 [ 959.877279][ T8117] __driver_probe_device+0x18c/0x320 [ 959.882740][ T8117] driver_probe_device+0x4f/0x240 [ 959.888055][ T8117] __device_attach_driver+0x2d4/0x4c0 [ 959.893615][ T8117] bus_for_each_drv+0x258/0x2f0 [ 959.898689][ T8117] ? __pfx___device_attach_driver+0x10/0x10 [ 959.905494][ T8117] ? __pfx_bus_for_each_drv+0x10/0x10 [ 959.911376][ T8117] ? lockdep_hardirqs_on+0x7a/0x110 [ 959.916893][ T8117] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 959.922856][ T8117] __device_attach+0x2c5/0x450 [ 959.927766][ T8117] ? __pfx___device_attach+0x10/0x10 [ 959.933259][ T8117] ? _raw_spin_unlock+0x28/0x50 [ 959.938362][ T8117] device_initial_probe+0xa1/0xd0 [ 959.943423][ T8117] bus_probe_device+0x12a/0x220 [ 959.948319][ T8117] ? device_add+0x726/0xb70 [ 959.952913][ T8117] device_add+0x7b6/0xb70 [ 959.957519][ T8117] usb_set_configuration+0x1a87/0x2110 [ 959.963323][ T8117] usb_generic_driver_probe+0x8d/0x150 [ 959.967011][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.969451][ T8117] usb_probe_device+0x1c4/0x3b0 [ 959.982564][ T8117] ? __pfx_usb_probe_device+0x10/0x10 [ 959.988046][ T8117] really_probe+0x267/0xaf0 [ 959.992561][ T8117] __driver_probe_device+0x18c/0x320 [ 959.997887][ T8117] driver_probe_device+0x4f/0x240 [ 960.002914][ T8117] __device_attach_driver+0x2d4/0x4c0 [ 960.009279][ T8117] bus_for_each_drv+0x258/0x2f0 [ 960.014235][ T8117] ? __pfx___device_attach_driver+0x10/0x10 [ 960.020650][ T8117] ? __pfx_bus_for_each_drv+0x10/0x10 [ 960.026238][ T8117] ? lockdep_hardirqs_on+0x7a/0x110 [ 960.031594][ T8117] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 960.037501][ T8117] __device_attach+0x2c5/0x450 [ 960.042282][ T8117] ? __pfx___device_attach+0x10/0x10 [ 960.047733][ T8117] ? _raw_spin_unlock+0x28/0x50 [ 960.052800][ T8117] device_initial_probe+0xa1/0xd0 [ 960.057945][ T8117] bus_probe_device+0x12a/0x220 [ 960.062803][ T8117] ? device_add+0x726/0xb70 [ 960.067350][ T8117] device_add+0x7b6/0xb70 [ 960.071686][ T8117] usb_new_device+0xa08/0x16f0 [ 960.076484][ T8117] ? __pfx_usb_new_device+0x10/0x10 [ 960.081857][ T8117] ? _raw_spin_unlock_irq+0x23/0x50 [ 960.087105][ T8117] hub_event+0x2a1c/0x4f30 [ 960.091565][ T8117] ? __pfx_hub_event+0x10/0x10 [ 960.096340][ T8117] ? process_scheduled_works+0xa25/0x1830 [ 960.102167][ T8117] ? process_scheduled_works+0xa25/0x1830 [ 960.108828][ T8117] process_scheduled_works+0xb02/0x1830 [ 960.114524][ T8117] ? __pfx_process_scheduled_works+0x10/0x10 [ 960.121986][ T8117] ? assign_work+0x3d5/0x5e0 [ 960.127069][ T8117] worker_thread+0xa50/0xfc0 [ 960.131801][ T8117] kthread+0x388/0x470 [ 960.135941][ T8117] ? __pfx_worker_thread+0x10/0x10 [ 960.141199][ T8117] ? __pfx_kthread+0x10/0x10 [ 960.145930][ T8117] ret_from_fork+0x51e/0xb90 [ 960.150622][ T8117] ? __pfx_ret_from_fork+0x10/0x10 [ 960.155863][ T8117] ? __switch_to+0xc7d/0x1450 [ 960.160624][ T8117] ? __pfx_kthread+0x10/0x10 [ 960.165255][ T8117] ret_from_fork_asm+0x1a/0x30 [ 960.170333][ T8117] [ 960.173499][ T8117] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 960.181029][ T8117] CPU: 0 UID: 0 PID: 8117 Comm: kworker/0:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 960.192095][ T8117] Tainted: [L]=SOFTLOCKUP [ 960.196439][ T8117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 960.206501][ T8117] Workqueue: usb_hub_wq hub_event [ 960.211557][ T8117] Call Trace: [ 960.214990][ T8117] [ 960.218020][ T8117] vpanic+0x56c/0xa60 [ 960.222022][ T8117] ? __pfx__printk+0x10/0x10 [ 960.226625][ T8117] ? __pfx_vpanic+0x10/0x10 [ 960.231141][ T8117] ? is_bpf_text_address+0x292/0x2b0 [ 960.236442][ T8117] ? is_bpf_text_address+0x26/0x2b0 [ 960.241661][ T8117] panic+0xc5/0xd0 [ 960.245393][ T8117] ? __pfx_panic+0x10/0x10 [ 960.249891][ T8117] ? ret_from_fork_asm+0x1a/0x30 [ 960.254918][ T8117] __warn+0x315/0x4f0 [ 960.258910][ T8117] ? free_large_kmalloc+0xa3/0x140 [ 960.264251][ T8117] ? free_large_kmalloc+0xa3/0x140 [ 960.269377][ T8117] __report_bug+0x29a/0x540 [ 960.273963][ T8117] ? device_initial_probe+0xa1/0xd0 [ 960.279167][ T8117] ? bus_probe_device+0x12a/0x220 [ 960.284201][ T8117] ? device_add+0x7b6/0xb70 [ 960.288709][ T8117] ? free_large_kmalloc+0xa3/0x140 [ 960.293826][ T8117] ? __pfx___report_bug+0x10/0x10 [ 960.298876][ T8117] ? usb_new_device+0xa08/0x16f0 [ 960.304005][ T8117] ? hub_event+0x2a1c/0x4f30 [ 960.308818][ T8117] ? process_scheduled_works+0xb02/0x1830 [ 960.314594][ T8117] ? smscore_unregister_device+0x651/0x780 [ 960.320425][ T8117] ? free_large_kmalloc+0xa3/0x140 [ 960.325736][ T8117] report_bug+0x16a/0x220 [ 960.330100][ T8117] ? free_large_kmalloc+0xa3/0x140 [ 960.335407][ T8117] ? free_large_kmalloc+0xa5/0x140 [ 960.340527][ T8117] handle_bug+0x9c/0x200 [ 960.344866][ T8117] exc_invalid_op+0x1a/0x50 [ 960.349372][ T8117] asm_exc_invalid_op+0x1a/0x20 [ 960.354233][ T8117] RIP: 0010:free_large_kmalloc+0xa3/0x140 [ 960.360270][ T8117] Code: f8 ff 74 17 25 00 00 00 ff 3d 00 00 00 f8 0f 85 a0 00 00 00 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 ee c7 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 45 f4 f0 8d 5b 41 5e 5d e9 b7 dc 03 ff [ 960.379894][ T8117] RSP: 0018:ffffc900039f6b40 EFLAGS: 00010206 [ 960.386062][ T8117] RAX: 00000000ff000000 RBX: ffffea00025ef880 RCX: 0000000000100001 [ 960.394048][ T8117] RDX: ffffc9001ab9d000 RSI: ffff888097be2000 RDI: ffffea00025ef880 [ 960.402125][ T8117] RBP: 0000000000000000 R08: ffff888088d1cd03 R09: 1ffff110111a39a0 [ 960.410107][ T8117] R10: dffffc0000000000 R11: ffffed10111a39a1 R12: 1ffff1100aac3282 [ 960.418261][ T8117] R13: 0000000000000000 R14: ffff888088d1cd60 R15: dffffc0000000000 [ 960.426377][ T8117] usb_free_urb+0xd0/0x120 [ 960.430899][ T8117] smsusb_term_device+0x1d7/0x3e0 [ 960.436114][ T8117] smsusb_probe+0x1aba/0x2280 [ 960.440920][ T8117] ? __pfx_smsusb_probe+0x10/0x10 [ 960.446229][ T8117] ? do_raw_spin_lock+0x12b/0x2f0 [ 960.451353][ T8117] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 960.456933][ T8117] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 960.462760][ T8117] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 960.468582][ T8117] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 960.474316][ T8117] usb_probe_interface+0x668/0xc90 [ 960.479451][ T8117] ? __pfx_usb_probe_interface+0x10/0x10 [ 960.485116][ T8117] really_probe+0x267/0xaf0 [ 960.489720][ T8117] __driver_probe_device+0x18c/0x320 [ 960.495025][ T8117] driver_probe_device+0x4f/0x240 [ 960.500173][ T8117] __device_attach_driver+0x2d4/0x4c0 [ 960.505731][ T8117] bus_for_each_drv+0x258/0x2f0 [ 960.510602][ T8117] ? __pfx___device_attach_driver+0x10/0x10 [ 960.516607][ T8117] ? __pfx_bus_for_each_drv+0x10/0x10 [ 960.522346][ T8117] ? lockdep_hardirqs_on+0x7a/0x110 [ 960.527562][ T8117] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 960.533476][ T8117] __device_attach+0x2c5/0x450 [ 960.538428][ T8117] ? __pfx___device_attach+0x10/0x10 [ 960.543729][ T8117] ? _raw_spin_unlock+0x28/0x50 [ 960.548686][ T8117] device_initial_probe+0xa1/0xd0 [ 960.553822][ T8117] bus_probe_device+0x12a/0x220 [ 960.558689][ T8117] ? device_add+0x726/0xb70 [ 960.563290][ T8117] device_add+0x7b6/0xb70 [ 960.567715][ T8117] usb_set_configuration+0x1a87/0x2110 [ 960.573295][ T8117] usb_generic_driver_probe+0x8d/0x150 [ 960.578857][ T8117] usb_probe_device+0x1c4/0x3b0 [ 960.583717][ T8117] ? __pfx_usb_probe_device+0x10/0x10 [ 960.589101][ T8117] really_probe+0x267/0xaf0 [ 960.593621][ T8117] __driver_probe_device+0x18c/0x320 [ 960.598920][ T8117] driver_probe_device+0x4f/0x240 [ 960.604045][ T8117] __device_attach_driver+0x2d4/0x4c0 [ 960.609521][ T8117] bus_for_each_drv+0x258/0x2f0 [ 960.614481][ T8117] ? __pfx___device_attach_driver+0x10/0x10 [ 960.620387][ T8117] ? __pfx_bus_for_each_drv+0x10/0x10 [ 960.625867][ T8117] ? lockdep_hardirqs_on+0x7a/0x110 [ 960.631087][ T8117] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 960.637001][ T8117] __device_attach+0x2c5/0x450 [ 960.641781][ T8117] ? __pfx___device_attach+0x10/0x10 [ 960.647090][ T8117] ? _raw_spin_unlock+0x28/0x50 [ 960.651981][ T8117] device_initial_probe+0xa1/0xd0 [ 960.657142][ T8117] bus_probe_device+0x12a/0x220 [ 960.662025][ T8117] ? device_add+0x726/0xb70 [ 960.666543][ T8117] device_add+0x7b6/0xb70 [ 960.670889][ T8117] usb_new_device+0xa08/0x16f0 [ 960.675681][ T8117] ? __pfx_usb_new_device+0x10/0x10 [ 960.680899][ T8117] ? _raw_spin_unlock_irq+0x23/0x50 [ 960.686117][ T8117] hub_event+0x2a1c/0x4f30 [ 960.690718][ T8117] ? __pfx_hub_event+0x10/0x10 [ 960.695512][ T8117] ? process_scheduled_works+0xa25/0x1830 [ 960.701255][ T8117] ? process_scheduled_works+0xa25/0x1830 [ 960.706985][ T8117] process_scheduled_works+0xb02/0x1830 [ 960.712775][ T8117] ? __pfx_process_scheduled_works+0x10/0x10 [ 960.718862][ T8117] ? assign_work+0x3d5/0x5e0 [ 960.723559][ T8117] worker_thread+0xa50/0xfc0 [ 960.728368][ T8117] kthread+0x388/0x470 [ 960.732532][ T8117] ? __pfx_worker_thread+0x10/0x10 [ 960.737651][ T8117] ? __pfx_kthread+0x10/0x10 [ 960.742249][ T8117] ret_from_fork+0x51e/0xb90 [ 960.746944][ T8117] ? __pfx_ret_from_fork+0x10/0x10 [ 960.752071][ T8117] ? __switch_to+0xc7d/0x1450 [ 960.756848][ T8117] ? __pfx_kthread+0x10/0x10 [ 960.761448][ T8117] ret_from_fork_asm+0x1a/0x30 [ 960.766239][ T8117] [ 960.770032][ T8117] Kernel Offset: disabled [ 960.774530][ T8117] Rebooting in 86400 seconds..