Extracting prog: 43m32.83158222s Minimizing prog: 59m21.52503912s Simplifying prog options: 15m16.023060029s Extracting C: 4m4.721337947s Simplifying C: 0s extracting reproducer from 31 programs testing a last program of every proc single: executing 6 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x221, 0xfffffffc, 0x25dfdbfe, {{{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x80, 0x2f}, {@in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x4d6, 0x33}, @in6=@local, {0x9, 0x8, 0x0, 0x0, 0xffffffff7fffffff, 0xffffffffffffffed, 0x800}, {0x2, 0xfffffffffffffffd, 0x6, 0xfffbfffffffffffd}, {0x0, 0x0, 0x796}, 0x70bd2c, 0x0, 0x2, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000ff8000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) program did not crash program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$hidraw-timer_create-fcntl$lock-mprotect-timer_settime-mmap-openat-openat$fuse-mount$fuse-read$FUSE-write$FUSE_INIT-syz_fuse_handle_req-openat-openat$selinux_user detailed listing: executing program 0: syz_open_dev$hidraw(0x0, 0x82, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x5, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x7ffe}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) openat$selinux_user(0xffffffffffffff9c, 0x0, 0x2, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range-syz_ublk_setup_io_uring-socket$packet-setsockopt$packet_tx_ring-mmap-munmap-mremap-syz_usb_connect-syz_ublk_add_dev-sendto$packet-syz_usb_disconnect-syz_clone-ptrace-ptrace$setregs-openat$selinux_mls-sendmsg$tipc-ioctl$VHOST_SET_VRING_BASE-openat$tcp_congestion-ioctl$XFS_IOC_FSGEOMETRY_V4-syz_ublk_setup_queues detailed listing: executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = syz_usb_connect(0x2, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201410127c0de206a0803003ff0010203010902240001000010000904020202f3bff50009050602000202000a090582bbc0"], 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) syz_usb_disconnect(r5) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregs(0x1a, r8, 0xc, 0x0) r9 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) sendmsg$tipc(r9, &(0x7f0000000b80)={&(0x7f00000003c0)=@name={0x1e, 0x2, 0x2, {{0x43, 0x2}, 0x2}}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000400)="b95f42e614b05fd69197e590452fb4c85962acfe58398c6eb108fa839b02b7b9ea8260dc2781159c889441103d726c9873a26c7e5df6cf7ca8d91038713c3127f09e67c6d7541ebc9f81b9e0ca0cc8d0b8ed321d", 0x54}, {&(0x7f0000000480)="c52b42f02179768c12368a405855a856a644bf1b73324f8f4cc119796c1750aa8396d8d18c38a374251c6d538962dbcb9860ba7eb382a72484ecd3ab2894cb32a8bc658f9f402d27fb1b649699f5960c09cf0bf4a6a59d4b7f3d06da3873ea38a16d7ee71d96093774fd67e7f0bf18b1922ef27334f9e4cc11b758ca0d4735bef483c6661b2ab444", 0x88}, {&(0x7f0000000580)="d092b20f51407f343c0dd3e690d4974cb22c86e518195f5ff18317d335354d025c7d6b8fce2164fc700e1536c124e018f7ac33fce0f8a5b1314dd89f1d8ab8946db24d6d6bc50bb9b70d763c23334ee6805e444a15934e11bef890b2f3cef49af97db4a1de78b9393b0b3210d0c81d506f4517a30ce5d1e1f46ca709997dd234ed0dee749425ca7f8cc124303a58d600177d84124e0af72a2a1e9e9ba1e5d30dcae29a8feaf9f5a46ac35817e87ea0b8f3fa565344c196ae73a6fea137af32462c3c62032d59f27cd8d4b279eb3700d0712cf6e41ccb3b3607cec6f36c9abe4d719ebea653", 0xe5}, {&(0x7f0000000680)}, {&(0x7f00000006c0)="a6af25", 0x3}], 0x5, &(0x7f0000000a80)="335894ce455fb65a4f1c18b621bc797c031022997d7b2666ac31cb6cea2bde0e25384c5798ed69b943de789e088b77a5cfb7f2d1b606f5b514341e9621e745013b0b78871ef13f73126107858da87b976e163ee373283acde369d237f5c240c9a8016f6467b729e4ea4e7704ae5c76a294305e4c75452b7765666e67384245fb842ab74eef934edacca8648a285f3783f5767a9e7db771399b5cd2f2df7e3245477ae2462ec40328c3dbea24db36dc3eff99aed79f383a68910a3414873f8b27d86a0c", 0xc3, 0x48c0}, 0x80) ioctl$VHOST_SET_VRING_BASE(r9, 0x4008af12, &(0x7f0000000380)={0x0, 0x51}) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V4(0xffffffffffffffff, 0x8070587c, &(0x7f00000002c0)) syz_ublk_setup_queues(r0, r7, &(0x7f0000000200)={0x0, 0x145d, 0x20, 0x0, 0xb0, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x20400, 0x8000001, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x20000, 0x2, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaa5f, 0x0, 0x2, 0x2ae, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a09, 0x8, 0x2, 0x821b, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r6, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-connect$inet6-capset-socket-socket-setsockopt$MRT6_INIT-close-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsmount-openat$cgroup_ro-syz_usb_connect$uac1-fsetxattr-setsockopt$inet6_tcp_TCP_CONGESTION-write$binfmt_script-socket$inet6_tcp-connect$inet6-capset-socket-socket-setsockopt$MRT6_INIT-close-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsmount-openat$cgroup_ro-syz_usb_connect$uac1-fsetxattr-setsockopt$inet6_tcp_TCP_CONGESTION-write$binfmt_script detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) socket(0xa, 0x3, 0x3a) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) close(0x3) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_usb_connect$uac1(0x1, 0x81, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0xa92, 0x1020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0xc, 0x20, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x19}, [@selector_unit={0x6, 0x24, 0x5, 0x3, 0x0, 'F'}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x1ff, 0x5, 0x3, 0x40}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x6, 0x9, {0x7, 0x25, 0x1, 0x8, 0x6, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0x7, 0x7, {0x7, 0x25, 0x1, 0xc, 0x4, 0x9}}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) fsetxattr(r4, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla', 0x5) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) socket$inet6_tcp(0xa, 0x1, 0x0) (async) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) (async) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) (async) socket(0xa, 0x3, 0x3a) (async) socket(0xa, 0x3, 0x3a) (async) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async) close(0x3) (async) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r2, 0x0, 0x0) (async) openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) syz_usb_connect$uac1(0x1, 0x81, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0xa92, 0x1020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0xc, 0x20, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x19}, [@selector_unit={0x6, 0x24, 0x5, 0x3, 0x0, 'F'}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x1ff, 0x5, 0x3, 0x40}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x6, 0x9, {0x7, 0x25, 0x1, 0x8, 0x6, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0x7, 0x7, {0x7, 0x25, 0x1, 0xc, 0x4, 0x9}}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) fsetxattr(r4, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla', 0x5) (async) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) (async) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-openat$ptmx-write$UHID_CREATE-socketpair$unix-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_open_procfs-getdents64-getdents64-sendto$packet-syz_ublk_setup_queues detailed listing: executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$UHID_CREATE(r0, &(0x7f0000003fc0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000002fc0)=""/4096, 0x1000, 0x2, 0x9, 0x9, 0x1, 0x3}}, 0x120) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents64(r7, &(0x7f0000001fc0)=""/4079, 0xfef) getdents64(r7, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r1, r6, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4484, 0x2, 0x401, 0x31c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x284, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe3fc, 0x20, 0x2, 0x40021a, 0x0, r1}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r5, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-openat$ptmx-write$UHID_CREATE-socketpair$unix-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_open_procfs-getdents64-getdents64-sendto$packet-syz_ublk_setup_queues detailed listing: executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$UHID_CREATE(r0, &(0x7f0000003fc0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000002fc0)=""/4096, 0x1000, 0x2, 0x9, 0x9, 0x1, 0x3}}, 0x120) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents64(r7, &(0x7f0000001fc0)=""/4079, 0xfef) getdents64(r7, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r1, r6, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4484, 0x2, 0x401, 0x31c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x284, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe3fc, 0x20, 0x2, 0x40021a, 0x0, r1}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r5, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) program did not crash single: failed to extract reproducer bisect: bisecting 31 programs with base timeout 30s testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 6, 10, 6, 14, 11, 11, 8, 30, 16, 30, 27, 5, 6, 2, 16, 9, 17, 6, 3, 4, 6, 2, 9, 30, 20, 9, 6, 10, 14, 3] detailed listing: executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="1800000016005f0214ffff", 0xb) fsopen(&(0x7f0000000080)='ext3\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0001110004600000a60c6eec00be00443cfffe80000080fe000000000000000000aaff020000000000000000000000000001", @ANYRES32=r2], 0xfdef) executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) setns(0xffffffffffffffff, 0x20000) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000021006574683a73797a6b616c6c657230"], 0x38}}, 0x0) executing program 2: r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1b1c, 0xa1f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xc9, 0x90, 0xa, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0x80, {0x9, 0x21, 0x400, 0xac, 0x1, {0x22, 0x4a2}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x1, 0xf8, 0x1a}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x9, 0xfd, 0x6}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x150, 0x2, 0x7, 0x3, 0xff, 0x7}, 0x40, &(0x7f0000000080)={0x5, 0xf, 0x40, 0x4, [@ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x7, 0xf, 0x5, [0xc00f]}, @ss_container_id={0x14, 0x10, 0x4, 0xf, "40d915e121448433fada151a0e2c235d"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "b206ec4dc5b785bf02b629ae142d7887"}, @ptm_cap={0x3}]}, 0xa, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x3054}}, {0x58, &(0x7f0000000200)=@string={0x58, 0x3, "f2d7200f917b85882c3124cdc8fc20739b85503b6af47d2bbd1f143f59b7959dfe516ca749cfc47c2730fdabb83a686fa42378d9f614496a74ec25827f06e15f1cdef76eeb46646cba4eafd5e3b52a7b315f78d30912"}}, {0x69, &(0x7f0000000280)=@string={0x69, 0x3, "1cce6e9344e7e8c7c7a98d221681de54f2356ba6e69d9321f6f85b62cda6b756302b7c72c18ed2bfd4cfca26aee921759437b75640f6090ccba466a93f0b4ce81b7df54354fe3866e2cb0828938f35c4c93f70a6167773eb42383cef2609684efd9c3e5d424ff3"}}, {0x3, &(0x7f0000000300)=@string={0x3, 0x3, 'I'}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x2467}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x200a}}, {0x98, &(0x7f00000003c0)=@string={0x98, 0x3, "1dfe2556fe17ca0f6508a6a9eecbc17416564cbdcacdb48f3b5da0db64fbd07f31a29c5163620a4859b20185096c178af6d31bc8f656d2d22befcea240d5825fed85446b50e54cabd84938b8bd11e3d685da54bc38ce07ad71dc7f2f3a87c0e663ba8487911a6fb5ae909141fdc414ae14d9d8b5225cb06dc54899c82f43e3c2d1aeb679b8a0a5bfb8b446caaf584dadf3afcf60ed31"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008200122010009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001000)={0x24, &(0x7f0000000ec0)={0x0, 0x5, 0x51, {0x51, 0xe, "5a2728aad70f7cacdb78c31c35fed6f1fec0115247fd60316fd94f0ed2f88701ea1a10f3456d6d0d1dc2a5e378f2e15eb08c95da6d2886682ac6d0e0bd499e7dd55262fa58ffd501b97a3fc7489105"}}, &(0x7f0000000f40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x448}}, &(0x7f0000000f80)={0x0, 0x22, 0x2, {[@local=@item_012={0x0, 0x2, 0x8}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f00000005c0)={0x40, 0x4, 0xf7, {0xf7, 0x9, "a3462caa45d8635afbc224d6c807e9cb881a5786dc2141ad0bccb52cc952618551b18164c4a06759fa692fadf68f4c40d0275ed513b0c95f32ada5d5530f64d411ef3f52bf084cd63f73e1731d78217c1f3dd81b005780aa16569cf0e2bd9ef87e63832c218a05461bb40b3f8bc374ab7bf569503fc21fe82fcb5a47bdab7e87bf56007899474a0bb506a5a9da0815bc0e58922ea5f7505503fae67cbdf73ba31cad28e77a407db5eeb2411c09bbb78add2338e2585e222c5fe1f5f5350a10be4b9482778db2b4994a64e97ece55e1e07cc4ac1f002e652d944f691a7e7bf6e0d0a36a70eeae3a537bc687eac319cb611ed763c0bf"}}, &(0x7f00000006c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x414}}, &(0x7f0000000700)={0x0, 0x22, 0x9, {[@main=@item_012={0x0, 0x0, 0x8}, @main=@item_012={0x2, 0x0, 0x8, "cfec"}, @main=@item_4={0x3, 0x0, 0x9, "6bb2f8de"}]}}, &(0x7f0000000740)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x4a, 0x1, {0x22, 0xfc8}}}}, &(0x7f0000000a00)={0x2c, &(0x7f00000007c0)={0x20, 0xa, 0xea, "53a6d26cfd510b7f921ab0bc2c6c35951407853d213ee99cb1085641e97c49c216cff396588fd8e009c706477c00c18963d9f85fc3ee948991466d8bd81be64ae99ab828cbf5f61a2930b1be23413d3ecf25962158f11209419a7c884db3e6c80bc117f220f90cd2bc0e06b382b5ce90680c3e2905088ddad4896c1a1881d9bdbc59f3ac91839247996c1a06a44783fc971fcc2341380547c4acb4b2a8b37ac14004e78c82d5ae85cf60428ca9eca229abc01e2901a1dba6fce8d20f8fb3e3f0fac094e2e4b2741dca46765fc9a3190ce265649da35e29d3b26d9b3cb108ae626dcda40ef271222cb17f"}, &(0x7f00000008c0)={0x0, 0xa, 0x1}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000940)={0x20, 0x1, 0x68, "7cc8acfb1d3a3472b6282fbbc2c10093c371dc209d93d5eae983b250807b42e626fabef7e9d6b20ef96e034762f707f1867c9170986f596a04c4dabf4b85582b418e18b7c9e0c461f1bcd3628e71e424d5d11695e9ae2e961349cd66cda149057efd41a0fe750146"}, &(0x7f00000009c0)={0x20, 0x3, 0x1, 0x4}}) r2 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) lseek(r2, 0xffffffffffffffff, 0x0) syz_usb_control_io(r0, &(0x7f0000000b80)={0x2c, &(0x7f0000000a40)={0x0, 0xf, 0x28, {0x28, 0xe, "d75895af27f3354493504f7f04628369c09bdda488be06d8413ec5202c71071de0cb46a2d4d2"}}, &(0x7f0000000a80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x860}}, &(0x7f0000000ac0)={0x0, 0xf, 0x27, {0x5, 0xf, 0x27, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x67, 0x8, 0x1, 0xd}, @ss_container_id={0x14, 0x10, 0x4, 0xb, "2d88910ae14031cbc17bb0c886212c7f"}]}}, &(0x7f0000000b00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x1, 0x2, 0xe, "c73098d3", "ad3bdee6"}}, &(0x7f0000000b40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x0, 0x5, 0x2, 0x2, 0xffff, 0x4}}}, &(0x7f0000001040)={0x84, &(0x7f0000000bc0)={0x40, 0x26, 0xae, "9994c7b74a902ad5a29b8845899d43877af3ffdb823de5b5cbb8d920dc202fba6e0d340b154d10e48648ec69bf9381ffa236aa2bca0d3b4c30fd68f0e59077fc096af8383a328e0febe1cacd2597bc0add7d69b4aa3596cd54b3fdf26a6e76df4fb3445bb0f1dcc32dc3dbf454a8d80907bf2b9f6533298827dc7fd04fb3c82500a68220d0eee58bb4d9f9f88020cba0de772130c89b06d3b1f96a2082ec478e3652653dc8ea8d9ff1018c68f12b"}, &(0x7f0000000c80)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000cc0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000d00)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000d40)=ANY=[@ANYBLOB="200083505808100000e001400078"], &(0x7f0000000d80)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000dc0)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000e00)={0x40, 0xb, 0x2, "9887"}, &(0x7f0000000e40)={0x40, 0xf, 0x2, 0xffff}, &(0x7f0000000e80)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000ec0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000f00)={0x40, 0x19, 0x2, '5['}, &(0x7f0000000f40)={0x40, 0x1a, 0x2, 0xa86}, &(0x7f0000000f80)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000fc0)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000001000)={0x40, 0x21, 0x1, 0x35}}) syz_usb_connect$uac1(0x4, 0x85, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x763, 0x2001, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x3, 0x1, 0x2, 0xb8, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xdb, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4a2, 0x26af, 0x97, 0xda}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x81, 0x81, 0x7, {0x7, 0x25, 0x1, 0x4, 0x6, 0xfffb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x23, 0xc, 0x8, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x1f, 0xa0, 0xd6, {0x7, 0x25, 0x1, 0x4, 0x81, 0x7f}}}}}}}}]}}, 0x0) executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) setns(0xffffffffffffffff, 0x20000) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000210000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) executing program 2: syz_open_dev$hidraw(0x0, 0x82, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x5, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x7ffe}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) openat$selinux_user(0xffffffffffffff9c, 0x0, 0x2, 0x0) executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$UHID_CREATE(r0, &(0x7f0000003fc0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000002fc0)=""/4096, 0x1000, 0x2, 0x9, 0x9, 0x1, 0x3}}, 0x120) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents64(r7, &(0x7f0000001fc0)=""/4079, 0xfef) getdents64(r7, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r1, r6, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4484, 0x2, 0x401, 0x31c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x284, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe3fc, 0x20, 0x2, 0x40021a, 0x0, r1}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r5, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) executing program 32: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$UHID_CREATE(r0, &(0x7f0000003fc0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000002fc0)=""/4096, 0x1000, 0x2, 0x9, 0x9, 0x1, 0x3}}, 0x120) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents64(r7, &(0x7f0000001fc0)=""/4079, 0xfef) getdents64(r7, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r1, r6, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4484, 0x2, 0x401, 0x31c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x284, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe3fc, 0x20, 0x2, 0x40021a, 0x0, r1}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r5, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sendmsg$nl_generic(r1, &(0x7f0000001480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001440)={&(0x7f0000000240)={0x11e0, 0x2a, 0x800, 0x70bd27, 0x25dfdbfd, {0x19}, [@nested={0x1c8, 0x138, 0x0, 0x1, [@generic="6dca106b9c91c5dd8bf09c5a11677e5df4576b596537812ec0fa8368e82e9de3a02739a3a9252f724c0df965f93c4dd0eccf8b96b021b02f161df15af664076833545ce2fcb6ef698e824ed65ff507e9e73fd2569f460ebe7f386889714734cd8b8d159a6c491abf000cfb76b89e72ebfd1c7d8786cee2f6734a6636bd3677c3934f267dc0fe059c8c00faefa66476ef2f3cded939bcccb2f8f511718b4f0284dde56eec866662547fa07a32a63418c43467db69025f64b5e214554e0146f238bce10bcc8a67ae175d488eb8b6", @nested={0x4, 0x45}, @generic="255c17df8d0aeffc49cc5c0c404da4c77f176de141e7b3fe363b42ba161edb444fddcb7de28fbebf1c62e7774507c1181c6bd88555b3f48ab5f99acc582ba1eced13f84257d1504562ad2f0ea0d355e32f14ada1963a91d231b949a57dfe6e0d5a9620127fd9ae7b329ffef0d3b1120e1aa13f9ea21f7c436c1d5d0cac69ba14b28d873fb2d7421abbc48bda000ee21fdd88d9a381c15ba2e81fa4a61d76beca07ad04633e86bf397aa44d080469679750bd41795d86b984cdc4d2f7129598bb478339b38ca072aeaf5e43c5b1d2ad62435e2c8f420353", @nested={0x4, 0x119}, @nested={0x4, 0x56}, @typed={0x8, 0x145, 0x0, 0x0, @u32=0x5}, @typed={0x4, 0x14b}, @typed={0x8, 0xcf, 0x0, 0x0, @pid=r2}]}, @nested={0x1004, 0x47, 0x0, 0x1, [@generic="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"]}]}, 0x11e0}, 0x1, 0x0, 0x0, 0x10}, 0x100) read$FUSE(r0, &(0x7f00000071c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r3, {0x7, 0x1f, 0x9, 0x109104, 0x40, 0x0, 0x6, 0x3fffff, 0x0, 0x0, 0x20}}, 0x50) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000140)=ANY=[@ANYRES16=r3], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) executing program 4: getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000)=0x7, &(0x7f0000000040)=0x4) (async) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000000c0)) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000100)) (async) ioctl$TIOCSCTTY(r1, 0x540e, 0x0) ioctl$VT_RELDISP(r1, 0x5605) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r3, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xfffffff8, 0x38}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2a1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x4041}, 0x40) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f0000000300)) (async) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000740)={0x0, 0x0, 0x12, 0x18, 0xee, &(0x7f0000000340)="3f1406b71329352e2a9dc090662b098c18a58ebaf3fc6102c2ed8a90572ae7021c8c29b94cf862045b9474b7c181dcc31efabfbf863639f1a76aa27c1633413a85c4d249fc2b35d15566cff37da0d8fd0df152afc80d6b53eb437f65b24c79fb72a5b0a57e18f05f2b00aaa25a25d57f5333e18e12a71c01e49e049e0f62b3b658cdce5096e484187f1ad87bffa1f0e4fee0cc4a4d41bdcb6a6bf80b173d652c5943544af9cd5b6aa2ac020788df85843c3955c6846c6cf66dbddd2e21fbd178f8ba2afa7e1f5621d48bdaa87f06821aed9b2218bf2c67e15b6aae45e09c76a4b20e5f7c852c40cce3bfe9b722f6b585f61acb12a7fc9e7a61c7231b59687d743d5cda3ac6db14b6c13c527e96a30168cb8e12757a4ea8167319b73926b5ea8833b77b9dccdacf1c58a40801bbc9af923c78a1295dabd8ef719853894ec155832bdd5e839383f0c9fd6f47c745960dabe6f6283d7d4c3d7f21bf1bc1ff1ed4bcdc4abafa39b1953406ab815922988b69d88f34569315af8dedcef2b8975ea1fecd934313e74e205a02abc23491593a00aea8e89e4f9d77ca9a01286ff8cc6997a0037e4f377f02738ec795ef809ea2531bb2b87133c879440d67f01b3f6124a2a50ed4ca4d3841102f1539af5dd96e7f78a18ce8c2eb565b8ec0095c7b13dbb4558d820ee307ae390d7003a03787de725b84adb6bfd04866826870f1fd2a8197ff77aac6c540fc0df96917ba8a83f3b92eaa4fff633072bc9b2530d50aef0b4a84a1363a17a46068b6666caca1d8f65e44e0b853dfc2e20761fe87b7a8dae13f3b16b92d8b29019d1c4e4e33fb53bc87d4a0c04b441b49b99e33274562316b4cc0edad3c67b27a671de24f82ed08aaed626a05aef79bb45722913cd883099ba8f60149814ef61a0b216186b3397321bff98d52ca492140c8c5a427d868d293bfc481f2e5c9846fcd3169f5a510d0ca7688f2b3465da2d3eeb70e2d473bfa9915f9cc5836892427a544b70a4a4115e177d6869de672693a26af34b448111090c74c46f123cd4704d676673c08fd6cf7da9521d8d04fa0d219a5067b1bde9cb337b6afcea6831b3beb138470f9d182afbdd0553e2e3331376acbd69838b65cfbec7358a5cd1eba51474776cdafdb8c09f8e6a7b9f5667e86bcd365ac4c48187da96ca45d3d7f1f8fc5c74ab5aaae5e60d8590628612a2aa462654069a79b78c8fae4afdb862658d10bf5f1b1bee9639937dad363278b0fc9ed81d41c7637d791dda4dd07d188c6b70cfc2b93f8a2339cd820972ba62c27e68ba375ebd5758ff74c9d5810e64d3aeb3d380c6b6d6f757e7ab5edbf6f310704908c4c2bf5c3e58da6c143edecf7f2d7d99a38674fe0c76471a52e22eb4b39b115743770a1a9e214af0a1a9a853593c43cd1716945a24b113f6f35e440c145119ed89ed634d4670398"}) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r2) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r6, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000008c0)={'sit0\x00'}) (async) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000940), r2) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x74, r7, 0xc00, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x44000) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r5, 0x8008f511, &(0x7f0000000a80)) (async) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) sendmsg$IPSET_CMD_DEL(r8, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0xa4, 0xa, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x6}, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth1_to_batadv\x00'}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x30, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xe9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x5}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xf0dd}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000850}, 0x4010) (async) ioctl$TIOCSCTTY(r8, 0x540e, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000c80)={'wg0\x00', 0x1000}) (async) lseek(r1, 0x9, 0x4) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d00)={0x12c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa5d}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffc}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe6c6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f7e5358}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffff99}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x8041}, 0x4000) (async) ioctl$TIOCGPKT(r8, 0x80045438, &(0x7f0000000ec0)) (async) syncfs(r8) (async) fcntl$setown(r5, 0x8, 0x0) executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000080)=0x7f, 0x4) sendmmsg$unix(r3, &(0x7f00000bd000), 0x2d, 0x20040040) r4 = dup3(r1, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000006c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x50, 0x0, &(0x7f0000000580)="dc06aee257eb936b906c0453c6a13c5de13061cc016d66d25a801c66c75f28990231c59418e45e569f48f6592cb6e48e4d422904b7790a1f5cc61f8d5baa5f88c4835860233e829b1eaed72b5a5ca610"}) r6 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000280)=[@free_buffer={0x40086303, r6}], 0x0, 0x0, 0x0}) executing program 4: remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x9, 0x40000) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x8) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001000000101008020000007e9a041e633069d19e0517c43a81fc0000000109022400010000a00809040009010300000009218100030122280009058103000408c100"], 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r3, &(0x7f00000003c0)=""/18, 0x12) setsockopt$inet_tcp_int(r2, 0x6, 0x8, &(0x7f0000000000)=0x5, 0x4) syz_usb_control_io$hid(r1, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x2}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r4) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r4) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="0100fdfffffffdffffff0f"], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan1\x00'}) r6 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$ppp(r6, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x19) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r7, 0x1, 0x29, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$packet_int(r7, 0x107, 0xe, &(0x7f0000000040)=0x6, 0x4) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa0}}, 0x14) mknodat(r0, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) capset(&(0x7f0000001440)={0x19980330}, &(0x7f0000001400)={0x0, 0x2}) llistxattr(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c460506020d000000000000000003000600a7060000b8010000380000005e020000040400000400200002000500ff03000234cf51d359f66abf84fcf59d62533a0000000051e5746400040000b000000082000000030000000600000002000000ff07000051e57464050000006600000003000000f70e0000010000000800000000010000"], 0x78) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x3, {[@local=@item_012={0x2, 0x2, 0xa, "8c10"}]}}, 0x0}, 0x0) close(r0) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) r3 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x60, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x2}}}}}]}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f00000003c0)={@val={0xa, 0x8914}, @void, @eth={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "17007e", 0x8, 0x2b, 0xff, @private2={0xfc, 0x2, '\x00', 0x6}, @mcast2, {[@srh={0x33, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}]}}}}}}, 0x42) syz_usb_control_io$uac2(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000180)={0x14, &(0x7f0000000100)={0x20, 0xd, 0x37, {0x37, 0x22, "72a065de14c8067f69c4c564ad1571d82f2f550cb7177ac8144fc86507bbfcc6fbd6ad3cc0dd32eb5a378ab198cf2d12b473a6a716"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001c80)={0x44, &(0x7f0000001a00)={0x40, 0x13, 0xa5, "7ebd22f1cfea0446024dd27c2293e268d0e12223837ddf32aa77184d62264a2a1e1779b83fbc76699361ad656f5af00e9785d7cad05eff73bf6f14f17dd1d4342c1ae5f2ccc2a73c71d225b345dcbb0f50629e9b6855948f986f5951b1155cfc8c0f13df7696908a3c9dc434f7eec9757048df9b49fd2ed85e10184045a777c8c7ed304ddafc0b8582cb57a9013f45679e003e4bbc2af3af95c1abaa510e8c6b2e096eff06"}, &(0x7f0000001ac0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001b00)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001b40)={0x20, 0x80, 0x1c, {0x2, 0x0, 0xfffffffc, 0x4, 0x5, 0x712, 0x4, 0x7fffffff, 0x6, 0xff, 0x7, 0xe819}}, &(0x7f0000001b80)={0x20, 0x85, 0x4, 0x9}, &(0x7f0000001bc0)={0x20, 0x83, 0x2}, &(0x7f0000001c00)={0x20, 0x87, 0x2, 0xfee}, &(0x7f0000001c40)={0x20, 0x89, 0x2}}) r7 = syz_usb_connect(0x4, 0xcad, &(0x7f00000003c0)={{0x12, 0x1, 0x310, 0xb, 0x85, 0x60, 0x8, 0x471, 0x60d, 0x25a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc9b, 0x3, 0x1, 0x7, 0x0, 0x3, "", [{{0x9, 0x4, 0x43, 0x5, 0x9, 0x3e, 0xff, 0x13, 0x86, [@hid_hid={0x9, 0x21, 0x8, 0x3, 0x1, {0x22, 0x756}}], [{{0x9, 0x5, 0x0, 0x0, 0x200, 0xc, 0x0, 0x1b, [@generic={0x97, 0x9, "8fc45a63645e52048fa70b8a1198fb93fdd6224fd7d52ab079a22fdc40f01736a2719f4402341198a5aea0b52c727859be24848f9252b74a0aeab2a58841c5abdb4a38203e13d416526664ea23b0204272930b9697224b516f7c970fa6e0c105ae44bebf7f16dd8c6e4631e4753ebe19b6f22e6133fa38e9e5de0243077bf169270c25dc33b42a462c9f8a7dac0e4dbcff16bf97e3"}]}}, {{0x9, 0x5, 0x8, 0xc, 0x40, 0x5, 0x4, 0x9, [@generic={0x1e, 0xf, "1fd8ba34e904a94ce5efb850d4b7cccc555e75dc399b41926e2f9efc"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x9b, 0x3}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x9, 0x1, 0x8, [@generic={0x4c, 0x3, "1494e013d90814780ea1d904d2299d3641956aa0cfeab5ba09afd8bc3e2da234be42841a5e513982fe6bcc0793baea9dd23ee1e71220771446be19a635c931b0459bdfca590f82925ec4"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x4, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x4ca}]}}, {{0x9, 0x5, 0x6, 0x2, 0x8, 0x6, 0x4, 0x7, [@generic={0x81, 0x30, "317f763ea2cb8658989b4a5a409c8cf25af25080aa2448d1ebddfb4a81db82bcec77a11abf09232dae378bd95a6a7a9bef7c87162badb3836df1c1208a6015a39cd5184cd973966641ce7fd53807029acdccbedc2a45cb7d0e864956c7e91a8a2009b02e221d93d1fbe7ae73573eb911e69c3b0ac507c1e5bb2e14c4c23a35"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xf1, 0x3}]}}, {{0x9, 0x5, 0x80, 0xc, 0x200, 0x9, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x8000}]}}, {{0x9, 0x5, 0x7, 0xc, 0x8, 0x3, 0x4, 0x7, [@generic={0x100, 0x11, "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"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0xee, 0x6, 0x8, [@generic={0xc, 0x10, "5a03dd46cf21689df98f"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x40, 0x2, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x3ff}]}}]}}, {{0x9, 0x4, 0xe5, 0x56, 0xd, 0xff, 0xff, 0xff, 0x8, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "18"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0x6, 0xfb}, [@dmm={0x7, 0x24, 0x14, 0x9, 0x401}]}], [{{0x9, 0x5, 0x7, 0x0, 0x0, 0x2, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x4}]}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0xd, 0xc, 0x1, [@generic={0x72, 0xf, "6cd1e628be964628436525662d4dc0ea4978975ba447aecb8f8573e4e75e00dad01e4f03e7f351ad824fafe69d445313fa98677de1d7f7fe450c3e05d44bf21dd5d7cc0eab82e95a13bc3b1dd24b59965da86022e7bca5a5dca793b7724c350125a8999d52fb47ac59ae3ce6e4f0322b"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x8, 0xf, 0x5, 0x3, [@generic={0x8c, 0x7, "541f7c491a3521b40458f7a01de573db4c6004dfd5a676b47d8539b0dba1c670ed4d4a298cb328d1b93026d623908aff15c1b3725e68cdf850b87e65a264ff97a6b81c41489c57f9065c15e2a38374f1d706afb398e3cc503fd6f9002da0fa00abc3708805fda27655c4e402a44cabc4ff68a5bfdb404fa5db8bcbed2cde5a95bd2eb7ffc51f18c6c3b7"}]}}, {{0x9, 0x5, 0x2, 0x12, 0x8, 0x0, 0x8, 0x43, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0xfffd}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x8, 0x9, 0x9, [@generic={0xdb, 0xf, "7c5372fba81a78e0b2a7e0a43bffc326592e59d645ae5fe79e91f19469dac0eff2c5556803b26164d1462adfff23dee64c2341e5e713c50f4b641631f44bdb48b1377168f8d20df55c46acb33c63311934a5c9f3d6056cb47605dea51542d2dca2606f9a955b3dfa19d9387607752fbcc5fa0f8ca516878c951fa415033b438866e3459ae73d868b90fa746408401c54c5afcdc226d1475d737347030ca12f556c6b54340658c5e45d5f04accc3a4c35d1354f6f7167449b5eece111fedba9edea681b68a86e5d0fef0468caa1627025caa538277ee44c7b8e"}, @generic={0xe, 0x3, "e1efd3dfc326f160c7f1663a"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x20, 0x3, 0x0, 0xfd, [@generic={0xa6, 0x20, "1f7df7c95e7ef6fbf39ed36740073125571b52ec65bbea840e6a41a6cf9b75aeaf7bbfed7e371c9fc03da78401cd09c8e6c18ea77c82989918569ce4789bad7e1ec1a60ef4da4d78d8dc3a760c1895453f614f77b25150d2731d9009567b4283d5e263726287282901510f7b83dc42442ac2c7cb8be48cbfc1fb761790e86ac31a405ef20310caab5006cfb00aa10fd959764ea3008e994a6b9496a044171fdeb39cd351"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x41, 0x1}]}}, {{0x9, 0x5, 0xa, 0x3, 0x20, 0x4, 0x4, 0x5, [@generic={0x55, 0x22, "1c68a2323f8ff0a0ca132f69017c2bb41e4495111d35034932fa04e8979da3993bcbc404eedfc5d3290becb0017e5c0a9bbadf455b93136f75e95b7f8ea23f905b50c85fac894d6a1d2baf45cbb5f5b92d8848"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x200, 0x7, 0x9, 0x2, [@generic={0xe8, 0xa, "61cc0da926383987c09cbaf1b3d89f60d03a716b8aeec036154443e53c4ddd80fc1bd0aa868843c844a8b108292530f5c8a61d272b3d88d617f0fbbdb40cd6bfc9c75ad3bbed4e534e49bd7de7b338e8e4af6b03b05ee20219056c3f60ad677343a586ba730edace6befd552cb1c3f8798edfd7a1cae9355f5699c8ad2c0d9fb3364393404f1d1004f975a4e0dd687ef29cbb6fd54106c7dce16887769bd98f89eabe425a723d913c76180d7815890cae2528573bb993ea046847eb5971775b1ef57fa2d7c9868fb9f06e626acfe2a050f01cc3aed5a36d70de81a5c87c990efab8d78204ae1"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0xf5}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x9, 0x8d, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x8001}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x99}]}}, {{0x9, 0x5, 0xd, 0x3, 0x8, 0xd, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x3}]}}, {{0x9, 0x5, 0xb, 0x1, 0x8, 0x6e, 0x7, 0x1, [@generic={0xbd, 0x2, "3a81295d8549d869e49e27547562e3d5111943ab54dc86919138a50f73a3b36d0c6861f30c005edd0fbe8998c17b74eeafa32527e74d2a83b8d1c81d7f84f98998bb53034a0ae5f6a58974ae79f15705e1890c7c91476246ee4a2f0b600eb5d918814536c429fcd07f9b2e4234794b531dd147c59f88bb05841eee95230e73ca7d968a4fb8d74f7d1e7176667d0bd0c12d94c9002d0e39fe1fba40e716829c8f3b4546f3fe59e6eb69b56c7df43522a6dbe7b9f5da984c4ea3698e"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x3ff, 0xbc, 0x3, 0x6, [@generic={0x43, 0x31, "eabbdfe88e766efa82fb7e73e480982535ebd8974e142e3a71b3d8bf30b0e3df9fc6e5079b42fcd5d0606981025c65c5ba910f353fdd6a5b08a1303e71e341c4b5"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x0, 0x1, 0x8, [@generic={0x72, 0x22, "de84f6f04327d5c270b54ce5cc12d9eef3344526c32305185adfbd78a04bf2a79d3cd7195218378b12a448841bcc8c83efa0f8aef45d219a7b64c0d6650d8d12b49ea8c81d30539d580a91a92e62aeba4efb4b21672d893ed5199ff2fee6076fc813bb76ff581349ffecf52e424c5aaa"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x3}]}}]}}, {{0x9, 0x4, 0x9e, 0x7f, 0xb, 0xee, 0x5e, 0x7a, 0x5, [@hid_hid={0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0xbca}}, @uac_as={[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0xfffb, 0x8, 0x5}]}], [{{0x9, 0x5, 0x3, 0x5, 0x8, 0x3, 0x4, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xc, 0x32}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x2, 0xff, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x5}, @generic={0x49, 0xc, "9b8ce9b6823433db832004c1e1e82cf6d8aac8c3b7b3bc27cf3a98ec519404af533a305805fd8251dafc3cb6dac5901648b30b6f2127102d27eb4775a2ff962b4c232fc749c818"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x7, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x8}]}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x7, 0x3, 0x7, [@generic={0x28, 0xc, "44a06a5c30a07f19260fa597c537de718bf7b3d71e7600984c3cfb2ec7363d400010507ba39b"}, @generic={0x1b, 0x10, "2dadc7ca37e367d431f7e6cb5d58d4ecd085503ac8b73fc68a"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0xf, 0xc, 0x9, [@generic={0xd8, 0x31, "3dbd28286676f790b63fd3590c47babc43ebc5000c2213cd9cad119412357723f5bcc6d103a51e9bbadac0accb08b8eb0b23c0bb06f3230716df7cbbc9c3b930647e0f85c26863d6fe8926d1eee364f5ecb1a5ddb31322c87b1513236b80c31953db2eee7e8a17bebc4e914149651389f822761689c91855ee2979dfdb756f49d930cce7a59b535201689f3269db617bb7ea1a5692b7f723d1b9f7d7852725c27614267521bb76764752a9535336881e466391894b972f75fdc80bc5e279a3cb137c36008f3c82faa3dd1c53c70e7fe6d3d0555e7e6d"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x200, 0x45, 0x10, 0x6, [@generic={0xed, 0x6, "408c148c1a951adb93032957d2dc5534df2eacb2fe748521394a5ad18b8327226ca16166fec8d3f86a9ac58ca8871e67b6e6d7cff63a2ed21c4796e3a225a8c59c45ce3a561b87fc0e85395f461a1b0043b99deb84dabf6b0efde5bc0ebeb0695999dbe35c606766a8281bd3fd4aace12c71d06413fa732857d25fadc69467439d27b7f1049c64cc787506c19378a17994ff88f13f3bfa3d307e263c007d4b1912accfaf1d97fd76833d7de1858ba4bd4b7f52650f6ae0d2f0368991528bcb442c3ff2cb0af390821906a114fe7e5b2ed36dd9ce22851ad0f85c2f7c6a153335ca0947945bdd5721c8f8f4"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0xf, 0x1, 0x5, [@generic={0x4d, 0x21, "41bea8e428d5405a0f87b426db560499a78d184702ddaae53fe2790d372a56dcbeefd9ab68eb96c25a5858f2d9e997b1aa77c389db4cbeb4e03d0c74b7331ff6e048c3de945113986437f7"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x4, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xd, 0xfff}]}}, {{0x9, 0x5, 0xd, 0xc, 0x10, 0xfa, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x8}]}}, {{0x9, 0x5, 0xc, 0x4, 0x3ff, 0x2, 0x0, 0xcb, [@generic={0x18, 0x3, "4a42d36ec02bcf8b254c39d3bdab33552f8ac882006b"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x5, 0x9, 0xcc, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x80, 0x7}]}}]}}]}}]}}, &(0x7f00000014c0)={0xa, &(0x7f0000001080)={0xa, 0x6, 0x10, 0x8, 0xe, 0x10, 0xff, 0x8}, 0xec, &(0x7f0000001d00)={0x5, 0xf, 0xec, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0xf, "1cef51d7e2ab715202dc963f6a48c6e7"}, @generic={0x46, 0x10, 0xa, "c0d7678a442c706112cbe0f9e8e839af3470c910cff2d9da1b7dc3a8092bf891995349fdd6fee1e141e6030c3aaa0b968753f35019b63e50537f7dc8850da069c69098a0546fa69554b38702a43cd96d4134eb1a521dc8ac51e6d49b39b153f6a9129fd9d4ea18903e3d8aa09dbb261358b823458fe2e513ac1c13e809b9de65c7c70de300e636ec7236fcb6513a3f4c63a1078403306b1424fdc97d730091482dec00"/178}, @generic={0x52, 0x10, 0xb, "85e85ce51f00e4e5645109638ea8df425c600067c9c855cb6010bd287f6f413697311d03638b576d24d1a34255ee7e5162ad2db3bcf0d24b9ec31c05e2c3717121e7ba8ee00f081c96a68870f9ea81"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x2, 0x1000}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x5, 0x9, 0x7}, @generic={0x2a, 0x10, 0x1, "7b55b1e7b8e655e5b1a6a54bcd05fdadab09f5b5281e16776617367e516975f11694e2095ff49a"}]}, 0x7, [{0x77, &(0x7f00000011c0)=@string={0xfffffffffffffdb9, 0x3, "f59bb9c3796dcbab5acf702802fa715ee45040095f3a868bcd4c1fbe632350aa73d0fc6adf393ec7d7325282377a9586788590078aace7c8acc681b2cfec5d8a91f970518835698e1330e93c9fb8f25f26b793785a99c6b67ab37ec6bbfafb1402305444f13ffe3e9520159b781aebb5e4dca5bc4f"}}, {0x8, &(0x7f0000001240)=@string={0x8, 0x3, "68af7c3a6f4b"}}, {0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x457}}, {0xa5, &(0x7f0000001300)=@string={0xa5, 0x3, "03fce82a53e873d08bafde0b2894b14d9006c49168c96aa1eefb516c98938194b7bb3bbef06f528214cedf27427c29736706e7d33c0fbf81d1f186dcfcb909bbdf3d12d6e0f93f5f4996748a56e2533338f975d7fd3de7b80844c7dc4b7047836d54e698b26c2026c8805804ebc5d8a13b063c8ad6cab4f12ad884682f8499e1562d1939e4fa34612c94a228a56c72c3c8597e85fa07b26a35da86b927bf4e22f04871"}}, {0xa1, &(0x7f00000013c0)=@string={0xa1, 0x3, "510dad3602f894d11228b3b8f98cf140aab291ce2b7dedc5d8f6094ddc68db1bc2db374624529a320386dab9c3e258191ea7599e1e05f7aa361daaed7c1bfdf51d811f25e464bb8beeba2cb795bec58ef5fefd395e0438a255148ac96be5713127ede900cd6b316d9ee845e2ec378e937e661203d2862ba4573e49a6ce1750254fc0eedf37d0ea9ce4235f9a7d1a506fb94cdc23ab87533a51f2d6481e6a6d"}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x807}}]}) syz_usb_control_io$uac3(r7, &(0x7f0000001680)={0x14, &(0x7f0000001540)={0x40, 0x21, 0xc5, {0xc5, 0x10, "16fb6ae6f9e5f77699184de472f2f9b77c57d694be66f5c8b9b6ef18822bd6affe46bf4bdef186d04860e320bb3932a4221dc5f52f6725e8c1a1b8ba00c1252607723b0cd16383081b1d926c0f0c70f4c73b15777cf9e5b546c3d655186ffbe949a704216e7d08d48cbbf1c2c6796ae6bc0dffe9962c54888e869215947a9c2d75e4bf0a03ebb754a43326ea3dc45ace86c71dbd7985dd2f5c48f65837e7f2058341a53d26c6503adcc6a9ffdfb7088fb39f1bc2db36fa66917bfc31b7a8d02590486b"}}, &(0x7f0000001640)={0x0, 0x3, 0x35, @string={0x35, 0x3, "451c8db6504ce79e53534bd6235b42644eff83004c6c62b7d0d8447723d6a03883e1d08c5a038daa9d9b13b0249aca7c7069cb"}}}, &(0x7f0000001980)={0x44, &(0x7f00000016c0)={0x40, 0x13, 0xde, "a3fa459254da678f5fdb8dd2b06387e571ea84e677f386b073b715c70311e9099698dd3295ab9e3db5e61afb5a9d7257c1ce3cdfd9c5f511e135f4a6ee6fc66e7f362c0e9d54f45d1f7c4a394ab91c8c4de3f9dddd568fde49add3c8e39d20ae359fc7c21af01136ef8631dbec226e33ac11242046605bc113d546e3e3cb8d801d31ae3781063e6586f36ab912b656ed2e2bed4ea98ce64b16f84769f825d6eadc934aeeec08fa1ab83b3a322e667102ccaaf227eca58ffe98007b849df7f9d59ed7a04ecceaac56ff4a0c4ef299cd9085e43a93adfb83044940cf66d418"}, &(0x7f00000017c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000001800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000001840)={0x20, 0x81, 0x2, "3cb1"}, &(0x7f0000001880)={0x20, 0x82, 0x3, "5cd573"}, &(0x7f00000018c0)={0x20, 0x83, 0x1, 'f'}, &(0x7f0000001900)={0x20, 0x84, 0x2, "c1b7"}, &(0x7f0000001940)={0x20, 0x85, 0x3, "d5cf20"}}) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) close(0x3) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) setns(0xffffffffffffffff, 0x20000) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x300}, 0x0) executing program 0: r0 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x3, 0x3}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000380)={0x2e, 0x3, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x300000000000000, 0x0, 0x0, 0x3f, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000040)=@any_dev={0x2, 0x10e, 0x0, 0x0, 0x1000, 0x2, 0xffffffffffffffff, 0x0, 0x2}}}, &(0x7f0000000400)) executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x2) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000580)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000780)={{r1, 0x9, 0x9, 0x8, 0x6b7b, 0x0, 0x3ff, 0x1, 0x8, 0x1, 0x80c3, 0x4, 0x885e, 0xa0, 0x8}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_usb_connect$uac3(0x3, 0x80, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8014, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x20, 0x11, {0x8, 0xb, 0x0, 0x3, 0x1, 0x1, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x9, 0xa, 0x77e}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x4, 0x1, 0x29, {0xa, 0x25, 0x25, 0x40004, 0x5, 0x15}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x8, 0x80, 0x3, {0xa, 0x25, 0x25, 0x1, 0xb}}}}}}}}]}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x9, 0x28, 0xf0000000, 0xfffd, 0xa, 0x9, 0x10, 0x6, 0x7f, 0x42, 0x1, 0x9, 0xe, 0xd, 0xff, 0x9, [0x3, 0x5]}}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000100)=0xac05, 0x4) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendto$inet(r3, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40002041, 0x0) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f00000001c0)=ANY=[@ANYBLOB="12011003000000083512138240000301030040080b000201012006090400000001012000030904010000010220000004ea01012102200009050109200008067f0825010333090a000904020000010220000904020101010220000905820908000900000000000000000300"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="1800000016005f0214ffff", 0xb) fsopen(&(0x7f0000000080)='ext3\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0001110004600000a60c6eec00be00443cfffe8000000000000000000008000000aaff020000000000000000000000000001", @ANYRES32=r2], 0xfdef) executing program 1: mmap$IORING_OFF_SQ_RING(0x10000000000, 0x4, 0x2000008, 0x11, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="2000000076001f0329bd7000fbdbdf2508004700", @ANYRES32, @ANYBLOB="080005"], 0x20}], 0x1, 0x0, 0x0, 0x400c814}, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) close(0x3) (async) close(0x3) socket$packet(0x11, 0x2, 0x300) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af24, &(0x7f00000001c0)) executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40000, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x18}}], 0x1, 0x4000880) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="64010000100013070300000000000000ff01000000000000000000000000000100000000000000000000000000030001000000000000ffff0000000000000048", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000010000000032000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000027bd7000001000000a000400000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002c0017"], 0x164}}, 0x4000040) executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x221, 0xfffffffc, 0x25dfdbfe, {{{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x80, 0x2f}, {@in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x4d6, 0x33}, @in6=@local, {0x9, 0x8, 0x0, 0x0, 0xffffffff7fffffff, 0xffffffffffffffed, 0x800}, {0x2, 0xfffffffffffffffd, 0x6, 0xfffbfffffffffffd}, {0x0, 0x0, 0x796}, 0x70bd2c, 0x0, 0x2, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000003300000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000000)={{0x2, 0x4e25, @empty}, {0x0, @random="714f971f86f8"}, 0xe, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 'lo\x00'}) sendmsg$netlink(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)={0x30, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0xd, 0x2e, 0x0, 0x0, @str='\xd0@:-}-+)\x00'}]}, 0x30}], 0x1, 0x0, 0x0, 0x48006}, 0x0) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) setns(0xffffffffffffffff, 0x20000) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x500}, 0x0) executing program 1: r0 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x3, 0x3}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000380)={0x2e, 0x3, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0xfcffffffffffffff, 0x0, 0x0, 0x3f, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000040)=@any_dev={0x2, 0x10e, 0x0, 0x0, 0x1000, 0x2, 0xffffffffffffffff, 0x0, 0x2}}}, &(0x7f0000000400)) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000180)=[{&(0x7f00000003c0)="89e5ee0c7cdad9fcb47380c988ca", 0xe}, {&(0x7f0000000100)="f4246308553ce0578264d9bd783a3ec8a929c5dc8494e6f8bce8e7d55d60b301f5", 0x21}], 0x2) executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) socket(0xa, 0x3, 0x3a) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) close(0x3) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_usb_connect$uac1(0x1, 0x81, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0xa92, 0x1020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0xc, 0x20, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x19}, [@selector_unit={0x6, 0x24, 0x5, 0x3, 0x0, 'F'}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x1ff, 0x5, 0x3, 0x40}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x6, 0x9, {0x7, 0x25, 0x1, 0x8, 0x6, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0x7, 0x7, {0x7, 0x25, 0x1, 0xc, 0x4, 0x9}}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) fsetxattr(r4, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla', 0x5) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) socket$inet6_tcp(0xa, 0x1, 0x0) (async) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) (async) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) (async) socket(0xa, 0x3, 0x3a) (async) socket(0xa, 0x3, 0x3a) (async) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async) close(0x3) (async) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r2, 0x0, 0x0) (async) openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) syz_usb_connect$uac1(0x1, 0x81, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0xa92, 0x1020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0xc, 0x20, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x19}, [@selector_unit={0x6, 0x24, 0x5, 0x3, 0x0, 'F'}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x1ff, 0x5, 0x3, 0x40}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x6, 0x9, {0x7, 0x25, 0x1, 0x8, 0x6, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0x7, 0x7, {0x7, 0x25, 0x1, 0xc, 0x4, 0x9}}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) fsetxattr(r4, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla', 0x5) (async) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) (async) executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = syz_usb_connect(0x2, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201410127c0de206a0803003ff0010203010902240001000010000904020202f3bff50009050602000202000a090582bbc0"], 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) syz_usb_disconnect(r5) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregs(0x1a, r8, 0xc, 0x0) r9 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) sendmsg$tipc(r9, &(0x7f0000000b80)={&(0x7f00000003c0)=@name={0x1e, 0x2, 0x2, {{0x43, 0x2}, 0x2}}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000400)="b95f42e614b05fd69197e590452fb4c85962acfe58398c6eb108fa839b02b7b9ea8260dc2781159c889441103d726c9873a26c7e5df6cf7ca8d91038713c3127f09e67c6d7541ebc9f81b9e0ca0cc8d0b8ed321d", 0x54}, {&(0x7f0000000480)="c52b42f02179768c12368a405855a856a644bf1b73324f8f4cc119796c1750aa8396d8d18c38a374251c6d538962dbcb9860ba7eb382a72484ecd3ab2894cb32a8bc658f9f402d27fb1b649699f5960c09cf0bf4a6a59d4b7f3d06da3873ea38a16d7ee71d96093774fd67e7f0bf18b1922ef27334f9e4cc11b758ca0d4735bef483c6661b2ab444", 0x88}, {&(0x7f0000000580)="d092b20f51407f343c0dd3e690d4974cb22c86e518195f5ff18317d335354d025c7d6b8fce2164fc700e1536c124e018f7ac33fce0f8a5b1314dd89f1d8ab8946db24d6d6bc50bb9b70d763c23334ee6805e444a15934e11bef890b2f3cef49af97db4a1de78b9393b0b3210d0c81d506f4517a30ce5d1e1f46ca709997dd234ed0dee749425ca7f8cc124303a58d600177d84124e0af72a2a1e9e9ba1e5d30dcae29a8feaf9f5a46ac35817e87ea0b8f3fa565344c196ae73a6fea137af32462c3c62032d59f27cd8d4b279eb3700d0712cf6e41ccb3b3607cec6f36c9abe4d719ebea653", 0xe5}, {&(0x7f0000000680)}, {&(0x7f00000006c0)="a6af25", 0x3}], 0x5, &(0x7f0000000a80)="335894ce455fb65a4f1c18b621bc797c031022997d7b2666ac31cb6cea2bde0e25384c5798ed69b943de789e088b77a5cfb7f2d1b606f5b514341e9621e745013b0b78871ef13f73126107858da87b976e163ee373283acde369d237f5c240c9a8016f6467b729e4ea4e7704ae5c76a294305e4c75452b7765666e67384245fb842ab74eef934edacca8648a285f3783f5767a9e7db771399b5cd2f2df7e3245477ae2462ec40328c3dbea24db36dc3eff99aed79f383a68910a3414873f8b27d86a0c", 0xc3, 0x48c0}, 0x80) ioctl$VHOST_SET_VRING_BASE(r9, 0x4008af12, &(0x7f0000000380)={0x0, 0x51}) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V4(0xffffffffffffffff, 0x8070587c, &(0x7f00000002c0)) syz_ublk_setup_queues(r0, r7, &(0x7f0000000200)={0x0, 0x145d, 0x20, 0x0, 0xb0, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x20400, 0x8000001, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x20000, 0x2, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaa5f, 0x0, 0x2, 0x2ae, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a09, 0x8, 0x2, 0x821b, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r6, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) executing program 4: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="1800000016005f0214ffff", 0xb) fsopen(&(0x7f0000000080)='ext3\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0001110004600000a60c6eec00be00443cfffe8000000000000000000011000000aaff020000000000000000000000000001", @ANYRES32=r2], 0xfdef) executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40000, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x18}}], 0x1, 0x4000880) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="64010000100013070300000000000000ff010000000000000000000000000001000000000000000000000000ff800001000000000000ffff0000000000000048", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000010000000032000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000027bd7000001000000a000400000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002c0017"], 0x164}}, 0x4000040) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000040)={0x0, &(0x7f0000000540)=[@cpuid={0x64, 0x18, {0x1f}}], 0x18}) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f00000001c0)) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYRES8=r2], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x46055) executing program 4: syz_open_dev$hidraw(0x0, 0x82, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x5, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x7ffe}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) openat$selinux_user(0xffffffffffffff9c, 0x0, 0x2, 0x0) executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x221, 0xfffffffc, 0x25dfdbfe, {{{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x80, 0x2f}, {@in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x4d6, 0x33}, @in6=@local, {0x9, 0x8, 0x0, 0x0, 0xffffffff7fffffff, 0xffffffffffffffed, 0x800}, {0x2, 0xfffffffffffffffd, 0x6, 0xfffbfffffffffffd}, {0x0, 0x0, 0x796}, 0x70bd2c, 0x0, 0x2, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000ff8000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) program did not crash replaying the whole log did not cause a kernel crash single: executing 6 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x221, 0xfffffffc, 0x25dfdbfe, {{{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x80, 0x2f}, {@in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x4d6, 0x33}, @in6=@local, {0x9, 0x8, 0x0, 0x0, 0xffffffff7fffffff, 0xffffffffffffffed, 0x800}, {0x2, 0xfffffffffffffffd, 0x6, 0xfffbfffffffffffd}, {0x0, 0x0, 0x796}, 0x70bd2c, 0x0, 0x2, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000ff8000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$hidraw-timer_create-fcntl$lock-mprotect-timer_settime-mmap-openat-openat$fuse-mount$fuse-read$FUSE-write$FUSE_INIT-syz_fuse_handle_req-openat-openat$selinux_user detailed listing: executing program 0: syz_open_dev$hidraw(0x0, 0x82, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x5, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x7ffe}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) openat$selinux_user(0xffffffffffffff9c, 0x0, 0x2, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range-syz_ublk_setup_io_uring-socket$packet-setsockopt$packet_tx_ring-mmap-munmap-mremap-syz_usb_connect-syz_ublk_add_dev-sendto$packet-syz_usb_disconnect-syz_clone-ptrace-ptrace$setregs-openat$selinux_mls-sendmsg$tipc-ioctl$VHOST_SET_VRING_BASE-openat$tcp_congestion-ioctl$XFS_IOC_FSGEOMETRY_V4-syz_ublk_setup_queues detailed listing: executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = syz_usb_connect(0x2, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201410127c0de206a0803003ff0010203010902240001000010000904020202f3bff50009050602000202000a090582bbc0"], 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) syz_usb_disconnect(r5) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregs(0x1a, r8, 0xc, 0x0) r9 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) sendmsg$tipc(r9, &(0x7f0000000b80)={&(0x7f00000003c0)=@name={0x1e, 0x2, 0x2, {{0x43, 0x2}, 0x2}}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000400)="b95f42e614b05fd69197e590452fb4c85962acfe58398c6eb108fa839b02b7b9ea8260dc2781159c889441103d726c9873a26c7e5df6cf7ca8d91038713c3127f09e67c6d7541ebc9f81b9e0ca0cc8d0b8ed321d", 0x54}, {&(0x7f0000000480)="c52b42f02179768c12368a405855a856a644bf1b73324f8f4cc119796c1750aa8396d8d18c38a374251c6d538962dbcb9860ba7eb382a72484ecd3ab2894cb32a8bc658f9f402d27fb1b649699f5960c09cf0bf4a6a59d4b7f3d06da3873ea38a16d7ee71d96093774fd67e7f0bf18b1922ef27334f9e4cc11b758ca0d4735bef483c6661b2ab444", 0x88}, {&(0x7f0000000580)="d092b20f51407f343c0dd3e690d4974cb22c86e518195f5ff18317d335354d025c7d6b8fce2164fc700e1536c124e018f7ac33fce0f8a5b1314dd89f1d8ab8946db24d6d6bc50bb9b70d763c23334ee6805e444a15934e11bef890b2f3cef49af97db4a1de78b9393b0b3210d0c81d506f4517a30ce5d1e1f46ca709997dd234ed0dee749425ca7f8cc124303a58d600177d84124e0af72a2a1e9e9ba1e5d30dcae29a8feaf9f5a46ac35817e87ea0b8f3fa565344c196ae73a6fea137af32462c3c62032d59f27cd8d4b279eb3700d0712cf6e41ccb3b3607cec6f36c9abe4d719ebea653", 0xe5}, {&(0x7f0000000680)}, {&(0x7f00000006c0)="a6af25", 0x3}], 0x5, &(0x7f0000000a80)="335894ce455fb65a4f1c18b621bc797c031022997d7b2666ac31cb6cea2bde0e25384c5798ed69b943de789e088b77a5cfb7f2d1b606f5b514341e9621e745013b0b78871ef13f73126107858da87b976e163ee373283acde369d237f5c240c9a8016f6467b729e4ea4e7704ae5c76a294305e4c75452b7765666e67384245fb842ab74eef934edacca8648a285f3783f5767a9e7db771399b5cd2f2df7e3245477ae2462ec40328c3dbea24db36dc3eff99aed79f383a68910a3414873f8b27d86a0c", 0xc3, 0x48c0}, 0x80) ioctl$VHOST_SET_VRING_BASE(r9, 0x4008af12, &(0x7f0000000380)={0x0, 0x51}) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V4(0xffffffffffffffff, 0x8070587c, &(0x7f00000002c0)) syz_ublk_setup_queues(r0, r7, &(0x7f0000000200)={0x0, 0x145d, 0x20, 0x0, 0xb0, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x20400, 0x8000001, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x20000, 0x2, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaa5f, 0x0, 0x2, 0x2ae, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a09, 0x8, 0x2, 0x821b, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r6, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-connect$inet6-capset-socket-socket-setsockopt$MRT6_INIT-close-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsmount-openat$cgroup_ro-syz_usb_connect$uac1-fsetxattr-setsockopt$inet6_tcp_TCP_CONGESTION-write$binfmt_script-socket$inet6_tcp-connect$inet6-capset-socket-socket-setsockopt$MRT6_INIT-close-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsmount-openat$cgroup_ro-syz_usb_connect$uac1-fsetxattr-setsockopt$inet6_tcp_TCP_CONGESTION-write$binfmt_script detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) socket(0xa, 0x3, 0x3a) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) close(0x3) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_usb_connect$uac1(0x1, 0x81, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0xa92, 0x1020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0xc, 0x20, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x19}, [@selector_unit={0x6, 0x24, 0x5, 0x3, 0x0, 'F'}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x1ff, 0x5, 0x3, 0x40}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x6, 0x9, {0x7, 0x25, 0x1, 0x8, 0x6, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0x7, 0x7, {0x7, 0x25, 0x1, 0xc, 0x4, 0x9}}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) fsetxattr(r4, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla', 0x5) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) socket$inet6_tcp(0xa, 0x1, 0x0) (async) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) (async) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) (async) socket(0xa, 0x3, 0x3a) (async) socket(0xa, 0x3, 0x3a) (async) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async) close(0x3) (async) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r2, 0x0, 0x0) (async) openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) syz_usb_connect$uac1(0x1, 0x81, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0xa92, 0x1020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0xc, 0x20, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x19}, [@selector_unit={0x6, 0x24, 0x5, 0x3, 0x0, 'F'}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x1ff, 0x5, 0x3, 0x40}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x6, 0x9, {0x7, 0x25, 0x1, 0x8, 0x6, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0x7, 0x7, {0x7, 0x25, 0x1, 0xc, 0x4, 0x9}}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) fsetxattr(r4, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla', 0x5) (async) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) (async) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-openat$ptmx-write$UHID_CREATE-socketpair$unix-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_open_procfs-getdents64-getdents64-sendto$packet-syz_ublk_setup_queues detailed listing: executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$UHID_CREATE(r0, &(0x7f0000003fc0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000002fc0)=""/4096, 0x1000, 0x2, 0x9, 0x9, 0x1, 0x3}}, 0x120) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents64(r7, &(0x7f0000001fc0)=""/4079, 0xfef) getdents64(r7, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r1, r6, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4484, 0x2, 0x401, 0x31c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x284, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe3fc, 0x20, 0x2, 0x40021a, 0x0, r1}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r5, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-openat$ptmx-write$UHID_CREATE-socketpair$unix-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_open_procfs-getdents64-getdents64-sendto$packet-syz_ublk_setup_queues detailed listing: executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$UHID_CREATE(r0, &(0x7f0000003fc0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000002fc0)=""/4096, 0x1000, 0x2, 0x9, 0x9, 0x1, 0x3}}, 0x120) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents64(r7, &(0x7f0000001fc0)=""/4079, 0xfef) getdents64(r7, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r1, r6, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4484, 0x2, 0x401, 0x31c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x284, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe3fc, 0x20, 0x2, 0x40021a, 0x0, r1}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r5, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) program did not crash single: failed to extract reproducer bisect: bisecting 31 programs with base timeout 1m40s testing program (duration=1m47s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 6, 10, 6, 14, 11, 11, 8, 30, 16, 30, 27, 5, 6, 2, 16, 9, 17, 6, 3, 4, 6, 2, 9, 30, 20, 9, 6, 10, 14, 3] detailed listing: executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="1800000016005f0214ffff", 0xb) fsopen(&(0x7f0000000080)='ext3\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0001110004600000a60c6eec00be00443cfffe80000080fe000000000000000000aaff020000000000000000000000000001", @ANYRES32=r2], 0xfdef) executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) setns(0xffffffffffffffff, 0x20000) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000021006574683a73797a6b616c6c657230"], 0x38}}, 0x0) executing program 2: r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1b1c, 0xa1f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xc9, 0x90, 0xa, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0x80, {0x9, 0x21, 0x400, 0xac, 0x1, {0x22, 0x4a2}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x1, 0xf8, 0x1a}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x9, 0xfd, 0x6}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x150, 0x2, 0x7, 0x3, 0xff, 0x7}, 0x40, &(0x7f0000000080)={0x5, 0xf, 0x40, 0x4, [@ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x7, 0xf, 0x5, [0xc00f]}, @ss_container_id={0x14, 0x10, 0x4, 0xf, "40d915e121448433fada151a0e2c235d"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "b206ec4dc5b785bf02b629ae142d7887"}, @ptm_cap={0x3}]}, 0xa, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x3054}}, {0x58, &(0x7f0000000200)=@string={0x58, 0x3, "f2d7200f917b85882c3124cdc8fc20739b85503b6af47d2bbd1f143f59b7959dfe516ca749cfc47c2730fdabb83a686fa42378d9f614496a74ec25827f06e15f1cdef76eeb46646cba4eafd5e3b52a7b315f78d30912"}}, {0x69, &(0x7f0000000280)=@string={0x69, 0x3, "1cce6e9344e7e8c7c7a98d221681de54f2356ba6e69d9321f6f85b62cda6b756302b7c72c18ed2bfd4cfca26aee921759437b75640f6090ccba466a93f0b4ce81b7df54354fe3866e2cb0828938f35c4c93f70a6167773eb42383cef2609684efd9c3e5d424ff3"}}, {0x3, &(0x7f0000000300)=@string={0x3, 0x3, 'I'}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x2467}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x200a}}, {0x98, &(0x7f00000003c0)=@string={0x98, 0x3, "1dfe2556fe17ca0f6508a6a9eecbc17416564cbdcacdb48f3b5da0db64fbd07f31a29c5163620a4859b20185096c178af6d31bc8f656d2d22befcea240d5825fed85446b50e54cabd84938b8bd11e3d685da54bc38ce07ad71dc7f2f3a87c0e663ba8487911a6fb5ae909141fdc414ae14d9d8b5225cb06dc54899c82f43e3c2d1aeb679b8a0a5bfb8b446caaf584dadf3afcf60ed31"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008200122010009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001000)={0x24, &(0x7f0000000ec0)={0x0, 0x5, 0x51, {0x51, 0xe, "5a2728aad70f7cacdb78c31c35fed6f1fec0115247fd60316fd94f0ed2f88701ea1a10f3456d6d0d1dc2a5e378f2e15eb08c95da6d2886682ac6d0e0bd499e7dd55262fa58ffd501b97a3fc7489105"}}, &(0x7f0000000f40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x448}}, &(0x7f0000000f80)={0x0, 0x22, 0x2, {[@local=@item_012={0x0, 0x2, 0x8}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f00000005c0)={0x40, 0x4, 0xf7, {0xf7, 0x9, "a3462caa45d8635afbc224d6c807e9cb881a5786dc2141ad0bccb52cc952618551b18164c4a06759fa692fadf68f4c40d0275ed513b0c95f32ada5d5530f64d411ef3f52bf084cd63f73e1731d78217c1f3dd81b005780aa16569cf0e2bd9ef87e63832c218a05461bb40b3f8bc374ab7bf569503fc21fe82fcb5a47bdab7e87bf56007899474a0bb506a5a9da0815bc0e58922ea5f7505503fae67cbdf73ba31cad28e77a407db5eeb2411c09bbb78add2338e2585e222c5fe1f5f5350a10be4b9482778db2b4994a64e97ece55e1e07cc4ac1f002e652d944f691a7e7bf6e0d0a36a70eeae3a537bc687eac319cb611ed763c0bf"}}, &(0x7f00000006c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x414}}, &(0x7f0000000700)={0x0, 0x22, 0x9, {[@main=@item_012={0x0, 0x0, 0x8}, @main=@item_012={0x2, 0x0, 0x8, "cfec"}, @main=@item_4={0x3, 0x0, 0x9, "6bb2f8de"}]}}, &(0x7f0000000740)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x4a, 0x1, {0x22, 0xfc8}}}}, &(0x7f0000000a00)={0x2c, &(0x7f00000007c0)={0x20, 0xa, 0xea, "53a6d26cfd510b7f921ab0bc2c6c35951407853d213ee99cb1085641e97c49c216cff396588fd8e009c706477c00c18963d9f85fc3ee948991466d8bd81be64ae99ab828cbf5f61a2930b1be23413d3ecf25962158f11209419a7c884db3e6c80bc117f220f90cd2bc0e06b382b5ce90680c3e2905088ddad4896c1a1881d9bdbc59f3ac91839247996c1a06a44783fc971fcc2341380547c4acb4b2a8b37ac14004e78c82d5ae85cf60428ca9eca229abc01e2901a1dba6fce8d20f8fb3e3f0fac094e2e4b2741dca46765fc9a3190ce265649da35e29d3b26d9b3cb108ae626dcda40ef271222cb17f"}, &(0x7f00000008c0)={0x0, 0xa, 0x1}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000940)={0x20, 0x1, 0x68, "7cc8acfb1d3a3472b6282fbbc2c10093c371dc209d93d5eae983b250807b42e626fabef7e9d6b20ef96e034762f707f1867c9170986f596a04c4dabf4b85582b418e18b7c9e0c461f1bcd3628e71e424d5d11695e9ae2e961349cd66cda149057efd41a0fe750146"}, &(0x7f00000009c0)={0x20, 0x3, 0x1, 0x4}}) r2 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) lseek(r2, 0xffffffffffffffff, 0x0) syz_usb_control_io(r0, &(0x7f0000000b80)={0x2c, &(0x7f0000000a40)={0x0, 0xf, 0x28, {0x28, 0xe, "d75895af27f3354493504f7f04628369c09bdda488be06d8413ec5202c71071de0cb46a2d4d2"}}, &(0x7f0000000a80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x860}}, &(0x7f0000000ac0)={0x0, 0xf, 0x27, {0x5, 0xf, 0x27, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x67, 0x8, 0x1, 0xd}, @ss_container_id={0x14, 0x10, 0x4, 0xb, "2d88910ae14031cbc17bb0c886212c7f"}]}}, &(0x7f0000000b00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x1, 0x2, 0xe, "c73098d3", "ad3bdee6"}}, &(0x7f0000000b40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x0, 0x5, 0x2, 0x2, 0xffff, 0x4}}}, &(0x7f0000001040)={0x84, &(0x7f0000000bc0)={0x40, 0x26, 0xae, "9994c7b74a902ad5a29b8845899d43877af3ffdb823de5b5cbb8d920dc202fba6e0d340b154d10e48648ec69bf9381ffa236aa2bca0d3b4c30fd68f0e59077fc096af8383a328e0febe1cacd2597bc0add7d69b4aa3596cd54b3fdf26a6e76df4fb3445bb0f1dcc32dc3dbf454a8d80907bf2b9f6533298827dc7fd04fb3c82500a68220d0eee58bb4d9f9f88020cba0de772130c89b06d3b1f96a2082ec478e3652653dc8ea8d9ff1018c68f12b"}, &(0x7f0000000c80)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000cc0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000d00)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000d40)=ANY=[@ANYBLOB="200083505808100000e001400078"], &(0x7f0000000d80)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000dc0)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000e00)={0x40, 0xb, 0x2, "9887"}, &(0x7f0000000e40)={0x40, 0xf, 0x2, 0xffff}, &(0x7f0000000e80)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000ec0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000f00)={0x40, 0x19, 0x2, '5['}, &(0x7f0000000f40)={0x40, 0x1a, 0x2, 0xa86}, &(0x7f0000000f80)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000fc0)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000001000)={0x40, 0x21, 0x1, 0x35}}) syz_usb_connect$uac1(0x4, 0x85, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x763, 0x2001, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x3, 0x1, 0x2, 0xb8, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xdb, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4a2, 0x26af, 0x97, 0xda}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x81, 0x81, 0x7, {0x7, 0x25, 0x1, 0x4, 0x6, 0xfffb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x23, 0xc, 0x8, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x1f, 0xa0, 0xd6, {0x7, 0x25, 0x1, 0x4, 0x81, 0x7f}}}}}}}}]}}, 0x0) executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) setns(0xffffffffffffffff, 0x20000) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000210000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) executing program 2: syz_open_dev$hidraw(0x0, 0x82, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x5, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x7ffe}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) openat$selinux_user(0xffffffffffffff9c, 0x0, 0x2, 0x0) executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$UHID_CREATE(r0, &(0x7f0000003fc0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000002fc0)=""/4096, 0x1000, 0x2, 0x9, 0x9, 0x1, 0x3}}, 0x120) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents64(r7, &(0x7f0000001fc0)=""/4079, 0xfef) getdents64(r7, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r1, r6, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4484, 0x2, 0x401, 0x31c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x284, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe3fc, 0x20, 0x2, 0x40021a, 0x0, r1}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r5, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) executing program 32: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$UHID_CREATE(r0, &(0x7f0000003fc0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000002fc0)=""/4096, 0x1000, 0x2, 0x9, 0x9, 0x1, 0x3}}, 0x120) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents64(r7, &(0x7f0000001fc0)=""/4079, 0xfef) getdents64(r7, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r1, r6, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4484, 0x2, 0x401, 0x31c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x284, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe3fc, 0x20, 0x2, 0x40021a, 0x0, r1}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r5, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sendmsg$nl_generic(r1, &(0x7f0000001480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001440)={&(0x7f0000000240)={0x11e0, 0x2a, 0x800, 0x70bd27, 0x25dfdbfd, {0x19}, [@nested={0x1c8, 0x138, 0x0, 0x1, [@generic="6dca106b9c91c5dd8bf09c5a11677e5df4576b596537812ec0fa8368e82e9de3a02739a3a9252f724c0df965f93c4dd0eccf8b96b021b02f161df15af664076833545ce2fcb6ef698e824ed65ff507e9e73fd2569f460ebe7f386889714734cd8b8d159a6c491abf000cfb76b89e72ebfd1c7d8786cee2f6734a6636bd3677c3934f267dc0fe059c8c00faefa66476ef2f3cded939bcccb2f8f511718b4f0284dde56eec866662547fa07a32a63418c43467db69025f64b5e214554e0146f238bce10bcc8a67ae175d488eb8b6", @nested={0x4, 0x45}, @generic="255c17df8d0aeffc49cc5c0c404da4c77f176de141e7b3fe363b42ba161edb444fddcb7de28fbebf1c62e7774507c1181c6bd88555b3f48ab5f99acc582ba1eced13f84257d1504562ad2f0ea0d355e32f14ada1963a91d231b949a57dfe6e0d5a9620127fd9ae7b329ffef0d3b1120e1aa13f9ea21f7c436c1d5d0cac69ba14b28d873fb2d7421abbc48bda000ee21fdd88d9a381c15ba2e81fa4a61d76beca07ad04633e86bf397aa44d080469679750bd41795d86b984cdc4d2f7129598bb478339b38ca072aeaf5e43c5b1d2ad62435e2c8f420353", @nested={0x4, 0x119}, @nested={0x4, 0x56}, @typed={0x8, 0x145, 0x0, 0x0, @u32=0x5}, @typed={0x4, 0x14b}, @typed={0x8, 0xcf, 0x0, 0x0, @pid=r2}]}, @nested={0x1004, 0x47, 0x0, 0x1, [@generic="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"]}]}, 0x11e0}, 0x1, 0x0, 0x0, 0x10}, 0x100) read$FUSE(r0, &(0x7f00000071c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r3, {0x7, 0x1f, 0x9, 0x109104, 0x40, 0x0, 0x6, 0x3fffff, 0x0, 0x0, 0x20}}, 0x50) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000140)=ANY=[@ANYRES16=r3], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) executing program 4: getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000)=0x7, &(0x7f0000000040)=0x4) (async) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000000c0)) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000100)) (async) ioctl$TIOCSCTTY(r1, 0x540e, 0x0) ioctl$VT_RELDISP(r1, 0x5605) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r3, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xfffffff8, 0x38}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2a1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x4041}, 0x40) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f0000000300)) (async) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000740)={0x0, 0x0, 0x12, 0x18, 0xee, &(0x7f0000000340)="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"}) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r2) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r6, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000008c0)={'sit0\x00'}) (async) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000940), r2) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x74, r7, 0xc00, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x44000) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r5, 0x8008f511, &(0x7f0000000a80)) (async) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) sendmsg$IPSET_CMD_DEL(r8, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0xa4, 0xa, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x6}, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth1_to_batadv\x00'}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x30, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xe9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x5}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xf0dd}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000850}, 0x4010) (async) ioctl$TIOCSCTTY(r8, 0x540e, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000c80)={'wg0\x00', 0x1000}) (async) lseek(r1, 0x9, 0x4) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d00)={0x12c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa5d}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffc}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe6c6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f7e5358}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffff99}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x8041}, 0x4000) (async) ioctl$TIOCGPKT(r8, 0x80045438, &(0x7f0000000ec0)) (async) syncfs(r8) (async) fcntl$setown(r5, 0x8, 0x0) executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000080)=0x7f, 0x4) sendmmsg$unix(r3, &(0x7f00000bd000), 0x2d, 0x20040040) r4 = dup3(r1, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000006c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x50, 0x0, &(0x7f0000000580)="dc06aee257eb936b906c0453c6a13c5de13061cc016d66d25a801c66c75f28990231c59418e45e569f48f6592cb6e48e4d422904b7790a1f5cc61f8d5baa5f88c4835860233e829b1eaed72b5a5ca610"}) r6 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000280)=[@free_buffer={0x40086303, r6}], 0x0, 0x0, 0x0}) executing program 4: remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x9, 0x40000) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x8) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001000000101008020000007e9a041e633069d19e0517c43a81fc0000000109022400010000a00809040009010300000009218100030122280009058103000408c100"], 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r3, &(0x7f00000003c0)=""/18, 0x12) setsockopt$inet_tcp_int(r2, 0x6, 0x8, &(0x7f0000000000)=0x5, 0x4) syz_usb_control_io$hid(r1, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x2}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r4) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r4) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="0100fdfffffffdffffff0f"], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan1\x00'}) r6 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$ppp(r6, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x19) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r7, 0x1, 0x29, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$packet_int(r7, 0x107, 0xe, &(0x7f0000000040)=0x6, 0x4) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa0}}, 0x14) mknodat(r0, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) capset(&(0x7f0000001440)={0x19980330}, &(0x7f0000001400)={0x0, 0x2}) llistxattr(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c460506020d000000000000000003000600a7060000b8010000380000005e020000040400000400200002000500ff03000234cf51d359f66abf84fcf59d62533a0000000051e5746400040000b000000082000000030000000600000002000000ff07000051e57464050000006600000003000000f70e0000010000000800000000010000"], 0x78) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x3, {[@local=@item_012={0x2, 0x2, 0xa, "8c10"}]}}, 0x0}, 0x0) close(r0) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) r3 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x60, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x2}}}}}]}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f00000003c0)={@val={0xa, 0x8914}, @void, @eth={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "17007e", 0x8, 0x2b, 0xff, @private2={0xfc, 0x2, '\x00', 0x6}, @mcast2, {[@srh={0x33, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}]}}}}}}, 0x42) syz_usb_control_io$uac2(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000180)={0x14, &(0x7f0000000100)={0x20, 0xd, 0x37, {0x37, 0x22, "72a065de14c8067f69c4c564ad1571d82f2f550cb7177ac8144fc86507bbfcc6fbd6ad3cc0dd32eb5a378ab198cf2d12b473a6a716"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001c80)={0x44, &(0x7f0000001a00)={0x40, 0x13, 0xa5, "7ebd22f1cfea0446024dd27c2293e268d0e12223837ddf32aa77184d62264a2a1e1779b83fbc76699361ad656f5af00e9785d7cad05eff73bf6f14f17dd1d4342c1ae5f2ccc2a73c71d225b345dcbb0f50629e9b6855948f986f5951b1155cfc8c0f13df7696908a3c9dc434f7eec9757048df9b49fd2ed85e10184045a777c8c7ed304ddafc0b8582cb57a9013f45679e003e4bbc2af3af95c1abaa510e8c6b2e096eff06"}, &(0x7f0000001ac0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001b00)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001b40)={0x20, 0x80, 0x1c, {0x2, 0x0, 0xfffffffc, 0x4, 0x5, 0x712, 0x4, 0x7fffffff, 0x6, 0xff, 0x7, 0xe819}}, &(0x7f0000001b80)={0x20, 0x85, 0x4, 0x9}, &(0x7f0000001bc0)={0x20, 0x83, 0x2}, &(0x7f0000001c00)={0x20, 0x87, 0x2, 0xfee}, &(0x7f0000001c40)={0x20, 0x89, 0x2}}) r7 = syz_usb_connect(0x4, 0xcad, &(0x7f00000003c0)={{0x12, 0x1, 0x310, 0xb, 0x85, 0x60, 0x8, 0x471, 0x60d, 0x25a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc9b, 0x3, 0x1, 0x7, 0x0, 0x3, "", [{{0x9, 0x4, 0x43, 0x5, 0x9, 0x3e, 0xff, 0x13, 0x86, [@hid_hid={0x9, 0x21, 0x8, 0x3, 0x1, {0x22, 0x756}}], [{{0x9, 0x5, 0x0, 0x0, 0x200, 0xc, 0x0, 0x1b, [@generic={0x97, 0x9, "8fc45a63645e52048fa70b8a1198fb93fdd6224fd7d52ab079a22fdc40f01736a2719f4402341198a5aea0b52c727859be24848f9252b74a0aeab2a58841c5abdb4a38203e13d416526664ea23b0204272930b9697224b516f7c970fa6e0c105ae44bebf7f16dd8c6e4631e4753ebe19b6f22e6133fa38e9e5de0243077bf169270c25dc33b42a462c9f8a7dac0e4dbcff16bf97e3"}]}}, {{0x9, 0x5, 0x8, 0xc, 0x40, 0x5, 0x4, 0x9, [@generic={0x1e, 0xf, "1fd8ba34e904a94ce5efb850d4b7cccc555e75dc399b41926e2f9efc"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x9b, 0x3}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x9, 0x1, 0x8, [@generic={0x4c, 0x3, "1494e013d90814780ea1d904d2299d3641956aa0cfeab5ba09afd8bc3e2da234be42841a5e513982fe6bcc0793baea9dd23ee1e71220771446be19a635c931b0459bdfca590f82925ec4"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x4, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x4ca}]}}, {{0x9, 0x5, 0x6, 0x2, 0x8, 0x6, 0x4, 0x7, [@generic={0x81, 0x30, "317f763ea2cb8658989b4a5a409c8cf25af25080aa2448d1ebddfb4a81db82bcec77a11abf09232dae378bd95a6a7a9bef7c87162badb3836df1c1208a6015a39cd5184cd973966641ce7fd53807029acdccbedc2a45cb7d0e864956c7e91a8a2009b02e221d93d1fbe7ae73573eb911e69c3b0ac507c1e5bb2e14c4c23a35"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xf1, 0x3}]}}, {{0x9, 0x5, 0x80, 0xc, 0x200, 0x9, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x8000}]}}, {{0x9, 0x5, 0x7, 0xc, 0x8, 0x3, 0x4, 0x7, [@generic={0x100, 0x11, "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"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0xee, 0x6, 0x8, [@generic={0xc, 0x10, "5a03dd46cf21689df98f"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x40, 0x2, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x3ff}]}}]}}, {{0x9, 0x4, 0xe5, 0x56, 0xd, 0xff, 0xff, 0xff, 0x8, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "18"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0x6, 0xfb}, [@dmm={0x7, 0x24, 0x14, 0x9, 0x401}]}], [{{0x9, 0x5, 0x7, 0x0, 0x0, 0x2, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x4}]}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0xd, 0xc, 0x1, [@generic={0x72, 0xf, "6cd1e628be964628436525662d4dc0ea4978975ba447aecb8f8573e4e75e00dad01e4f03e7f351ad824fafe69d445313fa98677de1d7f7fe450c3e05d44bf21dd5d7cc0eab82e95a13bc3b1dd24b59965da86022e7bca5a5dca793b7724c350125a8999d52fb47ac59ae3ce6e4f0322b"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x8, 0xf, 0x5, 0x3, [@generic={0x8c, 0x7, "541f7c491a3521b40458f7a01de573db4c6004dfd5a676b47d8539b0dba1c670ed4d4a298cb328d1b93026d623908aff15c1b3725e68cdf850b87e65a264ff97a6b81c41489c57f9065c15e2a38374f1d706afb398e3cc503fd6f9002da0fa00abc3708805fda27655c4e402a44cabc4ff68a5bfdb404fa5db8bcbed2cde5a95bd2eb7ffc51f18c6c3b7"}]}}, {{0x9, 0x5, 0x2, 0x12, 0x8, 0x0, 0x8, 0x43, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0xfffd}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x8, 0x9, 0x9, [@generic={0xdb, 0xf, "7c5372fba81a78e0b2a7e0a43bffc326592e59d645ae5fe79e91f19469dac0eff2c5556803b26164d1462adfff23dee64c2341e5e713c50f4b641631f44bdb48b1377168f8d20df55c46acb33c63311934a5c9f3d6056cb47605dea51542d2dca2606f9a955b3dfa19d9387607752fbcc5fa0f8ca516878c951fa415033b438866e3459ae73d868b90fa746408401c54c5afcdc226d1475d737347030ca12f556c6b54340658c5e45d5f04accc3a4c35d1354f6f7167449b5eece111fedba9edea681b68a86e5d0fef0468caa1627025caa538277ee44c7b8e"}, @generic={0xe, 0x3, "e1efd3dfc326f160c7f1663a"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x20, 0x3, 0x0, 0xfd, [@generic={0xa6, 0x20, "1f7df7c95e7ef6fbf39ed36740073125571b52ec65bbea840e6a41a6cf9b75aeaf7bbfed7e371c9fc03da78401cd09c8e6c18ea77c82989918569ce4789bad7e1ec1a60ef4da4d78d8dc3a760c1895453f614f77b25150d2731d9009567b4283d5e263726287282901510f7b83dc42442ac2c7cb8be48cbfc1fb761790e86ac31a405ef20310caab5006cfb00aa10fd959764ea3008e994a6b9496a044171fdeb39cd351"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x41, 0x1}]}}, {{0x9, 0x5, 0xa, 0x3, 0x20, 0x4, 0x4, 0x5, [@generic={0x55, 0x22, "1c68a2323f8ff0a0ca132f69017c2bb41e4495111d35034932fa04e8979da3993bcbc404eedfc5d3290becb0017e5c0a9bbadf455b93136f75e95b7f8ea23f905b50c85fac894d6a1d2baf45cbb5f5b92d8848"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x200, 0x7, 0x9, 0x2, [@generic={0xe8, 0xa, "61cc0da926383987c09cbaf1b3d89f60d03a716b8aeec036154443e53c4ddd80fc1bd0aa868843c844a8b108292530f5c8a61d272b3d88d617f0fbbdb40cd6bfc9c75ad3bbed4e534e49bd7de7b338e8e4af6b03b05ee20219056c3f60ad677343a586ba730edace6befd552cb1c3f8798edfd7a1cae9355f5699c8ad2c0d9fb3364393404f1d1004f975a4e0dd687ef29cbb6fd54106c7dce16887769bd98f89eabe425a723d913c76180d7815890cae2528573bb993ea046847eb5971775b1ef57fa2d7c9868fb9f06e626acfe2a050f01cc3aed5a36d70de81a5c87c990efab8d78204ae1"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0xf5}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x9, 0x8d, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x8001}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x99}]}}, {{0x9, 0x5, 0xd, 0x3, 0x8, 0xd, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x3}]}}, {{0x9, 0x5, 0xb, 0x1, 0x8, 0x6e, 0x7, 0x1, [@generic={0xbd, 0x2, "3a81295d8549d869e49e27547562e3d5111943ab54dc86919138a50f73a3b36d0c6861f30c005edd0fbe8998c17b74eeafa32527e74d2a83b8d1c81d7f84f98998bb53034a0ae5f6a58974ae79f15705e1890c7c91476246ee4a2f0b600eb5d918814536c429fcd07f9b2e4234794b531dd147c59f88bb05841eee95230e73ca7d968a4fb8d74f7d1e7176667d0bd0c12d94c9002d0e39fe1fba40e716829c8f3b4546f3fe59e6eb69b56c7df43522a6dbe7b9f5da984c4ea3698e"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x3ff, 0xbc, 0x3, 0x6, [@generic={0x43, 0x31, "eabbdfe88e766efa82fb7e73e480982535ebd8974e142e3a71b3d8bf30b0e3df9fc6e5079b42fcd5d0606981025c65c5ba910f353fdd6a5b08a1303e71e341c4b5"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x0, 0x1, 0x8, [@generic={0x72, 0x22, "de84f6f04327d5c270b54ce5cc12d9eef3344526c32305185adfbd78a04bf2a79d3cd7195218378b12a448841bcc8c83efa0f8aef45d219a7b64c0d6650d8d12b49ea8c81d30539d580a91a92e62aeba4efb4b21672d893ed5199ff2fee6076fc813bb76ff581349ffecf52e424c5aaa"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x3}]}}]}}, {{0x9, 0x4, 0x9e, 0x7f, 0xb, 0xee, 0x5e, 0x7a, 0x5, [@hid_hid={0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0xbca}}, @uac_as={[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0xfffb, 0x8, 0x5}]}], [{{0x9, 0x5, 0x3, 0x5, 0x8, 0x3, 0x4, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xc, 0x32}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x2, 0xff, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x5}, @generic={0x49, 0xc, "9b8ce9b6823433db832004c1e1e82cf6d8aac8c3b7b3bc27cf3a98ec519404af533a305805fd8251dafc3cb6dac5901648b30b6f2127102d27eb4775a2ff962b4c232fc749c818"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x7, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x8}]}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x7, 0x3, 0x7, [@generic={0x28, 0xc, "44a06a5c30a07f19260fa597c537de718bf7b3d71e7600984c3cfb2ec7363d400010507ba39b"}, @generic={0x1b, 0x10, "2dadc7ca37e367d431f7e6cb5d58d4ecd085503ac8b73fc68a"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0xf, 0xc, 0x9, [@generic={0xd8, 0x31, "3dbd28286676f790b63fd3590c47babc43ebc5000c2213cd9cad119412357723f5bcc6d103a51e9bbadac0accb08b8eb0b23c0bb06f3230716df7cbbc9c3b930647e0f85c26863d6fe8926d1eee364f5ecb1a5ddb31322c87b1513236b80c31953db2eee7e8a17bebc4e914149651389f822761689c91855ee2979dfdb756f49d930cce7a59b535201689f3269db617bb7ea1a5692b7f723d1b9f7d7852725c27614267521bb76764752a9535336881e466391894b972f75fdc80bc5e279a3cb137c36008f3c82faa3dd1c53c70e7fe6d3d0555e7e6d"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x200, 0x45, 0x10, 0x6, [@generic={0xed, 0x6, "408c148c1a951adb93032957d2dc5534df2eacb2fe748521394a5ad18b8327226ca16166fec8d3f86a9ac58ca8871e67b6e6d7cff63a2ed21c4796e3a225a8c59c45ce3a561b87fc0e85395f461a1b0043b99deb84dabf6b0efde5bc0ebeb0695999dbe35c606766a8281bd3fd4aace12c71d06413fa732857d25fadc69467439d27b7f1049c64cc787506c19378a17994ff88f13f3bfa3d307e263c007d4b1912accfaf1d97fd76833d7de1858ba4bd4b7f52650f6ae0d2f0368991528bcb442c3ff2cb0af390821906a114fe7e5b2ed36dd9ce22851ad0f85c2f7c6a153335ca0947945bdd5721c8f8f4"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0xf, 0x1, 0x5, [@generic={0x4d, 0x21, "41bea8e428d5405a0f87b426db560499a78d184702ddaae53fe2790d372a56dcbeefd9ab68eb96c25a5858f2d9e997b1aa77c389db4cbeb4e03d0c74b7331ff6e048c3de945113986437f7"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x4, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xd, 0xfff}]}}, {{0x9, 0x5, 0xd, 0xc, 0x10, 0xfa, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x8}]}}, {{0x9, 0x5, 0xc, 0x4, 0x3ff, 0x2, 0x0, 0xcb, [@generic={0x18, 0x3, "4a42d36ec02bcf8b254c39d3bdab33552f8ac882006b"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x5, 0x9, 0xcc, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x80, 0x7}]}}]}}]}}]}}, &(0x7f00000014c0)={0xa, &(0x7f0000001080)={0xa, 0x6, 0x10, 0x8, 0xe, 0x10, 0xff, 0x8}, 0xec, &(0x7f0000001d00)={0x5, 0xf, 0xec, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0xf, "1cef51d7e2ab715202dc963f6a48c6e7"}, @generic={0x46, 0x10, 0xa, "c0d7678a442c706112cbe0f9e8e839af3470c910cff2d9da1b7dc3a8092bf891995349fdd6fee1e141e6030c3aaa0b968753f35019b63e50537f7dc8850da069c69098a0546fa69554b38702a43cd96d4134eb1a521dc8ac51e6d49b39b153f6a9129fd9d4ea18903e3d8aa09dbb261358b823458fe2e513ac1c13e809b9de65c7c70de300e636ec7236fcb6513a3f4c63a1078403306b1424fdc97d730091482dec00"/178}, @generic={0x52, 0x10, 0xb, "85e85ce51f00e4e5645109638ea8df425c600067c9c855cb6010bd287f6f413697311d03638b576d24d1a34255ee7e5162ad2db3bcf0d24b9ec31c05e2c3717121e7ba8ee00f081c96a68870f9ea81"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x2, 0x1000}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x5, 0x9, 0x7}, @generic={0x2a, 0x10, 0x1, "7b55b1e7b8e655e5b1a6a54bcd05fdadab09f5b5281e16776617367e516975f11694e2095ff49a"}]}, 0x7, [{0x77, &(0x7f00000011c0)=@string={0xfffffffffffffdb9, 0x3, "f59bb9c3796dcbab5acf702802fa715ee45040095f3a868bcd4c1fbe632350aa73d0fc6adf393ec7d7325282377a9586788590078aace7c8acc681b2cfec5d8a91f970518835698e1330e93c9fb8f25f26b793785a99c6b67ab37ec6bbfafb1402305444f13ffe3e9520159b781aebb5e4dca5bc4f"}}, {0x8, &(0x7f0000001240)=@string={0x8, 0x3, "68af7c3a6f4b"}}, {0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x457}}, {0xa5, &(0x7f0000001300)=@string={0xa5, 0x3, "03fce82a53e873d08bafde0b2894b14d9006c49168c96aa1eefb516c98938194b7bb3bbef06f528214cedf27427c29736706e7d33c0fbf81d1f186dcfcb909bbdf3d12d6e0f93f5f4996748a56e2533338f975d7fd3de7b80844c7dc4b7047836d54e698b26c2026c8805804ebc5d8a13b063c8ad6cab4f12ad884682f8499e1562d1939e4fa34612c94a228a56c72c3c8597e85fa07b26a35da86b927bf4e22f04871"}}, {0xa1, &(0x7f00000013c0)=@string={0xa1, 0x3, "510dad3602f894d11228b3b8f98cf140aab291ce2b7dedc5d8f6094ddc68db1bc2db374624529a320386dab9c3e258191ea7599e1e05f7aa361daaed7c1bfdf51d811f25e464bb8beeba2cb795bec58ef5fefd395e0438a255148ac96be5713127ede900cd6b316d9ee845e2ec378e937e661203d2862ba4573e49a6ce1750254fc0eedf37d0ea9ce4235f9a7d1a506fb94cdc23ab87533a51f2d6481e6a6d"}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x807}}]}) syz_usb_control_io$uac3(r7, &(0x7f0000001680)={0x14, &(0x7f0000001540)={0x40, 0x21, 0xc5, {0xc5, 0x10, "16fb6ae6f9e5f77699184de472f2f9b77c57d694be66f5c8b9b6ef18822bd6affe46bf4bdef186d04860e320bb3932a4221dc5f52f6725e8c1a1b8ba00c1252607723b0cd16383081b1d926c0f0c70f4c73b15777cf9e5b546c3d655186ffbe949a704216e7d08d48cbbf1c2c6796ae6bc0dffe9962c54888e869215947a9c2d75e4bf0a03ebb754a43326ea3dc45ace86c71dbd7985dd2f5c48f65837e7f2058341a53d26c6503adcc6a9ffdfb7088fb39f1bc2db36fa66917bfc31b7a8d02590486b"}}, &(0x7f0000001640)={0x0, 0x3, 0x35, @string={0x35, 0x3, "451c8db6504ce79e53534bd6235b42644eff83004c6c62b7d0d8447723d6a03883e1d08c5a038daa9d9b13b0249aca7c7069cb"}}}, &(0x7f0000001980)={0x44, &(0x7f00000016c0)={0x40, 0x13, 0xde, "a3fa459254da678f5fdb8dd2b06387e571ea84e677f386b073b715c70311e9099698dd3295ab9e3db5e61afb5a9d7257c1ce3cdfd9c5f511e135f4a6ee6fc66e7f362c0e9d54f45d1f7c4a394ab91c8c4de3f9dddd568fde49add3c8e39d20ae359fc7c21af01136ef8631dbec226e33ac11242046605bc113d546e3e3cb8d801d31ae3781063e6586f36ab912b656ed2e2bed4ea98ce64b16f84769f825d6eadc934aeeec08fa1ab83b3a322e667102ccaaf227eca58ffe98007b849df7f9d59ed7a04ecceaac56ff4a0c4ef299cd9085e43a93adfb83044940cf66d418"}, &(0x7f00000017c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000001800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000001840)={0x20, 0x81, 0x2, "3cb1"}, &(0x7f0000001880)={0x20, 0x82, 0x3, "5cd573"}, &(0x7f00000018c0)={0x20, 0x83, 0x1, 'f'}, &(0x7f0000001900)={0x20, 0x84, 0x2, "c1b7"}, &(0x7f0000001940)={0x20, 0x85, 0x3, "d5cf20"}}) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) close(0x3) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) setns(0xffffffffffffffff, 0x20000) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x300}, 0x0) executing program 0: r0 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x3, 0x3}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000380)={0x2e, 0x3, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x300000000000000, 0x0, 0x0, 0x3f, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000040)=@any_dev={0x2, 0x10e, 0x0, 0x0, 0x1000, 0x2, 0xffffffffffffffff, 0x0, 0x2}}}, &(0x7f0000000400)) executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x2) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000580)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000780)={{r1, 0x9, 0x9, 0x8, 0x6b7b, 0x0, 0x3ff, 0x1, 0x8, 0x1, 0x80c3, 0x4, 0x885e, 0xa0, 0x8}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_usb_connect$uac3(0x3, 0x80, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8014, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x20, 0x11, {0x8, 0xb, 0x0, 0x3, 0x1, 0x1, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x9, 0xa, 0x77e}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x4, 0x1, 0x29, {0xa, 0x25, 0x25, 0x40004, 0x5, 0x15}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x8, 0x80, 0x3, {0xa, 0x25, 0x25, 0x1, 0xb}}}}}}}}]}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x9, 0x28, 0xf0000000, 0xfffd, 0xa, 0x9, 0x10, 0x6, 0x7f, 0x42, 0x1, 0x9, 0xe, 0xd, 0xff, 0x9, [0x3, 0x5]}}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000100)=0xac05, 0x4) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendto$inet(r3, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40002041, 0x0) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f00000001c0)=ANY=[@ANYBLOB="12011003000000083512138240000301030040080b000201012006090400000001012000030904010000010220000004ea01012102200009050109200008067f0825010333090a000904020000010220000904020101010220000905820908000900000000000000000300"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="1800000016005f0214ffff", 0xb) fsopen(&(0x7f0000000080)='ext3\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0001110004600000a60c6eec00be00443cfffe8000000000000000000008000000aaff020000000000000000000000000001", @ANYRES32=r2], 0xfdef) executing program 1: mmap$IORING_OFF_SQ_RING(0x10000000000, 0x4, 0x2000008, 0x11, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="2000000076001f0329bd7000fbdbdf2508004700", @ANYRES32, @ANYBLOB="080005"], 0x20}], 0x1, 0x0, 0x0, 0x400c814}, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) close(0x3) (async) close(0x3) socket$packet(0x11, 0x2, 0x300) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af24, &(0x7f00000001c0)) executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40000, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x18}}], 0x1, 0x4000880) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="64010000100013070300000000000000ff01000000000000000000000000000100000000000000000000000000030001000000000000ffff0000000000000048", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000010000000032000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000027bd7000001000000a000400000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002c0017"], 0x164}}, 0x4000040) executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x221, 0xfffffffc, 0x25dfdbfe, {{{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x80, 0x2f}, {@in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x4d6, 0x33}, @in6=@local, {0x9, 0x8, 0x0, 0x0, 0xffffffff7fffffff, 0xffffffffffffffed, 0x800}, {0x2, 0xfffffffffffffffd, 0x6, 0xfffbfffffffffffd}, {0x0, 0x0, 0x796}, 0x70bd2c, 0x0, 0x2, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000003300000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000000)={{0x2, 0x4e25, @empty}, {0x0, @random="714f971f86f8"}, 0xe, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 'lo\x00'}) sendmsg$netlink(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)={0x30, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0xd, 0x2e, 0x0, 0x0, @str='\xd0@:-}-+)\x00'}]}, 0x30}], 0x1, 0x0, 0x0, 0x48006}, 0x0) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) setns(0xffffffffffffffff, 0x20000) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x500}, 0x0) executing program 1: r0 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x3, 0x3}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000380)={0x2e, 0x3, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0xfcffffffffffffff, 0x0, 0x0, 0x3f, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000040)=@any_dev={0x2, 0x10e, 0x0, 0x0, 0x1000, 0x2, 0xffffffffffffffff, 0x0, 0x2}}}, &(0x7f0000000400)) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000180)=[{&(0x7f00000003c0)="89e5ee0c7cdad9fcb47380c988ca", 0xe}, {&(0x7f0000000100)="f4246308553ce0578264d9bd783a3ec8a929c5dc8494e6f8bce8e7d55d60b301f5", 0x21}], 0x2) executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) socket(0xa, 0x3, 0x3a) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) close(0x3) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_usb_connect$uac1(0x1, 0x81, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0xa92, 0x1020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0xc, 0x20, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x19}, [@selector_unit={0x6, 0x24, 0x5, 0x3, 0x0, 'F'}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x1ff, 0x5, 0x3, 0x40}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x6, 0x9, {0x7, 0x25, 0x1, 0x8, 0x6, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0x7, 0x7, {0x7, 0x25, 0x1, 0xc, 0x4, 0x9}}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) fsetxattr(r4, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla', 0x5) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) socket$inet6_tcp(0xa, 0x1, 0x0) (async) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) (async) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) (async) socket(0xa, 0x3, 0x3a) (async) socket(0xa, 0x3, 0x3a) (async) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async) close(0x3) (async) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r2, 0x0, 0x0) (async) openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) syz_usb_connect$uac1(0x1, 0x81, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0xa92, 0x1020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0xc, 0x20, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x19}, [@selector_unit={0x6, 0x24, 0x5, 0x3, 0x0, 'F'}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x1ff, 0x5, 0x3, 0x40}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x6, 0x9, {0x7, 0x25, 0x1, 0x8, 0x6, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0x7, 0x7, {0x7, 0x25, 0x1, 0xc, 0x4, 0x9}}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) fsetxattr(r4, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla', 0x5) (async) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) (async) executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = syz_usb_connect(0x2, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201410127c0de206a0803003ff0010203010902240001000010000904020202f3bff50009050602000202000a090582bbc0"], 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) syz_usb_disconnect(r5) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregs(0x1a, r8, 0xc, 0x0) r9 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) sendmsg$tipc(r9, &(0x7f0000000b80)={&(0x7f00000003c0)=@name={0x1e, 0x2, 0x2, {{0x43, 0x2}, 0x2}}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000400)="b95f42e614b05fd69197e590452fb4c85962acfe58398c6eb108fa839b02b7b9ea8260dc2781159c889441103d726c9873a26c7e5df6cf7ca8d91038713c3127f09e67c6d7541ebc9f81b9e0ca0cc8d0b8ed321d", 0x54}, {&(0x7f0000000480)="c52b42f02179768c12368a405855a856a644bf1b73324f8f4cc119796c1750aa8396d8d18c38a374251c6d538962dbcb9860ba7eb382a72484ecd3ab2894cb32a8bc658f9f402d27fb1b649699f5960c09cf0bf4a6a59d4b7f3d06da3873ea38a16d7ee71d96093774fd67e7f0bf18b1922ef27334f9e4cc11b758ca0d4735bef483c6661b2ab444", 0x88}, {&(0x7f0000000580)="d092b20f51407f343c0dd3e690d4974cb22c86e518195f5ff18317d335354d025c7d6b8fce2164fc700e1536c124e018f7ac33fce0f8a5b1314dd89f1d8ab8946db24d6d6bc50bb9b70d763c23334ee6805e444a15934e11bef890b2f3cef49af97db4a1de78b9393b0b3210d0c81d506f4517a30ce5d1e1f46ca709997dd234ed0dee749425ca7f8cc124303a58d600177d84124e0af72a2a1e9e9ba1e5d30dcae29a8feaf9f5a46ac35817e87ea0b8f3fa565344c196ae73a6fea137af32462c3c62032d59f27cd8d4b279eb3700d0712cf6e41ccb3b3607cec6f36c9abe4d719ebea653", 0xe5}, {&(0x7f0000000680)}, {&(0x7f00000006c0)="a6af25", 0x3}], 0x5, &(0x7f0000000a80)="335894ce455fb65a4f1c18b621bc797c031022997d7b2666ac31cb6cea2bde0e25384c5798ed69b943de789e088b77a5cfb7f2d1b606f5b514341e9621e745013b0b78871ef13f73126107858da87b976e163ee373283acde369d237f5c240c9a8016f6467b729e4ea4e7704ae5c76a294305e4c75452b7765666e67384245fb842ab74eef934edacca8648a285f3783f5767a9e7db771399b5cd2f2df7e3245477ae2462ec40328c3dbea24db36dc3eff99aed79f383a68910a3414873f8b27d86a0c", 0xc3, 0x48c0}, 0x80) ioctl$VHOST_SET_VRING_BASE(r9, 0x4008af12, &(0x7f0000000380)={0x0, 0x51}) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V4(0xffffffffffffffff, 0x8070587c, &(0x7f00000002c0)) syz_ublk_setup_queues(r0, r7, &(0x7f0000000200)={0x0, 0x145d, 0x20, 0x0, 0xb0, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x20400, 0x8000001, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x20000, 0x2, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaa5f, 0x0, 0x2, 0x2ae, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a09, 0x8, 0x2, 0x821b, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r6, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) executing program 4: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="1800000016005f0214ffff", 0xb) fsopen(&(0x7f0000000080)='ext3\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0001110004600000a60c6eec00be00443cfffe8000000000000000000011000000aaff020000000000000000000000000001", @ANYRES32=r2], 0xfdef) executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40000, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x18}}], 0x1, 0x4000880) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="64010000100013070300000000000000ff010000000000000000000000000001000000000000000000000000ff800001000000000000ffff0000000000000048", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000010000000032000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000027bd7000001000000a000400000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002c0017"], 0x164}}, 0x4000040) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000040)={0x0, &(0x7f0000000540)=[@cpuid={0x64, 0x18, {0x1f}}], 0x18}) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f00000001c0)) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYRES8=r2], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x46055) executing program 4: syz_open_dev$hidraw(0x0, 0x82, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x5, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x7ffe}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) openat$selinux_user(0xffffffffffffff9c, 0x0, 0x2, 0x0) executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x221, 0xfffffffc, 0x25dfdbfe, {{{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x80, 0x2f}, {@in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x4d6, 0x33}, @in6=@local, {0x9, 0x8, 0x0, 0x0, 0xffffffff7fffffff, 0xffffffffffffffed, 0x800}, {0x2, 0xfffffffffffffffd, 0x6, 0xfffbfffffffffffd}, {0x0, 0x0, 0x796}, 0x70bd2c, 0x0, 0x2, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000ff8000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) program did not crash replaying the whole log did not cause a kernel crash single: executing 6 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x221, 0xfffffffc, 0x25dfdbfe, {{{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x80, 0x2f}, {@in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x4d6, 0x33}, @in6=@local, {0x9, 0x8, 0x0, 0x0, 0xffffffff7fffffff, 0xffffffffffffffed, 0x800}, {0x2, 0xfffffffffffffffd, 0x6, 0xfffbfffffffffffd}, {0x0, 0x0, 0x796}, 0x70bd2c, 0x0, 0x2, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000ff8000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$hidraw-timer_create-fcntl$lock-mprotect-timer_settime-mmap-openat-openat$fuse-mount$fuse-read$FUSE-write$FUSE_INIT-syz_fuse_handle_req-openat-openat$selinux_user detailed listing: executing program 0: syz_open_dev$hidraw(0x0, 0x82, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x5, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x7ffe}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) openat$selinux_user(0xffffffffffffff9c, 0x0, 0x2, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range-syz_ublk_setup_io_uring-socket$packet-setsockopt$packet_tx_ring-mmap-munmap-mremap-syz_usb_connect-syz_ublk_add_dev-sendto$packet-syz_usb_disconnect-syz_clone-ptrace-ptrace$setregs-openat$selinux_mls-sendmsg$tipc-ioctl$VHOST_SET_VRING_BASE-openat$tcp_congestion-ioctl$XFS_IOC_FSGEOMETRY_V4-syz_ublk_setup_queues detailed listing: executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = syz_usb_connect(0x2, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201410127c0de206a0803003ff0010203010902240001000010000904020202f3bff50009050602000202000a090582bbc0"], 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) syz_usb_disconnect(r5) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregs(0x1a, r8, 0xc, 0x0) r9 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) sendmsg$tipc(r9, &(0x7f0000000b80)={&(0x7f00000003c0)=@name={0x1e, 0x2, 0x2, {{0x43, 0x2}, 0x2}}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000400)="b95f42e614b05fd69197e590452fb4c85962acfe58398c6eb108fa839b02b7b9ea8260dc2781159c889441103d726c9873a26c7e5df6cf7ca8d91038713c3127f09e67c6d7541ebc9f81b9e0ca0cc8d0b8ed321d", 0x54}, {&(0x7f0000000480)="c52b42f02179768c12368a405855a856a644bf1b73324f8f4cc119796c1750aa8396d8d18c38a374251c6d538962dbcb9860ba7eb382a72484ecd3ab2894cb32a8bc658f9f402d27fb1b649699f5960c09cf0bf4a6a59d4b7f3d06da3873ea38a16d7ee71d96093774fd67e7f0bf18b1922ef27334f9e4cc11b758ca0d4735bef483c6661b2ab444", 0x88}, {&(0x7f0000000580)="d092b20f51407f343c0dd3e690d4974cb22c86e518195f5ff18317d335354d025c7d6b8fce2164fc700e1536c124e018f7ac33fce0f8a5b1314dd89f1d8ab8946db24d6d6bc50bb9b70d763c23334ee6805e444a15934e11bef890b2f3cef49af97db4a1de78b9393b0b3210d0c81d506f4517a30ce5d1e1f46ca709997dd234ed0dee749425ca7f8cc124303a58d600177d84124e0af72a2a1e9e9ba1e5d30dcae29a8feaf9f5a46ac35817e87ea0b8f3fa565344c196ae73a6fea137af32462c3c62032d59f27cd8d4b279eb3700d0712cf6e41ccb3b3607cec6f36c9abe4d719ebea653", 0xe5}, {&(0x7f0000000680)}, {&(0x7f00000006c0)="a6af25", 0x3}], 0x5, &(0x7f0000000a80)="335894ce455fb65a4f1c18b621bc797c031022997d7b2666ac31cb6cea2bde0e25384c5798ed69b943de789e088b77a5cfb7f2d1b606f5b514341e9621e745013b0b78871ef13f73126107858da87b976e163ee373283acde369d237f5c240c9a8016f6467b729e4ea4e7704ae5c76a294305e4c75452b7765666e67384245fb842ab74eef934edacca8648a285f3783f5767a9e7db771399b5cd2f2df7e3245477ae2462ec40328c3dbea24db36dc3eff99aed79f383a68910a3414873f8b27d86a0c", 0xc3, 0x48c0}, 0x80) ioctl$VHOST_SET_VRING_BASE(r9, 0x4008af12, &(0x7f0000000380)={0x0, 0x51}) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V4(0xffffffffffffffff, 0x8070587c, &(0x7f00000002c0)) syz_ublk_setup_queues(r0, r7, &(0x7f0000000200)={0x0, 0x145d, 0x20, 0x0, 0xb0, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x20400, 0x8000001, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x20000, 0x2, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaa5f, 0x0, 0x2, 0x2ae, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a09, 0x8, 0x2, 0x821b, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r6, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) program crashed: lost connection to test machine suppressed program crash: lost connection to test machine testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-connect$inet6-capset-socket-socket-setsockopt$MRT6_INIT-close-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsmount-openat$cgroup_ro-syz_usb_connect$uac1-fsetxattr-setsockopt$inet6_tcp_TCP_CONGESTION-write$binfmt_script-socket$inet6_tcp-connect$inet6-capset-socket-socket-setsockopt$MRT6_INIT-close-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsmount-openat$cgroup_ro-syz_usb_connect$uac1-fsetxattr-setsockopt$inet6_tcp_TCP_CONGESTION-write$binfmt_script detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) socket(0xa, 0x3, 0x3a) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) close(0x3) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_usb_connect$uac1(0x1, 0x81, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0xa92, 0x1020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0xc, 0x20, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x19}, [@selector_unit={0x6, 0x24, 0x5, 0x3, 0x0, 'F'}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x1ff, 0x5, 0x3, 0x40}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x6, 0x9, {0x7, 0x25, 0x1, 0x8, 0x6, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0x7, 0x7, {0x7, 0x25, 0x1, 0xc, 0x4, 0x9}}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) fsetxattr(r4, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla', 0x5) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) socket$inet6_tcp(0xa, 0x1, 0x0) (async) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) (async) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) (async) socket(0xa, 0x3, 0x3a) (async) socket(0xa, 0x3, 0x3a) (async) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async) close(0x3) (async) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r2, 0x0, 0x0) (async) openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) syz_usb_connect$uac1(0x1, 0x81, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0xa92, 0x1020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0xc, 0x20, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x19}, [@selector_unit={0x6, 0x24, 0x5, 0x3, 0x0, 'F'}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x1ff, 0x5, 0x3, 0x40}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x6, 0x9, {0x7, 0x25, 0x1, 0x8, 0x6, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0x7, 0x7, {0x7, 0x25, 0x1, 0xc, 0x4, 0x9}}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) fsetxattr(r4, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla', 0x5) (async) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) (async) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-openat$ptmx-write$UHID_CREATE-socketpair$unix-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_open_procfs-getdents64-getdents64-sendto$packet-syz_ublk_setup_queues detailed listing: executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$UHID_CREATE(r0, &(0x7f0000003fc0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000002fc0)=""/4096, 0x1000, 0x2, 0x9, 0x9, 0x1, 0x3}}, 0x120) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents64(r7, &(0x7f0000001fc0)=""/4079, 0xfef) getdents64(r7, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r1, r6, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4484, 0x2, 0x401, 0x31c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x284, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe3fc, 0x20, 0x2, 0x40021a, 0x0, r1}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r5, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) program crashed: INFO: task hung in uhid_char_release single: successfully extracted reproducer found reproducer with 11 syscalls minimizing guilty program testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-openat$ptmx-write$UHID_CREATE-socketpair$unix-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_open_procfs-getdents64-getdents64-sendto$packet detailed listing: executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$UHID_CREATE(r0, &(0x7f0000003fc0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000002fc0)=""/4096, 0x1000, 0x2, 0x9, 0x9, 0x1, 0x3}}, 0x120) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents64(r4, &(0x7f0000001fc0)=""/4079, 0xfef) getdents64(r4, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) program crashed: INFO: task hung in uhid_char_release testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-openat$ptmx-write$UHID_CREATE-socketpair$unix-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_open_procfs-getdents64-getdents64 detailed listing: executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$UHID_CREATE(r0, &(0x7f0000003fc0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000002fc0)=""/4096, 0x1000, 0x2, 0x9, 0x9, 0x1, 0x3}}, 0x120) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents64(r4, &(0x7f0000001fc0)=""/4079, 0xfef) getdents64(r4, 0x0, 0x0) program crashed: INFO: task hung in uhid_char_release testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-openat$ptmx-write$UHID_CREATE-socketpair$unix-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_open_procfs-getdents64 detailed listing: executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$UHID_CREATE(r0, &(0x7f0000003fc0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000002fc0)=""/4096, 0x1000, 0x2, 0x9, 0x9, 0x1, 0x3}}, 0x120) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents64(r4, &(0x7f0000001fc0)=""/4079, 0xfef) program crashed: INFO: task hung in uhid_char_release testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-openat$ptmx-write$UHID_CREATE-socketpair$unix-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_open_procfs detailed listing: executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$UHID_CREATE(r0, &(0x7f0000003fc0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000002fc0)=""/4096, 0x1000, 0x2, 0x9, 0x9, 0x1, 0x3}}, 0x120) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)) syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') program crashed: INFO: task hung in uhid_char_release testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-openat$ptmx-write$UHID_CREATE-socketpair$unix-syz_ublk_setup_io_uring-syz_ublk_add_dev detailed listing: executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$UHID_CREATE(r0, &(0x7f0000003fc0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000002fc0)=""/4096, 0x1000, 0x2, 0x9, 0x9, 0x1, 0x3}}, 0x120) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)) program crashed: INFO: task hung in uhid_char_release testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-openat$ptmx-write$UHID_CREATE-socketpair$unix-syz_ublk_setup_io_uring detailed listing: executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$UHID_CREATE(r0, &(0x7f0000003fc0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000002fc0)=""/4096, 0x1000, 0x2, 0x9, 0x9, 0x1, 0x3}}, 0x120) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) program crashed: INFO: task hung in uhid_char_release testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-openat$ptmx-write$UHID_CREATE-socketpair$unix detailed listing: executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$UHID_CREATE(r0, &(0x7f0000003fc0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000002fc0)=""/4096, 0x1000, 0x2, 0x9, 0x9, 0x1, 0x3}}, 0x120) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) program crashed: INFO: task hung in uhid_char_release testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-openat$ptmx-write$UHID_CREATE detailed listing: executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$UHID_CREATE(r0, &(0x7f0000003fc0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000002fc0)=""/4096, 0x1000, 0x2, 0x9, 0x9, 0x1, 0x3}}, 0x120) program crashed: INFO: task hung in uhid_char_release testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-openat$ptmx detailed listing: executing program 0: openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-write$UHID_CREATE detailed listing: executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000003fc0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000002fc0)=""/4096, 0x1000, 0x2, 0x9, 0x9, 0x1, 0x3}}, 0x120) program crashed: INFO: task hung in uhid_char_release testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): write$UHID_CREATE detailed listing: executing program 0: write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000003fc0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000002fc0)=""/4096, 0x1000, 0x2, 0x9, 0x9, 0x1, 0x3}}, 0x120) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-write$UHID_CREATE detailed listing: executing program 0: r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000003fc0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000002fc0)=""/4096, 0x1000, 0x2, 0x9, 0x9, 0x1, 0x3}}, 0x120) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-write$UHID_CREATE detailed listing: executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r0, 0x0, 0x0) VM was preempted during syz execution: failed to run command in VM: instance is preempted, retrying program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-write$UHID_CREATE detailed listing: executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000003fc0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x0, 0x2, 0x9, 0x9, 0x1, 0x3}}, 0x120) program did not crash extracting C reproducer testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-write$UHID_CREATE program crashed: no output from test machine a never seen crash title: no output from test machine, ignore simplifying guilty program options testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-write$UHID_CREATE detailed listing: executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000003fc0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000002fc0)=""/4096, 0x1000, 0x2, 0x9, 0x9, 0x1, 0x3}}, 0x120) program crashed: INFO: task hung in uhid_char_release extracting C reproducer testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-write$UHID_CREATE program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-write$UHID_CREATE detailed listing: executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000003fc0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000002fc0)=""/4096, 0x1000, 0x2, 0x9, 0x9, 0x1, 0x3}}, 0x120) program crashed: INFO: task hung in uhid_char_release extracting C reproducer testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-write$UHID_CREATE program did not crash testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-write$UHID_CREATE detailed listing: executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000003fc0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000002fc0)=""/4096, 0x1000, 0x2, 0x9, 0x9, 0x1, 0x3}}, 0x120) program crashed: INFO: task hung in uhid_char_release validation run: crashed=true testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-write$UHID_CREATE detailed listing: executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000003fc0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000002fc0)=""/4096, 0x1000, 0x2, 0x9, 0x9, 0x1, 0x3}}, 0x120) program crashed: INFO: task hung in uhid_char_release validation run: crashed=true testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-write$UHID_CREATE detailed listing: executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000003fc0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000002fc0)=""/4096, 0x1000, 0x2, 0x9, 0x9, 0x1, 0x3}}, 0x120) program crashed: INFO: task hung in uhid_char_release validation run: crashed=true reproducing took 2h13m6.547769671s repro crashed as (corrupted=false): INFO: task syz.4.21:401 blocked for more than 122 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.4.21 state:D stack:0 pid:401 tgid:401 ppid:394 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:6052 [inline] __schedule+0x1496/0x20b0 kernel/sched/core.c:7865 __schedule_loop kernel/sched/core.c:7942 [inline] schedule+0xc5/0x240 kernel/sched/core.c:7957 schedule_timeout+0xc7/0x3b0 kernel/time/timer.c:2596 do_wait_for_common kernel/sched/completion.c:95 [inline] __wait_for_common kernel/sched/completion.c:116 [inline] wait_for_common+0x368/0x650 kernel/sched/completion.c:127 wait_for_completion+0x1c/0x40 kernel/sched/completion.c:148 __flush_work+0x6a8/0xaa0 kernel/workqueue.c:4290 __cancel_work_sync kernel/workqueue.c:4411 [inline] cancel_work_sync+0xac/0xe0 kernel/workqueue.c:4448 uhid_dev_destroy drivers/hid/uhid.c:584 [inline] uhid_char_release+0xa7/0x600 drivers/hid/uhid.c:662 __fput+0x208/0xa30 fs/file_table.c:447 ____fput+0x20/0x30 fs/file_table.c:475 task_work_run+0x1e8/0x260 kernel/task_work.c:246 resume_user_mode_work+0x35/0x50 include/linux/resume_user_mode.h:50 exit_to_user_mode_loop kernel/entry/common.c:114 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x63/0xb0 kernel/entry/common.c:218 do_syscall_64+0x63/0xf0 arch/x86/entry/common.c:84 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7ff91ab9de59 RSP: 002b:00007fffad764e18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 RAX: 0000000000000000 RBX: 00007fffad764f00 RCX: 00007ff91ab9de59 RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 RBP: 000000000002aa14 R08: 0000000000000001 R09: 0000000000000000 R10: 0000001b2c920000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ff91ae25fac R14: 00007ff91ae25fa8 R15: 00007ff91ae25fa0 NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 c9311b6cb369b61e24bd82353f907fc301b53255 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 Call Trace: __dump_stack+0x21/0x30 lib/dump_stack.c:94 dump_stack_lvl+0x140/0x1c0 lib/dump_stack.c:120 dump_stack+0x19/0x20 lib/dump_stack.c:129 nmi_cpu_backtrace+0x2ba/0x2d0 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x142/0x2c0 lib/nmi_backtrace.c:62 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:41 trigger_all_cpu_backtrace include/linux/nmi.h:158 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:267 [inline] watchdog+0xe45/0xf90 kernel/hung_task.c:423 kthread+0x2c7/0x360 kernel/kthread.c:389 ret_from_fork+0x67/0xa0 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 11 Comm: kworker/0:1 Not tainted syzkaller #0 c9311b6cb369b61e24bd82353f907fc301b53255 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 Workqueue: events uhid_device_add_worker RIP: 0010:io_serial_out+0x85/0xd0 drivers/tty/serial/8250/8250_port.c:413 Code: fe 44 89 e1 41 d3 e6 49 83 c7 08 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 54 46 bd fe 45 03 37 89 d8 44 89 f2 ee <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 44 89 e1 80 e1 07 RSP: 0018:ffffc900000b6e48 EFLAGS: 00000006 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 00000000000003f9 RSI: 0000000000000000 RDI: 0000000000000020 RBP: ffffc900000b6e70 R08: 0000000000000003 R09: 0000000000000004 R10: 0000000000000000 R11: ffffffff8322dc60 R12: 0000000000000000 R13: dffffc0000000000 R14: 00000000000003f9 R15: ffffffff88c38488 FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005555695974e8 CR3: 000000010cf6a000 CR4: 00000000003526b0 Call Trace: serial_out drivers/tty/serial/8250/8250.h:142 [inline] serial8250_clear_IER drivers/tty/serial/8250/8250_port.c:-1 [inline] serial8250_console_write+0x3a5/0x2150 drivers/tty/serial/8250/8250_port.c:3392 univ8250_console_write+0x71/0xb0 drivers/tty/serial/8250/8250_core.c:396 console_emit_next_record kernel/printk/printk.c:3151 [inline] console_flush_all+0x5e6/0xab0 kernel/printk/printk.c:3239 __console_flush_and_unlock kernel/printk/printk.c:3298 [inline] console_unlock+0xf8/0x2c0 kernel/printk/printk.c:3338 vprintk_emit+0x282/0x650 kernel/printk/printk.c:2462 dev_vprintk_emit+0x33c/0x400 drivers/base/core.c:4962 dev_printk_emit+0xef/0x150 drivers/base/core.c:4973 __dev_printk+0x17f/0x1b0 drivers/base/core.c:4985 _dev_warn+0x11f/0x180 drivers/base/core.c:5029 hid_parser_main+0x84d/0xde0 drivers/hid/hid-core.c:667 hid_open_report+0x87f/0x1120 drivers/hid/hid-core.c:1313 hid_parse include/linux/hid.h:1139 [inline] hid_generic_probe+0x42/0x90 drivers/hid/hid-generic.c:66 __hid_device_probe drivers/hid/hid-core.c:2753 [inline] hid_device_probe+0x2d1/0x5f0 drivers/hid/hid-core.c:2790 call_driver_probe drivers/base/dd.c:-1 [inline] really_probe+0x2e1/0x8b0 drivers/base/dd.c:657 __driver_probe_device+0x193/0x280 drivers/base/dd.c:799 driver_probe_device+0x54/0x3f0 drivers/base/dd.c:829 __device_attach_driver+0x2f1/0x4b0 drivers/base/dd.c:957 bus_for_each_drv+0x264/0x300 drivers/base/bus.c:459 __device_attach+0x2c4/0x3c0 drivers/base/dd.c:1029 device_initial_probe+0x1e/0x30 drivers/base/dd.c:1078 bus_probe_device+0x18b/0x270 drivers/base/bus.c:534 device_add+0x7fd/0xbf0 drivers/base/core.c:3692 hid_add_device+0x3c4/0x5a0 drivers/hid/hid-core.c:2936 uhid_device_add_worker+0x49/0xf0 drivers/hid/uhid.c:73 process_one_work kernel/workqueue.c:3273 [inline] process_scheduled_works+0x7f7/0x1060 kernel/workqueue.c:3354 worker_thread+0xc99/0x13f0 kernel/workqueue.c:3435 kthread+0x2c7/0x360 kernel/kthread.c:389 ret_from_fork+0x67/0xa0 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 final repro crashed as (corrupted=false): INFO: task syz.4.21:401 blocked for more than 122 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.4.21 state:D stack:0 pid:401 tgid:401 ppid:394 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:6052 [inline] __schedule+0x1496/0x20b0 kernel/sched/core.c:7865 __schedule_loop kernel/sched/core.c:7942 [inline] schedule+0xc5/0x240 kernel/sched/core.c:7957 schedule_timeout+0xc7/0x3b0 kernel/time/timer.c:2596 do_wait_for_common kernel/sched/completion.c:95 [inline] __wait_for_common kernel/sched/completion.c:116 [inline] wait_for_common+0x368/0x650 kernel/sched/completion.c:127 wait_for_completion+0x1c/0x40 kernel/sched/completion.c:148 __flush_work+0x6a8/0xaa0 kernel/workqueue.c:4290 __cancel_work_sync kernel/workqueue.c:4411 [inline] cancel_work_sync+0xac/0xe0 kernel/workqueue.c:4448 uhid_dev_destroy drivers/hid/uhid.c:584 [inline] uhid_char_release+0xa7/0x600 drivers/hid/uhid.c:662 __fput+0x208/0xa30 fs/file_table.c:447 ____fput+0x20/0x30 fs/file_table.c:475 task_work_run+0x1e8/0x260 kernel/task_work.c:246 resume_user_mode_work+0x35/0x50 include/linux/resume_user_mode.h:50 exit_to_user_mode_loop kernel/entry/common.c:114 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x63/0xb0 kernel/entry/common.c:218 do_syscall_64+0x63/0xf0 arch/x86/entry/common.c:84 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7ff91ab9de59 RSP: 002b:00007fffad764e18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 RAX: 0000000000000000 RBX: 00007fffad764f00 RCX: 00007ff91ab9de59 RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 RBP: 000000000002aa14 R08: 0000000000000001 R09: 0000000000000000 R10: 0000001b2c920000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ff91ae25fac R14: 00007ff91ae25fa8 R15: 00007ff91ae25fa0 NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 c9311b6cb369b61e24bd82353f907fc301b53255 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 Call Trace: __dump_stack+0x21/0x30 lib/dump_stack.c:94 dump_stack_lvl+0x140/0x1c0 lib/dump_stack.c:120 dump_stack+0x19/0x20 lib/dump_stack.c:129 nmi_cpu_backtrace+0x2ba/0x2d0 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x142/0x2c0 lib/nmi_backtrace.c:62 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:41 trigger_all_cpu_backtrace include/linux/nmi.h:158 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:267 [inline] watchdog+0xe45/0xf90 kernel/hung_task.c:423 kthread+0x2c7/0x360 kernel/kthread.c:389 ret_from_fork+0x67/0xa0 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 11 Comm: kworker/0:1 Not tainted syzkaller #0 c9311b6cb369b61e24bd82353f907fc301b53255 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 Workqueue: events uhid_device_add_worker RIP: 0010:io_serial_out+0x85/0xd0 drivers/tty/serial/8250/8250_port.c:413 Code: fe 44 89 e1 41 d3 e6 49 83 c7 08 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 54 46 bd fe 45 03 37 89 d8 44 89 f2 ee <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 44 89 e1 80 e1 07 RSP: 0018:ffffc900000b6e48 EFLAGS: 00000006 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 00000000000003f9 RSI: 0000000000000000 RDI: 0000000000000020 RBP: ffffc900000b6e70 R08: 0000000000000003 R09: 0000000000000004 R10: 0000000000000000 R11: ffffffff8322dc60 R12: 0000000000000000 R13: dffffc0000000000 R14: 00000000000003f9 R15: ffffffff88c38488 FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005555695974e8 CR3: 000000010cf6a000 CR4: 00000000003526b0 Call Trace: serial_out drivers/tty/serial/8250/8250.h:142 [inline] serial8250_clear_IER drivers/tty/serial/8250/8250_port.c:-1 [inline] serial8250_console_write+0x3a5/0x2150 drivers/tty/serial/8250/8250_port.c:3392 univ8250_console_write+0x71/0xb0 drivers/tty/serial/8250/8250_core.c:396 console_emit_next_record kernel/printk/printk.c:3151 [inline] console_flush_all+0x5e6/0xab0 kernel/printk/printk.c:3239 __console_flush_and_unlock kernel/printk/printk.c:3298 [inline] console_unlock+0xf8/0x2c0 kernel/printk/printk.c:3338 vprintk_emit+0x282/0x650 kernel/printk/printk.c:2462 dev_vprintk_emit+0x33c/0x400 drivers/base/core.c:4962 dev_printk_emit+0xef/0x150 drivers/base/core.c:4973 __dev_printk+0x17f/0x1b0 drivers/base/core.c:4985 _dev_warn+0x11f/0x180 drivers/base/core.c:5029 hid_parser_main+0x84d/0xde0 drivers/hid/hid-core.c:667 hid_open_report+0x87f/0x1120 drivers/hid/hid-core.c:1313 hid_parse include/linux/hid.h:1139 [inline] hid_generic_probe+0x42/0x90 drivers/hid/hid-generic.c:66 __hid_device_probe drivers/hid/hid-core.c:2753 [inline] hid_device_probe+0x2d1/0x5f0 drivers/hid/hid-core.c:2790 call_driver_probe drivers/base/dd.c:-1 [inline] really_probe+0x2e1/0x8b0 drivers/base/dd.c:657 __driver_probe_device+0x193/0x280 drivers/base/dd.c:799 driver_probe_device+0x54/0x3f0 drivers/base/dd.c:829 __device_attach_driver+0x2f1/0x4b0 drivers/base/dd.c:957 bus_for_each_drv+0x264/0x300 drivers/base/bus.c:459 __device_attach+0x2c4/0x3c0 drivers/base/dd.c:1029 device_initial_probe+0x1e/0x30 drivers/base/dd.c:1078 bus_probe_device+0x18b/0x270 drivers/base/bus.c:534 device_add+0x7fd/0xbf0 drivers/base/core.c:3692 hid_add_device+0x3c4/0x5a0 drivers/hid/hid-core.c:2936 uhid_device_add_worker+0x49/0xf0 drivers/hid/uhid.c:73 process_one_work kernel/workqueue.c:3273 [inline] process_scheduled_works+0x7f7/0x1060 kernel/workqueue.c:3354 worker_thread+0xc99/0x13f0 kernel/workqueue.c:3435 kthread+0x2c7/0x360 kernel/kthread.c:389 ret_from_fork+0x67/0xa0 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244