Extracting prog: 1h7m49.782305188s Minimizing prog: 12m52.396858223s Simplifying prog options: 0s Extracting C: 24.373506375s Simplifying C: 13m42.293030814s extracting reproducer from 45 programs testing a last program of every proc single: executing 10 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_uring_setup-open-socket$nl_route-socket$netlink-socket$nl_route-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsmount-bpf$MAP_CREATE-socket$inet_udp-bpf$MAP_UPDATE_ELEM-bpf$PROG_LOAD-socket$inet_tcp-ioctl$sock_SIOCGIFINDEX-bpf$BPF_LINK_CREATE_XDP-syz_emit_ethernet detailed listing: executing program 0: io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20002, 0x2}) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xb3) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0xe) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r2, 0x1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r5, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x5c8, &(0x7f0000000880)=ANY=[], 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vimc2-ftruncate-socket$kcm-socket$phonet_pipe-ioctl$sock_SIOCGIFINDEX_80211-ioctl$KVM_GET_STATS_FD_vm-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_FRAME-getpgid-ioctl$UBLK_U_CMD_START_DEV-kcmp$KCMP_EPOLL_TFD-ioctl$UFFDIO_WAKE-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$BPF_GET_MAP_INFO-bpf$BPF_GET_BTF_INFO-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-getsockopt$PNPIPE_INITSTATE-bpf$PROG_BIND_MAP-mount$bind-ioctl$EXT4_IOC_MIGRATE-ioctl$IOMMU_HWPT_ALLOC$NONE-ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING-ioctl$UFFDIO_WAKE-openat$autofs-bpf$OBJ_GET_MAP-ioctl$VIDIOC_ENUM_FRAMESIZES-sendmsg$NL80211_CMD_CONTROL_PORT_FRAME-ioctl$XFS_IOC_OPEN_BY_HANDLE detailed listing: executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ftruncate(r0, 0x3) socket$kcm(0x29, 0x7, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb8, r4, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x10, 0x200, 0x674, 0x1, 0x5]}, @NL80211_ATTR_FRAME={0x22, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x4f40}, @broadcast, @device_b, @random="b599da3aa296", {0x0, 0x3}, @value=@ver_80211n={0x0, 0x6, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x1, @void}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x122c}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x36}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x73, 0x3, 0xb]}, @NL80211_ATTR_FRAME={0x22, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x1}, @device_a, @device_b, @random="ee9c44437c58", {0x9, 0x2}, @value=@ver_80211n={0x0, 0x7, 0x2, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1}}, 0x16, @void}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9a5}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40080}, 0x1) r5 = getpgid(0x0) ioctl$UBLK_U_CMD_START_DEV(r3, 0xc0207506, &(0x7f0000000240)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r0, &(0x7f00000002c0)={r3, r3, 0xcdfe}) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000300)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r3}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r3, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={r3, 0x20, &(0x7f00000007c0)={&(0x7f00000006c0)=""/134, 0x86, 0x0, &(0x7f0000000780)=""/2, 0x2}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xe, 0x1c, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x29b, 0x0, 0x0, 0x0, 0x42c}, [@printk={@llx}, @call={0x85, 0x0, 0x0, 0x69}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x2}, @exit, @jmp={0x5, 0x0, 0x4, 0x2, 0x9, 0xffffffffffffffe0, 0x1}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000500)='syzkaller\x00', 0x5, 0x40, &(0x7f0000000540)=""/64, 0x41000, 0x4, '\x00', r8, @fallback=0x1e, r3, 0x8, &(0x7f0000000640)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0xb, 0x4}, 0x10, r9, 0xffffffffffffffff, 0x8, &(0x7f0000000940)=[r3, r1, r3, r10, r11, r3], &(0x7f0000000980)=[{0x1, 0x2, 0xb, 0x7}, {0x2, 0x5, 0x2, 0x8}, {0x5, 0x1, 0xb, 0xb}, {0x4, 0x4, 0xb, 0x6}, {0x5, 0x2, 0x4, 0x4}, {0x3, 0x5, 0x8, 0x7}, {0x4, 0x1, 0x0, 0x2}, {0x2, 0x2, 0x10, 0x7}]}, 0x94) getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000b40)={r3, r11}, 0xc) mount$bind(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00), 0x20018, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000001c40)={0x28, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000c40)="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"}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r3, 0x3b8b, &(0x7f0000001c80)={0x10, 0x1, r12}) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000001cc0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) openat$autofs(0xffffffffffffff9c, &(0x7f0000001d00), 0x101300, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001d80)=@o_path={&(0x7f0000001d40)='./file0\x00', 0x0, 0x4000}, 0x18) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000001dc0)={0x96f, 0x49433553, 0x2, @stepwise={0xe, 0x9, 0x6, 0x2, 0x0, 0x5}}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000001ec0)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x74}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6001}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008800) ioctl$XFS_IOC_OPEN_BY_HANDLE(r10, 0xc038586b, &(0x7f0000002000)={r10, &(0x7f0000001f00)='@-\x00', 0x80, &(0x7f0000001f40)={@_ha_fsid={[0x3, 0x8]}, {0x1945, 0x9e06, 0x6, 0x8}}, 0x2, &(0x7f0000001f80)={@_ha_fsid}, &(0x7f0000001fc0)=0x9}) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket$nl_generic-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_DEL_MPATH-sendmsg$NL80211_CMD_NEW_INTERFACE-openat$rfkill-write$rfkill-ioctl$sock_SIOCGIFINDEX-setsockopt$inet_tcp_TCP_FASTOPEN_KEY-sendmsg$nl_route_sched-socket-socket$nl_generic-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_DEL_MPATH-sendmsg$NL80211_CMD_NEW_INTERFACE-openat$rfkill-write$rfkill-ioctl$sock_SIOCGIFINDEX-setsockopt$inet_tcp_TCP_FASTOPEN_KEY-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000040}, 0x220028c4) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r2, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r3, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000280)="5c61fe48f03bb0adbc2bca5740b2f76b", 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0x20, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xe}}, [@TCA_RATE={0x0, 0x5, {0x2, 0xfc}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) socket(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000040}, 0x220028c4) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r2, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r3, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) (async) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00'}) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000280)="5c61fe48f03bb0adbc2bca5740b2f76b", 0x10) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0x20, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xe}}, [@TCA_RATE={0x0, 0x5, {0x2, 0xfc}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) (async) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_sctp-socketpair$nbd-ioctl$sock_SIOCETHTOOL-sendmsg$inet6-fsopen-openat$kvm-ioctl$KVM_CREATE_VM-syz_genetlink_get_family_id$l2tp-openat$ubi_ctrl-sendmmsg$alg-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-sendmmsg$alg-recvmsg-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-pwritev-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f0000000200)=@ethtool_perm_addr={0x12}}) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x4, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{0x0}], 0x1}, 0x4048043) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r4, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725", 0x74}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8", 0x39}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7", 0xcb}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d490", 0xe0}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-socket$nl_route-syz_emit_ethernet-sendmsg$nl_route-openat$iommufd-openat$procfs-mprotect-openat-setreuid-fchmod-ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS-ioctl$IOMMU_DESTROY$stdev-mkdirat-mount-openat-write-socket$nl_route-syz_emit_ethernet-sendmsg$nl_route-openat$iommufd-openat$procfs-mprotect-openat-setreuid-fchmod-ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS-ioctl$IOMMU_DESTROY$stdev detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x4f) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='tcp 2', 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x70, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x3a, 0x3a, 0xff, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x4, {0x6, 0x6, "0e189a", 0x1, 0x3a, 0xff, @remote, @private0, [], "b3ee73f10f4f24e156fc"}}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x44}}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) setreuid(0x0, 0xee00) fchmod(r3, 0x80) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_DESTROY$stdev(r2, 0x3b80, &(0x7f00000000c0)={0x8, r4}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x4f) (async) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) (async) write(r0, &(0x7f0000000300)='tcp 2', 0x5) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x70, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x3a, 0x3a, 0xff, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x4, {0x6, 0x6, "0e189a", 0x1, 0x3a, 0xff, @remote, @private0, [], "b3ee73f10f4f24e156fc"}}}}}}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x44}}, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) (async) setreuid(0x0, 0xee00) (async) fchmod(r3, 0x80) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) ioctl$IOMMU_DESTROY$stdev(r2, 0x3b80, &(0x7f00000000c0)={0x8, r4}) (async) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$usbfs-ioctl$USBDEVFS_DISCONNECT_CLAIM-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-syz_open_dev$sg-ioctl$SG_NEXT_CMD_LEN-pipe2$9p-syz_emit_ethernet-syz_emit_ethernet-close_range detailed listing: executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x1, 0x101801) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f00000000c0)=0x2000024) pipe2$9p(0x0, 0x80800) syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000004c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00060008"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-socket$nl_route-syz_emit_ethernet-sendmsg$nl_route-openat$iommufd-openat$procfs-mprotect-openat-setreuid-fchmod-ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS-ioctl$IOMMU_DESTROY$stdev-mkdirat-mount-openat-write-socket$nl_route-syz_emit_ethernet-sendmsg$nl_route-openat$iommufd-openat$procfs-mprotect-openat-setreuid-fchmod-ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS-ioctl$IOMMU_DESTROY$stdev detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x4f) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='tcp 2', 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x70, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x3a, 0x3a, 0xff, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x4, {0x6, 0x6, "0e189a", 0x1, 0x3a, 0xff, @remote, @private0, [], "b3ee73f10f4f24e156fc"}}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x44}}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) setreuid(0x0, 0xee00) fchmod(r3, 0x80) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_DESTROY$stdev(r2, 0x3b80, &(0x7f00000000c0)={0x8, r4}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x4f) (async) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) (async) write(r0, &(0x7f0000000300)='tcp 2', 0x5) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x70, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x3a, 0x3a, 0xff, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x4, {0x6, 0x6, "0e189a", 0x1, 0x3a, 0xff, @remote, @private0, [], "b3ee73f10f4f24e156fc"}}}}}}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x44}}, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) (async) setreuid(0x0, 0xee00) (async) fchmod(r3, 0x80) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) ioctl$IOMMU_DESTROY$stdev(r2, 0x3b80, &(0x7f00000000c0)={0x8, r4}) (async) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$usbfs-ioctl$USBDEVFS_DISCONNECT_CLAIM-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-syz_open_dev$sg-ioctl$SG_NEXT_CMD_LEN-pipe2$9p-syz_emit_ethernet-syz_emit_ethernet-close_range detailed listing: executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x1, 0x101801) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f00000000c0)=0x2000024) pipe2$9p(0x0, 0x80800) syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000004c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00060008"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$pidfd-fchdir-syz_open_procfs$namespace-mount-syz_init_net_socket$nl_rdma-bpf$MAP_CREATE-sendto$packet-syz_init_net_socket$bt_hci-bind$bt_hci-write$binfmt_misc-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_CRIT_PROTOCOL_START-mount-unshare detailed listing: executing program 0: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x80000, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='[', 0x1, 0x10, 0x0, 0xfffffea8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) unshare(0x2c020400) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$pidfd-fchdir-syz_open_procfs$namespace-mount-syz_init_net_socket$nl_rdma-bpf$MAP_CREATE-sendto$packet-syz_init_net_socket$bt_hci-bind$bt_hci-write$binfmt_misc-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_CRIT_PROTOCOL_START-mount-unshare detailed listing: executing program 0: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x80000, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='[', 0x1, 0x10, 0x0, 0xfffffea8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) unshare(0x2c020400) program did not crash single: failed to extract reproducer bisect: bisecting 45 programs with base timeout 30s testing program (duration=41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 21, 15, 19, 25, 15, 15, 21, 30, 5, 10, 19, 9, 3, 12, 14, 10, 5, 30, 9, 30, 13, 22, 6, 4, 12, 25, 8, 21, 21, 19, 7, 24, 9, 16, 13, 40, 21, 2, 6, 22, 7, 10, 30, 16] detailed listing: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x30, r2, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfd, {{0x12}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20042054}, 0x4004) executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x242080, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000001c0)={'macvlan1\x00', @local}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="2be27de13db01225280012800b0001006d616373656300001800028005000f00020000000c004200feffff7fa100000008000500", @ANYRES32=r2], 0x50}}, 0x0) r4 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_KEY(r4, 0x6a, 0x1, 0x0, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@RTM_NEWMDB={0x18, 0x54, 0x1e5}, 0x18}}, 0x4080) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r7, 0x8000000000000003, {0x0, 0xf}, 0xff}, 0x18) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}, @ip_retopts={{0x10}}], 0x30}}], 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getqdisc={0x2c, 0x26, 0x4, 0x870bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x3, 0xffff}, {0xffe0, 0x4}, {0xfff1, 0xd}}, [{0x4}, {0x4}]}, 0x2c}}, 0x4040000) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f000000e000/0x7000)=nil, 0x7000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) futex(&(0x7f0000000580), 0x0, 0x0, &(0x7f0000000600)={0x77359400}, 0x0, 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0}, 0x58) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @private=0xa010100}], 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4b, 0x4b, 0x2, [@datasec={0x9, 0x5, 0x0, 0xf, 0x3, [{0x4, 0xfffffff7, 0x3}, {0x5, 0x1, 0xffffff97}, {0x5, 0x2e8, 0x7}, {0x5, 0xfffffbff, 0x4}, {0x4, 0x7fffffff, 0x80000001}], "312ab4"}]}}, &(0x7f0000000d00)=""/198, 0x66, 0xc6, 0x1}, 0x28) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='io\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000200)=""/218, 0xda}], 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000080)=0x8) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) syz_usb_disconnect(r3) sendmmsg$inet_sctp(r0, &(0x7f0000002ac0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000000000008400000002000000de240102040000006f000000c475ae171b0f8fa3", @ANYRES32=r2], 0x20, 0x20008001}], 0x1, 0x24010000) executing program 2: io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20002, 0x2}) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xb3) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0xb4, 0x24, 0x20, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x84, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0xefdd}, @TCA_GRED_PARMS={0x38, 0x1, {0x101, 0x5, 0xc3, 0x6, 0x4, 0x6, 0x8000, 0x4, 0x2, 0xf5, 0x9, 0x1, 0x13, 0x41, 0x10000, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x6}, @TCA_GRED_PARMS={0x38, 0x1, {0x2, 0x9, 0x4, 0x7, 0x6, 0xffff, 0x2, 0x7f, 0x1, 0x4, 0x16, 0x4, 0x17, 0x2, 0x8, 0x7}}]}}]}, 0xb4}}, 0x4000000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000a000200000000000000000008000900040100"], 0x30}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x1, 0xe) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r3, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r4, 0x1}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, r6, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x5c8, &(0x7f0000000880)=ANY=[], 0x0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x1c801, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1}, './sys_mnt/kernel/mm/transparent_hugepage/khugepaged/pages_to_scan\x00'}) mount(0x0, &(0x7f0000000140)='./sys_mnt\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys_mnt/kernel/mm/transparent_hugepage/khugepaged/pages_to_scan\x00', 0x1, 0x0) write(r2, &(0x7f0000000800)='10', 0x2) mount(0x0, &(0x7f0000000100)='./sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000006800000068000000040000000000000005000007"], 0x0, 0x84, 0x0, 0x1}, 0x28) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys_mnt/module/damon_reclaim/parameters/enabled\x00', 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r7, 0x1, 0x0, 0x25dfdbfb, {{0x2}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1743}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]]}, 0x2c}, 0x1, 0x0, 0x0, 0xffad46ab7102f497}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0x7}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x4, 0x406361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0xffffffffe78a4ee8}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r11, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) write(r3, &(0x7f0000000240)="61e407", 0x3) executing program 2: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x80000, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='[', 0x1, 0x10, 0x0, 0xfffffea8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) unshare(0x2c020400) executing program 32: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x80000, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='[', 0x1, 0x10, 0x0, 0xfffffea8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) unshare(0x2c020400) executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f0000000200)=@ethtool_perm_addr={0x12}}) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x4, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{0x0}], 0x1}, 0x4048043) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r4, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725", 0x74}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8", 0x39}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7", 0xcb}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d490", 0xe0}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000005980), 0x0, 0x80201) write(r1, &(0x7f0000000440)="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", 0x111) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000180)={[0xa000, 0x8080000, 0xf000, 0x6000], 0x9, 0x82}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0000000d0085a168d0bf46d32345653600648d0a00050002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) sendmsg$nl_route(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000010400000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400030076657468305f746f5f626f6e6400000014002b8008000100", @ANYRES32=r6], 0x48}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) unshare(0x10040000) openat(0xffffffffffffff9c, &(0x7f0000000280)='./gadget/ep1in-bulk\x00', 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r7, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040002000000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r8, 0x0, &(0x7f0000000000)=""/10, 0x2}, 0x20) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000002600)={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x28, 0x66, 0x0, 0xa, 0x11, 0x0, @empty, @empty, {[@generic={0x44, 0x5, "c12e7a"}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6f7377a903000003b6292e8c6adf38c4f067f694d131977bdeba1fd7b16a399b81abf45140c4cd613c96256915aa2f62f69223d27f1761cb50b19231be30ead2f7b6d3a4b0b50b56ee8044224b3a8e40d2f69ad0320961ae6d49045201ef1f5743fee4203207c44a55e42152735c3bb6518aedfc728df7a73b6bbfc9b57958a19b9c59902f02121fcc8550f5f7d1e200"/155]) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000100)=0xc) r1 = syz_open_procfs(r0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0xfff6) executing program 3: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = mq_open(&(0x7f0000000200)='!sel\x00\x00\x00\x10\x94\xcc\x06\x10\xf7-\x95P\xd7dy\x00\x01\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x001\xa1a\xa5\f\xd7\xf15\x06\xc2db\xd8.j}\x1b1\xeb\"\xdbP;`\xeb1\xd2\r\"{\x9fR\xf2n\xb9\x82E', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000140)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000880)=""/202, 0xca, 0x200000200009, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x19, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f00000000c0)={&(0x7f0000000040)=""/76, 0x4c}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x100, 0x0) executing program 3: io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20002, 0x2}) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xb3) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0xb4, 0x24, 0x20, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x84, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0xefdd}, @TCA_GRED_PARMS={0x38, 0x1, {0x101, 0x5, 0xc3, 0x6, 0x4, 0x6, 0x8000, 0x4, 0x2, 0xf5, 0x9, 0x1, 0x13, 0x41, 0x10000, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x6}, @TCA_GRED_PARMS={0x38, 0x1, {0x2, 0x9, 0x4, 0x7, 0x6, 0xffff, 0x2, 0x7f, 0x1, 0x4, 0x16, 0x4, 0x17, 0x2, 0x8, 0x7}}]}}]}, 0xb4}}, 0x4000000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000a000200000000000000000008000900040100"], 0x30}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsmount(r2, 0x1, 0xe) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r3, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r4, 0x1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r5, r7, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x5c8, &(0x7f0000000880)=ANY=[], 0x0) executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x1, 0x101801) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f00000000c0)=0x2000024) pipe2$9p(0x0, 0x80800) syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000004c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00060008"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) executing program 1: r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0001008158", 0x6}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c0000000000000000", @ANYRES32=r0, @ANYRES64=r0], 0x40}, 0x20000000) (async) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0001008158", 0x6}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c0000000000000000", @ANYRES32=r0, @ANYRES64=r0], 0x40}, 0x20000000) executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fe, 0x0, 0xc000, 0x2000, &(0x7f0000008000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) accept(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) (async) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@mpls_getroute={0x1c, 0x1e, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x2}}, 0x1c}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000000000400000002000000000000080000000000006100", @ANYRES16=r1, @ANYRES64=r0], 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r4, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xd4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}, [@replay_val={0x10, 0xa, {0x70bd2a, 0x70bd2a, 0x1}}, @sec_ctx={0xc, 0x8, {0x8}}]}, 0xd4}}, 0x0) (async) r3 = syz_clone(0x8000000, &(0x7f0000000000)="4f85434826e37138d1e862249b4a3374be094ac429b89ab959690a36edf7c2922a5092311911fe7eda9f816e4805d213cdcb1a3290e9cf8c31db538bbff32f88cc445a92677ac3e63978810901beb89ba23af91166", 0x55, &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000004c0)="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") (async) capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000300)={0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) (async) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) ptrace$PTRACE_SETSIGMASK(0x420b, r3, 0x8, &(0x7f00000014c0)={[0x8]}) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a7000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newsa={0x17c, 0x1a, 0x1, 0xfffffffd, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x3e}, @in=@local, 0xfffc}, {@in=@rand_addr=0x64010100, 0x0, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x1}, {0x3}, {0x0, 0x7}, {0x0, 0x6, 0x2}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x60}, [@algo_auth={0x89, 0x1, {{'sha1\x00'}, 0x208, "3cbfd71c56bfe9361d559cf01c6654b099b32c0048344c16247c6463bfd17cae07092b5aa016ff5cecaf65f2a3f2b0bf5e52a5f316c7b7fa43647ee9c90faa33e5"}}]}, 0x17c}}, 0x8000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) syz_extract_tcp_res(&(0x7f0000000180)={0x41424344, 0x41424344}, 0x13b31b46, 0x10) write$tun(r0, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x0, 0x400, 0x14, 0xa}, @ipv4=@tcp={{0x6, 0x4, 0x2, 0x8, 0x94, 0x64, 0x0, 0xb, 0x6, 0x0, @rand_addr=0x64010100, @multicast1, {[@timestamp={0x44, 0x4, 0x89, 0x0, 0x8}]}}, {{0x4e20, 0x4e24, 0x41424344, r4, 0x0, 0x0, 0x5, 0x20, 0x105, 0x0, 0xffff}, {"beb364c192856cee524db8dc98457f10be9f89eff700d83130f1a13ce829e55086d65862fe3868cc03a052af5da38b62af0ae89aeaff07654822eeda9281ac2a7568208cad100000cd3904f2fb7f7703a8232728fba8b62a3c10b500adc6512902d186a181bfcc3e"}}}}, 0xa2) executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000280)) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x4f) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='tcp 2', 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x70, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x3a, 0x3a, 0xff, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x4, {0x6, 0x6, "0e189a", 0x1, 0x3a, 0xff, @remote, @private0, [], "b3ee73f10f4f24e156fc"}}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x44}}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) setreuid(0x0, 0xee00) fchmod(r3, 0x80) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_DESTROY$stdev(r2, 0x3b80, &(0x7f00000000c0)={0x8, r4}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x4f) (async) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) (async) write(r0, &(0x7f0000000300)='tcp 2', 0x5) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x70, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x3a, 0x3a, 0xff, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x4, {0x6, 0x6, "0e189a", 0x1, 0x3a, 0xff, @remote, @private0, [], "b3ee73f10f4f24e156fc"}}}}}}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x44}}, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) (async) setreuid(0x0, 0xee00) (async) fchmod(r3, 0x80) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) ioctl$IOMMU_DESTROY$stdev(r2, 0x3b80, &(0x7f00000000c0)={0x8, r4}) (async) executing program 33: r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x1, 0x101801) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f00000000c0)=0x2000024) pipe2$9p(0x0, 0x80800) syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000004c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00060008"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) executing program 34: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x4f) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='tcp 2', 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x70, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x3a, 0x3a, 0xff, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x4, {0x6, 0x6, "0e189a", 0x1, 0x3a, 0xff, @remote, @private0, [], "b3ee73f10f4f24e156fc"}}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x44}}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) setreuid(0x0, 0xee00) fchmod(r3, 0x80) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_DESTROY$stdev(r2, 0x3b80, &(0x7f00000000c0)={0x8, r4}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x4f) (async) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) (async) write(r0, &(0x7f0000000300)='tcp 2', 0x5) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x70, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x3a, 0x3a, 0xff, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x4, {0x6, 0x6, "0e189a", 0x1, 0x3a, 0xff, @remote, @private0, [], "b3ee73f10f4f24e156fc"}}}}}}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x44}}, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) (async) setreuid(0x0, 0xee00) (async) fchmod(r3, 0x80) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) ioctl$IOMMU_DESTROY$stdev(r2, 0x3b80, &(0x7f00000000c0)={0x8, r4}) (async) executing program 0: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x40, 0x0, 0xa}, 0x18) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="694a4a3e3cbac01a80081e3f2a742de9", 0x10) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) getdents(r1, &(0x7f00000001c0)=""/240, 0xf0) (async) getdents64(r1, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x100000001) (async) sendmsg$inet(r3, &(0x7f0000000100)={&(0x7f0000000180)={0x2, 0x4e26, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @rand_addr=0x64010102}}}], 0x38}, 0x4000004) (async) semget$private(0x0, 0x6, 0x3b1) (async) semctl$SEM_STAT_ANY(0x0, 0x4, 0x14, &(0x7f0000000000)=""/164) socket(0x1d, 0x2, 0x6) write(r2, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x2}, &(0x7f0000000100)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x128, r2, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x23}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x643}, @NL80211_ATTR_TX_RATES={0x100, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0xb8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7f, 0x9, 0x6, 0x5, 0xf9, 0x1, 0x3ff]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x1, 0x9}, {0x5, 0x1}, {0x1, 0x8}, {0x1, 0x7}, {0x2, 0x9}, {0x3, 0x3}, {0x2, 0x4}, {0x4, 0x5}, {0x3, 0x6}, {0x1, 0x3}, {0x5, 0x2}, {0x1, 0x2}, {0x0, 0x8}, {0x1, 0x9}, {0x5}, {0x7, 0x8}, {0x3, 0x3}, {0x3, 0x5}, {0x1, 0x6}, {0x3, 0x8}, {0x0, 0xa}, {0x5, 0x5}, {0x4, 0x9}, {0x5, 0x9}, {0x2, 0x3}, {0x2, 0x4}, {0x4, 0x1}, {0x5, 0x5}, {0x0, 0x4}, {0x1, 0x8}, {0x7}, {0x1}, {0x5, 0x3}, {0x1, 0x6}, {0x3, 0x7}, {0x2, 0x4}, {0x4, 0xa}, {0x2, 0x9}, {0x0, 0x8}, {0x4, 0x3}, {0x3, 0x8}, {0x7, 0x9}, {0x5}, {0x7, 0x7}, {0x0, 0x3}, {0x6, 0x9}, {0x0, 0x5}, {0x2, 0x6}, {0x5, 0x8}, {0x6, 0x9}, {0x7, 0x8}, {0x1, 0x7}, {0x7, 0x5}, {0x0, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xf23, 0x1, 0x7, 0x2000, 0xd, 0x8, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0xd, 0xd, 0x2, 0x5, 0x1, 0xfeff, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x9, 0xfbff, 0x24, 0x400, 0x800, 0x2, 0x2a78]}}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xe4c9, 0xc5, 0x9, 0x10, 0x1000, 0x5, 0xff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, 0x128}, 0x1, 0x0, 0x0, 0xc006}, 0x8044) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) r3 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x36, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0xc, 0x1e, &(0x7f00000000c0)="7d1faf49cdeb662a1a2e37edea03fb7c34a4d03b86c338c83afb9a7a03b0", 0x1, 0x1}]}) (async, rerun: 64) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async, rerun: 64) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/46, 0x2e}], 0x1, &(0x7f0000000600)=""/192, 0xc0}, 0x161) (async, rerun: 32) r8 = socket$kcm(0x2, 0x1, 0x84) (rerun: 32) setsockopt$sock_attach_bpf(r8, 0x84, 0x9, &(0x7f0000000380), 0x98) (async, rerun: 64) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000001000390400000010000000000000000016f2ec767c88162e2837cf4b849895af724d055dfd81817dedd3", @ANYRES32=r7, @ANYBLOB="01980600000000001800128008000100677265000c00028008000700ac141402"], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (rerun: 64) sendto$packet(r4, &(0x7f0000000240)="3b826a8687", 0x5, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r7, 0x1, 0x4, 0x6, @multicast}, 0x14) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40091}, 0x48854) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x4, 0xa, 0x701, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000020) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) readv(r0, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/246, 0xf6}], 0x1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) ppoll(&(0x7f00000004c0)=[{r0}], 0x1, &(0x7f0000000500)={0x0, 0x3938700}, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000240)={0x301, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) (async) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) (async) syz_emit_ethernet(0x146, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000000001103aff20010000000000000000000000000001ff02000000000000000000000000000187009078fc000000000000000000000000000000000018000e0124fcaa8fc05a221edb3735a116873685be2878811a4f64e0284643092057b0dfc98cb231f5548ab71153e6681d2b3376e5811ae4787065112ed4250c2490cbe71d2828e909d063b1c61edd5b6288e2700f650f72b3829982734627311e025ae743255c13542e8763d3328f46c611febb756d91aaa8913df0160af9980494fd4a4b5b11b6f3cc44c3fe96b5285eaf0d22918a54de61fc130e627235862106a4b993cbfcff6c2b7ed9e60f9c0886308a1eb5dc9c7f7e63f3fa7424e9fbf08f97a2c39b685d24eeacfce05eb08529015efcb388b2aa2e3adacfd60c94d4d8948f0584b1a189e244bcdc42a28b2d09ad5dd9ce80d1ddc418"], 0x0) executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000380)="270502001a0014000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102821880b", 0x44}, {&(0x7f00000007c0)="b54e8224", 0x4}, {&(0x7f0000000040)="b9b2888fd608c639f9f539a931d941265e40c9b526", 0x15}, {&(0x7f0000000400)="a771936082af", 0x6}], 0x4}, 0x1800) write$cgroup_devices(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='b *:2 m'], 0x9) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f00000008c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000600)={0x24c, 0x13, 0x10, 0x70bd2a, 0x25dfdbfc, {0x26, 0x5, 0x0, 0x3, {0x4e20, 0x4e21, [0x400, 0x77, 0x99e, 0x7], [0x38d, 0x10002000, 0x4, 0xfffffffe], 0x0, [0x4, 0xffff]}, 0x1, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x4a, 0x1, "f89784b9ad6a6512b85263790839d2ec6fe2d28921bc4be229cccbdacf5219572dfaf9e2230c2363794ce6a449f430c1ec67e98d7c941fdb846a0fde8a97d9524e52931f4685"}, @INET_DIAG_REQ_BYTECODE={0xd5, 0x1, "39f85b6ef9ab33e242734c5fc5d9dd923fba393ff69fe40e2cf8c13f922e148260f1933dd9e02d825053774a500f09384e2b09614ac970731106edf22c56ac9f398c0e8bafc5b044225d4745f24048271be8f330408a43e5aa6cd1a8b69a99b12be81ab977c50a6e68d7d0bf86612540878dd61c350f6c73708f9baeeecd35dd3f2e544248ad64bedf6249d99f6285b69c94b9ad32ef21bb0c2cac220e3d78cc028d4bf11b5cae77771c97f859d99c9355267ae7dc260ce80328be5c82933e56efb555e2cb3b519f2008d2aa6971ea3c93"}, @INET_DIAG_REQ_BYTECODE={0xdb, 0x1, "060bf3233b64082120a8d0a532a88e8e50aca4f4ace93d86ce2451f38ed0f9edca8e9d6cc28d809363b36e1166167afecde36aa88122fe18d4aee01fd63f9526230d38674ec75eca845023e47e3cbee7bb432c5a90069b626067eccf62516570e85ea1104e6d1a3502cbdcda7585163d9bc646654d2fda7782aae0b547bebae0020ace72e416b5072db3e71c1c14e687bde76ff60653e1e784ff6220e68ed8f81635a881cd5803f61501204928ec74305868b04ef07c3f8eb3b510446fcdb5254b33cc623f63fc63151e49bee0fbe3e63fb94dfb43e459"}]}, 0x24c}, 0x1, 0x0, 0x0, 0x1abe9132536f29f4}, 0x20000001) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4622, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x0, 0x0, 0x400}}}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xa, 0xfff1}, {0x10, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r7, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000900000000000500200001000000050008"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x74, 0x4, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xbd9}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x809b}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008000}, 0x40082) executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18, &(0x7f00000001c0)={&(0x7f0000000140)="5ab37158946b88213a", 0x9}, 0x1, 0x0, 0x0, 0x20008840}, 0x4000000) readv(r0, &(0x7f00000000c0)=[{&(0x7f00000014c0)=""/4105, 0x1009}], 0x1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0x4, 0x0, &(0x7f0000004800)) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffe49}, 0x42) executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f0000000200)=@ethtool_perm_addr={0x12}}) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x4, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{0x0}], 0x1}, 0x4048043) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r4, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725", 0x74}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8", 0x39}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7", 0xcb}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d490", 0xe0}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="4f1a000000000000240012800b00010067656e657665000014000280050008000100000005000c000100000008000a00", @ANYRESDEC], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000300), 0x40000000000000fb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000240)=0x1) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000100)={0x0, 0xffff, 0x0, 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x8000}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000003c0)={0x3, 0x1, 0x4044000, 0x1000, &(0x7f0000690000/0x1000)=nil}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @tid=r2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) ioctl$CEC_DQEVENT(r6, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r6, 0xc0506107, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a00120002002800000019002d4400009b84136ef75afb83de066a5900e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) unshare(0x2040400) timerfd_create(0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000200)=0x3) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) ppoll(&(0x7f0000000000)=[{r3, 0x1000}], 0x1, 0x0, 0x0, 0x0) write$sndseq(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000001140)={0x80, 0x21, 0x3, 0x7}) pwritev(r2, &(0x7f0000000700)=[{&(0x7f00000003c0)='\x00!', 0x2}, {&(0x7f00000005c0)="c021", 0x2}], 0x2, 0x1, 0x407ff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000280)={[{0x1, 0x1, 0xa3, 0x7f, 0x0, 0x0, 0x7, 0x4, 0x40, 0xe, 0x4, 0x1, 0x1}, {0xffffffff, 0x1, 0x98, 0x8, 0x4, 0x4, 0x6, 0x80, 0x1, 0x9, 0x1, 0x42, 0x200}, {0xfffffff6, 0x5, 0xc, 0x5, 0x10, 0x10, 0x2, 0x3, 0x6b, 0xee, 0xe, 0x4, 0x3ff}], 0x3}) getdents(r4, &(0x7f0000000040)=""/50, 0x32) getdents64(r4, 0x0, 0x43) read$eventfd(r4, &(0x7f0000000240), 0x8) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000001c0)={0x0, 0x346f, 0x40000060, 0x100007d, 0x5, "9f940b3491d052d172e0e573229ac6de50806c"}) mount$9p_fd(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@aname={'aname', 0x3d, '\x9e\x01h\n\xcd\xf1\x833g\x91\xabP\x99\xf4V\xbaP\xa99\xa8N\t.\xf5\v\x97\xc5\xc4\xf4~\xe2\xa6^\\\x1a \x84\xc7*\xe3\xf2Y\xc6\xb8\xa0\xa4`&\a\x91/\x9dq\xb5\xc2S\xef\xcf\x12\x96+\xe8\xd0\xff\xff\x1d\xc6\x84\xcf\xcb\xabq\xcaF!3'}}]}}) executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'bridge0\x00', {0x1}, 0xdd3c}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0xffd}}) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r2, 0xfffffffffffffc01, 0x0) write$tun(r1, &(0x7f0000000080)={@val={0x0, 0x1c}, @void, @ipv6=@gre_packet={0x2, 0x6, "96f363", 0x273, 0x2f, 0xff, @private1, @mcast2, {[@fragment={0x4, 0x0, 0x6, 0x0, 0x0, 0x1a, 0x68}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xca, 0x2, [], "3c7e49a693acaecbb67655515f7c6521dc2f809f0ae0d283bc21edb7d05aec01d780c9710e97e7f1a102ec98243b2bc30fb07889356b660f1a4b8d9c2ed193335cf9156e0ea6c63fe8dcab201812bb73121bfecf052c5370e39237cc1f3f377fd870887f05b26db6c15b151d852773e8ef8f4f9f413c8858d00c4286fe6a63364fa132c721b855a8a2cab427f3e50ce9578ccb241c16041a9c7f9cbc7570533639d6452c1d4c834195ae4c39d096a362d5e97abac8887a59c29b552f965e3f19e9f0e83180b3747aaf7c"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0xfffb, 0x4], "f4d82edc863858fd1cf746c8f0407d61a15c4067e19202e634c412c96d8ccfa56d51bb1bbeb0019f18989158ec3a0056662b82690788fef814c88f6de292bf70ac10c20812d969b4e6ef7d"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x40, 0x800], "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"}, {0x8, 0x88be, 0x0, {{0x1, 0x1, 0x8, 0x0, 0x1, 0x2, 0x0, 0x8}}}, {0x8, 0x22eb, 0x1, {{0x2, 0x2, 0x4, 0x3, 0x0, 0x1, 0x5, 0x80}, 0x2, {0xd, 0xff4e, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x3, "afa529cb7edce646ff2bb4b0"}}}}}, 0x29f) executing program 6: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f0000000000)=""/62, 0x28000, 0x800, 0x9, 0x2}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x1000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4510}, 0x1}) (async) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4510}, 0x1}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) (async) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x9) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x40, 0x4, 0x7fff8, 0x6}, 0x14) (async) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x40, 0x4, 0x7fff8, 0x6}, 0x14) sendto$inet(r8, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) (async) sendto$inet(r8, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000340)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x2, 0x2003) (async) r1 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='vegas', 0x5) (async) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) executing program 6: io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20002, 0x2}) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xb3) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0xe) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r2, 0x1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r5, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x5c8, &(0x7f0000000880)=ANY=[], 0x0) executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2}, &(0x7f00000005c0)=0x20000, &(0x7f00000001c0)=r1}, 0x20) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) (async) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) (async) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) r4 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000340)={0x2, 0x0, @b}, 0x48, r3) keyctl$search(0xa, r4, &(0x7f0000000400)='user\x00', &(0x7f0000000500)={'syz', 0x1}, r3) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r2, &(0x7f00000005c0)}, 0x20) (async) r5 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x8000) ioctl$RTC_IRQP_SET(r5, 0x4008700c, 0x1c99) executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x8000000004) (async) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001500add427323b472545b4560a117fff0b0082001b5980000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffff62fa86b3c67992f7d4f78c24f9", 0x46}, {&(0x7f00000000c0)="abd9", 0x2}, {&(0x7f0000000180)="3346252f5a393a2808d91260734f8244", 0x10}], 0x3) (async) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001500add427323b472545b4560a117fff0b0082001b5980000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffff62fa86b3c67992f7d4f78c24f9", 0x46}, {&(0x7f00000000c0)="abd9", 0x2}, {&(0x7f0000000180)="3346252f5a393a2808d91260734f8244", 0x10}], 0x3) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x80, 0x0) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x5}) fcntl$lock(r3, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) (async) fcntl$lock(r3, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) mkdir(&(0x7f00000001c0)='./bus\x00', 0x40) (async) mkdir(&(0x7f00000001c0)='./bus\x00', 0x40) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) setxattr$incfs_id(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f0000000200)={'0000000000000000000000000000000', 0x31}, 0x20, 0x1) close(0x3) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x6a182, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000040)=0x4004680) pwritev(r6, &(0x7f0000000780)=[{&(0x7f0000000180)="80fd0fe874bf", 0x6}], 0x1, 0x0, 0x9) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) keyctl$session_to_parent(0x12) (async) keyctl$session_to_parent(0x12) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40840200}, 0xc, &(0x7f0000000600)={&(0x7f00000007c0)={0x2b4, r7, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x54}}}}, [@NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ibss_ssid}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x2b}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0xd37}, @NL80211_MESHCONF_HT_OPMODE={0x6}, @NL80211_MESHCONF_ELEMENT_TTL={0x5}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x2}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x6}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0xf}]}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xffff0001}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x2}, @NL80211_ATTR_IE={0x21e, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x28, 0x9d, 0x80}}, @tim={0x5, 0x3f, {0x1f, 0x1b, 0x1, "91bb62c10a26a444f634b35b2d583f67a0cab22b3bb04593c6ad13c74a48bc2960f23a3c191e1a82ba9c45dbb1863386ef2de5f293e23936b07d960e"}}, @ibss={0x6, 0x2, 0x101}, @ibss={0x6, 0x2, 0x40}, @random={0x80, 0x23, "b01d45f3634d7b0c98f1eb169d515c8b1f120d804841fd499299bdf30bae06ed37c6ed"}, @mesh_id={0x72, 0x6}, @ssid={0x0, 0xa, @random="500ac89e6c7292de64a9"}, @mic={0x8c, 0x18, {0xfb0, "33908bf989dd", @long="719baa92fd44756f108237ad8f56f6d9"}}, @perr={0x84, 0x14c, {0x3, 0x12, [{{0x0, 0x1}, @device_a, 0x47b, @value=@broadcast, 0x1c}, {{}, @broadcast, 0x7, @void, 0x2e}, {{0x0, 0x1}, @device_b, 0x5, @value=@broadcast, 0xb}, {{0x0, 0x1}, @device_a, 0x8, @value, 0x13}, {{0x0, 0x1}, @device_a, 0x2, @value, 0x16}, {{0x0, 0x1}, @broadcast, 0xffff03c1, @value, 0x40}, {{0x0, 0x1}, @broadcast, 0xa0000000, @value, 0x15}, {{0x0, 0x1}, @device_b, 0x8d, @value=@broadcast, 0x8}, {{0x0, 0x1}, @device_b, 0x5, @value=@broadcast, 0x30}, {{0x0, 0x1}, @device_b, 0x5, @value=@broadcast, 0x5}, {{0x0, 0x1}, @broadcast, 0x6, @value=@broadcast, 0x3b}, {{0x0, 0x1}, @device_b, 0xfa, @value=@device_b, 0x18}, {{}, @broadcast, 0x80000001, @void, 0x8}, {{0x0, 0x1}, @broadcast, 0x9, @value, 0x1e}, {{0x0, 0x1}, @broadcast, 0x7, @value=@broadcast, 0x3f}, {{0x0, 0x1}, @broadcast, 0x1, @value=@broadcast, 0x21}, {{0x0, 0x1}, @device_a, 0x7, @value=@broadcast, 0xc}, {{0x0, 0x1}, @device_a, 0x7, @value=@device_b, 0x3f}]}}, @tim={0x5, 0x28, {0x5, 0x30, 0x9, "32f6c1fee688ab5c6580eaf51c35823e60db68036a7f687d3371a65666c70090b91dfea665"}}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x24002010}, 0x1) write$nci(r2, &(0x7f0000000180)=@NCI_OP_CORE_INTF_ERROR_NTF={0x0, 0x1, 0x3, 0x8, 0x1, {0x0, 0x3}}, 0x5) r8 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0xff, 0x0, 0x0, 0x2000000, 0x800000, 0x2}}) write$nci(r8, &(0x7f0000000680)=@NCI_OP_CORE_CONN_CREDITS_NTF={0x0, 0x1, 0x3, 0x6, 0x2, {0x3, [{0x3, 0x3}, {0x0, 0x7}, {0x3, 0x7}]}}, 0xa) (async) write$nci(r8, &(0x7f0000000680)=@NCI_OP_CORE_CONN_CREDITS_NTF={0x0, 0x1, 0x3, 0x6, 0x2, {0x3, [{0x3, 0x3}, {0x0, 0x7}, {0x3, 0x7}]}}, 0xa) mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, &(0x7f0000000140)={'trans=virtio,', {[{@version_u}]}}) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000000c0)='bond_slave_1\x00') (async) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000000c0)='bond_slave_1\x00') executing program 6: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f0000000200)=@ethtool_perm_addr={0x12}}) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x4, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{0x0}], 0x1}, 0x4048043) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r4, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725", 0x74}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8", 0x39}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7", 0xcb}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d490", 0xe0}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r0, 0x5411, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}) executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x5) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400461f1, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, r2, 0x1, 0x0, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xaa34a4cffb93b201}, 0x10) executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000040}, 0x220028c4) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r2, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r3, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000280)="5c61fe48f03bb0adbc2bca5740b2f76b", 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0x20, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xe}}, [@TCA_RATE={0x0, 0x5, {0x2, 0xfc}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) socket(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000040}, 0x220028c4) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r2, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r3, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) (async) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00'}) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000280)="5c61fe48f03bb0adbc2bca5740b2f76b", 0x10) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0x20, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xe}}, [@TCA_RATE={0x0, 0x5, {0x2, 0xfc}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) (async) executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000b80)={0x6, 0x118, 0xfa00, {{0x6f, 0x4, "fca993977b7fbfce6b88c62d1be61472deb111cb4ff38cb106ccd2af21865474db1eca704c05a2d4a704f57d730babf8a8aa10f2e85da553be93df0093675e4cddd5135c825dfeb3c2d2d04b5470a524b287abfb54f43da7fe36e355374136180a30f6160dd696a5c24c09355da79c6531acead5c9be83231c27c5c3d49a9bf9b5796b0cd3168a65acdea0ebd22eec2a8a8fb992dd5c265a221905a249dfb75cd4bbdd10e8865ba10394053d36ad8c0e2e626ca9242976dbe39b14e134cd03e40f1050abf3ed8ce36cb99c2eaf480d8fafcdbb445ef75d43516383522a2de09aea24d933dec2e2c623ecd300", 0x12, 0x9, 0x4, 0x1, 0x2, 0x40, 0x8, 0x1}, r1}}, 0x120) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000001680)={0x2020}, 0x2020) executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) r0 = socket$rxrpc(0x21, 0x2, 0x2) (async) setns(0xc9, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) mount(0x0, 0x0, 0x0, 0x989, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000000)='\x00\xdb\xf9}\x94\xd7\xe5\x1f\xab{\xd0E\xbc\x1f\xb5<\xe4f=\b\x00\x00\x00\x00\x00\x00\x00\xe2\xde\x8c\x10boj\xd3X\x86\v\x8clx=\xbc0F\x94k\x8d\xe0\xeeP\xa8\xa9\x10\xd4\x0f\x1eL!\x82\x8d\x80\xd0#\xca\xaf#\xf6\x95\xf4\xf2\xce\x8f\x8c\xa4\t\xac\x96\x13\x96\xf76\xc1', 0x53) executing program 4: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ftruncate(r0, 0x3) socket$kcm(0x29, 0x7, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb8, r4, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x10, 0x200, 0x674, 0x1, 0x5]}, @NL80211_ATTR_FRAME={0x22, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x4f40}, @broadcast, @device_b, @random="b599da3aa296", {0x0, 0x3}, @value=@ver_80211n={0x0, 0x6, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x1, @void}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x122c}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x36}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x73, 0x3, 0xb]}, @NL80211_ATTR_FRAME={0x22, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x1}, @device_a, @device_b, @random="ee9c44437c58", {0x9, 0x2}, @value=@ver_80211n={0x0, 0x7, 0x2, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1}}, 0x16, @void}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9a5}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40080}, 0x1) r5 = getpgid(0x0) ioctl$UBLK_U_CMD_START_DEV(r3, 0xc0207506, &(0x7f0000000240)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r0, &(0x7f00000002c0)={r3, r3, 0xcdfe}) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000300)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r3}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r3, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={r3, 0x20, &(0x7f00000007c0)={&(0x7f00000006c0)=""/134, 0x86, 0x0, &(0x7f0000000780)=""/2, 0x2}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xe, 0x1c, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x29b, 0x0, 0x0, 0x0, 0x42c}, [@printk={@llx}, @call={0x85, 0x0, 0x0, 0x69}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x2}, @exit, @jmp={0x5, 0x0, 0x4, 0x2, 0x9, 0xffffffffffffffe0, 0x1}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000500)='syzkaller\x00', 0x5, 0x40, &(0x7f0000000540)=""/64, 0x41000, 0x4, '\x00', r8, @fallback=0x1e, r3, 0x8, &(0x7f0000000640)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0xb, 0x4}, 0x10, r9, 0xffffffffffffffff, 0x8, &(0x7f0000000940)=[r3, r1, r3, r10, r11, r3], &(0x7f0000000980)=[{0x1, 0x2, 0xb, 0x7}, {0x2, 0x5, 0x2, 0x8}, {0x5, 0x1, 0xb, 0xb}, {0x4, 0x4, 0xb, 0x6}, {0x5, 0x2, 0x4, 0x4}, {0x3, 0x5, 0x8, 0x7}, {0x4, 0x1, 0x0, 0x2}, {0x2, 0x2, 0x10, 0x7}]}, 0x94) getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000b40)={r3, r11}, 0xc) mount$bind(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00), 0x20018, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000001c40)={0x28, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000c40)="57267c08731334b384e4f50d516134c40d9d8f38ec46e1210e6138bfa6038a86cc1121ddf400b1c3cc47e18ede6696f939a35eed7216476a616b5a22418e2fc5a5061b618e31975cb5a4f8a09e729b1bb5a4d974a178e5ee3c2e627ffac7d11ba90ddc8e181a143cacca7910dc2d6aae04c6833746771307aac89ec6b629c2d3635b543b9cf9e656ef4ef6d53705347db58ad9f57901787d76022e3c0d68dc2b18ca726633ca526893b570b3a1f0246450a472e4a92155cfaec8b2279ae987355f0191dc21d7c2d9b88f0c0dd64f3f2b035f41c57ecbe163236b040542599a43f2d50e00f962a208573ed57fbd7ac093c637f0ad4313db4d0546ef5f92fbc80c94b1fa6981bbbd407caabf5a108ae1ceb17ee92b735c48c84e9f4e5ab552fac55233c27f1fc42b1b0db84a63d23006b984c5de2cb7a5116153d475038cc902bfebaad065b3f2d5e6ac2876c17897724c2793cc83c374fb07f72a6ab78c6d6be6b55be039837d5b8ab3d99664869a98a02cc59cf2c4e4848a91dafe7daebcd4d594dfae3c27bf00698990aa4a4a1ca5d41269885edce7c2d3a39cf6f7ed48da437b60837b3823dfd5572cf7039ad85785cca7a85f1dce758d5c24ccc48fcd05636685e328f240c544e456ea419584f003b34f76faf2fdd4bca93cdac8847ea2cb2eeb58ebc288f27206d2cf3a610505a3a2962b0f79c63d780f537ccfd06e5e328e0419ec3c17b0607f05385fd1edfe559ccf09a8572bda9bdc81e388e1cbcf05e2fa2ef1c7f0347f88a84434bcf4341860076cb0c8cbc2ae8cd32f22d3e975074d77dc87cc93f4e3cb05383adc92473b15ea391ec3f782e0287378c1ccc537ca72a39c3f96f7287fecec37bb18c03179844493cd80659e6aeceb993d68102164b14da290f376a750d17369dde445b60e78f3cc21526e2a61d4e3b2ebd97ae24bda2ecb168f734377789c3d956a896490e755d524f41d121b04baacf1cb6bf30092a936c179310a2257d634a9f2f97c0929e9bc2a9f05486f0d821da16a5758545e078a12f3d853c40a9f1112ceb9fb585507e0d1ec3a056875340fdca33e301e6e15fd5edacc2ed02e7f071ec0f4d3aed601e8c30e91e65e28322cd34858235d562eab2a801904922be88fb9d820f6d36423bfadbca95458eb8cae868d563726ed6f0765126ad41aec6252ed9d937d3c3f3d241f9ba7e0fa29bb65cb36a59fdced1054bbd98038ff8ae7ce884bad94e8485cce0f9cdec0761e3a47ed0e138684ad46c4b292ab80ac22374f6b6d6ec9a62a907a5a3604d7fa254777f5a6e604a1b8485880142855d6894aa42b834bc609dea7b18e8b8a7b3aa2e353c902d66f19ebc88e59a150a8c5f49b1e328c630b20c62f9bfba5febc9cfc5654e365c7cf10e8d825e4e99f6ed1ffb7cc67bd102b6bbee66666f9b5acf6600197ff5ba8fd77b8d88319f5cc0f5d956c38a9b4fac3fdc617741a2d50598bf5fb4496ecc5583934ba2adb04d3d5cbb41373c157395bd6accd289e2754d5adce06b114377beb25bebc0f8235af1c5a2abac7108b93fadabd197e802c50e3e36e6932225cfbc50c40592a60364b0760ff621a36b834fa3babf7b9abe6b41c14816e70af541ab276e2774d96ffd15e491f636e04e1422be78b1af78c7e545a0c7f52592255e376161d061846ed2be8a3005e825388ed22198cf2671b7896087d4a020c70f0bb1539ac7ae74886b3096726d99e6c8a3450f35e7e950ebe40ba95b18dd88642adc8bd6d68bf8e714d4f8e10663338281cd54704b5f97853140143b4b1a3a6e1a05b069989fdf5da3c2d25939d970188bf38e4cc8efd783608e71417415e0315a8fa56a6fcd8ee4c3872b06129a4379068cf8123f1e4c9e04c43e34dd1b4dd18b08db9de37e01b777b18e04ce0197fcd33d3412c9f8efcbc3b18918f39976a4ebcb169efbb78594d5a2012637587f2162faa9c0d291c38f21da930922b35628fdb915169572139c5ea4747fd102849cf4bee169aa2240a3f542949d5ceeafc5a19691956928009f7526f466fd13ff6b6d220b6544226b3eecd25125e6529b8f927c90f2ae1ad419bb0969365188b571e85a45d957b8a8327462a28a16ec6ad7f10b8fd3a223127ba3eecddcc00f946f50b53f24de7c3f693494775d5875cd91e2cbe8d905c350da1a9ea8b8e59dc27f1a7a93aad4b17887f5576cf08e6679ad7f7d924ad5ae79ec8decedbaf3673ea6620c8c08542f77eed08d56f07b50d0afe5f79b85a49d5ce694f1e429b1a3972ee431b4ca0449ddad1247279e2e3df7428cbaa8c1ab0b884c8cc99aefdc8e34c6512ba788063d5a5a9a6e5150da80c73b86f69de573704200cc8e95e4405ec8d9cebb23e1f92f5498e9b97164eae2460c5bb70acd3a92559b95bae54049dde768f55f32633d513ac5adb36deafa1f49bf27cde600f7ea25dfef62e2474789ce2edf4637506e38d93f5b8c41701d6c7df72d1fc87d4e3118a54858f498c0f73a8efabf8431831afb07c144b6b2f25234f2a6c2271f8662eb0217bec48d357dbe4c740464a7ff777ada4aa27348d9bcacde206e156b594949d3b89bd9da9a753f1ce27eb37a34268a5de82747f6988bcb6972ede362945d069cb3c97e5d53bed3526d4a77d6d53c129e26a93d3f43ec01a12494ab5d69d3a7816fe49051679e5673460af761a1728ee8cafe0b0ef5ccbf8f55f696074595222dd1b57473fb1e09ddb87f18ccf3b01e56d4fab3630f8e3053d29a49075ffae6cc5a67ce4f6672ef29399fc9c4b61a6e195d2ed3e8e9c082c3241bee2e1ab2e60077aed9a5437940bcb9c19ec8a2cb7957aa827c050aadb2bbd7e46cdcc281c527e3c00c2272a20962a60e79629f9ed51de7ecf6517760bcec159c54ed5983ba702ec5bba3d6f1cda224a2277b31f191d7e468d4baefc10d50c9150712c2d38135e3a3d8c4c18f2e852866476d13f18bbe466b25e0c7054d3028625265ad46a23e3ca60408063cfb2c2eb202c1eed3b64b213b16c6d31140c62e46137d9a36163d2ccf6222cd166b1c2bb83f701ed26b9ce8dcd52ec7d13bc5f0d855dd102b6f0cd5a8b90e663463119be20eea26cd83f2ab28a5ffc4cbbdefc543f4bd6a50a6a348b914651696ad149597645d513d97f9037205ec8d5db56bd3e25164c04e66ead2e80eb0671e86d3fecb93f46b751d707ec90fb4260aa4c7a357b70238f4cc35d63066bc63d3777166fbc655fc172abee16534e714c8ae5519a0dbb404e52a7ad8dd2d303f5ec9b23b580f923e945958239ca0b5b310a0f5600ab32f6567c1813ad6b02c44adefdc970065754b9c12ecb23513f6313f765ba4e0d3959e3c96c4074af3e6d7f18447ffac93d570984e7372f368f66a3b2f91ee45c19924d9e5cdf9f5c84c44916dc4ca92fe12e5150050df90183bdf79f49b8a312388b958b61428b2b77f93f6fe2e44b44289f3aa7957341d9f418a319de60f8f54a3473d5a37cc298609aea82e1b3a4d1ad9e98ceecd5c85e868511837d1b930e4ce30f8bf07dda3d36d8ad3d0fb76db5402e75f2721d8ede7047d26adecda84d2e9899d92ff25f34d0ac22fd85d46bc24aac2574ba13089a3663a94275a1bb0032640d2e37526afa49b5a03e1e7e4e37591de630e8799acc606f0b221fdce19762a451494c1070d31f42f03dd6ac70ed365eadebf6c03a6dbbac9f769c7c0f3dd380710c3f6bcce5796983aa22c6a2e537324635a8eb0fdac7b4794dda9e44489fd693b087d393e973fe837dd444415c1038ac6a1da36dea0a81d51e236d9d1a5b0e6764ae3f4b854e9cafdff2d01d19e378a45170c8f5e938e74e12716809719efc0a5d8b5fd3815a58e855dbc98024133870d788b72d2f0692aff6e4c614dbaa50fffba0b9ccea8b57ebc345399e8a0f3a09c95a7e4a2c2ab4ec6a9c1d3dca8642e465c0cda81fc5d38d03849ced97f09a70d904e27dbe301c6801fada14b698efb690a946a54eeb9fce7b8cce1701d6453e8dbf6f72c8c31f91f6fb5ca464845d0355de16f986d2d25878610c9620de19f6295139a16b167fec3cb70b27e011c5ab71485ac6a534f8e3178d0c39749d95f21cfa55be1a56c5f368fcbdd35d268685ede235bde3ddbda114718f1e3e6c881b2933c09e9e45a50992d4d5f0735266b4c47dca0e70ae5560d2e79374f46e14cf9530d1908be96294159a40dd5673c7411091e5773357b80093926c3247c8a881f195bb9663e8fd0be274c0269ab760d6ccb72713b2f34fa98b428ef5f60afba1050999bb4fa782f7347ce84bd716a5c66b0ce5aac2266923ce4ee761656ac0ea79d802a79d3768ed6b637c9138cb63701455c67ade581a9f4ab49eabc25530bda36671a52bd4fd224b961fdd64e4e5d12e0a99ada8a1705ca1ae6911e493f95076726df569cda43c37450a59c4b977f3251cb06d7118387d721123cd728c363a658451f5fd09de3b59b8490d6bd9abc42a6e645007d0f60311e74af42d7a0db76d677d011e53e9e0c0f1522780e2bed26739a494bde035e2e03f44c326d10052ab84b838ca1c4eccfd4ef7d14774e0200f01fcb70af46c0cb6db3c261589bafce9fca1bf3fe8d106da31d7b5d21d5c5909c428a509626b7be026b51c36d363cbf37025121d34c86eccf9e0a8500572605044541f09eb5762e9059a022f4fbaf6363301cfe2a9757c953758580062741e76d9ac8401f520bec935e4a0a5703b3bf8cb83f6817007118410c97a5612552b5e5c325c3083bfc1688535aaec9eedaf2bad55c6d75c8ddbf9beeb339827775e11431b8cbb3d5ba8c0d333a1495f2a50f807996e9e8e803a784c26da666243c6e3ab29a0e19cd859c727d04be3b018388399e02d142762edff6e8caf788a7e6295846003d4f0ac6142cc8773059ad9e724a1da10aa3dcd729aeb6625d4eb7c719b064b5e6cc300655a09876c6fdd66fc1a65bf170ecfe8d50973af994c9c0ea8df1fba859dfc89e5776a5015215b39858dca63c7eaae6bfe4fb516286f9d882848bd7e95c173959b55606dd41764d5079121d5df086b7f6dfc2ae3f175f691cb881cab34269ba9090f016a9f21a8e365b3316f0f6cfe0102328a5c7f58064608f31fde36e9d01a93541205c08552b35a35f7178104b37af43e51d00dc1926558bb115717ec41805b29e120519d5912f13713eab9c4242ac70c3c656c6dadcf3ea5bf8178c7b92dcaef17f8e830961fe62c55505574dfbf24f0e704342fc98246431c4789ce8583039c6880714272dbf4d4027acad1782de3a74c254c2d7c8efe03d40e4c28e3bb4084bdb9d8b10a25e2f6ecfb48674aff591ea316f3451aa1916a7fb5c7e704d3fabc5467dc1459537c0f5c20d8d886dd49d7ca92d0f8e02da1bf315e20a820914c3d94783dfa6fef34ad00f549b20f3f93ea4d32b549f785e4098dd9dfd4747836483850f87a2ff37bc82adbea1df8a1843be6b63cbd7e02ed2adcd67971d87ae128e7a79252bbd13a781932fc6bb23fe78c34ba55c5f7b3039f8917216d5b1663f9d854ff5d7b889b8cbce03ac062be1592813a20b3117889cbe397ebafe4e2f4fcf0dd0bdda8e9c70929b503e8cfcab1dab9924efb85c27d435fb281d834a028a92591f1d31d78adf498e21ee65b607dc2889c1998bad1ec37f08f35072c21edb7dbed6fab57cd86059d43acdba81d338daa971f3af5d1098d1f8ddde540a4c681eeeefaa35e53242b4baccaee4af2d2684903e06792bce9016f60f4c985e81f165e3e976ad1c752429a41085e75932b37a4b94c2977"}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r3, 0x3b8b, &(0x7f0000001c80)={0x10, 0x1, r12}) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000001cc0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) openat$autofs(0xffffffffffffff9c, &(0x7f0000001d00), 0x101300, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001d80)=@o_path={&(0x7f0000001d40)='./file0\x00', 0x0, 0x4000}, 0x18) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000001dc0)={0x96f, 0x49433553, 0x2, @stepwise={0xe, 0x9, 0x6, 0x2, 0x0, 0x5}}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000001ec0)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x74}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6001}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008800) ioctl$XFS_IOC_OPEN_BY_HANDLE(r10, 0xc038586b, &(0x7f0000002000)={r10, &(0x7f0000001f00)='@-\x00', 0x80, &(0x7f0000001f40)={@_ha_fsid={[0x3, 0x8]}, {0x1945, 0x9e06, 0x6, 0x8}}, 0x2, &(0x7f0000001f80)={@_ha_fsid}, &(0x7f0000001fc0)=0x9}) executing program 5: io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20002, 0x2}) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xb3) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0xe) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r2, 0x1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r5, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x5c8, &(0x7f0000000880)=ANY=[], 0x0) program did not crash replaying the whole log did not cause a kernel crash single: executing 10 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_uring_setup-open-socket$nl_route-socket$netlink-socket$nl_route-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsmount-bpf$MAP_CREATE-socket$inet_udp-bpf$MAP_UPDATE_ELEM-bpf$PROG_LOAD-socket$inet_tcp-ioctl$sock_SIOCGIFINDEX-bpf$BPF_LINK_CREATE_XDP-syz_emit_ethernet detailed listing: executing program 0: io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20002, 0x2}) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xb3) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0xe) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r2, 0x1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r5, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x5c8, &(0x7f0000000880)=ANY=[], 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vimc2-ftruncate-socket$kcm-socket$phonet_pipe-ioctl$sock_SIOCGIFINDEX_80211-ioctl$KVM_GET_STATS_FD_vm-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_FRAME-getpgid-ioctl$UBLK_U_CMD_START_DEV-kcmp$KCMP_EPOLL_TFD-ioctl$UFFDIO_WAKE-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$BPF_GET_MAP_INFO-bpf$BPF_GET_BTF_INFO-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-getsockopt$PNPIPE_INITSTATE-bpf$PROG_BIND_MAP-mount$bind-ioctl$EXT4_IOC_MIGRATE-ioctl$IOMMU_HWPT_ALLOC$NONE-ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING-ioctl$UFFDIO_WAKE-openat$autofs-bpf$OBJ_GET_MAP-ioctl$VIDIOC_ENUM_FRAMESIZES-sendmsg$NL80211_CMD_CONTROL_PORT_FRAME-ioctl$XFS_IOC_OPEN_BY_HANDLE detailed listing: executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ftruncate(r0, 0x3) socket$kcm(0x29, 0x7, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb8, r4, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x10, 0x200, 0x674, 0x1, 0x5]}, @NL80211_ATTR_FRAME={0x22, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x4f40}, @broadcast, @device_b, @random="b599da3aa296", {0x0, 0x3}, @value=@ver_80211n={0x0, 0x6, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x1, @void}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x122c}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x36}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x73, 0x3, 0xb]}, @NL80211_ATTR_FRAME={0x22, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x1}, @device_a, @device_b, @random="ee9c44437c58", {0x9, 0x2}, @value=@ver_80211n={0x0, 0x7, 0x2, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1}}, 0x16, @void}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9a5}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40080}, 0x1) r5 = getpgid(0x0) ioctl$UBLK_U_CMD_START_DEV(r3, 0xc0207506, &(0x7f0000000240)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r0, &(0x7f00000002c0)={r3, r3, 0xcdfe}) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000300)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r3}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r3, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={r3, 0x20, &(0x7f00000007c0)={&(0x7f00000006c0)=""/134, 0x86, 0x0, &(0x7f0000000780)=""/2, 0x2}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xe, 0x1c, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x29b, 0x0, 0x0, 0x0, 0x42c}, [@printk={@llx}, @call={0x85, 0x0, 0x0, 0x69}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x2}, @exit, @jmp={0x5, 0x0, 0x4, 0x2, 0x9, 0xffffffffffffffe0, 0x1}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000500)='syzkaller\x00', 0x5, 0x40, &(0x7f0000000540)=""/64, 0x41000, 0x4, '\x00', r8, @fallback=0x1e, r3, 0x8, &(0x7f0000000640)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0xb, 0x4}, 0x10, r9, 0xffffffffffffffff, 0x8, &(0x7f0000000940)=[r3, r1, r3, r10, r11, r3], &(0x7f0000000980)=[{0x1, 0x2, 0xb, 0x7}, {0x2, 0x5, 0x2, 0x8}, {0x5, 0x1, 0xb, 0xb}, {0x4, 0x4, 0xb, 0x6}, {0x5, 0x2, 0x4, 0x4}, {0x3, 0x5, 0x8, 0x7}, {0x4, 0x1, 0x0, 0x2}, {0x2, 0x2, 0x10, 0x7}]}, 0x94) getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000b40)={r3, r11}, 0xc) mount$bind(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00), 0x20018, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000001c40)={0x28, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000c40)="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"}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r3, 0x3b8b, &(0x7f0000001c80)={0x10, 0x1, r12}) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000001cc0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) openat$autofs(0xffffffffffffff9c, &(0x7f0000001d00), 0x101300, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001d80)=@o_path={&(0x7f0000001d40)='./file0\x00', 0x0, 0x4000}, 0x18) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000001dc0)={0x96f, 0x49433553, 0x2, @stepwise={0xe, 0x9, 0x6, 0x2, 0x0, 0x5}}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000001ec0)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x74}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6001}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008800) ioctl$XFS_IOC_OPEN_BY_HANDLE(r10, 0xc038586b, &(0x7f0000002000)={r10, &(0x7f0000001f00)='@-\x00', 0x80, &(0x7f0000001f40)={@_ha_fsid={[0x3, 0x8]}, {0x1945, 0x9e06, 0x6, 0x8}}, 0x2, &(0x7f0000001f80)={@_ha_fsid}, &(0x7f0000001fc0)=0x9}) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket$nl_generic-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_DEL_MPATH-sendmsg$NL80211_CMD_NEW_INTERFACE-openat$rfkill-write$rfkill-ioctl$sock_SIOCGIFINDEX-setsockopt$inet_tcp_TCP_FASTOPEN_KEY-sendmsg$nl_route_sched-socket-socket$nl_generic-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_DEL_MPATH-sendmsg$NL80211_CMD_NEW_INTERFACE-openat$rfkill-write$rfkill-ioctl$sock_SIOCGIFINDEX-setsockopt$inet_tcp_TCP_FASTOPEN_KEY-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000040}, 0x220028c4) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r2, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r3, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000280)="5c61fe48f03bb0adbc2bca5740b2f76b", 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0x20, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xe}}, [@TCA_RATE={0x0, 0x5, {0x2, 0xfc}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) socket(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000040}, 0x220028c4) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r2, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r3, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) (async) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00'}) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000280)="5c61fe48f03bb0adbc2bca5740b2f76b", 0x10) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0x20, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xe}}, [@TCA_RATE={0x0, 0x5, {0x2, 0xfc}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) (async) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_sctp-socketpair$nbd-ioctl$sock_SIOCETHTOOL-sendmsg$inet6-fsopen-openat$kvm-ioctl$KVM_CREATE_VM-syz_genetlink_get_family_id$l2tp-openat$ubi_ctrl-sendmmsg$alg-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-sendmmsg$alg-recvmsg-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-pwritev-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f0000000200)=@ethtool_perm_addr={0x12}}) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x4, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{0x0}], 0x1}, 0x4048043) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r4, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725", 0x74}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8", 0x39}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7", 0xcb}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d490", 0xe0}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-socket$nl_route-syz_emit_ethernet-sendmsg$nl_route-openat$iommufd-openat$procfs-mprotect-openat-setreuid-fchmod-ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS-ioctl$IOMMU_DESTROY$stdev-mkdirat-mount-openat-write-socket$nl_route-syz_emit_ethernet-sendmsg$nl_route-openat$iommufd-openat$procfs-mprotect-openat-setreuid-fchmod-ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS-ioctl$IOMMU_DESTROY$stdev detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x4f) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='tcp 2', 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x70, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x3a, 0x3a, 0xff, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x4, {0x6, 0x6, "0e189a", 0x1, 0x3a, 0xff, @remote, @private0, [], "b3ee73f10f4f24e156fc"}}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x44}}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) setreuid(0x0, 0xee00) fchmod(r3, 0x80) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_DESTROY$stdev(r2, 0x3b80, &(0x7f00000000c0)={0x8, r4}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x4f) (async) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) (async) write(r0, &(0x7f0000000300)='tcp 2', 0x5) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x70, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x3a, 0x3a, 0xff, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x4, {0x6, 0x6, "0e189a", 0x1, 0x3a, 0xff, @remote, @private0, [], "b3ee73f10f4f24e156fc"}}}}}}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x44}}, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) (async) setreuid(0x0, 0xee00) (async) fchmod(r3, 0x80) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) ioctl$IOMMU_DESTROY$stdev(r2, 0x3b80, &(0x7f00000000c0)={0x8, r4}) (async) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$usbfs-ioctl$USBDEVFS_DISCONNECT_CLAIM-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-syz_open_dev$sg-ioctl$SG_NEXT_CMD_LEN-pipe2$9p-syz_emit_ethernet-syz_emit_ethernet-close_range detailed listing: executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x1, 0x101801) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f00000000c0)=0x2000024) pipe2$9p(0x0, 0x80800) syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000004c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00060008"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-socket$nl_route-syz_emit_ethernet-sendmsg$nl_route-openat$iommufd-openat$procfs-mprotect-openat-setreuid-fchmod-ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS-ioctl$IOMMU_DESTROY$stdev-mkdirat-mount-openat-write-socket$nl_route-syz_emit_ethernet-sendmsg$nl_route-openat$iommufd-openat$procfs-mprotect-openat-setreuid-fchmod-ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS-ioctl$IOMMU_DESTROY$stdev detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x4f) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='tcp 2', 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x70, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x3a, 0x3a, 0xff, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x4, {0x6, 0x6, "0e189a", 0x1, 0x3a, 0xff, @remote, @private0, [], "b3ee73f10f4f24e156fc"}}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x44}}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) setreuid(0x0, 0xee00) fchmod(r3, 0x80) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_DESTROY$stdev(r2, 0x3b80, &(0x7f00000000c0)={0x8, r4}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x4f) (async) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) (async) write(r0, &(0x7f0000000300)='tcp 2', 0x5) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x70, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x3a, 0x3a, 0xff, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x4, {0x6, 0x6, "0e189a", 0x1, 0x3a, 0xff, @remote, @private0, [], "b3ee73f10f4f24e156fc"}}}}}}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x44}}, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) (async) setreuid(0x0, 0xee00) (async) fchmod(r3, 0x80) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) ioctl$IOMMU_DESTROY$stdev(r2, 0x3b80, &(0x7f00000000c0)={0x8, r4}) (async) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$usbfs-ioctl$USBDEVFS_DISCONNECT_CLAIM-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-syz_open_dev$sg-ioctl$SG_NEXT_CMD_LEN-pipe2$9p-syz_emit_ethernet-syz_emit_ethernet-close_range detailed listing: executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x1, 0x101801) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f00000000c0)=0x2000024) pipe2$9p(0x0, 0x80800) syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000004c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00060008"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$pidfd-fchdir-syz_open_procfs$namespace-mount-syz_init_net_socket$nl_rdma-bpf$MAP_CREATE-sendto$packet-syz_init_net_socket$bt_hci-bind$bt_hci-write$binfmt_misc-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_CRIT_PROTOCOL_START-mount-unshare detailed listing: executing program 0: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x80000, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='[', 0x1, 0x10, 0x0, 0xfffffea8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) unshare(0x2c020400) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$pidfd-fchdir-syz_open_procfs$namespace-mount-syz_init_net_socket$nl_rdma-bpf$MAP_CREATE-sendto$packet-syz_init_net_socket$bt_hci-bind$bt_hci-write$binfmt_misc-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_CRIT_PROTOCOL_START-mount-unshare detailed listing: executing program 0: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x80000, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='[', 0x1, 0x10, 0x0, 0xfffffea8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) unshare(0x2c020400) program did not crash single: failed to extract reproducer bisect: bisecting 45 programs with base timeout 1m40s testing program (duration=1m51s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 21, 15, 19, 25, 15, 15, 21, 30, 5, 10, 19, 9, 3, 12, 14, 10, 5, 30, 9, 30, 13, 22, 6, 4, 12, 25, 8, 21, 21, 19, 7, 24, 9, 16, 13, 40, 21, 2, 6, 22, 7, 10, 30, 16] detailed listing: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x30, r2, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfd, {{0x12}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20042054}, 0x4004) executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x242080, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000001c0)={'macvlan1\x00', @local}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="2be27de13db01225280012800b0001006d616373656300001800028005000f00020000000c004200feffff7fa100000008000500", @ANYRES32=r2], 0x50}}, 0x0) r4 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_KEY(r4, 0x6a, 0x1, 0x0, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@RTM_NEWMDB={0x18, 0x54, 0x1e5}, 0x18}}, 0x4080) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r7, 0x8000000000000003, {0x0, 0xf}, 0xff}, 0x18) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}, @ip_retopts={{0x10}}], 0x30}}], 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getqdisc={0x2c, 0x26, 0x4, 0x870bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x3, 0xffff}, {0xffe0, 0x4}, {0xfff1, 0xd}}, [{0x4}, {0x4}]}, 0x2c}}, 0x4040000) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f000000e000/0x7000)=nil, 0x7000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) futex(&(0x7f0000000580), 0x0, 0x0, &(0x7f0000000600)={0x77359400}, 0x0, 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0}, 0x58) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @private=0xa010100}], 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4b, 0x4b, 0x2, [@datasec={0x9, 0x5, 0x0, 0xf, 0x3, [{0x4, 0xfffffff7, 0x3}, {0x5, 0x1, 0xffffff97}, {0x5, 0x2e8, 0x7}, {0x5, 0xfffffbff, 0x4}, {0x4, 0x7fffffff, 0x80000001}], "312ab4"}]}}, &(0x7f0000000d00)=""/198, 0x66, 0xc6, 0x1}, 0x28) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='io\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000200)=""/218, 0xda}], 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000080)=0x8) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) syz_usb_disconnect(r3) sendmmsg$inet_sctp(r0, &(0x7f0000002ac0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000000000008400000002000000de240102040000006f000000c475ae171b0f8fa3", @ANYRES32=r2], 0x20, 0x20008001}], 0x1, 0x24010000) executing program 2: io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20002, 0x2}) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xb3) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0xb4, 0x24, 0x20, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x84, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0xefdd}, @TCA_GRED_PARMS={0x38, 0x1, {0x101, 0x5, 0xc3, 0x6, 0x4, 0x6, 0x8000, 0x4, 0x2, 0xf5, 0x9, 0x1, 0x13, 0x41, 0x10000, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x6}, @TCA_GRED_PARMS={0x38, 0x1, {0x2, 0x9, 0x4, 0x7, 0x6, 0xffff, 0x2, 0x7f, 0x1, 0x4, 0x16, 0x4, 0x17, 0x2, 0x8, 0x7}}]}}]}, 0xb4}}, 0x4000000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000a000200000000000000000008000900040100"], 0x30}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x1, 0xe) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r3, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r4, 0x1}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, r6, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x5c8, &(0x7f0000000880)=ANY=[], 0x0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x1c801, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1}, './sys_mnt/kernel/mm/transparent_hugepage/khugepaged/pages_to_scan\x00'}) mount(0x0, &(0x7f0000000140)='./sys_mnt\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys_mnt/kernel/mm/transparent_hugepage/khugepaged/pages_to_scan\x00', 0x1, 0x0) write(r2, &(0x7f0000000800)='10', 0x2) mount(0x0, &(0x7f0000000100)='./sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000006800000068000000040000000000000005000007"], 0x0, 0x84, 0x0, 0x1}, 0x28) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys_mnt/module/damon_reclaim/parameters/enabled\x00', 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r7, 0x1, 0x0, 0x25dfdbfb, {{0x2}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1743}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]]}, 0x2c}, 0x1, 0x0, 0x0, 0xffad46ab7102f497}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0x7}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x4, 0x406361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0xffffffffe78a4ee8}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r11, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) write(r3, &(0x7f0000000240)="61e407", 0x3) executing program 2: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x80000, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='[', 0x1, 0x10, 0x0, 0xfffffea8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) unshare(0x2c020400) executing program 32: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x80000, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='[', 0x1, 0x10, 0x0, 0xfffffea8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) unshare(0x2c020400) executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f0000000200)=@ethtool_perm_addr={0x12}}) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x4, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{0x0}], 0x1}, 0x4048043) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r4, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725", 0x74}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8", 0x39}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7", 0xcb}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d490", 0xe0}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000005980), 0x0, 0x80201) write(r1, &(0x7f0000000440)="19718f3d24000000a50c0000ed4a46b1ca9534b61f6aff497b583a578124db953db7a8c62575ff93e0edaacc35b1ef97423bf5347a4aedc5d3f122e82348cf48653eda799cb4720ae8237b654d2c0fce947d29a1beb7d624aa7c199122e45f3005e1bf400b93443dd3c36d5f979bf4d6b628c91cf36e4d0a83af621e995ebc9b5e1be627e54bf9751c136cee808362ab846b99b4c148b02b9a9eb9c32aaf520ca04c5e7013eb7c32af076cfd6c7a2eb50a582b26b2b5bab2dd147d486f33b228c45a5ae012b01d605d7812bd3041bcd06bf80bd3cc8fd14a73373bd6e291532e5e4aeb7458b3f618169ccbd8fb4a761c3d9a03a89dd9b5e6d8494b4cd72ee10e0300c2ce5429b815d9c16855938531c1f1", 0x111) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000180)={[0xa000, 0x8080000, 0xf000, 0x6000], 0x9, 0x82}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0000000d0085a168d0bf46d32345653600648d0a00050002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) sendmsg$nl_route(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000010400000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400030076657468305f746f5f626f6e6400000014002b8008000100", @ANYRES32=r6], 0x48}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) unshare(0x10040000) openat(0xffffffffffffff9c, &(0x7f0000000280)='./gadget/ep1in-bulk\x00', 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r7, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040002000000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r8, 0x0, &(0x7f0000000000)=""/10, 0x2}, 0x20) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000002600)={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x28, 0x66, 0x0, 0xa, 0x11, 0x0, @empty, @empty, {[@generic={0x44, 0x5, "c12e7a"}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6f7377a903000003b6292e8c6adf38c4f067f694d131977bdeba1fd7b16a399b81abf45140c4cd613c96256915aa2f62f69223d27f1761cb50b19231be30ead2f7b6d3a4b0b50b56ee8044224b3a8e40d2f69ad0320961ae6d49045201ef1f5743fee4203207c44a55e42152735c3bb6518aedfc728df7a73b6bbfc9b57958a19b9c59902f02121fcc8550f5f7d1e200"/155]) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000100)=0xc) r1 = syz_open_procfs(r0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0xfff6) executing program 3: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = mq_open(&(0x7f0000000200)='!sel\x00\x00\x00\x10\x94\xcc\x06\x10\xf7-\x95P\xd7dy\x00\x01\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x001\xa1a\xa5\f\xd7\xf15\x06\xc2db\xd8.j}\x1b1\xeb\"\xdbP;`\xeb1\xd2\r\"{\x9fR\xf2n\xb9\x82E', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000140)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000880)=""/202, 0xca, 0x200000200009, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x19, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f00000000c0)={&(0x7f0000000040)=""/76, 0x4c}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x100, 0x0) executing program 3: io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20002, 0x2}) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xb3) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0xb4, 0x24, 0x20, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x84, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0xefdd}, @TCA_GRED_PARMS={0x38, 0x1, {0x101, 0x5, 0xc3, 0x6, 0x4, 0x6, 0x8000, 0x4, 0x2, 0xf5, 0x9, 0x1, 0x13, 0x41, 0x10000, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x6}, @TCA_GRED_PARMS={0x38, 0x1, {0x2, 0x9, 0x4, 0x7, 0x6, 0xffff, 0x2, 0x7f, 0x1, 0x4, 0x16, 0x4, 0x17, 0x2, 0x8, 0x7}}]}}]}, 0xb4}}, 0x4000000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000a000200000000000000000008000900040100"], 0x30}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsmount(r2, 0x1, 0xe) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r3, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r4, 0x1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r5, r7, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x5c8, &(0x7f0000000880)=ANY=[], 0x0) executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x1, 0x101801) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f00000000c0)=0x2000024) pipe2$9p(0x0, 0x80800) syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000004c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00060008"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) executing program 1: r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0001008158", 0x6}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c0000000000000000", @ANYRES32=r0, @ANYRES64=r0], 0x40}, 0x20000000) (async) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0001008158", 0x6}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c0000000000000000", @ANYRES32=r0, @ANYRES64=r0], 0x40}, 0x20000000) executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fe, 0x0, 0xc000, 0x2000, &(0x7f0000008000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) accept(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) (async) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@mpls_getroute={0x1c, 0x1e, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x2}}, 0x1c}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000000000400000002000000000000080000000000006100", @ANYRES16=r1, @ANYRES64=r0], 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r4, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xd4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}, [@replay_val={0x10, 0xa, {0x70bd2a, 0x70bd2a, 0x1}}, @sec_ctx={0xc, 0x8, {0x8}}]}, 0xd4}}, 0x0) (async) r3 = syz_clone(0x8000000, &(0x7f0000000000)="4f85434826e37138d1e862249b4a3374be094ac429b89ab959690a36edf7c2922a5092311911fe7eda9f816e4805d213cdcb1a3290e9cf8c31db538bbff32f88cc445a92677ac3e63978810901beb89ba23af91166", 0x55, &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000004c0)="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") (async) capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000300)={0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) (async) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) ptrace$PTRACE_SETSIGMASK(0x420b, r3, 0x8, &(0x7f00000014c0)={[0x8]}) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a7000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newsa={0x17c, 0x1a, 0x1, 0xfffffffd, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x3e}, @in=@local, 0xfffc}, {@in=@rand_addr=0x64010100, 0x0, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x1}, {0x3}, {0x0, 0x7}, {0x0, 0x6, 0x2}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x60}, [@algo_auth={0x89, 0x1, {{'sha1\x00'}, 0x208, "3cbfd71c56bfe9361d559cf01c6654b099b32c0048344c16247c6463bfd17cae07092b5aa016ff5cecaf65f2a3f2b0bf5e52a5f316c7b7fa43647ee9c90faa33e5"}}]}, 0x17c}}, 0x8000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) syz_extract_tcp_res(&(0x7f0000000180)={0x41424344, 0x41424344}, 0x13b31b46, 0x10) write$tun(r0, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x0, 0x400, 0x14, 0xa}, @ipv4=@tcp={{0x6, 0x4, 0x2, 0x8, 0x94, 0x64, 0x0, 0xb, 0x6, 0x0, @rand_addr=0x64010100, @multicast1, {[@timestamp={0x44, 0x4, 0x89, 0x0, 0x8}]}}, {{0x4e20, 0x4e24, 0x41424344, r4, 0x0, 0x0, 0x5, 0x20, 0x105, 0x0, 0xffff}, {"beb364c192856cee524db8dc98457f10be9f89eff700d83130f1a13ce829e55086d65862fe3868cc03a052af5da38b62af0ae89aeaff07654822eeda9281ac2a7568208cad100000cd3904f2fb7f7703a8232728fba8b62a3c10b500adc6512902d186a181bfcc3e"}}}}, 0xa2) executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000280)) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x4f) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='tcp 2', 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x70, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x3a, 0x3a, 0xff, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x4, {0x6, 0x6, "0e189a", 0x1, 0x3a, 0xff, @remote, @private0, [], "b3ee73f10f4f24e156fc"}}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x44}}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) setreuid(0x0, 0xee00) fchmod(r3, 0x80) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_DESTROY$stdev(r2, 0x3b80, &(0x7f00000000c0)={0x8, r4}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x4f) (async) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) (async) write(r0, &(0x7f0000000300)='tcp 2', 0x5) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x70, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x3a, 0x3a, 0xff, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x4, {0x6, 0x6, "0e189a", 0x1, 0x3a, 0xff, @remote, @private0, [], "b3ee73f10f4f24e156fc"}}}}}}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x44}}, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) (async) setreuid(0x0, 0xee00) (async) fchmod(r3, 0x80) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) ioctl$IOMMU_DESTROY$stdev(r2, 0x3b80, &(0x7f00000000c0)={0x8, r4}) (async) executing program 33: r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x1, 0x101801) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f00000000c0)=0x2000024) pipe2$9p(0x0, 0x80800) syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000004c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00060008"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) executing program 34: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x4f) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='tcp 2', 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x70, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x3a, 0x3a, 0xff, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x4, {0x6, 0x6, "0e189a", 0x1, 0x3a, 0xff, @remote, @private0, [], "b3ee73f10f4f24e156fc"}}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x44}}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) setreuid(0x0, 0xee00) fchmod(r3, 0x80) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_DESTROY$stdev(r2, 0x3b80, &(0x7f00000000c0)={0x8, r4}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x4f) (async) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) (async) write(r0, &(0x7f0000000300)='tcp 2', 0x5) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x70, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x3a, 0x3a, 0xff, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x4, {0x6, 0x6, "0e189a", 0x1, 0x3a, 0xff, @remote, @private0, [], "b3ee73f10f4f24e156fc"}}}}}}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x44}}, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) (async) setreuid(0x0, 0xee00) (async) fchmod(r3, 0x80) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) ioctl$IOMMU_DESTROY$stdev(r2, 0x3b80, &(0x7f00000000c0)={0x8, r4}) (async) executing program 0: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x40, 0x0, 0xa}, 0x18) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="694a4a3e3cbac01a80081e3f2a742de9", 0x10) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) getdents(r1, &(0x7f00000001c0)=""/240, 0xf0) (async) getdents64(r1, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x100000001) (async) sendmsg$inet(r3, &(0x7f0000000100)={&(0x7f0000000180)={0x2, 0x4e26, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @rand_addr=0x64010102}}}], 0x38}, 0x4000004) (async) semget$private(0x0, 0x6, 0x3b1) (async) semctl$SEM_STAT_ANY(0x0, 0x4, 0x14, &(0x7f0000000000)=""/164) socket(0x1d, 0x2, 0x6) write(r2, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x2}, &(0x7f0000000100)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x128, r2, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x23}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x643}, @NL80211_ATTR_TX_RATES={0x100, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0xb8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7f, 0x9, 0x6, 0x5, 0xf9, 0x1, 0x3ff]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x1, 0x9}, {0x5, 0x1}, {0x1, 0x8}, {0x1, 0x7}, {0x2, 0x9}, {0x3, 0x3}, {0x2, 0x4}, {0x4, 0x5}, {0x3, 0x6}, {0x1, 0x3}, {0x5, 0x2}, {0x1, 0x2}, {0x0, 0x8}, {0x1, 0x9}, {0x5}, {0x7, 0x8}, {0x3, 0x3}, {0x3, 0x5}, {0x1, 0x6}, {0x3, 0x8}, {0x0, 0xa}, {0x5, 0x5}, {0x4, 0x9}, {0x5, 0x9}, {0x2, 0x3}, {0x2, 0x4}, {0x4, 0x1}, {0x5, 0x5}, {0x0, 0x4}, {0x1, 0x8}, {0x7}, {0x1}, {0x5, 0x3}, {0x1, 0x6}, {0x3, 0x7}, {0x2, 0x4}, {0x4, 0xa}, {0x2, 0x9}, {0x0, 0x8}, {0x4, 0x3}, {0x3, 0x8}, {0x7, 0x9}, {0x5}, {0x7, 0x7}, {0x0, 0x3}, {0x6, 0x9}, {0x0, 0x5}, {0x2, 0x6}, {0x5, 0x8}, {0x6, 0x9}, {0x7, 0x8}, {0x1, 0x7}, {0x7, 0x5}, {0x0, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xf23, 0x1, 0x7, 0x2000, 0xd, 0x8, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0xd, 0xd, 0x2, 0x5, 0x1, 0xfeff, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x9, 0xfbff, 0x24, 0x400, 0x800, 0x2, 0x2a78]}}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xe4c9, 0xc5, 0x9, 0x10, 0x1000, 0x5, 0xff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, 0x128}, 0x1, 0x0, 0x0, 0xc006}, 0x8044) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) r3 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x36, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0xc, 0x1e, &(0x7f00000000c0)="7d1faf49cdeb662a1a2e37edea03fb7c34a4d03b86c338c83afb9a7a03b0", 0x1, 0x1}]}) (async, rerun: 64) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async, rerun: 64) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/46, 0x2e}], 0x1, &(0x7f0000000600)=""/192, 0xc0}, 0x161) (async, rerun: 32) r8 = socket$kcm(0x2, 0x1, 0x84) (rerun: 32) setsockopt$sock_attach_bpf(r8, 0x84, 0x9, &(0x7f0000000380), 0x98) (async, rerun: 64) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000001000390400000010000000000000000016f2ec767c88162e2837cf4b849895af724d055dfd81817dedd3", @ANYRES32=r7, @ANYBLOB="01980600000000001800128008000100677265000c00028008000700ac141402"], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (rerun: 64) sendto$packet(r4, &(0x7f0000000240)="3b826a8687", 0x5, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r7, 0x1, 0x4, 0x6, @multicast}, 0x14) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40091}, 0x48854) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x4, 0xa, 0x701, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000020) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) readv(r0, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/246, 0xf6}], 0x1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) ppoll(&(0x7f00000004c0)=[{r0}], 0x1, &(0x7f0000000500)={0x0, 0x3938700}, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000240)={0x301, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) (async) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) (async) syz_emit_ethernet(0x146, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0) executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000380)="270502001a0014000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102821880b", 0x44}, {&(0x7f00000007c0)="b54e8224", 0x4}, {&(0x7f0000000040)="b9b2888fd608c639f9f539a931d941265e40c9b526", 0x15}, {&(0x7f0000000400)="a771936082af", 0x6}], 0x4}, 0x1800) write$cgroup_devices(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='b *:2 m'], 0x9) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f00000008c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000600)={0x24c, 0x13, 0x10, 0x70bd2a, 0x25dfdbfc, {0x26, 0x5, 0x0, 0x3, {0x4e20, 0x4e21, [0x400, 0x77, 0x99e, 0x7], [0x38d, 0x10002000, 0x4, 0xfffffffe], 0x0, [0x4, 0xffff]}, 0x1, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x4a, 0x1, "f89784b9ad6a6512b85263790839d2ec6fe2d28921bc4be229cccbdacf5219572dfaf9e2230c2363794ce6a449f430c1ec67e98d7c941fdb846a0fde8a97d9524e52931f4685"}, @INET_DIAG_REQ_BYTECODE={0xd5, 0x1, "39f85b6ef9ab33e242734c5fc5d9dd923fba393ff69fe40e2cf8c13f922e148260f1933dd9e02d825053774a500f09384e2b09614ac970731106edf22c56ac9f398c0e8bafc5b044225d4745f24048271be8f330408a43e5aa6cd1a8b69a99b12be81ab977c50a6e68d7d0bf86612540878dd61c350f6c73708f9baeeecd35dd3f2e544248ad64bedf6249d99f6285b69c94b9ad32ef21bb0c2cac220e3d78cc028d4bf11b5cae77771c97f859d99c9355267ae7dc260ce80328be5c82933e56efb555e2cb3b519f2008d2aa6971ea3c93"}, @INET_DIAG_REQ_BYTECODE={0xdb, 0x1, "060bf3233b64082120a8d0a532a88e8e50aca4f4ace93d86ce2451f38ed0f9edca8e9d6cc28d809363b36e1166167afecde36aa88122fe18d4aee01fd63f9526230d38674ec75eca845023e47e3cbee7bb432c5a90069b626067eccf62516570e85ea1104e6d1a3502cbdcda7585163d9bc646654d2fda7782aae0b547bebae0020ace72e416b5072db3e71c1c14e687bde76ff60653e1e784ff6220e68ed8f81635a881cd5803f61501204928ec74305868b04ef07c3f8eb3b510446fcdb5254b33cc623f63fc63151e49bee0fbe3e63fb94dfb43e459"}]}, 0x24c}, 0x1, 0x0, 0x0, 0x1abe9132536f29f4}, 0x20000001) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4622, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x0, 0x0, 0x400}}}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xa, 0xfff1}, {0x10, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r7, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000900000000000500200001000000050008"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x74, 0x4, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xbd9}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x809b}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008000}, 0x40082) executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18, &(0x7f00000001c0)={&(0x7f0000000140)="5ab37158946b88213a", 0x9}, 0x1, 0x0, 0x0, 0x20008840}, 0x4000000) readv(r0, &(0x7f00000000c0)=[{&(0x7f00000014c0)=""/4105, 0x1009}], 0x1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0x4, 0x0, &(0x7f0000004800)) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffe49}, 0x42) executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f0000000200)=@ethtool_perm_addr={0x12}}) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x4, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{0x0}], 0x1}, 0x4048043) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r4, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725", 0x74}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8", 0x39}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7", 0xcb}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d490", 0xe0}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="4f1a000000000000240012800b00010067656e657665000014000280050008000100000005000c000100000008000a00", @ANYRESDEC], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000300), 0x40000000000000fb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000240)=0x1) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000100)={0x0, 0xffff, 0x0, 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x8000}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000003c0)={0x3, 0x1, 0x4044000, 0x1000, &(0x7f0000690000/0x1000)=nil}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @tid=r2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) ioctl$CEC_DQEVENT(r6, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r6, 0xc0506107, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a00120002002800000019002d4400009b84136ef75afb83de066a5900e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) unshare(0x2040400) timerfd_create(0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000200)=0x3) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) ppoll(&(0x7f0000000000)=[{r3, 0x1000}], 0x1, 0x0, 0x0, 0x0) write$sndseq(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000001140)={0x80, 0x21, 0x3, 0x7}) pwritev(r2, &(0x7f0000000700)=[{&(0x7f00000003c0)='\x00!', 0x2}, {&(0x7f00000005c0)="c021", 0x2}], 0x2, 0x1, 0x407ff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000280)={[{0x1, 0x1, 0xa3, 0x7f, 0x0, 0x0, 0x7, 0x4, 0x40, 0xe, 0x4, 0x1, 0x1}, {0xffffffff, 0x1, 0x98, 0x8, 0x4, 0x4, 0x6, 0x80, 0x1, 0x9, 0x1, 0x42, 0x200}, {0xfffffff6, 0x5, 0xc, 0x5, 0x10, 0x10, 0x2, 0x3, 0x6b, 0xee, 0xe, 0x4, 0x3ff}], 0x3}) getdents(r4, &(0x7f0000000040)=""/50, 0x32) getdents64(r4, 0x0, 0x43) read$eventfd(r4, &(0x7f0000000240), 0x8) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000001c0)={0x0, 0x346f, 0x40000060, 0x100007d, 0x5, "9f940b3491d052d172e0e573229ac6de50806c"}) mount$9p_fd(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@aname={'aname', 0x3d, '\x9e\x01h\n\xcd\xf1\x833g\x91\xabP\x99\xf4V\xbaP\xa99\xa8N\t.\xf5\v\x97\xc5\xc4\xf4~\xe2\xa6^\\\x1a \x84\xc7*\xe3\xf2Y\xc6\xb8\xa0\xa4`&\a\x91/\x9dq\xb5\xc2S\xef\xcf\x12\x96+\xe8\xd0\xff\xff\x1d\xc6\x84\xcf\xcb\xabq\xcaF!3'}}]}}) executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'bridge0\x00', {0x1}, 0xdd3c}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0xffd}}) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r2, 0xfffffffffffffc01, 0x0) write$tun(r1, &(0x7f0000000080)={@val={0x0, 0x1c}, @void, @ipv6=@gre_packet={0x2, 0x6, "96f363", 0x273, 0x2f, 0xff, @private1, @mcast2, {[@fragment={0x4, 0x0, 0x6, 0x0, 0x0, 0x1a, 0x68}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xca, 0x2, [], "3c7e49a693acaecbb67655515f7c6521dc2f809f0ae0d283bc21edb7d05aec01d780c9710e97e7f1a102ec98243b2bc30fb07889356b660f1a4b8d9c2ed193335cf9156e0ea6c63fe8dcab201812bb73121bfecf052c5370e39237cc1f3f377fd870887f05b26db6c15b151d852773e8ef8f4f9f413c8858d00c4286fe6a63364fa132c721b855a8a2cab427f3e50ce9578ccb241c16041a9c7f9cbc7570533639d6452c1d4c834195ae4c39d096a362d5e97abac8887a59c29b552f965e3f19e9f0e83180b3747aaf7c"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0xfffb, 0x4], "f4d82edc863858fd1cf746c8f0407d61a15c4067e19202e634c412c96d8ccfa56d51bb1bbeb0019f18989158ec3a0056662b82690788fef814c88f6de292bf70ac10c20812d969b4e6ef7d"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x40, 0x800], "29d5edd037c06aacc275bc9062580b350dff0980d352ad153f143fd643c756aa3b6cbc78c31ac4533f6001bb05459da2a06f250bb79d6c40146ff17bf689cdc960ece7920fe59fbfd87deb59701ae48cb87fd163a549fa83449fb0bfc655d5d873a248cc67570be3d29e99977755e55896c872432b5dda789092b377924a99bf151f2ec0f542fb7d35e572f28fba3407989aaf4b0810f75bd51fce4d0c4e06082896d7a85c7648af60a72e3d19a0ebead37d78deebffebf56a92f960fdac63ff61e835f82b9e7ce518d398937cb394e0357ad03319f8b8968f9b26bf24371fbe59fda86234191c82e856f286c46ce4e203bd052d44527536d3091fde6bad"}, {0x8, 0x88be, 0x0, {{0x1, 0x1, 0x8, 0x0, 0x1, 0x2, 0x0, 0x8}}}, {0x8, 0x22eb, 0x1, {{0x2, 0x2, 0x4, 0x3, 0x0, 0x1, 0x5, 0x80}, 0x2, {0xd, 0xff4e, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x3, "afa529cb7edce646ff2bb4b0"}}}}}, 0x29f) executing program 6: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f0000000000)=""/62, 0x28000, 0x800, 0x9, 0x2}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x1000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4510}, 0x1}) (async) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4510}, 0x1}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) (async) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x9) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x40, 0x4, 0x7fff8, 0x6}, 0x14) (async) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x40, 0x4, 0x7fff8, 0x6}, 0x14) sendto$inet(r8, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) (async) sendto$inet(r8, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000340)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x2, 0x2003) (async) r1 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='vegas', 0x5) (async) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) executing program 6: io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20002, 0x2}) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xb3) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0xe) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r2, 0x1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r5, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x5c8, &(0x7f0000000880)=ANY=[], 0x0) executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2}, &(0x7f00000005c0)=0x20000, &(0x7f00000001c0)=r1}, 0x20) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) (async) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) (async) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) r4 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000340)={0x2, 0x0, @b}, 0x48, r3) keyctl$search(0xa, r4, &(0x7f0000000400)='user\x00', &(0x7f0000000500)={'syz', 0x1}, r3) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r2, &(0x7f00000005c0)}, 0x20) (async) r5 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x8000) ioctl$RTC_IRQP_SET(r5, 0x4008700c, 0x1c99) executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x8000000004) (async) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001500add427323b472545b4560a117fff0b0082001b5980000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffff62fa86b3c67992f7d4f78c24f9", 0x46}, {&(0x7f00000000c0)="abd9", 0x2}, {&(0x7f0000000180)="3346252f5a393a2808d91260734f8244", 0x10}], 0x3) (async) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001500add427323b472545b4560a117fff0b0082001b5980000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffff62fa86b3c67992f7d4f78c24f9", 0x46}, {&(0x7f00000000c0)="abd9", 0x2}, {&(0x7f0000000180)="3346252f5a393a2808d91260734f8244", 0x10}], 0x3) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x80, 0x0) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x5}) fcntl$lock(r3, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) (async) fcntl$lock(r3, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) mkdir(&(0x7f00000001c0)='./bus\x00', 0x40) (async) mkdir(&(0x7f00000001c0)='./bus\x00', 0x40) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) setxattr$incfs_id(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f0000000200)={'0000000000000000000000000000000', 0x31}, 0x20, 0x1) close(0x3) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x6a182, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000040)=0x4004680) pwritev(r6, &(0x7f0000000780)=[{&(0x7f0000000180)="80fd0fe874bf", 0x6}], 0x1, 0x0, 0x9) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) keyctl$session_to_parent(0x12) (async) keyctl$session_to_parent(0x12) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40840200}, 0xc, &(0x7f0000000600)={&(0x7f00000007c0)={0x2b4, r7, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x54}}}}, [@NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ibss_ssid}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x2b}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0xd37}, @NL80211_MESHCONF_HT_OPMODE={0x6}, @NL80211_MESHCONF_ELEMENT_TTL={0x5}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x2}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x6}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0xf}]}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xffff0001}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x2}, @NL80211_ATTR_IE={0x21e, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x28, 0x9d, 0x80}}, @tim={0x5, 0x3f, {0x1f, 0x1b, 0x1, "91bb62c10a26a444f634b35b2d583f67a0cab22b3bb04593c6ad13c74a48bc2960f23a3c191e1a82ba9c45dbb1863386ef2de5f293e23936b07d960e"}}, @ibss={0x6, 0x2, 0x101}, @ibss={0x6, 0x2, 0x40}, @random={0x80, 0x23, "b01d45f3634d7b0c98f1eb169d515c8b1f120d804841fd499299bdf30bae06ed37c6ed"}, @mesh_id={0x72, 0x6}, @ssid={0x0, 0xa, @random="500ac89e6c7292de64a9"}, @mic={0x8c, 0x18, {0xfb0, "33908bf989dd", @long="719baa92fd44756f108237ad8f56f6d9"}}, @perr={0x84, 0x14c, {0x3, 0x12, [{{0x0, 0x1}, @device_a, 0x47b, @value=@broadcast, 0x1c}, {{}, @broadcast, 0x7, @void, 0x2e}, {{0x0, 0x1}, @device_b, 0x5, @value=@broadcast, 0xb}, {{0x0, 0x1}, @device_a, 0x8, @value, 0x13}, {{0x0, 0x1}, @device_a, 0x2, @value, 0x16}, {{0x0, 0x1}, @broadcast, 0xffff03c1, @value, 0x40}, {{0x0, 0x1}, @broadcast, 0xa0000000, @value, 0x15}, {{0x0, 0x1}, @device_b, 0x8d, @value=@broadcast, 0x8}, {{0x0, 0x1}, @device_b, 0x5, @value=@broadcast, 0x30}, {{0x0, 0x1}, @device_b, 0x5, @value=@broadcast, 0x5}, {{0x0, 0x1}, @broadcast, 0x6, @value=@broadcast, 0x3b}, {{0x0, 0x1}, @device_b, 0xfa, @value=@device_b, 0x18}, {{}, @broadcast, 0x80000001, @void, 0x8}, {{0x0, 0x1}, @broadcast, 0x9, @value, 0x1e}, {{0x0, 0x1}, @broadcast, 0x7, @value=@broadcast, 0x3f}, {{0x0, 0x1}, @broadcast, 0x1, @value=@broadcast, 0x21}, {{0x0, 0x1}, @device_a, 0x7, @value=@broadcast, 0xc}, {{0x0, 0x1}, @device_a, 0x7, @value=@device_b, 0x3f}]}}, @tim={0x5, 0x28, {0x5, 0x30, 0x9, "32f6c1fee688ab5c6580eaf51c35823e60db68036a7f687d3371a65666c70090b91dfea665"}}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x24002010}, 0x1) write$nci(r2, &(0x7f0000000180)=@NCI_OP_CORE_INTF_ERROR_NTF={0x0, 0x1, 0x3, 0x8, 0x1, {0x0, 0x3}}, 0x5) r8 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0xff, 0x0, 0x0, 0x2000000, 0x800000, 0x2}}) write$nci(r8, &(0x7f0000000680)=@NCI_OP_CORE_CONN_CREDITS_NTF={0x0, 0x1, 0x3, 0x6, 0x2, {0x3, [{0x3, 0x3}, {0x0, 0x7}, {0x3, 0x7}]}}, 0xa) (async) write$nci(r8, &(0x7f0000000680)=@NCI_OP_CORE_CONN_CREDITS_NTF={0x0, 0x1, 0x3, 0x6, 0x2, {0x3, [{0x3, 0x3}, {0x0, 0x7}, {0x3, 0x7}]}}, 0xa) mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, &(0x7f0000000140)={'trans=virtio,', {[{@version_u}]}}) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000000c0)='bond_slave_1\x00') (async) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000000c0)='bond_slave_1\x00') executing program 6: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f0000000200)=@ethtool_perm_addr={0x12}}) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x4, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{0x0}], 0x1}, 0x4048043) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r4, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725", 0x74}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8", 0x39}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7", 0xcb}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d490", 0xe0}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r0, 0x5411, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}) executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x5) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400461f1, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, r2, 0x1, 0x0, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xaa34a4cffb93b201}, 0x10) executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000040}, 0x220028c4) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r2, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r3, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000280)="5c61fe48f03bb0adbc2bca5740b2f76b", 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0x20, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xe}}, [@TCA_RATE={0x0, 0x5, {0x2, 0xfc}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) socket(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000040}, 0x220028c4) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r2, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r3, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) (async) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00'}) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000280)="5c61fe48f03bb0adbc2bca5740b2f76b", 0x10) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0x20, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xe}}, [@TCA_RATE={0x0, 0x5, {0x2, 0xfc}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) (async) executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000b80)={0x6, 0x118, 0xfa00, {{0x6f, 0x4, "fca993977b7fbfce6b88c62d1be61472deb111cb4ff38cb106ccd2af21865474db1eca704c05a2d4a704f57d730babf8a8aa10f2e85da553be93df0093675e4cddd5135c825dfeb3c2d2d04b5470a524b287abfb54f43da7fe36e355374136180a30f6160dd696a5c24c09355da79c6531acead5c9be83231c27c5c3d49a9bf9b5796b0cd3168a65acdea0ebd22eec2a8a8fb992dd5c265a221905a249dfb75cd4bbdd10e8865ba10394053d36ad8c0e2e626ca9242976dbe39b14e134cd03e40f1050abf3ed8ce36cb99c2eaf480d8fafcdbb445ef75d43516383522a2de09aea24d933dec2e2c623ecd300", 0x12, 0x9, 0x4, 0x1, 0x2, 0x40, 0x8, 0x1}, r1}}, 0x120) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000001680)={0x2020}, 0x2020) executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) r0 = socket$rxrpc(0x21, 0x2, 0x2) (async) setns(0xc9, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) mount(0x0, 0x0, 0x0, 0x989, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000000)='\x00\xdb\xf9}\x94\xd7\xe5\x1f\xab{\xd0E\xbc\x1f\xb5<\xe4f=\b\x00\x00\x00\x00\x00\x00\x00\xe2\xde\x8c\x10boj\xd3X\x86\v\x8clx=\xbc0F\x94k\x8d\xe0\xeeP\xa8\xa9\x10\xd4\x0f\x1eL!\x82\x8d\x80\xd0#\xca\xaf#\xf6\x95\xf4\xf2\xce\x8f\x8c\xa4\t\xac\x96\x13\x96\xf76\xc1', 0x53) executing program 4: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ftruncate(r0, 0x3) socket$kcm(0x29, 0x7, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb8, r4, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x10, 0x200, 0x674, 0x1, 0x5]}, @NL80211_ATTR_FRAME={0x22, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x4f40}, @broadcast, @device_b, @random="b599da3aa296", {0x0, 0x3}, @value=@ver_80211n={0x0, 0x6, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x1, @void}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x122c}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x36}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x73, 0x3, 0xb]}, @NL80211_ATTR_FRAME={0x22, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x1}, @device_a, @device_b, @random="ee9c44437c58", {0x9, 0x2}, @value=@ver_80211n={0x0, 0x7, 0x2, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1}}, 0x16, @void}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9a5}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40080}, 0x1) r5 = getpgid(0x0) ioctl$UBLK_U_CMD_START_DEV(r3, 0xc0207506, &(0x7f0000000240)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r0, &(0x7f00000002c0)={r3, r3, 0xcdfe}) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000300)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r3}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r3, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={r3, 0x20, &(0x7f00000007c0)={&(0x7f00000006c0)=""/134, 0x86, 0x0, &(0x7f0000000780)=""/2, 0x2}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xe, 0x1c, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x29b, 0x0, 0x0, 0x0, 0x42c}, [@printk={@llx}, @call={0x85, 0x0, 0x0, 0x69}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x2}, @exit, @jmp={0x5, 0x0, 0x4, 0x2, 0x9, 0xffffffffffffffe0, 0x1}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000500)='syzkaller\x00', 0x5, 0x40, &(0x7f0000000540)=""/64, 0x41000, 0x4, '\x00', r8, @fallback=0x1e, r3, 0x8, &(0x7f0000000640)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0xb, 0x4}, 0x10, r9, 0xffffffffffffffff, 0x8, &(0x7f0000000940)=[r3, r1, r3, r10, r11, r3], &(0x7f0000000980)=[{0x1, 0x2, 0xb, 0x7}, {0x2, 0x5, 0x2, 0x8}, {0x5, 0x1, 0xb, 0xb}, {0x4, 0x4, 0xb, 0x6}, {0x5, 0x2, 0x4, 0x4}, {0x3, 0x5, 0x8, 0x7}, {0x4, 0x1, 0x0, 0x2}, {0x2, 0x2, 0x10, 0x7}]}, 0x94) getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000b40)={r3, r11}, 0xc) mount$bind(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00), 0x20018, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000001c40)={0x28, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000c40)="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"}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r3, 0x3b8b, &(0x7f0000001c80)={0x10, 0x1, r12}) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000001cc0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) openat$autofs(0xffffffffffffff9c, &(0x7f0000001d00), 0x101300, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001d80)=@o_path={&(0x7f0000001d40)='./file0\x00', 0x0, 0x4000}, 0x18) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000001dc0)={0x96f, 0x49433553, 0x2, @stepwise={0xe, 0x9, 0x6, 0x2, 0x0, 0x5}}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000001ec0)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x74}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6001}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008800) ioctl$XFS_IOC_OPEN_BY_HANDLE(r10, 0xc038586b, &(0x7f0000002000)={r10, &(0x7f0000001f00)='@-\x00', 0x80, &(0x7f0000001f40)={@_ha_fsid={[0x3, 0x8]}, {0x1945, 0x9e06, 0x6, 0x8}}, 0x2, &(0x7f0000001f80)={@_ha_fsid}, &(0x7f0000001fc0)=0x9}) executing program 5: io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20002, 0x2}) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xb3) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0xe) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r2, 0x1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r5, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x5c8, &(0x7f0000000880)=ANY=[], 0x0) program crashed: general protection fault in dummy_udc_start bisect: bisecting 45 programs bisect: split chunks (needed=false): <45> bisect: split chunk #0 of len 45 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=1m47s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 10, 5, 30, 9, 30, 13, 22, 6, 4, 12, 25, 8, 21, 21, 19, 7, 24, 9, 16, 13, 40, 21, 2, 6, 22, 7, 10, 30, 16] detailed listing: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xd4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}, [@replay_val={0x10, 0xa, {0x70bd2a, 0x70bd2a, 0x1}}, @sec_ctx={0xc, 0x8, {0x8}}]}, 0xd4}}, 0x0) (async) r3 = syz_clone(0x8000000, &(0x7f0000000000)="4f85434826e37138d1e862249b4a3374be094ac429b89ab959690a36edf7c2922a5092311911fe7eda9f816e4805d213cdcb1a3290e9cf8c31db538bbff32f88cc445a92677ac3e63978810901beb89ba23af91166", 0x55, &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000004c0)="1f49e2b99df6c4b0d6e18597b249c2a5a57602a05bac6327c0c311c0025f88a5e75820f0be704af497b0f0fa0cfd648af8e1cea768600c9291b7ab489559b44bcc14d8082d47a59ae8e995e0d81bfee5fc428c82e36342bd7ee26e3edd069a62d64fbc106aba765ac51990d202d1d80908e6386d49a7481565da5bf0b841d8f0ffc576f736831b3434ac52d8bf45cc631d7598d94529690f8a4acfdab82dab807cdcbf18835bfa5d1b8ae7b1027fe26d807402178b69edcd827b300a1c567c227ce30174abc3f27f133f6aae44488cbb676350a422597b9cc191f843e435640cae777235ddbb3f5700ae6e414773246bec41e60655078d44fa6eaee9a76f201ea7e529561ae8b8aaedb6a0a25057f80cedca070341e638d0d0ff5325d3d8b874bd2744b98c23871609f51ce51ad4fe1205fd7a26e0287530bf4248f811639009b80133253da6b216521e4b824c749a4887701a787a56d14276e2c2a25622fe6d1ae12d3c1bc218764dc2731e3dba7c82925eaafe2e30b3a7ebc21cebc89af91d9ef5762935a72c8f1d8ff5c6d104c6724d219b5c731e817e704356dc96c55ebaecf97d9a5b133a9d13dea473aa4ee23065c8e6be48462ae249423c194f88171b964087571bbf075b2ecbdc32965288c40b5ed9352f06194ca8c6677f38a58c184ef64492ba8dd62bb8c50c8fe398ca55465bf66c8d429259cfb34ff0eac2cded779d9e4184f383e39480b2f7108be059f090474df1651b2c68f70064cc08f2b16656d43ef039a8cbfb2092853ee4d6364e5ca9b30192f69ae3d50f4e7504a38a44e05106e6d358fefd049cda5f8b27764231823d27fc5e4eb88d175de98184ba926929b86f3e06a824fb7974ec18c7a3e31d8188e97ee9d93a5f82757dc55f63dab24e696e79244a57dcbd28e92d25f1ff6c9cdf89413abe47c8d88a1f86509387252ac8a318b96a6805232ff794aa5bfc787c61fe9dd0b880821c827a45b1b88021d85078bea0effbd9153eeb27911f01cfadd0fe63d56d358abb94736f42888981550fb94b3b4df9fa9e27c40509aa8de6d08abc249c607687a0c4bd8f184631057379c8879fade3b664526fcc2f4d6279b42aab72c0055fc48bce4e8dae5c3cf105f311e3e42f6cd2a545ac58c45914b7faf7976cd56a5cf36477baa2f085adc192866f41e9f748521657c19a6f90cc2ae7a60e7417536caced444980aacf5c6b879d25dfa64b04582f67b4e18e7184996c6b9ea70fd7a778204d4ca58d85ca28d60eac7095f2ce57449d4a7bd8646155d92f91e4a9e38ca0d4ce8c7936def23292da853c588cdc924b25ffbaced704a29ea41f745b2f4c2aa87a52f502c53d2ab4972317141e7af4a0593cf7c743162a2007802b658cb117c5ded9e445301578f8e3782bf3f3fd2b508d993ae190a925dec92e3bcaab904fd735ec23bff5a40b812b9df6c1b03f1bfb4b139fbf7e0e18c3bcc0f269e9f020d0b4da86e8c68ee9d1cfeab2cdefd13bf62120d651b9ba152735fa2a308cf6d351deea397013505849b4846d988d306983470f85f837e0a42e20c8019ab8aa9843001a8f88e62e6a6c6b999257acd31ea3fed02ad99a60a4b97802410c0e4205bcfc70a792f4c859d85da447720af83afd5f3223dbdbe273dbd7a0a20a79c7dea5baa1ee061d44b25bc002eae2a7e7297b335ab4f0780f7570b9d6e48a101af4ef34a6837561402e5a0de3261c802bc69e94931a99e5e2beb29e160cf04e7dfd6a1e1e9b5ba1f665938e80a576bd686e40ae0bffd6459db1578225b3ea3abbd5b67013e9ce69b5d3ee81e2e8a532b1b47fceca977ebc6d206c80c96eaf42325b9d7690c4583f9fe7683c7a61e165c2055fbcdc6ba6e9963cbad032bf2003798cd06a91635fdb3b1025e1803678298794fb16e3f3e4fef921e305d821ce0e15d02d40d627cc2a3c541df6a768ae7e6f0feab3cd4adcea60e29517dd5997b7715eecf18c7e86158c6598ca5ce67178e0e84a69543500a6abc3506fc97ab1cefd5db1b80222a8899d74f94b19899953ccde366755117ed3472c586a341a3d4e53d56ec4b404834ce4961396997c308e68495ba41535f5f9faac99f8b5f3fdc4f84c13eb39209f630eb8cd5e0eabffbfa6c19ab49af700bcf7d09425732a88035e3c3dcc2741dec9782f8cddbe7d40c6cd07fbb52ae2c1d20b53780df63d17f15c592ed2c4cc5cbbe622b89097dd8c2937d3b4d96e58086f6ac0eee967e0ed937d87e338a0219bbb618e2033fb26b21d2ec91a69a572f3080019d9541c4be209795ec9e739a2e889097b4d80fb9ad10d29111b41e096a5db420011dde811519e9e3fc3c439b6106ad431b27fcaab4868f2677f0dc8dd38412bb39b92f58c72674c32c634a3c54851fff478d5dd6108e13881a4c03dfa59892dcb94c24cb34244eb0fdf50f6ddf8ac3eb497f1fc8cc6106df6d43fef8d9fe4f09d0f15d8a58b73932546cc4ba729be52d30a3e4027fdf6fef5ab450e15fc81d6e9906e011924c79d4b7c3ca2a114456e5290970f55d1702cd970988018baed3ee8e962c1488e5ababd3ba2399f43010065615c3313be43b8fbedc1ec5eb13e7a99c0ce9c882c0927a1f1d375c9f9fed4fe4e6f8ede9e5602bd36ef387766396db81145e6e6616ef3e4392e5373dca8dbef9bbb3cc17d93bdf92d947eb85f56a976fc16eeabdd0468c688ac0539d645c2ab3c8b3fca7714a4fdfb9f30e09fa6a78f02e53feaaec2f5c2d2107027b9745150941cc96eb6f9fc4748a92887c34272e3fa50f6ab6f1db265c17be7092496de4bc23c2bfb31b153d6c2ad9ad3c7598fd3cc754b9443386e5ae760bd75a32b4a88686cfb491e6c5bdd8e9a014c4ed581a342d3b8f1f6fb53b0adad68b79e99f6d035a9f89b6cf1a6d4b3d14d20745c71c7bdc4b24ca424469b9d249c04649e84527e83def2d7f7a4166251d72f993eae995e164f31d8b68fcce627e28cc1c0f748f8cf7a9c48d2cbc1558ccb7685f0cf6923c19917e1fc93408a5e301640de68fa96cfc326ac2e76ee9a64101445e7fc54fc92f954b3daececcbf260db744579620693f47bd414d81da0f6040da84005b194a46c2c5ef59c88369cc1cc9c0035c7c2fe0bf208dd8b102c7883642fba8e2ba4b167ab772f58c62f814c1110cdbebf63f5ebc8b9992fcea6a2128de56797ef29ab4e7d9ad0f1169bfc63ab3e9c8a4253962094fd35a0ee67af3ef6b7cfdfe51b5ef96eb16b9e221231604a9e4ecaf9781f34c0d32e7cf870eba8c240cc658b93815c3ae058008525aaaf45cdb21109b9b951795c111a1ada8cb23ce8553c9467562969656b1ceae3aef800eeec11b8d79e3d4c28d7ab3a12f43cde0e98aa87b6fae89f64e51e48fdf72de0bbf4435f0133176a880dd503d80b76eb047fc7525c5718528067ecb190d4045416464d5db030a5b7976cd5daaeb850121aeede3a30a31c2084fcb5caf116bffe0c7d3e542023820a8361b3d2776e1327050ab9460da8e46c61fbc1c53e7feb600d0ba92ae7e172e43e3529855aae3aab68ba44bad652a0c9cd2260b77aacdbe8d3a712d47b6876c6913ecdedb6cbdd0252e52b8d289281cf56f2f872ffd8d6f76b091f7401e5ccaf68aeb3e7cb3bb9238c1131c44a6ecba4de85943e7458f5cd591e1828c8be7d8eec332ec233c07e769e5d86dd7e044d94b1cb6b017b9802566832dea500639f47d5c149ab85e4fb47d66f8f548c909034487b8759e87babdb780469df30ae9554900abad1194a18a13d2cbc0024b37fbb8ecfa97328750fdb8a88d145d53b49ef49247e4e0267049d93c4dfab73ff627e6d2638bb01904411d21137d709aa4064f350bd0b56bc8c45eedbe76216b93b630716a13d31a88553066d044f16d1ce909bd7ea5c294f933147095fa5bce03526bf2b21f477ba89aef0e11c4a4ecacd75dda53f00ad7eb98429d959a678e795d4bb2ec7038a7797790388aced8b338589ace20224eb833c06b1f935c425689044dfc074e369174ccaf14bd095ba3637843d0d543be086e6da34f00e41d3173b175fdd4ac9bf966bbc1329a0d9739f994aca51b9d3b0b98fba254817fa03f9d151b374e35bdde52f9996a0690774c0516462c474f744913deca8dd90fc618de976ac9090df7cc990e6544e3575ba752cdccda8e98300dbb1f830c71d389bfea5af5a660e61fdfb68f289a57db74ab14c8a5519614ab03e6e52aa7c99eed1f14aa44a1198ba03849c473a323ae8952d23c471dc1a7948a89389d3cdc061a72e234ff887887a302da4a978946710d66298cc929405cfacc7cda49dcf1b4dee6aea5272936f30176d7cc601682d79cafbf218356e013e729d9f9c84bdceba956fa0e6846ea841a4d7e349115b231ca5974dcf790845cf91a3c2b5843505a7e85bff04a69dc5cee7bc6fb98246c589aa49ddcd562ccb00959c99bea23eb7c86cf46ef03dc3c4b9ab87b1fac445bc19dfd0a839ff675baf979608bcaac765b4763f642feaf703e850395f970bc00558bade1cd5a9db53c39ffa402f44da2bb47a0709dda839a9641b03311a2a0f6c1d9b3b467b70a4119346f8423f6219fa0948dae59406dc724ac55c1ae657135bc99c6745daaf04e3b1051b25d974f6335e9b15e9b2931a4f42ee58831e12a413969cf11e6c7377d68be234cb376e5740da0f38e006f2ca50075ff1d99fb5d4a724f82fcfdea22f9fc6eda3b26ba1e9cb4433065ff92ed6ac32e6f7f1a60a880ce58b64003bbd6ecbd29037082a537101e0fddabe0cfa9bfcbd8a1b51b396a1805371b6d1dda9e69e734da1419992dbed3e713f1d99fc1d3055782c159c464f2b42fbf17e1bd340e7af3ce88d63f3f909e1816f1488f9734ac4c6e460fa077b5d1feaadc4a23d3e32e36f361393881901d96ff6f57bb3f4a512590ab75359e4b49f531352d42e610c5a1eabbd566242096f176c8cfaef54ffee797591d9e0cb216eca993e47597ad3b6db0349c3c4e70fbc5786ddf26b3fe3607a96027a27aa6bedd4c8f2b75a7d9e4f1ea050b4e52fdcae9441a179d282d8d3864b2755ddec0f8a8b5cc3352054150046ce43841b4ec2781642d31af03aeaa24a8aebec9edcd1617257cad0d54850f5da7a81c474cbe9b414aeb3f9c345e9fbff34e180bfba81d74295a750a0ff6ba98557bfee83b2ee6fbe5c0843701916b6e0ca674302c055b73964585308fd5ca3f317c999591509c1b29cd7028a7b818c861f329fbe1715af79cf3e8e903f43dc688999e52f0c22457be9b16a40020c1aa0def095da4da3ab224dc44ca77ff53baff3c9599110ac2094c2048f97f31bb8e2cfa5819b1e5be940bfa68b624b03968482323ca0457f97ae2fc8293f5c6224ef3a9a5483ca3fca9a735b87cebf03825abbc64655535ee6f4dda59af004e2ba534fbb7ac3514d78e9dbbd111de4161fccc98a896ed7f5586570f0c911929eda5d60b49a9777185fdf5b1d831ed3ecefbe70635fe3d13b6d775b095eeb258b3e4d5e989368876186a6321b27709ad1cc30cb6c50d8ff959110229c9a1bf106cb9a5ff675c22ad7e69e8d3aab7210e004599235092ccd0488bd985d8629b430439ae4bdd42266fa9426b2d89471554d11c48f4a8510bff7128a37db392a8dfdcdf7b93d3086b05f93fc4cc65b50df7559bce1788370c78b15eb3fe6c069d8d46d68c58f0fa8bd53a81112ddd7cf7fa257a06f32997aa500dd5954489fffac10c97ae57c39b7fe656a4572d106677140d15a03ce236e85a3afc190ee0f7b74d15d8d110e1f2b09") (async) capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000300)={0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) (async) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7050000000000006110440000000000dc0500002000000095000000000000009abb1723bf24203831c9545b21c751ee4024f479cbe4b89f9808837203000000000000c2d182c7a3221481f5009edaf5f5ac058299e10e790a198f42a715b99fb3d2a73dd025848710155ad1efd7d991408000000000000085a0db0401fa29e075b7ab0408a0d8cfceeb23465bb027ee1151c02af21d8f9aa57e673a6724441d08087aff070eda8abef22b3a806c8226f5a2886c93bd29b37252ba4a6e9cc5f69e75680c431aa855e487ae513abd6c4ee973fce29a26018ed5e0780f8778a602a3533a3dac7da4fe491edf3abfa7bf871c58848ac46ada6776bd9b85df01e626026a59ddfa7a9c879acbfb0bf426785dec7d8611dc850df49ed8633bdb83dd505fb20649f53841a0e200c91f5bf1bb186ed87efc7b6f8859d029c8376ca19265e281fea0a6fd2222f8850c8445758503ede0ce1b3f73ecd8989e8c53c5e679b13802bddf80f3b1d07d6d68bfa12ab34697d40ac1150a842f8bb381344b994c19642a10eb30845a993daaa8bd4aebc595475feb3475d8e802498382e73edb98fcf2df96ab3c870490c4"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) ptrace$PTRACE_SETSIGMASK(0x420b, r3, 0x8, &(0x7f00000014c0)={[0x8]}) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a7000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newsa={0x17c, 0x1a, 0x1, 0xfffffffd, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x3e}, @in=@local, 0xfffc}, {@in=@rand_addr=0x64010100, 0x0, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x1}, {0x3}, {0x0, 0x7}, {0x0, 0x6, 0x2}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x60}, [@algo_auth={0x89, 0x1, {{'sha1\x00'}, 0x208, "3cbfd71c56bfe9361d559cf01c6654b099b32c0048344c16247c6463bfd17cae07092b5aa016ff5cecaf65f2a3f2b0bf5e52a5f316c7b7fa43647ee9c90faa33e5"}}]}, 0x17c}}, 0x8000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) syz_extract_tcp_res(&(0x7f0000000180)={0x41424344, 0x41424344}, 0x13b31b46, 0x10) write$tun(r0, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x0, 0x400, 0x14, 0xa}, @ipv4=@tcp={{0x6, 0x4, 0x2, 0x8, 0x94, 0x64, 0x0, 0xb, 0x6, 0x0, @rand_addr=0x64010100, @multicast1, {[@timestamp={0x44, 0x4, 0x89, 0x0, 0x8}]}}, {{0x4e20, 0x4e24, 0x41424344, r4, 0x0, 0x0, 0x5, 0x20, 0x105, 0x0, 0xffff}, {"beb364c192856cee524db8dc98457f10be9f89eff700d83130f1a13ce829e55086d65862fe3868cc03a052af5da38b62af0ae89aeaff07654822eeda9281ac2a7568208cad100000cd3904f2fb7f7703a8232728fba8b62a3c10b500adc6512902d186a181bfcc3e"}}}}, 0xa2) executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000280)) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x4f) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='tcp 2', 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x70, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x3a, 0x3a, 0xff, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x4, {0x6, 0x6, "0e189a", 0x1, 0x3a, 0xff, @remote, @private0, [], "b3ee73f10f4f24e156fc"}}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x44}}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) setreuid(0x0, 0xee00) fchmod(r3, 0x80) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_DESTROY$stdev(r2, 0x3b80, &(0x7f00000000c0)={0x8, r4}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x4f) (async) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) (async) write(r0, &(0x7f0000000300)='tcp 2', 0x5) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x70, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x3a, 0x3a, 0xff, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x4, {0x6, 0x6, "0e189a", 0x1, 0x3a, 0xff, @remote, @private0, [], "b3ee73f10f4f24e156fc"}}}}}}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x44}}, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) (async) setreuid(0x0, 0xee00) (async) fchmod(r3, 0x80) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) ioctl$IOMMU_DESTROY$stdev(r2, 0x3b80, &(0x7f00000000c0)={0x8, r4}) (async) executing program 33: r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x1, 0x101801) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f00000000c0)=0x2000024) pipe2$9p(0x0, 0x80800) syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000004c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00060008"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) executing program 34: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x4f) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='tcp 2', 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x70, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x3a, 0x3a, 0xff, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x4, {0x6, 0x6, "0e189a", 0x1, 0x3a, 0xff, @remote, @private0, [], "b3ee73f10f4f24e156fc"}}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x44}}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) setreuid(0x0, 0xee00) fchmod(r3, 0x80) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_DESTROY$stdev(r2, 0x3b80, &(0x7f00000000c0)={0x8, r4}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x4f) (async) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) (async) write(r0, &(0x7f0000000300)='tcp 2', 0x5) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x70, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x3a, 0x3a, 0xff, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x4, {0x6, 0x6, "0e189a", 0x1, 0x3a, 0xff, @remote, @private0, [], "b3ee73f10f4f24e156fc"}}}}}}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x44}}, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) (async) setreuid(0x0, 0xee00) (async) fchmod(r3, 0x80) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) ioctl$IOMMU_DESTROY$stdev(r2, 0x3b80, &(0x7f00000000c0)={0x8, r4}) (async) executing program 0: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x40, 0x0, 0xa}, 0x18) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="694a4a3e3cbac01a80081e3f2a742de9", 0x10) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) getdents(r1, &(0x7f00000001c0)=""/240, 0xf0) (async) getdents64(r1, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x100000001) (async) sendmsg$inet(r3, &(0x7f0000000100)={&(0x7f0000000180)={0x2, 0x4e26, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @rand_addr=0x64010102}}}], 0x38}, 0x4000004) (async) semget$private(0x0, 0x6, 0x3b1) (async) semctl$SEM_STAT_ANY(0x0, 0x4, 0x14, &(0x7f0000000000)=""/164) socket(0x1d, 0x2, 0x6) write(r2, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x2}, &(0x7f0000000100)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x128, r2, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x23}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x643}, @NL80211_ATTR_TX_RATES={0x100, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0xb8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7f, 0x9, 0x6, 0x5, 0xf9, 0x1, 0x3ff]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x1, 0x9}, {0x5, 0x1}, {0x1, 0x8}, {0x1, 0x7}, {0x2, 0x9}, {0x3, 0x3}, {0x2, 0x4}, {0x4, 0x5}, {0x3, 0x6}, {0x1, 0x3}, {0x5, 0x2}, {0x1, 0x2}, {0x0, 0x8}, {0x1, 0x9}, {0x5}, {0x7, 0x8}, {0x3, 0x3}, {0x3, 0x5}, {0x1, 0x6}, {0x3, 0x8}, {0x0, 0xa}, {0x5, 0x5}, {0x4, 0x9}, {0x5, 0x9}, {0x2, 0x3}, {0x2, 0x4}, {0x4, 0x1}, {0x5, 0x5}, {0x0, 0x4}, {0x1, 0x8}, {0x7}, {0x1}, {0x5, 0x3}, {0x1, 0x6}, {0x3, 0x7}, {0x2, 0x4}, {0x4, 0xa}, {0x2, 0x9}, {0x0, 0x8}, {0x4, 0x3}, {0x3, 0x8}, {0x7, 0x9}, {0x5}, {0x7, 0x7}, {0x0, 0x3}, {0x6, 0x9}, {0x0, 0x5}, {0x2, 0x6}, {0x5, 0x8}, {0x6, 0x9}, {0x7, 0x8}, {0x1, 0x7}, {0x7, 0x5}, {0x0, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xf23, 0x1, 0x7, 0x2000, 0xd, 0x8, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0xd, 0xd, 0x2, 0x5, 0x1, 0xfeff, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x9, 0xfbff, 0x24, 0x400, 0x800, 0x2, 0x2a78]}}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xe4c9, 0xc5, 0x9, 0x10, 0x1000, 0x5, 0xff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, 0x128}, 0x1, 0x0, 0x0, 0xc006}, 0x8044) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) r3 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x36, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0xc, 0x1e, &(0x7f00000000c0)="7d1faf49cdeb662a1a2e37edea03fb7c34a4d03b86c338c83afb9a7a03b0", 0x1, 0x1}]}) (async, rerun: 64) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async, rerun: 64) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/46, 0x2e}], 0x1, &(0x7f0000000600)=""/192, 0xc0}, 0x161) (async, rerun: 32) r8 = socket$kcm(0x2, 0x1, 0x84) (rerun: 32) setsockopt$sock_attach_bpf(r8, 0x84, 0x9, &(0x7f0000000380), 0x98) (async, rerun: 64) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000001000390400000010000000000000000016f2ec767c88162e2837cf4b849895af724d055dfd81817dedd3", @ANYRES32=r7, @ANYBLOB="01980600000000001800128008000100677265000c00028008000700ac141402"], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (rerun: 64) sendto$packet(r4, &(0x7f0000000240)="3b826a8687", 0x5, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r7, 0x1, 0x4, 0x6, @multicast}, 0x14) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40091}, 0x48854) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x4, 0xa, 0x701, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000020) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) readv(r0, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/246, 0xf6}], 0x1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) ppoll(&(0x7f00000004c0)=[{r0}], 0x1, &(0x7f0000000500)={0x0, 0x3938700}, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000240)={0x301, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) (async) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) (async) syz_emit_ethernet(0x146, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0) executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000380)="270502001a0014000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102821880b", 0x44}, {&(0x7f00000007c0)="b54e8224", 0x4}, {&(0x7f0000000040)="b9b2888fd608c639f9f539a931d941265e40c9b526", 0x15}, {&(0x7f0000000400)="a771936082af", 0x6}], 0x4}, 0x1800) write$cgroup_devices(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='b *:2 m'], 0x9) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f00000008c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000600)={0x24c, 0x13, 0x10, 0x70bd2a, 0x25dfdbfc, {0x26, 0x5, 0x0, 0x3, {0x4e20, 0x4e21, [0x400, 0x77, 0x99e, 0x7], [0x38d, 0x10002000, 0x4, 0xfffffffe], 0x0, [0x4, 0xffff]}, 0x1, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x4a, 0x1, "f89784b9ad6a6512b85263790839d2ec6fe2d28921bc4be229cccbdacf5219572dfaf9e2230c2363794ce6a449f430c1ec67e98d7c941fdb846a0fde8a97d9524e52931f4685"}, @INET_DIAG_REQ_BYTECODE={0xd5, 0x1, "39f85b6ef9ab33e242734c5fc5d9dd923fba393ff69fe40e2cf8c13f922e148260f1933dd9e02d825053774a500f09384e2b09614ac970731106edf22c56ac9f398c0e8bafc5b044225d4745f24048271be8f330408a43e5aa6cd1a8b69a99b12be81ab977c50a6e68d7d0bf86612540878dd61c350f6c73708f9baeeecd35dd3f2e544248ad64bedf6249d99f6285b69c94b9ad32ef21bb0c2cac220e3d78cc028d4bf11b5cae77771c97f859d99c9355267ae7dc260ce80328be5c82933e56efb555e2cb3b519f2008d2aa6971ea3c93"}, @INET_DIAG_REQ_BYTECODE={0xdb, 0x1, "060bf3233b64082120a8d0a532a88e8e50aca4f4ace93d86ce2451f38ed0f9edca8e9d6cc28d809363b36e1166167afecde36aa88122fe18d4aee01fd63f9526230d38674ec75eca845023e47e3cbee7bb432c5a90069b626067eccf62516570e85ea1104e6d1a3502cbdcda7585163d9bc646654d2fda7782aae0b547bebae0020ace72e416b5072db3e71c1c14e687bde76ff60653e1e784ff6220e68ed8f81635a881cd5803f61501204928ec74305868b04ef07c3f8eb3b510446fcdb5254b33cc623f63fc63151e49bee0fbe3e63fb94dfb43e459"}]}, 0x24c}, 0x1, 0x0, 0x0, 0x1abe9132536f29f4}, 0x20000001) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4622, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x0, 0x0, 0x400}}}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xa, 0xfff1}, {0x10, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r7, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000900000000000500200001000000050008"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x74, 0x4, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xbd9}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x809b}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008000}, 0x40082) executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18, &(0x7f00000001c0)={&(0x7f0000000140)="5ab37158946b88213a", 0x9}, 0x1, 0x0, 0x0, 0x20008840}, 0x4000000) readv(r0, &(0x7f00000000c0)=[{&(0x7f00000014c0)=""/4105, 0x1009}], 0x1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0x4, 0x0, &(0x7f0000004800)) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffe49}, 0x42) executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f0000000200)=@ethtool_perm_addr={0x12}}) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x4, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{0x0}], 0x1}, 0x4048043) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r4, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725", 0x74}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8", 0x39}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7", 0xcb}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d490", 0xe0}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="4f1a000000000000240012800b00010067656e657665000014000280050008000100000005000c000100000008000a00", @ANYRESDEC], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000300), 0x40000000000000fb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000240)=0x1) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000100)={0x0, 0xffff, 0x0, 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x8000}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000003c0)={0x3, 0x1, 0x4044000, 0x1000, &(0x7f0000690000/0x1000)=nil}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @tid=r2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) ioctl$CEC_DQEVENT(r6, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r6, 0xc0506107, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a00120002002800000019002d4400009b84136ef75afb83de066a5900e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) unshare(0x2040400) timerfd_create(0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000200)=0x3) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) ppoll(&(0x7f0000000000)=[{r3, 0x1000}], 0x1, 0x0, 0x0, 0x0) write$sndseq(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000001140)={0x80, 0x21, 0x3, 0x7}) pwritev(r2, &(0x7f0000000700)=[{&(0x7f00000003c0)='\x00!', 0x2}, {&(0x7f00000005c0)="c021", 0x2}], 0x2, 0x1, 0x407ff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000280)={[{0x1, 0x1, 0xa3, 0x7f, 0x0, 0x0, 0x7, 0x4, 0x40, 0xe, 0x4, 0x1, 0x1}, {0xffffffff, 0x1, 0x98, 0x8, 0x4, 0x4, 0x6, 0x80, 0x1, 0x9, 0x1, 0x42, 0x200}, {0xfffffff6, 0x5, 0xc, 0x5, 0x10, 0x10, 0x2, 0x3, 0x6b, 0xee, 0xe, 0x4, 0x3ff}], 0x3}) getdents(r4, &(0x7f0000000040)=""/50, 0x32) getdents64(r4, 0x0, 0x43) read$eventfd(r4, &(0x7f0000000240), 0x8) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000001c0)={0x0, 0x346f, 0x40000060, 0x100007d, 0x5, "9f940b3491d052d172e0e573229ac6de50806c"}) mount$9p_fd(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@aname={'aname', 0x3d, '\x9e\x01h\n\xcd\xf1\x833g\x91\xabP\x99\xf4V\xbaP\xa99\xa8N\t.\xf5\v\x97\xc5\xc4\xf4~\xe2\xa6^\\\x1a \x84\xc7*\xe3\xf2Y\xc6\xb8\xa0\xa4`&\a\x91/\x9dq\xb5\xc2S\xef\xcf\x12\x96+\xe8\xd0\xff\xff\x1d\xc6\x84\xcf\xcb\xabq\xcaF!3'}}]}}) executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'bridge0\x00', {0x1}, 0xdd3c}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0xffd}}) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r2, 0xfffffffffffffc01, 0x0) write$tun(r1, &(0x7f0000000080)={@val={0x0, 0x1c}, @void, @ipv6=@gre_packet={0x2, 0x6, "96f363", 0x273, 0x2f, 0xff, @private1, @mcast2, {[@fragment={0x4, 0x0, 0x6, 0x0, 0x0, 0x1a, 0x68}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xca, 0x2, [], "3c7e49a693acaecbb67655515f7c6521dc2f809f0ae0d283bc21edb7d05aec01d780c9710e97e7f1a102ec98243b2bc30fb07889356b660f1a4b8d9c2ed193335cf9156e0ea6c63fe8dcab201812bb73121bfecf052c5370e39237cc1f3f377fd870887f05b26db6c15b151d852773e8ef8f4f9f413c8858d00c4286fe6a63364fa132c721b855a8a2cab427f3e50ce9578ccb241c16041a9c7f9cbc7570533639d6452c1d4c834195ae4c39d096a362d5e97abac8887a59c29b552f965e3f19e9f0e83180b3747aaf7c"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0xfffb, 0x4], "f4d82edc863858fd1cf746c8f0407d61a15c4067e19202e634c412c96d8ccfa56d51bb1bbeb0019f18989158ec3a0056662b82690788fef814c88f6de292bf70ac10c20812d969b4e6ef7d"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x40, 0x800], "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"}, {0x8, 0x88be, 0x0, {{0x1, 0x1, 0x8, 0x0, 0x1, 0x2, 0x0, 0x8}}}, {0x8, 0x22eb, 0x1, {{0x2, 0x2, 0x4, 0x3, 0x0, 0x1, 0x5, 0x80}, 0x2, {0xd, 0xff4e, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x3, "afa529cb7edce646ff2bb4b0"}}}}}, 0x29f) executing program 6: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f0000000000)=""/62, 0x28000, 0x800, 0x9, 0x2}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x1000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4510}, 0x1}) (async) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4510}, 0x1}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) (async) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x9) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x40, 0x4, 0x7fff8, 0x6}, 0x14) (async) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x40, 0x4, 0x7fff8, 0x6}, 0x14) sendto$inet(r8, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) (async) sendto$inet(r8, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000340)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x2, 0x2003) (async) r1 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='vegas', 0x5) (async) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) executing program 6: io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20002, 0x2}) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xb3) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0xe) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r2, 0x1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r5, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x5c8, &(0x7f0000000880)=ANY=[], 0x0) executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2}, &(0x7f00000005c0)=0x20000, &(0x7f00000001c0)=r1}, 0x20) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) (async) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) (async) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) r4 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000340)={0x2, 0x0, @b}, 0x48, r3) keyctl$search(0xa, r4, &(0x7f0000000400)='user\x00', &(0x7f0000000500)={'syz', 0x1}, r3) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r2, &(0x7f00000005c0)}, 0x20) (async) r5 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x8000) ioctl$RTC_IRQP_SET(r5, 0x4008700c, 0x1c99) executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x8000000004) (async) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001500add427323b472545b4560a117fff0b0082001b5980000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffff62fa86b3c67992f7d4f78c24f9", 0x46}, {&(0x7f00000000c0)="abd9", 0x2}, {&(0x7f0000000180)="3346252f5a393a2808d91260734f8244", 0x10}], 0x3) (async) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001500add427323b472545b4560a117fff0b0082001b5980000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffff62fa86b3c67992f7d4f78c24f9", 0x46}, {&(0x7f00000000c0)="abd9", 0x2}, {&(0x7f0000000180)="3346252f5a393a2808d91260734f8244", 0x10}], 0x3) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x80, 0x0) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x5}) fcntl$lock(r3, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) (async) fcntl$lock(r3, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) mkdir(&(0x7f00000001c0)='./bus\x00', 0x40) (async) mkdir(&(0x7f00000001c0)='./bus\x00', 0x40) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) setxattr$incfs_id(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f0000000200)={'0000000000000000000000000000000', 0x31}, 0x20, 0x1) close(0x3) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x6a182, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000040)=0x4004680) pwritev(r6, &(0x7f0000000780)=[{&(0x7f0000000180)="80fd0fe874bf", 0x6}], 0x1, 0x0, 0x9) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) keyctl$session_to_parent(0x12) (async) keyctl$session_to_parent(0x12) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40840200}, 0xc, &(0x7f0000000600)={&(0x7f00000007c0)={0x2b4, r7, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x54}}}}, [@NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ibss_ssid}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x2b}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0xd37}, @NL80211_MESHCONF_HT_OPMODE={0x6}, @NL80211_MESHCONF_ELEMENT_TTL={0x5}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x2}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x6}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0xf}]}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xffff0001}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x2}, @NL80211_ATTR_IE={0x21e, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x28, 0x9d, 0x80}}, @tim={0x5, 0x3f, {0x1f, 0x1b, 0x1, "91bb62c10a26a444f634b35b2d583f67a0cab22b3bb04593c6ad13c74a48bc2960f23a3c191e1a82ba9c45dbb1863386ef2de5f293e23936b07d960e"}}, @ibss={0x6, 0x2, 0x101}, @ibss={0x6, 0x2, 0x40}, @random={0x80, 0x23, "b01d45f3634d7b0c98f1eb169d515c8b1f120d804841fd499299bdf30bae06ed37c6ed"}, @mesh_id={0x72, 0x6}, @ssid={0x0, 0xa, @random="500ac89e6c7292de64a9"}, @mic={0x8c, 0x18, {0xfb0, "33908bf989dd", @long="719baa92fd44756f108237ad8f56f6d9"}}, @perr={0x84, 0x14c, {0x3, 0x12, [{{0x0, 0x1}, @device_a, 0x47b, @value=@broadcast, 0x1c}, {{}, @broadcast, 0x7, @void, 0x2e}, {{0x0, 0x1}, @device_b, 0x5, @value=@broadcast, 0xb}, {{0x0, 0x1}, @device_a, 0x8, @value, 0x13}, {{0x0, 0x1}, @device_a, 0x2, @value, 0x16}, {{0x0, 0x1}, @broadcast, 0xffff03c1, @value, 0x40}, {{0x0, 0x1}, @broadcast, 0xa0000000, @value, 0x15}, {{0x0, 0x1}, @device_b, 0x8d, @value=@broadcast, 0x8}, {{0x0, 0x1}, @device_b, 0x5, @value=@broadcast, 0x30}, {{0x0, 0x1}, @device_b, 0x5, @value=@broadcast, 0x5}, {{0x0, 0x1}, @broadcast, 0x6, @value=@broadcast, 0x3b}, {{0x0, 0x1}, @device_b, 0xfa, @value=@device_b, 0x18}, {{}, @broadcast, 0x80000001, @void, 0x8}, {{0x0, 0x1}, @broadcast, 0x9, @value, 0x1e}, {{0x0, 0x1}, @broadcast, 0x7, @value=@broadcast, 0x3f}, {{0x0, 0x1}, @broadcast, 0x1, @value=@broadcast, 0x21}, {{0x0, 0x1}, @device_a, 0x7, @value=@broadcast, 0xc}, {{0x0, 0x1}, @device_a, 0x7, @value=@device_b, 0x3f}]}}, @tim={0x5, 0x28, {0x5, 0x30, 0x9, "32f6c1fee688ab5c6580eaf51c35823e60db68036a7f687d3371a65666c70090b91dfea665"}}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x24002010}, 0x1) write$nci(r2, &(0x7f0000000180)=@NCI_OP_CORE_INTF_ERROR_NTF={0x0, 0x1, 0x3, 0x8, 0x1, {0x0, 0x3}}, 0x5) r8 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0xff, 0x0, 0x0, 0x2000000, 0x800000, 0x2}}) write$nci(r8, &(0x7f0000000680)=@NCI_OP_CORE_CONN_CREDITS_NTF={0x0, 0x1, 0x3, 0x6, 0x2, {0x3, [{0x3, 0x3}, {0x0, 0x7}, {0x3, 0x7}]}}, 0xa) (async) write$nci(r8, &(0x7f0000000680)=@NCI_OP_CORE_CONN_CREDITS_NTF={0x0, 0x1, 0x3, 0x6, 0x2, {0x3, [{0x3, 0x3}, {0x0, 0x7}, {0x3, 0x7}]}}, 0xa) mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, &(0x7f0000000140)={'trans=virtio,', {[{@version_u}]}}) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000000c0)='bond_slave_1\x00') (async) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000000c0)='bond_slave_1\x00') executing program 6: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f0000000200)=@ethtool_perm_addr={0x12}}) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x4, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{0x0}], 0x1}, 0x4048043) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r4, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725", 0x74}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8", 0x39}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7", 0xcb}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d490", 0xe0}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r0, 0x5411, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}) executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x5) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400461f1, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, r2, 0x1, 0x0, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xaa34a4cffb93b201}, 0x10) executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000040}, 0x220028c4) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r2, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r3, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000280)="5c61fe48f03bb0adbc2bca5740b2f76b", 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0x20, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xe}}, [@TCA_RATE={0x0, 0x5, {0x2, 0xfc}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) socket(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000040}, 0x220028c4) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r2, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r3, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) (async) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00'}) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000280)="5c61fe48f03bb0adbc2bca5740b2f76b", 0x10) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0x20, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xe}}, [@TCA_RATE={0x0, 0x5, {0x2, 0xfc}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) (async) executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000b80)={0x6, 0x118, 0xfa00, {{0x6f, 0x4, "fca993977b7fbfce6b88c62d1be61472deb111cb4ff38cb106ccd2af21865474db1eca704c05a2d4a704f57d730babf8a8aa10f2e85da553be93df0093675e4cddd5135c825dfeb3c2d2d04b5470a524b287abfb54f43da7fe36e355374136180a30f6160dd696a5c24c09355da79c6531acead5c9be83231c27c5c3d49a9bf9b5796b0cd3168a65acdea0ebd22eec2a8a8fb992dd5c265a221905a249dfb75cd4bbdd10e8865ba10394053d36ad8c0e2e626ca9242976dbe39b14e134cd03e40f1050abf3ed8ce36cb99c2eaf480d8fafcdbb445ef75d43516383522a2de09aea24d933dec2e2c623ecd300", 0x12, 0x9, 0x4, 0x1, 0x2, 0x40, 0x8, 0x1}, r1}}, 0x120) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000001680)={0x2020}, 0x2020) executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) r0 = socket$rxrpc(0x21, 0x2, 0x2) (async) setns(0xc9, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) mount(0x0, 0x0, 0x0, 0x989, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000000)='\x00\xdb\xf9}\x94\xd7\xe5\x1f\xab{\xd0E\xbc\x1f\xb5<\xe4f=\b\x00\x00\x00\x00\x00\x00\x00\xe2\xde\x8c\x10boj\xd3X\x86\v\x8clx=\xbc0F\x94k\x8d\xe0\xeeP\xa8\xa9\x10\xd4\x0f\x1eL!\x82\x8d\x80\xd0#\xca\xaf#\xf6\x95\xf4\xf2\xce\x8f\x8c\xa4\t\xac\x96\x13\x96\xf76\xc1', 0x53) executing program 4: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ftruncate(r0, 0x3) socket$kcm(0x29, 0x7, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb8, r4, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x10, 0x200, 0x674, 0x1, 0x5]}, @NL80211_ATTR_FRAME={0x22, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x4f40}, @broadcast, @device_b, @random="b599da3aa296", {0x0, 0x3}, @value=@ver_80211n={0x0, 0x6, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x1, @void}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x122c}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x36}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x73, 0x3, 0xb]}, @NL80211_ATTR_FRAME={0x22, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x1}, @device_a, @device_b, @random="ee9c44437c58", {0x9, 0x2}, @value=@ver_80211n={0x0, 0x7, 0x2, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1}}, 0x16, @void}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9a5}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40080}, 0x1) r5 = getpgid(0x0) ioctl$UBLK_U_CMD_START_DEV(r3, 0xc0207506, &(0x7f0000000240)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r0, &(0x7f00000002c0)={r3, r3, 0xcdfe}) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000300)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r3}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r3, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={r3, 0x20, &(0x7f00000007c0)={&(0x7f00000006c0)=""/134, 0x86, 0x0, &(0x7f0000000780)=""/2, 0x2}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xe, 0x1c, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x29b, 0x0, 0x0, 0x0, 0x42c}, [@printk={@llx}, @call={0x85, 0x0, 0x0, 0x69}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x2}, @exit, @jmp={0x5, 0x0, 0x4, 0x2, 0x9, 0xffffffffffffffe0, 0x1}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000500)='syzkaller\x00', 0x5, 0x40, &(0x7f0000000540)=""/64, 0x41000, 0x4, '\x00', r8, @fallback=0x1e, r3, 0x8, &(0x7f0000000640)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0xb, 0x4}, 0x10, r9, 0xffffffffffffffff, 0x8, &(0x7f0000000940)=[r3, r1, r3, r10, r11, r3], &(0x7f0000000980)=[{0x1, 0x2, 0xb, 0x7}, {0x2, 0x5, 0x2, 0x8}, {0x5, 0x1, 0xb, 0xb}, {0x4, 0x4, 0xb, 0x6}, {0x5, 0x2, 0x4, 0x4}, {0x3, 0x5, 0x8, 0x7}, {0x4, 0x1, 0x0, 0x2}, {0x2, 0x2, 0x10, 0x7}]}, 0x94) getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000b40)={r3, r11}, 0xc) mount$bind(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00), 0x20018, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000001c40)={0x28, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000c40)="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"}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r3, 0x3b8b, &(0x7f0000001c80)={0x10, 0x1, r12}) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000001cc0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) openat$autofs(0xffffffffffffff9c, &(0x7f0000001d00), 0x101300, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001d80)=@o_path={&(0x7f0000001d40)='./file0\x00', 0x0, 0x4000}, 0x18) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000001dc0)={0x96f, 0x49433553, 0x2, @stepwise={0xe, 0x9, 0x6, 0x2, 0x0, 0x5}}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000001ec0)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x74}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6001}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008800) ioctl$XFS_IOC_OPEN_BY_HANDLE(r10, 0xc038586b, &(0x7f0000002000)={r10, &(0x7f0000001f00)='@-\x00', 0x80, &(0x7f0000001f40)={@_ha_fsid={[0x3, 0x8]}, {0x1945, 0x9e06, 0x6, 0x8}}, 0x2, &(0x7f0000001f80)={@_ha_fsid}, &(0x7f0000001fc0)=0x9}) executing program 5: io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20002, 0x2}) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xb3) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0xe) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r2, 0x1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r5, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x5c8, &(0x7f0000000880)=ANY=[], 0x0) program did not crash bisect: testing without sub-chunk 2/3 testing program (duration=1m47s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 21, 15, 19, 25, 15, 15, 21, 30, 5, 10, 19, 9, 3, 12, 19, 7, 24, 9, 16, 13, 40, 21, 2, 6, 22, 7, 10, 30, 16] detailed listing: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x30, r2, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfd, {{0x12}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20042054}, 0x4004) executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x242080, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000001c0)={'macvlan1\x00', @local}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="2be27de13db01225280012800b0001006d616373656300001800028005000f00020000000c004200feffff7fa100000008000500", @ANYRES32=r2], 0x50}}, 0x0) r4 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_KEY(r4, 0x6a, 0x1, 0x0, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@RTM_NEWMDB={0x18, 0x54, 0x1e5}, 0x18}}, 0x4080) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r7, 0x8000000000000003, {0x0, 0xf}, 0xff}, 0x18) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}, @ip_retopts={{0x10}}], 0x30}}], 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getqdisc={0x2c, 0x26, 0x4, 0x870bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x3, 0xffff}, {0xffe0, 0x4}, {0xfff1, 0xd}}, [{0x4}, {0x4}]}, 0x2c}}, 0x4040000) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f000000e000/0x7000)=nil, 0x7000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) futex(&(0x7f0000000580), 0x0, 0x0, &(0x7f0000000600)={0x77359400}, 0x0, 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0}, 0x58) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @private=0xa010100}], 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4b, 0x4b, 0x2, [@datasec={0x9, 0x5, 0x0, 0xf, 0x3, [{0x4, 0xfffffff7, 0x3}, {0x5, 0x1, 0xffffff97}, {0x5, 0x2e8, 0x7}, {0x5, 0xfffffbff, 0x4}, {0x4, 0x7fffffff, 0x80000001}], "312ab4"}]}}, &(0x7f0000000d00)=""/198, 0x66, 0xc6, 0x1}, 0x28) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='io\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000200)=""/218, 0xda}], 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000080)=0x8) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) syz_usb_disconnect(r3) sendmmsg$inet_sctp(r0, &(0x7f0000002ac0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000000000008400000002000000de240102040000006f000000c475ae171b0f8fa3", @ANYRES32=r2], 0x20, 0x20008001}], 0x1, 0x24010000) executing program 2: io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20002, 0x2}) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xb3) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0xb4, 0x24, 0x20, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x84, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0xefdd}, @TCA_GRED_PARMS={0x38, 0x1, {0x101, 0x5, 0xc3, 0x6, 0x4, 0x6, 0x8000, 0x4, 0x2, 0xf5, 0x9, 0x1, 0x13, 0x41, 0x10000, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x6}, @TCA_GRED_PARMS={0x38, 0x1, {0x2, 0x9, 0x4, 0x7, 0x6, 0xffff, 0x2, 0x7f, 0x1, 0x4, 0x16, 0x4, 0x17, 0x2, 0x8, 0x7}}]}}]}, 0xb4}}, 0x4000000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000a000200000000000000000008000900040100"], 0x30}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x1, 0xe) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r3, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r4, 0x1}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, r6, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x5c8, &(0x7f0000000880)=ANY=[], 0x0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x1c801, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1}, './sys_mnt/kernel/mm/transparent_hugepage/khugepaged/pages_to_scan\x00'}) mount(0x0, &(0x7f0000000140)='./sys_mnt\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys_mnt/kernel/mm/transparent_hugepage/khugepaged/pages_to_scan\x00', 0x1, 0x0) write(r2, &(0x7f0000000800)='10', 0x2) mount(0x0, &(0x7f0000000100)='./sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000006800000068000000040000000000000005000007"], 0x0, 0x84, 0x0, 0x1}, 0x28) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys_mnt/module/damon_reclaim/parameters/enabled\x00', 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r7, 0x1, 0x0, 0x25dfdbfb, {{0x2}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1743}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]]}, 0x2c}, 0x1, 0x0, 0x0, 0xffad46ab7102f497}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0x7}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x4, 0x406361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0xffffffffe78a4ee8}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r11, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) write(r3, &(0x7f0000000240)="61e407", 0x3) executing program 2: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x80000, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='[', 0x1, 0x10, 0x0, 0xfffffea8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) unshare(0x2c020400) executing program 32: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x80000, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='[', 0x1, 0x10, 0x0, 0xfffffea8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) unshare(0x2c020400) executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f0000000200)=@ethtool_perm_addr={0x12}}) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x4, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{0x0}], 0x1}, 0x4048043) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r4, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725", 0x74}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8", 0x39}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7", 0xcb}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d490", 0xe0}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000005980), 0x0, 0x80201) write(r1, &(0x7f0000000440)="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", 0x111) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000180)={[0xa000, 0x8080000, 0xf000, 0x6000], 0x9, 0x82}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0000000d0085a168d0bf46d32345653600648d0a00050002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) sendmsg$nl_route(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000010400000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400030076657468305f746f5f626f6e6400000014002b8008000100", @ANYRES32=r6], 0x48}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) unshare(0x10040000) openat(0xffffffffffffff9c, &(0x7f0000000280)='./gadget/ep1in-bulk\x00', 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r7, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040002000000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r8, 0x0, &(0x7f0000000000)=""/10, 0x2}, 0x20) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000002600)={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x28, 0x66, 0x0, 0xa, 0x11, 0x0, @empty, @empty, {[@generic={0x44, 0x5, "c12e7a"}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6f7377a903000003b6292e8c6adf38c4f067f694d131977bdeba1fd7b16a399b81abf45140c4cd613c96256915aa2f62f69223d27f1761cb50b19231be30ead2f7b6d3a4b0b50b56ee8044224b3a8e40d2f69ad0320961ae6d49045201ef1f5743fee4203207c44a55e42152735c3bb6518aedfc728df7a73b6bbfc9b57958a19b9c59902f02121fcc8550f5f7d1e200"/155]) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000100)=0xc) r1 = syz_open_procfs(r0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0xfff6) executing program 3: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = mq_open(&(0x7f0000000200)='!sel\x00\x00\x00\x10\x94\xcc\x06\x10\xf7-\x95P\xd7dy\x00\x01\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x001\xa1a\xa5\f\xd7\xf15\x06\xc2db\xd8.j}\x1b1\xeb\"\xdbP;`\xeb1\xd2\r\"{\x9fR\xf2n\xb9\x82E', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000140)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000880)=""/202, 0xca, 0x200000200009, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x19, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f00000000c0)={&(0x7f0000000040)=""/76, 0x4c}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x100, 0x0) executing program 3: io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20002, 0x2}) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xb3) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0xb4, 0x24, 0x20, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x84, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0xefdd}, @TCA_GRED_PARMS={0x38, 0x1, {0x101, 0x5, 0xc3, 0x6, 0x4, 0x6, 0x8000, 0x4, 0x2, 0xf5, 0x9, 0x1, 0x13, 0x41, 0x10000, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x6}, @TCA_GRED_PARMS={0x38, 0x1, {0x2, 0x9, 0x4, 0x7, 0x6, 0xffff, 0x2, 0x7f, 0x1, 0x4, 0x16, 0x4, 0x17, 0x2, 0x8, 0x7}}]}}]}, 0xb4}}, 0x4000000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000a000200000000000000000008000900040100"], 0x30}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsmount(r2, 0x1, 0xe) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r3, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r4, 0x1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r5, r7, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x5c8, &(0x7f0000000880)=ANY=[], 0x0) executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x1, 0x101801) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f00000000c0)=0x2000024) pipe2$9p(0x0, 0x80800) syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000004c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00060008"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) executing program 1: r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0001008158", 0x6}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c0000000000000000", @ANYRES32=r0, @ANYRES64=r0], 0x40}, 0x20000000) (async) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0001008158", 0x6}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c0000000000000000", @ANYRES32=r0, @ANYRES64=r0], 0x40}, 0x20000000) executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fe, 0x0, 0xc000, 0x2000, &(0x7f0000008000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) accept(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) (async) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@mpls_getroute={0x1c, 0x1e, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x2}}, 0x1c}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000000000400000002000000000000080000000000006100", @ANYRES16=r1, @ANYRES64=r0], 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r4, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) unshare(0x2040400) timerfd_create(0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000200)=0x3) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) ppoll(&(0x7f0000000000)=[{r3, 0x1000}], 0x1, 0x0, 0x0, 0x0) write$sndseq(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000001140)={0x80, 0x21, 0x3, 0x7}) pwritev(r2, &(0x7f0000000700)=[{&(0x7f00000003c0)='\x00!', 0x2}, {&(0x7f00000005c0)="c021", 0x2}], 0x2, 0x1, 0x407ff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000280)={[{0x1, 0x1, 0xa3, 0x7f, 0x0, 0x0, 0x7, 0x4, 0x40, 0xe, 0x4, 0x1, 0x1}, {0xffffffff, 0x1, 0x98, 0x8, 0x4, 0x4, 0x6, 0x80, 0x1, 0x9, 0x1, 0x42, 0x200}, {0xfffffff6, 0x5, 0xc, 0x5, 0x10, 0x10, 0x2, 0x3, 0x6b, 0xee, 0xe, 0x4, 0x3ff}], 0x3}) getdents(r4, &(0x7f0000000040)=""/50, 0x32) getdents64(r4, 0x0, 0x43) read$eventfd(r4, &(0x7f0000000240), 0x8) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000001c0)={0x0, 0x346f, 0x40000060, 0x100007d, 0x5, "9f940b3491d052d172e0e573229ac6de50806c"}) mount$9p_fd(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@aname={'aname', 0x3d, '\x9e\x01h\n\xcd\xf1\x833g\x91\xabP\x99\xf4V\xbaP\xa99\xa8N\t.\xf5\v\x97\xc5\xc4\xf4~\xe2\xa6^\\\x1a \x84\xc7*\xe3\xf2Y\xc6\xb8\xa0\xa4`&\a\x91/\x9dq\xb5\xc2S\xef\xcf\x12\x96+\xe8\xd0\xff\xff\x1d\xc6\x84\xcf\xcb\xabq\xcaF!3'}}]}}) executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'bridge0\x00', {0x1}, 0xdd3c}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0xffd}}) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r2, 0xfffffffffffffc01, 0x0) write$tun(r1, &(0x7f0000000080)={@val={0x0, 0x1c}, @void, @ipv6=@gre_packet={0x2, 0x6, "96f363", 0x273, 0x2f, 0xff, @private1, @mcast2, {[@fragment={0x4, 0x0, 0x6, 0x0, 0x0, 0x1a, 0x68}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xca, 0x2, [], "3c7e49a693acaecbb67655515f7c6521dc2f809f0ae0d283bc21edb7d05aec01d780c9710e97e7f1a102ec98243b2bc30fb07889356b660f1a4b8d9c2ed193335cf9156e0ea6c63fe8dcab201812bb73121bfecf052c5370e39237cc1f3f377fd870887f05b26db6c15b151d852773e8ef8f4f9f413c8858d00c4286fe6a63364fa132c721b855a8a2cab427f3e50ce9578ccb241c16041a9c7f9cbc7570533639d6452c1d4c834195ae4c39d096a362d5e97abac8887a59c29b552f965e3f19e9f0e83180b3747aaf7c"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0xfffb, 0x4], "f4d82edc863858fd1cf746c8f0407d61a15c4067e19202e634c412c96d8ccfa56d51bb1bbeb0019f18989158ec3a0056662b82690788fef814c88f6de292bf70ac10c20812d969b4e6ef7d"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x40, 0x800], "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"}, {0x8, 0x88be, 0x0, {{0x1, 0x1, 0x8, 0x0, 0x1, 0x2, 0x0, 0x8}}}, {0x8, 0x22eb, 0x1, {{0x2, 0x2, 0x4, 0x3, 0x0, 0x1, 0x5, 0x80}, 0x2, {0xd, 0xff4e, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x3, "afa529cb7edce646ff2bb4b0"}}}}}, 0x29f) executing program 6: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f0000000000)=""/62, 0x28000, 0x800, 0x9, 0x2}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x1000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4510}, 0x1}) (async) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4510}, 0x1}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) (async) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x9) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x40, 0x4, 0x7fff8, 0x6}, 0x14) (async) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x40, 0x4, 0x7fff8, 0x6}, 0x14) sendto$inet(r8, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) (async) sendto$inet(r8, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000340)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x2, 0x2003) (async) r1 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='vegas', 0x5) (async) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) executing program 6: io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20002, 0x2}) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xb3) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0xe) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r2, 0x1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r5, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x5c8, &(0x7f0000000880)=ANY=[], 0x0) executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2}, &(0x7f00000005c0)=0x20000, &(0x7f00000001c0)=r1}, 0x20) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) (async) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) (async) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) r4 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000340)={0x2, 0x0, @b}, 0x48, r3) keyctl$search(0xa, r4, &(0x7f0000000400)='user\x00', &(0x7f0000000500)={'syz', 0x1}, r3) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r2, &(0x7f00000005c0)}, 0x20) (async) r5 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x8000) ioctl$RTC_IRQP_SET(r5, 0x4008700c, 0x1c99) executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x8000000004) (async) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001500add427323b472545b4560a117fff0b0082001b5980000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffff62fa86b3c67992f7d4f78c24f9", 0x46}, {&(0x7f00000000c0)="abd9", 0x2}, {&(0x7f0000000180)="3346252f5a393a2808d91260734f8244", 0x10}], 0x3) (async) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001500add427323b472545b4560a117fff0b0082001b5980000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffff62fa86b3c67992f7d4f78c24f9", 0x46}, {&(0x7f00000000c0)="abd9", 0x2}, {&(0x7f0000000180)="3346252f5a393a2808d91260734f8244", 0x10}], 0x3) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x80, 0x0) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x5}) fcntl$lock(r3, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) (async) fcntl$lock(r3, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) mkdir(&(0x7f00000001c0)='./bus\x00', 0x40) (async) mkdir(&(0x7f00000001c0)='./bus\x00', 0x40) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) setxattr$incfs_id(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f0000000200)={'0000000000000000000000000000000', 0x31}, 0x20, 0x1) close(0x3) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x6a182, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000040)=0x4004680) pwritev(r6, &(0x7f0000000780)=[{&(0x7f0000000180)="80fd0fe874bf", 0x6}], 0x1, 0x0, 0x9) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) keyctl$session_to_parent(0x12) (async) keyctl$session_to_parent(0x12) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40840200}, 0xc, &(0x7f0000000600)={&(0x7f00000007c0)={0x2b4, r7, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x54}}}}, [@NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ibss_ssid}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x2b}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0xd37}, @NL80211_MESHCONF_HT_OPMODE={0x6}, @NL80211_MESHCONF_ELEMENT_TTL={0x5}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x2}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x6}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0xf}]}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xffff0001}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x2}, @NL80211_ATTR_IE={0x21e, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x28, 0x9d, 0x80}}, @tim={0x5, 0x3f, {0x1f, 0x1b, 0x1, "91bb62c10a26a444f634b35b2d583f67a0cab22b3bb04593c6ad13c74a48bc2960f23a3c191e1a82ba9c45dbb1863386ef2de5f293e23936b07d960e"}}, @ibss={0x6, 0x2, 0x101}, @ibss={0x6, 0x2, 0x40}, @random={0x80, 0x23, "b01d45f3634d7b0c98f1eb169d515c8b1f120d804841fd499299bdf30bae06ed37c6ed"}, @mesh_id={0x72, 0x6}, @ssid={0x0, 0xa, @random="500ac89e6c7292de64a9"}, @mic={0x8c, 0x18, {0xfb0, "33908bf989dd", @long="719baa92fd44756f108237ad8f56f6d9"}}, @perr={0x84, 0x14c, {0x3, 0x12, [{{0x0, 0x1}, @device_a, 0x47b, @value=@broadcast, 0x1c}, {{}, @broadcast, 0x7, @void, 0x2e}, {{0x0, 0x1}, @device_b, 0x5, @value=@broadcast, 0xb}, {{0x0, 0x1}, @device_a, 0x8, @value, 0x13}, {{0x0, 0x1}, @device_a, 0x2, @value, 0x16}, {{0x0, 0x1}, @broadcast, 0xffff03c1, @value, 0x40}, {{0x0, 0x1}, @broadcast, 0xa0000000, @value, 0x15}, {{0x0, 0x1}, @device_b, 0x8d, @value=@broadcast, 0x8}, {{0x0, 0x1}, @device_b, 0x5, @value=@broadcast, 0x30}, {{0x0, 0x1}, @device_b, 0x5, @value=@broadcast, 0x5}, {{0x0, 0x1}, @broadcast, 0x6, @value=@broadcast, 0x3b}, {{0x0, 0x1}, @device_b, 0xfa, @value=@device_b, 0x18}, {{}, @broadcast, 0x80000001, @void, 0x8}, {{0x0, 0x1}, @broadcast, 0x9, @value, 0x1e}, {{0x0, 0x1}, @broadcast, 0x7, @value=@broadcast, 0x3f}, {{0x0, 0x1}, @broadcast, 0x1, @value=@broadcast, 0x21}, {{0x0, 0x1}, @device_a, 0x7, @value=@broadcast, 0xc}, {{0x0, 0x1}, @device_a, 0x7, @value=@device_b, 0x3f}]}}, @tim={0x5, 0x28, {0x5, 0x30, 0x9, "32f6c1fee688ab5c6580eaf51c35823e60db68036a7f687d3371a65666c70090b91dfea665"}}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x24002010}, 0x1) write$nci(r2, &(0x7f0000000180)=@NCI_OP_CORE_INTF_ERROR_NTF={0x0, 0x1, 0x3, 0x8, 0x1, {0x0, 0x3}}, 0x5) r8 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0xff, 0x0, 0x0, 0x2000000, 0x800000, 0x2}}) write$nci(r8, &(0x7f0000000680)=@NCI_OP_CORE_CONN_CREDITS_NTF={0x0, 0x1, 0x3, 0x6, 0x2, {0x3, [{0x3, 0x3}, {0x0, 0x7}, {0x3, 0x7}]}}, 0xa) (async) write$nci(r8, &(0x7f0000000680)=@NCI_OP_CORE_CONN_CREDITS_NTF={0x0, 0x1, 0x3, 0x6, 0x2, {0x3, [{0x3, 0x3}, {0x0, 0x7}, {0x3, 0x7}]}}, 0xa) mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, &(0x7f0000000140)={'trans=virtio,', {[{@version_u}]}}) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000000c0)='bond_slave_1\x00') (async) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000000c0)='bond_slave_1\x00') executing program 6: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f0000000200)=@ethtool_perm_addr={0x12}}) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x4, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{0x0}], 0x1}, 0x4048043) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r4, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725", 0x74}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8", 0x39}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7", 0xcb}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d490", 0xe0}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r0, 0x5411, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}) executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x5) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400461f1, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, r2, 0x1, 0x0, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xaa34a4cffb93b201}, 0x10) executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000040}, 0x220028c4) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r2, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r3, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000280)="5c61fe48f03bb0adbc2bca5740b2f76b", 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0x20, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xe}}, [@TCA_RATE={0x0, 0x5, {0x2, 0xfc}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) socket(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000040}, 0x220028c4) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r2, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r3, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) (async) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00'}) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000280)="5c61fe48f03bb0adbc2bca5740b2f76b", 0x10) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0x20, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xe}}, [@TCA_RATE={0x0, 0x5, {0x2, 0xfc}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) (async) executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000b80)={0x6, 0x118, 0xfa00, {{0x6f, 0x4, "fca993977b7fbfce6b88c62d1be61472deb111cb4ff38cb106ccd2af21865474db1eca704c05a2d4a704f57d730babf8a8aa10f2e85da553be93df0093675e4cddd5135c825dfeb3c2d2d04b5470a524b287abfb54f43da7fe36e355374136180a30f6160dd696a5c24c09355da79c6531acead5c9be83231c27c5c3d49a9bf9b5796b0cd3168a65acdea0ebd22eec2a8a8fb992dd5c265a221905a249dfb75cd4bbdd10e8865ba10394053d36ad8c0e2e626ca9242976dbe39b14e134cd03e40f1050abf3ed8ce36cb99c2eaf480d8fafcdbb445ef75d43516383522a2de09aea24d933dec2e2c623ecd300", 0x12, 0x9, 0x4, 0x1, 0x2, 0x40, 0x8, 0x1}, r1}}, 0x120) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000001680)={0x2020}, 0x2020) executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) r0 = socket$rxrpc(0x21, 0x2, 0x2) (async) setns(0xc9, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) mount(0x0, 0x0, 0x0, 0x989, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000000)='\x00\xdb\xf9}\x94\xd7\xe5\x1f\xab{\xd0E\xbc\x1f\xb5<\xe4f=\b\x00\x00\x00\x00\x00\x00\x00\xe2\xde\x8c\x10boj\xd3X\x86\v\x8clx=\xbc0F\x94k\x8d\xe0\xeeP\xa8\xa9\x10\xd4\x0f\x1eL!\x82\x8d\x80\xd0#\xca\xaf#\xf6\x95\xf4\xf2\xce\x8f\x8c\xa4\t\xac\x96\x13\x96\xf76\xc1', 0x53) executing program 4: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ftruncate(r0, 0x3) socket$kcm(0x29, 0x7, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb8, r4, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x10, 0x200, 0x674, 0x1, 0x5]}, @NL80211_ATTR_FRAME={0x22, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x4f40}, @broadcast, @device_b, @random="b599da3aa296", {0x0, 0x3}, @value=@ver_80211n={0x0, 0x6, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x1, @void}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x122c}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x36}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x73, 0x3, 0xb]}, @NL80211_ATTR_FRAME={0x22, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x1}, @device_a, @device_b, @random="ee9c44437c58", {0x9, 0x2}, @value=@ver_80211n={0x0, 0x7, 0x2, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1}}, 0x16, @void}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9a5}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40080}, 0x1) r5 = getpgid(0x0) ioctl$UBLK_U_CMD_START_DEV(r3, 0xc0207506, &(0x7f0000000240)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r0, &(0x7f00000002c0)={r3, r3, 0xcdfe}) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000300)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r3}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r3, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={r3, 0x20, &(0x7f00000007c0)={&(0x7f00000006c0)=""/134, 0x86, 0x0, &(0x7f0000000780)=""/2, 0x2}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xe, 0x1c, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x29b, 0x0, 0x0, 0x0, 0x42c}, [@printk={@llx}, @call={0x85, 0x0, 0x0, 0x69}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x2}, @exit, @jmp={0x5, 0x0, 0x4, 0x2, 0x9, 0xffffffffffffffe0, 0x1}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000500)='syzkaller\x00', 0x5, 0x40, &(0x7f0000000540)=""/64, 0x41000, 0x4, '\x00', r8, @fallback=0x1e, r3, 0x8, &(0x7f0000000640)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0xb, 0x4}, 0x10, r9, 0xffffffffffffffff, 0x8, &(0x7f0000000940)=[r3, r1, r3, r10, r11, r3], &(0x7f0000000980)=[{0x1, 0x2, 0xb, 0x7}, {0x2, 0x5, 0x2, 0x8}, {0x5, 0x1, 0xb, 0xb}, {0x4, 0x4, 0xb, 0x6}, {0x5, 0x2, 0x4, 0x4}, {0x3, 0x5, 0x8, 0x7}, {0x4, 0x1, 0x0, 0x2}, {0x2, 0x2, 0x10, 0x7}]}, 0x94) getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000b40)={r3, r11}, 0xc) mount$bind(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00), 0x20018, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000001c40)={0x28, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000c40)="57267c08731334b384e4f50d516134c40d9d8f38ec46e1210e6138bfa6038a86cc1121ddf400b1c3cc47e18ede6696f939a35eed7216476a616b5a22418e2fc5a5061b618e31975cb5a4f8a09e729b1bb5a4d974a178e5ee3c2e627ffac7d11ba90ddc8e181a143cacca7910dc2d6aae04c6833746771307aac89ec6b629c2d3635b543b9cf9e656ef4ef6d53705347db58ad9f57901787d76022e3c0d68dc2b18ca726633ca526893b570b3a1f0246450a472e4a92155cfaec8b2279ae987355f0191dc21d7c2d9b88f0c0dd64f3f2b035f41c57ecbe163236b040542599a43f2d50e00f962a208573ed57fbd7ac093c637f0ad4313db4d0546ef5f92fbc80c94b1fa6981bbbd407caabf5a108ae1ceb17ee92b735c48c84e9f4e5ab552fac55233c27f1fc42b1b0db84a63d23006b984c5de2cb7a5116153d475038cc902bfebaad065b3f2d5e6ac2876c17897724c2793cc83c374fb07f72a6ab78c6d6be6b55be039837d5b8ab3d99664869a98a02cc59cf2c4e4848a91dafe7daebcd4d594dfae3c27bf00698990aa4a4a1ca5d41269885edce7c2d3a39cf6f7ed48da437b60837b3823dfd5572cf7039ad85785cca7a85f1dce758d5c24ccc48fcd05636685e328f240c544e456ea419584f003b34f76faf2fdd4bca93cdac8847ea2cb2eeb58ebc288f27206d2cf3a610505a3a2962b0f79c63d780f537ccfd06e5e328e0419ec3c17b0607f05385fd1edfe559ccf09a8572bda9bdc81e388e1cbcf05e2fa2ef1c7f0347f88a84434bcf4341860076cb0c8cbc2ae8cd32f22d3e975074d77dc87cc93f4e3cb05383adc92473b15ea391ec3f782e0287378c1ccc537ca72a39c3f96f7287fecec37bb18c03179844493cd80659e6aeceb993d68102164b14da290f376a750d17369dde445b60e78f3cc21526e2a61d4e3b2ebd97ae24bda2ecb168f734377789c3d956a896490e755d524f41d121b04baacf1cb6bf30092a936c179310a2257d634a9f2f97c0929e9bc2a9f05486f0d821da16a5758545e078a12f3d853c40a9f1112ceb9fb585507e0d1ec3a056875340fdca33e301e6e15fd5edacc2ed02e7f071ec0f4d3aed601e8c30e91e65e28322cd34858235d562eab2a801904922be88fb9d820f6d36423bfadbca95458eb8cae868d563726ed6f0765126ad41aec6252ed9d937d3c3f3d241f9ba7e0fa29bb65cb36a59fdced1054bbd98038ff8ae7ce884bad94e8485cce0f9cdec0761e3a47ed0e138684ad46c4b292ab80ac22374f6b6d6ec9a62a907a5a3604d7fa254777f5a6e604a1b8485880142855d6894aa42b834bc609dea7b18e8b8a7b3aa2e353c902d66f19ebc88e59a150a8c5f49b1e328c630b20c62f9bfba5febc9cfc5654e365c7cf10e8d825e4e99f6ed1ffb7cc67bd102b6bbee66666f9b5acf6600197ff5ba8fd77b8d88319f5cc0f5d956c38a9b4fac3fdc617741a2d50598bf5fb4496ecc5583934ba2adb04d3d5cbb41373c157395bd6accd289e2754d5adce06b114377beb25bebc0f8235af1c5a2abac7108b93fadabd197e802c50e3e36e6932225cfbc50c40592a60364b0760ff621a36b834fa3babf7b9abe6b41c14816e70af541ab276e2774d96ffd15e491f636e04e1422be78b1af78c7e545a0c7f52592255e376161d061846ed2be8a3005e825388ed22198cf2671b7896087d4a020c70f0bb1539ac7ae74886b3096726d99e6c8a3450f35e7e950ebe40ba95b18dd88642adc8bd6d68bf8e714d4f8e10663338281cd54704b5f97853140143b4b1a3a6e1a05b069989fdf5da3c2d25939d970188bf38e4cc8efd783608e71417415e0315a8fa56a6fcd8ee4c3872b06129a4379068cf8123f1e4c9e04c43e34dd1b4dd18b08db9de37e01b777b18e04ce0197fcd33d3412c9f8efcbc3b18918f39976a4ebcb169efbb78594d5a2012637587f2162faa9c0d291c38f21da930922b35628fdb915169572139c5ea4747fd102849cf4bee169aa2240a3f542949d5ceeafc5a19691956928009f7526f466fd13ff6b6d220b6544226b3eecd25125e6529b8f927c90f2ae1ad419bb0969365188b571e85a45d957b8a8327462a28a16ec6ad7f10b8fd3a223127ba3eecddcc00f946f50b53f24de7c3f693494775d5875cd91e2cbe8d905c350da1a9ea8b8e59dc27f1a7a93aad4b17887f5576cf08e6679ad7f7d924ad5ae79ec8decedbaf3673ea6620c8c08542f77eed08d56f07b50d0afe5f79b85a49d5ce694f1e429b1a3972ee431b4ca0449ddad1247279e2e3df7428cbaa8c1ab0b884c8cc99aefdc8e34c6512ba788063d5a5a9a6e5150da80c73b86f69de573704200cc8e95e4405ec8d9cebb23e1f92f5498e9b97164eae2460c5bb70acd3a92559b95bae54049dde768f55f32633d513ac5adb36deafa1f49bf27cde600f7ea25dfef62e2474789ce2edf4637506e38d93f5b8c41701d6c7df72d1fc87d4e3118a54858f498c0f73a8efabf8431831afb07c144b6b2f25234f2a6c2271f8662eb0217bec48d357dbe4c740464a7ff777ada4aa27348d9bcacde206e156b594949d3b89bd9da9a753f1ce27eb37a34268a5de82747f6988bcb6972ede362945d069cb3c97e5d53bed3526d4a77d6d53c129e26a93d3f43ec01a12494ab5d69d3a7816fe49051679e5673460af761a1728ee8cafe0b0ef5ccbf8f55f696074595222dd1b57473fb1e09ddb87f18ccf3b01e56d4fab3630f8e3053d29a49075ffae6cc5a67ce4f6672ef29399fc9c4b61a6e195d2ed3e8e9c082c3241bee2e1ab2e60077aed9a5437940bcb9c19ec8a2cb7957aa827c050aadb2bbd7e46cdcc281c527e3c00c2272a20962a60e79629f9ed51de7ecf6517760bcec159c54ed5983ba702ec5bba3d6f1cda224a2277b31f191d7e468d4baefc10d50c9150712c2d38135e3a3d8c4c18f2e852866476d13f18bbe466b25e0c7054d3028625265ad46a23e3ca60408063cfb2c2eb202c1eed3b64b213b16c6d31140c62e46137d9a36163d2ccf6222cd166b1c2bb83f701ed26b9ce8dcd52ec7d13bc5f0d855dd102b6f0cd5a8b90e663463119be20eea26cd83f2ab28a5ffc4cbbdefc543f4bd6a50a6a348b914651696ad149597645d513d97f9037205ec8d5db56bd3e25164c04e66ead2e80eb0671e86d3fecb93f46b751d707ec90fb4260aa4c7a357b70238f4cc35d63066bc63d3777166fbc655fc172abee16534e714c8ae5519a0dbb404e52a7ad8dd2d303f5ec9b23b580f923e945958239ca0b5b310a0f5600ab32f6567c1813ad6b02c44adefdc970065754b9c12ecb23513f6313f765ba4e0d3959e3c96c4074af3e6d7f18447ffac93d570984e7372f368f66a3b2f91ee45c19924d9e5cdf9f5c84c44916dc4ca92fe12e5150050df90183bdf79f49b8a312388b958b61428b2b77f93f6fe2e44b44289f3aa7957341d9f418a319de60f8f54a3473d5a37cc298609aea82e1b3a4d1ad9e98ceecd5c85e868511837d1b930e4ce30f8bf07dda3d36d8ad3d0fb76db5402e75f2721d8ede7047d26adecda84d2e9899d92ff25f34d0ac22fd85d46bc24aac2574ba13089a3663a94275a1bb0032640d2e37526afa49b5a03e1e7e4e37591de630e8799acc606f0b221fdce19762a451494c1070d31f42f03dd6ac70ed365eadebf6c03a6dbbac9f769c7c0f3dd380710c3f6bcce5796983aa22c6a2e537324635a8eb0fdac7b4794dda9e44489fd693b087d393e973fe837dd444415c1038ac6a1da36dea0a81d51e236d9d1a5b0e6764ae3f4b854e9cafdff2d01d19e378a45170c8f5e938e74e12716809719efc0a5d8b5fd3815a58e855dbc98024133870d788b72d2f0692aff6e4c614dbaa50fffba0b9ccea8b57ebc345399e8a0f3a09c95a7e4a2c2ab4ec6a9c1d3dca8642e465c0cda81fc5d38d03849ced97f09a70d904e27dbe301c6801fada14b698efb690a946a54eeb9fce7b8cce1701d6453e8dbf6f72c8c31f91f6fb5ca464845d0355de16f986d2d25878610c9620de19f6295139a16b167fec3cb70b27e011c5ab71485ac6a534f8e3178d0c39749d95f21cfa55be1a56c5f368fcbdd35d268685ede235bde3ddbda114718f1e3e6c881b2933c09e9e45a50992d4d5f0735266b4c47dca0e70ae5560d2e79374f46e14cf9530d1908be96294159a40dd5673c7411091e5773357b80093926c3247c8a881f195bb9663e8fd0be274c0269ab760d6ccb72713b2f34fa98b428ef5f60afba1050999bb4fa782f7347ce84bd716a5c66b0ce5aac2266923ce4ee761656ac0ea79d802a79d3768ed6b637c9138cb63701455c67ade581a9f4ab49eabc25530bda36671a52bd4fd224b961fdd64e4e5d12e0a99ada8a1705ca1ae6911e493f95076726df569cda43c37450a59c4b977f3251cb06d7118387d721123cd728c363a658451f5fd09de3b59b8490d6bd9abc42a6e645007d0f60311e74af42d7a0db76d677d011e53e9e0c0f1522780e2bed26739a494bde035e2e03f44c326d10052ab84b838ca1c4eccfd4ef7d14774e0200f01fcb70af46c0cb6db3c261589bafce9fca1bf3fe8d106da31d7b5d21d5c5909c428a509626b7be026b51c36d363cbf37025121d34c86eccf9e0a8500572605044541f09eb5762e9059a022f4fbaf6363301cfe2a9757c953758580062741e76d9ac8401f520bec935e4a0a5703b3bf8cb83f6817007118410c97a5612552b5e5c325c3083bfc1688535aaec9eedaf2bad55c6d75c8ddbf9beeb339827775e11431b8cbb3d5ba8c0d333a1495f2a50f807996e9e8e803a784c26da666243c6e3ab29a0e19cd859c727d04be3b018388399e02d142762edff6e8caf788a7e6295846003d4f0ac6142cc8773059ad9e724a1da10aa3dcd729aeb6625d4eb7c719b064b5e6cc300655a09876c6fdd66fc1a65bf170ecfe8d50973af994c9c0ea8df1fba859dfc89e5776a5015215b39858dca63c7eaae6bfe4fb516286f9d882848bd7e95c173959b55606dd41764d5079121d5df086b7f6dfc2ae3f175f691cb881cab34269ba9090f016a9f21a8e365b3316f0f6cfe0102328a5c7f58064608f31fde36e9d01a93541205c08552b35a35f7178104b37af43e51d00dc1926558bb115717ec41805b29e120519d5912f13713eab9c4242ac70c3c656c6dadcf3ea5bf8178c7b92dcaef17f8e830961fe62c55505574dfbf24f0e704342fc98246431c4789ce8583039c6880714272dbf4d4027acad1782de3a74c254c2d7c8efe03d40e4c28e3bb4084bdb9d8b10a25e2f6ecfb48674aff591ea316f3451aa1916a7fb5c7e704d3fabc5467dc1459537c0f5c20d8d886dd49d7ca92d0f8e02da1bf315e20a820914c3d94783dfa6fef34ad00f549b20f3f93ea4d32b549f785e4098dd9dfd4747836483850f87a2ff37bc82adbea1df8a1843be6b63cbd7e02ed2adcd67971d87ae128e7a79252bbd13a781932fc6bb23fe78c34ba55c5f7b3039f8917216d5b1663f9d854ff5d7b889b8cbce03ac062be1592813a20b3117889cbe397ebafe4e2f4fcf0dd0bdda8e9c70929b503e8cfcab1dab9924efb85c27d435fb281d834a028a92591f1d31d78adf498e21ee65b607dc2889c1998bad1ec37f08f35072c21edb7dbed6fab57cd86059d43acdba81d338daa971f3af5d1098d1f8ddde540a4c681eeeefaa35e53242b4baccaee4af2d2684903e06792bce9016f60f4c985e81f165e3e976ad1c752429a41085e75932b37a4b94c2977"}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r3, 0x3b8b, &(0x7f0000001c80)={0x10, 0x1, r12}) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000001cc0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) openat$autofs(0xffffffffffffff9c, &(0x7f0000001d00), 0x101300, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001d80)=@o_path={&(0x7f0000001d40)='./file0\x00', 0x0, 0x4000}, 0x18) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000001dc0)={0x96f, 0x49433553, 0x2, @stepwise={0xe, 0x9, 0x6, 0x2, 0x0, 0x5}}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000001ec0)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x74}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6001}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008800) ioctl$XFS_IOC_OPEN_BY_HANDLE(r10, 0xc038586b, &(0x7f0000002000)={r10, &(0x7f0000001f00)='@-\x00', 0x80, &(0x7f0000001f40)={@_ha_fsid={[0x3, 0x8]}, {0x1945, 0x9e06, 0x6, 0x8}}, 0x2, &(0x7f0000001f80)={@_ha_fsid}, &(0x7f0000001fc0)=0x9}) executing program 5: io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20002, 0x2}) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xb3) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0xe) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r2, 0x1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r5, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x5c8, &(0x7f0000000880)=ANY=[], 0x0) program did not crash bisect: testing without sub-chunk 3/3 testing program (duration=1m47s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 21, 15, 19, 25, 15, 15, 21, 30, 5, 10, 19, 9, 3, 12, 14, 10, 5, 30, 9, 30, 13, 22, 6, 4, 12, 25, 8, 21, 21] detailed listing: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x30, r2, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfd, {{0x12}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20042054}, 0x4004) executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x242080, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000001c0)={'macvlan1\x00', @local}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="2be27de13db01225280012800b0001006d616373656300001800028005000f00020000000c004200feffff7fa100000008000500", @ANYRES32=r2], 0x50}}, 0x0) r4 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_KEY(r4, 0x6a, 0x1, 0x0, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@RTM_NEWMDB={0x18, 0x54, 0x1e5}, 0x18}}, 0x4080) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r7, 0x8000000000000003, {0x0, 0xf}, 0xff}, 0x18) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}, @ip_retopts={{0x10}}], 0x30}}], 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getqdisc={0x2c, 0x26, 0x4, 0x870bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x3, 0xffff}, {0xffe0, 0x4}, {0xfff1, 0xd}}, [{0x4}, {0x4}]}, 0x2c}}, 0x4040000) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f000000e000/0x7000)=nil, 0x7000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) futex(&(0x7f0000000580), 0x0, 0x0, &(0x7f0000000600)={0x77359400}, 0x0, 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0}, 0x58) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @private=0xa010100}], 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4b, 0x4b, 0x2, [@datasec={0x9, 0x5, 0x0, 0xf, 0x3, [{0x4, 0xfffffff7, 0x3}, {0x5, 0x1, 0xffffff97}, {0x5, 0x2e8, 0x7}, {0x5, 0xfffffbff, 0x4}, {0x4, 0x7fffffff, 0x80000001}], "312ab4"}]}}, &(0x7f0000000d00)=""/198, 0x66, 0xc6, 0x1}, 0x28) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='io\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000200)=""/218, 0xda}], 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000080)=0x8) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) syz_usb_disconnect(r3) sendmmsg$inet_sctp(r0, &(0x7f0000002ac0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000000000008400000002000000de240102040000006f000000c475ae171b0f8fa3", @ANYRES32=r2], 0x20, 0x20008001}], 0x1, 0x24010000) executing program 2: io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20002, 0x2}) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xb3) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0xb4, 0x24, 0x20, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x84, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0xefdd}, @TCA_GRED_PARMS={0x38, 0x1, {0x101, 0x5, 0xc3, 0x6, 0x4, 0x6, 0x8000, 0x4, 0x2, 0xf5, 0x9, 0x1, 0x13, 0x41, 0x10000, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x6}, @TCA_GRED_PARMS={0x38, 0x1, {0x2, 0x9, 0x4, 0x7, 0x6, 0xffff, 0x2, 0x7f, 0x1, 0x4, 0x16, 0x4, 0x17, 0x2, 0x8, 0x7}}]}}]}, 0xb4}}, 0x4000000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000a000200000000000000000008000900040100"], 0x30}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x1, 0xe) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r3, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r4, 0x1}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, r6, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x5c8, &(0x7f0000000880)=ANY=[], 0x0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x1c801, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1}, './sys_mnt/kernel/mm/transparent_hugepage/khugepaged/pages_to_scan\x00'}) mount(0x0, &(0x7f0000000140)='./sys_mnt\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys_mnt/kernel/mm/transparent_hugepage/khugepaged/pages_to_scan\x00', 0x1, 0x0) write(r2, &(0x7f0000000800)='10', 0x2) mount(0x0, &(0x7f0000000100)='./sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000006800000068000000040000000000000005000007"], 0x0, 0x84, 0x0, 0x1}, 0x28) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys_mnt/module/damon_reclaim/parameters/enabled\x00', 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r7, 0x1, 0x0, 0x25dfdbfb, {{0x2}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1743}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]]}, 0x2c}, 0x1, 0x0, 0x0, 0xffad46ab7102f497}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0x7}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x4, 0x406361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0xffffffffe78a4ee8}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r11, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) write(r3, &(0x7f0000000240)="61e407", 0x3) executing program 2: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x80000, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='[', 0x1, 0x10, 0x0, 0xfffffea8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) unshare(0x2c020400) executing program 32: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x80000, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='[', 0x1, 0x10, 0x0, 0xfffffea8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) unshare(0x2c020400) executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f0000000200)=@ethtool_perm_addr={0x12}}) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x4, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{0x0}], 0x1}, 0x4048043) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r4, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725", 0x74}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8", 0x39}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7", 0xcb}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d490", 0xe0}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000005980), 0x0, 0x80201) write(r1, &(0x7f0000000440)="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", 0x111) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000180)={[0xa000, 0x8080000, 0xf000, 0x6000], 0x9, 0x82}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0000000d0085a168d0bf46d32345653600648d0a00050002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) sendmsg$nl_route(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000010400000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400030076657468305f746f5f626f6e6400000014002b8008000100", @ANYRES32=r6], 0x48}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) unshare(0x10040000) openat(0xffffffffffffff9c, &(0x7f0000000280)='./gadget/ep1in-bulk\x00', 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r7, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040002000000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r8, 0x0, &(0x7f0000000000)=""/10, 0x2}, 0x20) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000002600)={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x28, 0x66, 0x0, 0xa, 0x11, 0x0, @empty, @empty, {[@generic={0x44, 0x5, "c12e7a"}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6f7377a903000003b6292e8c6adf38c4f067f694d131977bdeba1fd7b16a399b81abf45140c4cd613c96256915aa2f62f69223d27f1761cb50b19231be30ead2f7b6d3a4b0b50b56ee8044224b3a8e40d2f69ad0320961ae6d49045201ef1f5743fee4203207c44a55e42152735c3bb6518aedfc728df7a73b6bbfc9b57958a19b9c59902f02121fcc8550f5f7d1e200"/155]) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000100)=0xc) r1 = syz_open_procfs(r0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0xfff6) executing program 3: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = mq_open(&(0x7f0000000200)='!sel\x00\x00\x00\x10\x94\xcc\x06\x10\xf7-\x95P\xd7dy\x00\x01\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x001\xa1a\xa5\f\xd7\xf15\x06\xc2db\xd8.j}\x1b1\xeb\"\xdbP;`\xeb1\xd2\r\"{\x9fR\xf2n\xb9\x82E', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000140)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000880)=""/202, 0xca, 0x200000200009, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x19, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f00000000c0)={&(0x7f0000000040)=""/76, 0x4c}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x100, 0x0) executing program 3: io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20002, 0x2}) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xb3) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0xb4, 0x24, 0x20, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x84, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0xefdd}, @TCA_GRED_PARMS={0x38, 0x1, {0x101, 0x5, 0xc3, 0x6, 0x4, 0x6, 0x8000, 0x4, 0x2, 0xf5, 0x9, 0x1, 0x13, 0x41, 0x10000, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x6}, @TCA_GRED_PARMS={0x38, 0x1, {0x2, 0x9, 0x4, 0x7, 0x6, 0xffff, 0x2, 0x7f, 0x1, 0x4, 0x16, 0x4, 0x17, 0x2, 0x8, 0x7}}]}}]}, 0xb4}}, 0x4000000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000a000200000000000000000008000900040100"], 0x30}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsmount(r2, 0x1, 0xe) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r3, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r4, 0x1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r5, r7, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x5c8, &(0x7f0000000880)=ANY=[], 0x0) executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x1, 0x101801) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f00000000c0)=0x2000024) pipe2$9p(0x0, 0x80800) syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000004c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00060008"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) executing program 1: r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0001008158", 0x6}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c0000000000000000", @ANYRES32=r0, @ANYRES64=r0], 0x40}, 0x20000000) (async) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0001008158", 0x6}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c0000000000000000", @ANYRES32=r0, @ANYRES64=r0], 0x40}, 0x20000000) executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fe, 0x0, 0xc000, 0x2000, &(0x7f0000008000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) accept(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) (async) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@mpls_getroute={0x1c, 0x1e, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x2}}, 0x1c}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000000000400000002000000000000080000000000006100", @ANYRES16=r1, @ANYRES64=r0], 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r4, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xd4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}, [@replay_val={0x10, 0xa, {0x70bd2a, 0x70bd2a, 0x1}}, @sec_ctx={0xc, 0x8, {0x8}}]}, 0xd4}}, 0x0) (async) r3 = syz_clone(0x8000000, &(0x7f0000000000)="4f85434826e37138d1e862249b4a3374be094ac429b89ab959690a36edf7c2922a5092311911fe7eda9f816e4805d213cdcb1a3290e9cf8c31db538bbff32f88cc445a92677ac3e63978810901beb89ba23af91166", 0x55, &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000004c0)="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") (async) capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000300)={0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) (async) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) ptrace$PTRACE_SETSIGMASK(0x420b, r3, 0x8, &(0x7f00000014c0)={[0x8]}) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a7000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newsa={0x17c, 0x1a, 0x1, 0xfffffffd, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x3e}, @in=@local, 0xfffc}, {@in=@rand_addr=0x64010100, 0x0, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x1}, {0x3}, {0x0, 0x7}, {0x0, 0x6, 0x2}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x60}, [@algo_auth={0x89, 0x1, {{'sha1\x00'}, 0x208, "3cbfd71c56bfe9361d559cf01c6654b099b32c0048344c16247c6463bfd17cae07092b5aa016ff5cecaf65f2a3f2b0bf5e52a5f316c7b7fa43647ee9c90faa33e5"}}]}, 0x17c}}, 0x8000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) syz_extract_tcp_res(&(0x7f0000000180)={0x41424344, 0x41424344}, 0x13b31b46, 0x10) write$tun(r0, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x0, 0x400, 0x14, 0xa}, @ipv4=@tcp={{0x6, 0x4, 0x2, 0x8, 0x94, 0x64, 0x0, 0xb, 0x6, 0x0, @rand_addr=0x64010100, @multicast1, {[@timestamp={0x44, 0x4, 0x89, 0x0, 0x8}]}}, {{0x4e20, 0x4e24, 0x41424344, r4, 0x0, 0x0, 0x5, 0x20, 0x105, 0x0, 0xffff}, {"beb364c192856cee524db8dc98457f10be9f89eff700d83130f1a13ce829e55086d65862fe3868cc03a052af5da38b62af0ae89aeaff07654822eeda9281ac2a7568208cad100000cd3904f2fb7f7703a8232728fba8b62a3c10b500adc6512902d186a181bfcc3e"}}}}, 0xa2) executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000280)) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x4f) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='tcp 2', 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x70, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x3a, 0x3a, 0xff, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x4, {0x6, 0x6, "0e189a", 0x1, 0x3a, 0xff, @remote, @private0, [], "b3ee73f10f4f24e156fc"}}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x44}}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) setreuid(0x0, 0xee00) fchmod(r3, 0x80) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_DESTROY$stdev(r2, 0x3b80, &(0x7f00000000c0)={0x8, r4}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x4f) (async) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) (async) write(r0, &(0x7f0000000300)='tcp 2', 0x5) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x70, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x3a, 0x3a, 0xff, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x4, {0x6, 0x6, "0e189a", 0x1, 0x3a, 0xff, @remote, @private0, [], "b3ee73f10f4f24e156fc"}}}}}}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x44}}, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) (async) setreuid(0x0, 0xee00) (async) fchmod(r3, 0x80) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) ioctl$IOMMU_DESTROY$stdev(r2, 0x3b80, &(0x7f00000000c0)={0x8, r4}) (async) executing program 33: r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x1, 0x101801) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f00000000c0)=0x2000024) pipe2$9p(0x0, 0x80800) syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000004c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00060008"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) executing program 34: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x4f) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='tcp 2', 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x70, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x3a, 0x3a, 0xff, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x4, {0x6, 0x6, "0e189a", 0x1, 0x3a, 0xff, @remote, @private0, [], "b3ee73f10f4f24e156fc"}}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x44}}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) setreuid(0x0, 0xee00) fchmod(r3, 0x80) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_DESTROY$stdev(r2, 0x3b80, &(0x7f00000000c0)={0x8, r4}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x4f) (async) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) (async) write(r0, &(0x7f0000000300)='tcp 2', 0x5) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x70, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x3a, 0x3a, 0xff, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x4, {0x6, 0x6, "0e189a", 0x1, 0x3a, 0xff, @remote, @private0, [], "b3ee73f10f4f24e156fc"}}}}}}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x44}}, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) (async) setreuid(0x0, 0xee00) (async) fchmod(r3, 0x80) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) ioctl$IOMMU_DESTROY$stdev(r2, 0x3b80, &(0x7f00000000c0)={0x8, r4}) (async) executing program 0: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x40, 0x0, 0xa}, 0x18) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="694a4a3e3cbac01a80081e3f2a742de9", 0x10) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) getdents(r1, &(0x7f00000001c0)=""/240, 0xf0) (async) getdents64(r1, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x100000001) (async) sendmsg$inet(r3, &(0x7f0000000100)={&(0x7f0000000180)={0x2, 0x4e26, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @rand_addr=0x64010102}}}], 0x38}, 0x4000004) (async) semget$private(0x0, 0x6, 0x3b1) (async) semctl$SEM_STAT_ANY(0x0, 0x4, 0x14, &(0x7f0000000000)=""/164) socket(0x1d, 0x2, 0x6) write(r2, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x2}, &(0x7f0000000100)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x128, r2, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x23}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x643}, @NL80211_ATTR_TX_RATES={0x100, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0xb8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7f, 0x9, 0x6, 0x5, 0xf9, 0x1, 0x3ff]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x1, 0x9}, {0x5, 0x1}, {0x1, 0x8}, {0x1, 0x7}, {0x2, 0x9}, {0x3, 0x3}, {0x2, 0x4}, {0x4, 0x5}, {0x3, 0x6}, {0x1, 0x3}, {0x5, 0x2}, {0x1, 0x2}, {0x0, 0x8}, {0x1, 0x9}, {0x5}, {0x7, 0x8}, {0x3, 0x3}, {0x3, 0x5}, {0x1, 0x6}, {0x3, 0x8}, {0x0, 0xa}, {0x5, 0x5}, {0x4, 0x9}, {0x5, 0x9}, {0x2, 0x3}, {0x2, 0x4}, {0x4, 0x1}, {0x5, 0x5}, {0x0, 0x4}, {0x1, 0x8}, {0x7}, {0x1}, {0x5, 0x3}, {0x1, 0x6}, {0x3, 0x7}, {0x2, 0x4}, {0x4, 0xa}, {0x2, 0x9}, {0x0, 0x8}, {0x4, 0x3}, {0x3, 0x8}, {0x7, 0x9}, {0x5}, {0x7, 0x7}, {0x0, 0x3}, {0x6, 0x9}, {0x0, 0x5}, {0x2, 0x6}, {0x5, 0x8}, {0x6, 0x9}, {0x7, 0x8}, {0x1, 0x7}, {0x7, 0x5}, {0x0, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xf23, 0x1, 0x7, 0x2000, 0xd, 0x8, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0xd, 0xd, 0x2, 0x5, 0x1, 0xfeff, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x9, 0xfbff, 0x24, 0x400, 0x800, 0x2, 0x2a78]}}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xe4c9, 0xc5, 0x9, 0x10, 0x1000, 0x5, 0xff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, 0x128}, 0x1, 0x0, 0x0, 0xc006}, 0x8044) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) r3 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x36, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0xc, 0x1e, &(0x7f00000000c0)="7d1faf49cdeb662a1a2e37edea03fb7c34a4d03b86c338c83afb9a7a03b0", 0x1, 0x1}]}) (async, rerun: 64) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async, rerun: 64) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/46, 0x2e}], 0x1, &(0x7f0000000600)=""/192, 0xc0}, 0x161) (async, rerun: 32) r8 = socket$kcm(0x2, 0x1, 0x84) (rerun: 32) setsockopt$sock_attach_bpf(r8, 0x84, 0x9, &(0x7f0000000380), 0x98) (async, rerun: 64) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000001000390400000010000000000000000016f2ec767c88162e2837cf4b849895af724d055dfd81817dedd3", @ANYRES32=r7, @ANYBLOB="01980600000000001800128008000100677265000c00028008000700ac141402"], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (rerun: 64) sendto$packet(r4, &(0x7f0000000240)="3b826a8687", 0x5, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r7, 0x1, 0x4, 0x6, @multicast}, 0x14) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40091}, 0x48854) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x4, 0xa, 0x701, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000020) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) readv(r0, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/246, 0xf6}], 0x1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) ppoll(&(0x7f00000004c0)=[{r0}], 0x1, &(0x7f0000000500)={0x0, 0x3938700}, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000240)={0x301, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) (async) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) (async) syz_emit_ethernet(0x146, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0) executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000380)="270502001a0014000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102821880b", 0x44}, {&(0x7f00000007c0)="b54e8224", 0x4}, {&(0x7f0000000040)="b9b2888fd608c639f9f539a931d941265e40c9b526", 0x15}, {&(0x7f0000000400)="a771936082af", 0x6}], 0x4}, 0x1800) write$cgroup_devices(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='b *:2 m'], 0x9) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f00000008c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000600)={0x24c, 0x13, 0x10, 0x70bd2a, 0x25dfdbfc, {0x26, 0x5, 0x0, 0x3, {0x4e20, 0x4e21, [0x400, 0x77, 0x99e, 0x7], [0x38d, 0x10002000, 0x4, 0xfffffffe], 0x0, [0x4, 0xffff]}, 0x1, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x4a, 0x1, "f89784b9ad6a6512b85263790839d2ec6fe2d28921bc4be229cccbdacf5219572dfaf9e2230c2363794ce6a449f430c1ec67e98d7c941fdb846a0fde8a97d9524e52931f4685"}, @INET_DIAG_REQ_BYTECODE={0xd5, 0x1, "39f85b6ef9ab33e242734c5fc5d9dd923fba393ff69fe40e2cf8c13f922e148260f1933dd9e02d825053774a500f09384e2b09614ac970731106edf22c56ac9f398c0e8bafc5b044225d4745f24048271be8f330408a43e5aa6cd1a8b69a99b12be81ab977c50a6e68d7d0bf86612540878dd61c350f6c73708f9baeeecd35dd3f2e544248ad64bedf6249d99f6285b69c94b9ad32ef21bb0c2cac220e3d78cc028d4bf11b5cae77771c97f859d99c9355267ae7dc260ce80328be5c82933e56efb555e2cb3b519f2008d2aa6971ea3c93"}, @INET_DIAG_REQ_BYTECODE={0xdb, 0x1, "060bf3233b64082120a8d0a532a88e8e50aca4f4ace93d86ce2451f38ed0f9edca8e9d6cc28d809363b36e1166167afecde36aa88122fe18d4aee01fd63f9526230d38674ec75eca845023e47e3cbee7bb432c5a90069b626067eccf62516570e85ea1104e6d1a3502cbdcda7585163d9bc646654d2fda7782aae0b547bebae0020ace72e416b5072db3e71c1c14e687bde76ff60653e1e784ff6220e68ed8f81635a881cd5803f61501204928ec74305868b04ef07c3f8eb3b510446fcdb5254b33cc623f63fc63151e49bee0fbe3e63fb94dfb43e459"}]}, 0x24c}, 0x1, 0x0, 0x0, 0x1abe9132536f29f4}, 0x20000001) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4622, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x0, 0x0, 0x400}}}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xa, 0xfff1}, {0x10, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r7, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000900000000000500200001000000050008"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x74, 0x4, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xbd9}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x809b}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008000}, 0x40082) executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18, &(0x7f00000001c0)={&(0x7f0000000140)="5ab37158946b88213a", 0x9}, 0x1, 0x0, 0x0, 0x20008840}, 0x4000000) readv(r0, &(0x7f00000000c0)=[{&(0x7f00000014c0)=""/4105, 0x1009}], 0x1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0x4, 0x0, &(0x7f0000004800)) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffe49}, 0x42) executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f0000000200)=@ethtool_perm_addr={0x12}}) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x4, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{0x0}], 0x1}, 0x4048043) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r4, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725", 0x74}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8", 0x39}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7", 0xcb}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d490", 0xe0}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="4f1a000000000000240012800b00010067656e657665000014000280050008000100000005000c000100000008000a00", @ANYRESDEC], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000300), 0x40000000000000fb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000240)=0x1) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000100)={0x0, 0xffff, 0x0, 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x8000}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000003c0)={0x3, 0x1, 0x4044000, 0x1000, &(0x7f0000690000/0x1000)=nil}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @tid=r2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) ioctl$CEC_DQEVENT(r6, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r6, 0xc0506107, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a00120002002800000019002d4400009b84136ef75afb83de066a5900e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) program crashed: general protection fault in dummy_udc_start bisect: the chunk can be dropped bisect: split chunks (needed=true): <15>, <15> bisect: split chunk #0 of len 15 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 5, 10, 19, 9, 3, 12, 14, 10, 5, 30, 9, 30, 13, 22, 6, 4, 12, 25, 8, 21, 21] detailed listing: executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000005980), 0x0, 0x80201) write(r1, &(0x7f0000000440)="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", 0x111) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000180)={[0xa000, 0x8080000, 0xf000, 0x6000], 0x9, 0x82}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0000000d0085a168d0bf46d32345653600648d0a00050002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) sendmsg$nl_route(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000010400000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400030076657468305f746f5f626f6e6400000014002b8008000100", @ANYRES32=r6], 0x48}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) unshare(0x10040000) openat(0xffffffffffffff9c, &(0x7f0000000280)='./gadget/ep1in-bulk\x00', 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r7, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040002000000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r8, 0x0, &(0x7f0000000000)=""/10, 0x2}, 0x20) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000002600)={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x28, 0x66, 0x0, 0xa, 0x11, 0x0, @empty, @empty, {[@generic={0x44, 0x5, "c12e7a"}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6f7377a903000003b6292e8c6adf38c4f067f694d131977bdeba1fd7b16a399b81abf45140c4cd613c96256915aa2f62f69223d27f1761cb50b19231be30ead2f7b6d3a4b0b50b56ee8044224b3a8e40d2f69ad0320961ae6d49045201ef1f5743fee4203207c44a55e42152735c3bb6518aedfc728df7a73b6bbfc9b57958a19b9c59902f02121fcc8550f5f7d1e200"/155]) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000100)=0xc) r1 = syz_open_procfs(r0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0xfff6) executing program 3: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = mq_open(&(0x7f0000000200)='!sel\x00\x00\x00\x10\x94\xcc\x06\x10\xf7-\x95P\xd7dy\x00\x01\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x001\xa1a\xa5\f\xd7\xf15\x06\xc2db\xd8.j}\x1b1\xeb\"\xdbP;`\xeb1\xd2\r\"{\x9fR\xf2n\xb9\x82E', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000140)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000880)=""/202, 0xca, 0x200000200009, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x19, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071100000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a5cfe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e4b2b9275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf138f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87acbeb48949b63b045313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65039cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f00000000c0)={&(0x7f0000000040)=""/76, 0x4c}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x100, 0x0) executing program 3: io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20002, 0x2}) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xb3) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0xb4, 0x24, 0x20, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x84, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0xefdd}, @TCA_GRED_PARMS={0x38, 0x1, {0x101, 0x5, 0xc3, 0x6, 0x4, 0x6, 0x8000, 0x4, 0x2, 0xf5, 0x9, 0x1, 0x13, 0x41, 0x10000, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x6}, @TCA_GRED_PARMS={0x38, 0x1, {0x2, 0x9, 0x4, 0x7, 0x6, 0xffff, 0x2, 0x7f, 0x1, 0x4, 0x16, 0x4, 0x17, 0x2, 0x8, 0x7}}]}}]}, 0xb4}}, 0x4000000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000a000200000000000000000008000900040100"], 0x30}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsmount(r2, 0x1, 0xe) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r3, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r4, 0x1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r5, r7, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x5c8, &(0x7f0000000880)=ANY=[], 0x0) executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x1, 0x101801) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f00000000c0)=0x2000024) pipe2$9p(0x0, 0x80800) syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000004c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00060008"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) executing program 1: r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0001008158", 0x6}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c0000000000000000", @ANYRES32=r0, @ANYRES64=r0], 0x40}, 0x20000000) (async) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0001008158", 0x6}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c0000000000000000", @ANYRES32=r0, @ANYRES64=r0], 0x40}, 0x20000000) executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fe, 0x0, 0xc000, 0x2000, &(0x7f0000008000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) accept(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) (async) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@mpls_getroute={0x1c, 0x1e, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x2}}, 0x1c}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000000000400000002000000000000080000000000006100", @ANYRES16=r1, @ANYRES64=r0], 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r4, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xd4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}, [@replay_val={0x10, 0xa, {0x70bd2a, 0x70bd2a, 0x1}}, @sec_ctx={0xc, 0x8, {0x8}}]}, 0xd4}}, 0x0) (async) r3 = syz_clone(0x8000000, &(0x7f0000000000)="4f85434826e37138d1e862249b4a3374be094ac429b89ab959690a36edf7c2922a5092311911fe7eda9f816e4805d213cdcb1a3290e9cf8c31db538bbff32f88cc445a92677ac3e63978810901beb89ba23af91166", 0x55, &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000004c0)="1f49e2b99df6c4b0d6e18597b249c2a5a57602a05bac6327c0c311c0025f88a5e75820f0be704af497b0f0fa0cfd648af8e1cea768600c9291b7ab489559b44bcc14d8082d47a59ae8e995e0d81bfee5fc428c82e36342bd7ee26e3edd069a62d64fbc106aba765ac51990d202d1d80908e6386d49a7481565da5bf0b841d8f0ffc576f736831b3434ac52d8bf45cc631d7598d94529690f8a4acfdab82dab807cdcbf18835bfa5d1b8ae7b1027fe26d807402178b69edcd827b300a1c567c227ce30174abc3f27f133f6aae44488cbb676350a422597b9cc191f843e435640cae777235ddbb3f5700ae6e414773246bec41e60655078d44fa6eaee9a76f201ea7e529561ae8b8aaedb6a0a25057f80cedca070341e638d0d0ff5325d3d8b874bd2744b98c23871609f51ce51ad4fe1205fd7a26e0287530bf4248f811639009b80133253da6b216521e4b824c749a4887701a787a56d14276e2c2a25622fe6d1ae12d3c1bc218764dc2731e3dba7c82925eaafe2e30b3a7ebc21cebc89af91d9ef5762935a72c8f1d8ff5c6d104c6724d219b5c731e817e704356dc96c55ebaecf97d9a5b133a9d13dea473aa4ee23065c8e6be48462ae249423c194f88171b964087571bbf075b2ecbdc32965288c40b5ed9352f06194ca8c6677f38a58c184ef64492ba8dd62bb8c50c8fe398ca55465bf66c8d429259cfb34ff0eac2cded779d9e4184f383e39480b2f7108be059f090474df1651b2c68f70064cc08f2b16656d43ef039a8cbfb2092853ee4d6364e5ca9b30192f69ae3d50f4e7504a38a44e05106e6d358fefd049cda5f8b27764231823d27fc5e4eb88d175de98184ba926929b86f3e06a824fb7974ec18c7a3e31d8188e97ee9d93a5f82757dc55f63dab24e696e79244a57dcbd28e92d25f1ff6c9cdf89413abe47c8d88a1f86509387252ac8a318b96a6805232ff794aa5bfc787c61fe9dd0b880821c827a45b1b88021d85078bea0effbd9153eeb27911f01cfadd0fe63d56d358abb94736f42888981550fb94b3b4df9fa9e27c40509aa8de6d08abc249c607687a0c4bd8f184631057379c8879fade3b664526fcc2f4d6279b42aab72c0055fc48bce4e8dae5c3cf105f311e3e42f6cd2a545ac58c45914b7faf7976cd56a5cf36477baa2f085adc192866f41e9f748521657c19a6f90cc2ae7a60e7417536caced444980aacf5c6b879d25dfa64b04582f67b4e18e7184996c6b9ea70fd7a778204d4ca58d85ca28d60eac7095f2ce57449d4a7bd8646155d92f91e4a9e38ca0d4ce8c7936def23292da853c588cdc924b25ffbaced704a29ea41f745b2f4c2aa87a52f502c53d2ab4972317141e7af4a0593cf7c743162a2007802b658cb117c5ded9e445301578f8e3782bf3f3fd2b508d993ae190a925dec92e3bcaab904fd735ec23bff5a40b812b9df6c1b03f1bfb4b139fbf7e0e18c3bcc0f269e9f020d0b4da86e8c68ee9d1cfeab2cdefd13bf62120d651b9ba152735fa2a308cf6d351deea397013505849b4846d988d306983470f85f837e0a42e20c8019ab8aa9843001a8f88e62e6a6c6b999257acd31ea3fed02ad99a60a4b97802410c0e4205bcfc70a792f4c859d85da447720af83afd5f3223dbdbe273dbd7a0a20a79c7dea5baa1ee061d44b25bc002eae2a7e7297b335ab4f0780f7570b9d6e48a101af4ef34a6837561402e5a0de3261c802bc69e94931a99e5e2beb29e160cf04e7dfd6a1e1e9b5ba1f665938e80a576bd686e40ae0bffd6459db1578225b3ea3abbd5b67013e9ce69b5d3ee81e2e8a532b1b47fceca977ebc6d206c80c96eaf42325b9d7690c4583f9fe7683c7a61e165c2055fbcdc6ba6e9963cbad032bf2003798cd06a91635fdb3b1025e1803678298794fb16e3f3e4fef921e305d821ce0e15d02d40d627cc2a3c541df6a768ae7e6f0feab3cd4adcea60e29517dd5997b7715eecf18c7e86158c6598ca5ce67178e0e84a69543500a6abc3506fc97ab1cefd5db1b80222a8899d74f94b19899953ccde366755117ed3472c586a341a3d4e53d56ec4b404834ce4961396997c308e68495ba41535f5f9faac99f8b5f3fdc4f84c13eb39209f630eb8cd5e0eabffbfa6c19ab49af700bcf7d09425732a88035e3c3dcc2741dec9782f8cddbe7d40c6cd07fbb52ae2c1d20b53780df63d17f15c592ed2c4cc5cbbe622b89097dd8c2937d3b4d96e58086f6ac0eee967e0ed937d87e338a0219bbb618e2033fb26b21d2ec91a69a572f3080019d9541c4be209795ec9e739a2e889097b4d80fb9ad10d29111b41e096a5db420011dde811519e9e3fc3c439b6106ad431b27fcaab4868f2677f0dc8dd38412bb39b92f58c72674c32c634a3c54851fff478d5dd6108e13881a4c03dfa59892dcb94c24cb34244eb0fdf50f6ddf8ac3eb497f1fc8cc6106df6d43fef8d9fe4f09d0f15d8a58b73932546cc4ba729be52d30a3e4027fdf6fef5ab450e15fc81d6e9906e011924c79d4b7c3ca2a114456e5290970f55d1702cd970988018baed3ee8e962c1488e5ababd3ba2399f43010065615c3313be43b8fbedc1ec5eb13e7a99c0ce9c882c0927a1f1d375c9f9fed4fe4e6f8ede9e5602bd36ef387766396db81145e6e6616ef3e4392e5373dca8dbef9bbb3cc17d93bdf92d947eb85f56a976fc16eeabdd0468c688ac0539d645c2ab3c8b3fca7714a4fdfb9f30e09fa6a78f02e53feaaec2f5c2d2107027b9745150941cc96eb6f9fc4748a92887c34272e3fa50f6ab6f1db265c17be7092496de4bc23c2bfb31b153d6c2ad9ad3c7598fd3cc754b9443386e5ae760bd75a32b4a88686cfb491e6c5bdd8e9a014c4ed581a342d3b8f1f6fb53b0adad68b79e99f6d035a9f89b6cf1a6d4b3d14d20745c71c7bdc4b24ca424469b9d249c04649e84527e83def2d7f7a4166251d72f993eae995e164f31d8b68fcce627e28cc1c0f748f8cf7a9c48d2cbc1558ccb7685f0cf6923c19917e1fc93408a5e301640de68fa96cfc326ac2e76ee9a64101445e7fc54fc92f954b3daececcbf260db744579620693f47bd414d81da0f6040da84005b194a46c2c5ef59c88369cc1cc9c0035c7c2fe0bf208dd8b102c7883642fba8e2ba4b167ab772f58c62f814c1110cdbebf63f5ebc8b9992fcea6a2128de56797ef29ab4e7d9ad0f1169bfc63ab3e9c8a4253962094fd35a0ee67af3ef6b7cfdfe51b5ef96eb16b9e221231604a9e4ecaf9781f34c0d32e7cf870eba8c240cc658b93815c3ae058008525aaaf45cdb21109b9b951795c111a1ada8cb23ce8553c9467562969656b1ceae3aef800eeec11b8d79e3d4c28d7ab3a12f43cde0e98aa87b6fae89f64e51e48fdf72de0bbf4435f0133176a880dd503d80b76eb047fc7525c5718528067ecb190d4045416464d5db030a5b7976cd5daaeb850121aeede3a30a31c2084fcb5caf116bffe0c7d3e542023820a8361b3d2776e1327050ab9460da8e46c61fbc1c53e7feb600d0ba92ae7e172e43e3529855aae3aab68ba44bad652a0c9cd2260b77aacdbe8d3a712d47b6876c6913ecdedb6cbdd0252e52b8d289281cf56f2f872ffd8d6f76b091f7401e5ccaf68aeb3e7cb3bb9238c1131c44a6ecba4de85943e7458f5cd591e1828c8be7d8eec332ec233c07e769e5d86dd7e044d94b1cb6b017b9802566832dea500639f47d5c149ab85e4fb47d66f8f548c909034487b8759e87babdb780469df30ae9554900abad1194a18a13d2cbc0024b37fbb8ecfa97328750fdb8a88d145d53b49ef49247e4e0267049d93c4dfab73ff627e6d2638bb01904411d21137d709aa4064f350bd0b56bc8c45eedbe76216b93b630716a13d31a88553066d044f16d1ce909bd7ea5c294f933147095fa5bce03526bf2b21f477ba89aef0e11c4a4ecacd75dda53f00ad7eb98429d959a678e795d4bb2ec7038a7797790388aced8b338589ace20224eb833c06b1f935c425689044dfc074e369174ccaf14bd095ba3637843d0d543be086e6da34f00e41d3173b175fdd4ac9bf966bbc1329a0d9739f994aca51b9d3b0b98fba254817fa03f9d151b374e35bdde52f9996a0690774c0516462c474f744913deca8dd90fc618de976ac9090df7cc990e6544e3575ba752cdccda8e98300dbb1f830c71d389bfea5af5a660e61fdfb68f289a57db74ab14c8a5519614ab03e6e52aa7c99eed1f14aa44a1198ba03849c473a323ae8952d23c471dc1a7948a89389d3cdc061a72e234ff887887a302da4a978946710d66298cc929405cfacc7cda49dcf1b4dee6aea5272936f30176d7cc601682d79cafbf218356e013e729d9f9c84bdceba956fa0e6846ea841a4d7e349115b231ca5974dcf790845cf91a3c2b5843505a7e85bff04a69dc5cee7bc6fb98246c589aa49ddcd562ccb00959c99bea23eb7c86cf46ef03dc3c4b9ab87b1fac445bc19dfd0a839ff675baf979608bcaac765b4763f642feaf703e850395f970bc00558bade1cd5a9db53c39ffa402f44da2bb47a0709dda839a9641b03311a2a0f6c1d9b3b467b70a4119346f8423f6219fa0948dae59406dc724ac55c1ae657135bc99c6745daaf04e3b1051b25d974f6335e9b15e9b2931a4f42ee58831e12a413969cf11e6c7377d68be234cb376e5740da0f38e006f2ca50075ff1d99fb5d4a724f82fcfdea22f9fc6eda3b26ba1e9cb4433065ff92ed6ac32e6f7f1a60a880ce58b64003bbd6ecbd29037082a537101e0fddabe0cfa9bfcbd8a1b51b396a1805371b6d1dda9e69e734da1419992dbed3e713f1d99fc1d3055782c159c464f2b42fbf17e1bd340e7af3ce88d63f3f909e1816f1488f9734ac4c6e460fa077b5d1feaadc4a23d3e32e36f361393881901d96ff6f57bb3f4a512590ab75359e4b49f531352d42e610c5a1eabbd566242096f176c8cfaef54ffee797591d9e0cb216eca993e47597ad3b6db0349c3c4e70fbc5786ddf26b3fe3607a96027a27aa6bedd4c8f2b75a7d9e4f1ea050b4e52fdcae9441a179d282d8d3864b2755ddec0f8a8b5cc3352054150046ce43841b4ec2781642d31af03aeaa24a8aebec9edcd1617257cad0d54850f5da7a81c474cbe9b414aeb3f9c345e9fbff34e180bfba81d74295a750a0ff6ba98557bfee83b2ee6fbe5c0843701916b6e0ca674302c055b73964585308fd5ca3f317c999591509c1b29cd7028a7b818c861f329fbe1715af79cf3e8e903f43dc688999e52f0c22457be9b16a40020c1aa0def095da4da3ab224dc44ca77ff53baff3c9599110ac2094c2048f97f31bb8e2cfa5819b1e5be940bfa68b624b03968482323ca0457f97ae2fc8293f5c6224ef3a9a5483ca3fca9a735b87cebf03825abbc64655535ee6f4dda59af004e2ba534fbb7ac3514d78e9dbbd111de4161fccc98a896ed7f5586570f0c911929eda5d60b49a9777185fdf5b1d831ed3ecefbe70635fe3d13b6d775b095eeb258b3e4d5e989368876186a6321b27709ad1cc30cb6c50d8ff959110229c9a1bf106cb9a5ff675c22ad7e69e8d3aab7210e004599235092ccd0488bd985d8629b430439ae4bdd42266fa9426b2d89471554d11c48f4a8510bff7128a37db392a8dfdcdf7b93d3086b05f93fc4cc65b50df7559bce1788370c78b15eb3fe6c069d8d46d68c58f0fa8bd53a81112ddd7cf7fa257a06f32997aa500dd5954489fffac10c97ae57c39b7fe656a4572d106677140d15a03ce236e85a3afc190ee0f7b74d15d8d110e1f2b09") (async) capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000300)={0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) (async) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) ptrace$PTRACE_SETSIGMASK(0x420b, r3, 0x8, &(0x7f00000014c0)={[0x8]}) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a7000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newsa={0x17c, 0x1a, 0x1, 0xfffffffd, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x3e}, @in=@local, 0xfffc}, {@in=@rand_addr=0x64010100, 0x0, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x1}, {0x3}, {0x0, 0x7}, {0x0, 0x6, 0x2}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x60}, [@algo_auth={0x89, 0x1, {{'sha1\x00'}, 0x208, "3cbfd71c56bfe9361d559cf01c6654b099b32c0048344c16247c6463bfd17cae07092b5aa016ff5cecaf65f2a3f2b0bf5e52a5f316c7b7fa43647ee9c90faa33e5"}}]}, 0x17c}}, 0x8000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) syz_extract_tcp_res(&(0x7f0000000180)={0x41424344, 0x41424344}, 0x13b31b46, 0x10) write$tun(r0, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x0, 0x400, 0x14, 0xa}, @ipv4=@tcp={{0x6, 0x4, 0x2, 0x8, 0x94, 0x64, 0x0, 0xb, 0x6, 0x0, @rand_addr=0x64010100, @multicast1, {[@timestamp={0x44, 0x4, 0x89, 0x0, 0x8}]}}, {{0x4e20, 0x4e24, 0x41424344, r4, 0x0, 0x0, 0x5, 0x20, 0x105, 0x0, 0xffff}, {"beb364c192856cee524db8dc98457f10be9f89eff700d83130f1a13ce829e55086d65862fe3868cc03a052af5da38b62af0ae89aeaff07654822eeda9281ac2a7568208cad100000cd3904f2fb7f7703a8232728fba8b62a3c10b500adc6512902d186a181bfcc3e"}}}}, 0xa2) executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000280)) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x4f) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='tcp 2', 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x70, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x3a, 0x3a, 0xff, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x4, {0x6, 0x6, "0e189a", 0x1, 0x3a, 0xff, @remote, @private0, [], "b3ee73f10f4f24e156fc"}}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x44}}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) setreuid(0x0, 0xee00) fchmod(r3, 0x80) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_DESTROY$stdev(r2, 0x3b80, &(0x7f00000000c0)={0x8, r4}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x4f) (async) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) (async) write(r0, &(0x7f0000000300)='tcp 2', 0x5) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x70, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x3a, 0x3a, 0xff, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x4, {0x6, 0x6, "0e189a", 0x1, 0x3a, 0xff, @remote, @private0, [], "b3ee73f10f4f24e156fc"}}}}}}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x44}}, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) (async) setreuid(0x0, 0xee00) (async) fchmod(r3, 0x80) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) ioctl$IOMMU_DESTROY$stdev(r2, 0x3b80, &(0x7f00000000c0)={0x8, r4}) (async) executing program 33: r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x1, 0x101801) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f00000000c0)=0x2000024) pipe2$9p(0x0, 0x80800) syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000004c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00060008"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) executing program 34: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x4f) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='tcp 2', 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x70, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x3a, 0x3a, 0xff, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x4, {0x6, 0x6, "0e189a", 0x1, 0x3a, 0xff, @remote, @private0, [], "b3ee73f10f4f24e156fc"}}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x44}}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) setreuid(0x0, 0xee00) fchmod(r3, 0x80) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_DESTROY$stdev(r2, 0x3b80, &(0x7f00000000c0)={0x8, r4}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x4f) (async) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) (async) write(r0, &(0x7f0000000300)='tcp 2', 0x5) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x70, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x3a, 0x3a, 0xff, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x4, {0x6, 0x6, "0e189a", 0x1, 0x3a, 0xff, @remote, @private0, [], "b3ee73f10f4f24e156fc"}}}}}}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x44}}, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) (async) setreuid(0x0, 0xee00) (async) fchmod(r3, 0x80) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) ioctl$IOMMU_DESTROY$stdev(r2, 0x3b80, &(0x7f00000000c0)={0x8, r4}) (async) executing program 0: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x40, 0x0, 0xa}, 0x18) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="694a4a3e3cbac01a80081e3f2a742de9", 0x10) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) getdents(r1, &(0x7f00000001c0)=""/240, 0xf0) (async) getdents64(r1, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x100000001) (async) sendmsg$inet(r3, &(0x7f0000000100)={&(0x7f0000000180)={0x2, 0x4e26, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @rand_addr=0x64010102}}}], 0x38}, 0x4000004) (async) semget$private(0x0, 0x6, 0x3b1) (async) semctl$SEM_STAT_ANY(0x0, 0x4, 0x14, &(0x7f0000000000)=""/164) socket(0x1d, 0x2, 0x6) write(r2, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x2}, &(0x7f0000000100)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x128, r2, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x23}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x643}, @NL80211_ATTR_TX_RATES={0x100, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0xb8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7f, 0x9, 0x6, 0x5, 0xf9, 0x1, 0x3ff]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x1, 0x9}, {0x5, 0x1}, {0x1, 0x8}, {0x1, 0x7}, {0x2, 0x9}, {0x3, 0x3}, {0x2, 0x4}, {0x4, 0x5}, {0x3, 0x6}, {0x1, 0x3}, {0x5, 0x2}, {0x1, 0x2}, {0x0, 0x8}, {0x1, 0x9}, {0x5}, {0x7, 0x8}, {0x3, 0x3}, {0x3, 0x5}, {0x1, 0x6}, {0x3, 0x8}, {0x0, 0xa}, {0x5, 0x5}, {0x4, 0x9}, {0x5, 0x9}, {0x2, 0x3}, {0x2, 0x4}, {0x4, 0x1}, {0x5, 0x5}, {0x0, 0x4}, {0x1, 0x8}, {0x7}, {0x1}, {0x5, 0x3}, {0x1, 0x6}, {0x3, 0x7}, {0x2, 0x4}, {0x4, 0xa}, {0x2, 0x9}, {0x0, 0x8}, {0x4, 0x3}, {0x3, 0x8}, {0x7, 0x9}, {0x5}, {0x7, 0x7}, {0x0, 0x3}, {0x6, 0x9}, {0x0, 0x5}, {0x2, 0x6}, {0x5, 0x8}, {0x6, 0x9}, {0x7, 0x8}, {0x1, 0x7}, {0x7, 0x5}, {0x0, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xf23, 0x1, 0x7, 0x2000, 0xd, 0x8, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0xd, 0xd, 0x2, 0x5, 0x1, 0xfeff, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x9, 0xfbff, 0x24, 0x400, 0x800, 0x2, 0x2a78]}}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xe4c9, 0xc5, 0x9, 0x10, 0x1000, 0x5, 0xff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, 0x128}, 0x1, 0x0, 0x0, 0xc006}, 0x8044) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) r3 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x36, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0xc, 0x1e, &(0x7f00000000c0)="7d1faf49cdeb662a1a2e37edea03fb7c34a4d03b86c338c83afb9a7a03b0", 0x1, 0x1}]}) (async, rerun: 64) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async, rerun: 64) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/46, 0x2e}], 0x1, &(0x7f0000000600)=""/192, 0xc0}, 0x161) (async, rerun: 32) r8 = socket$kcm(0x2, 0x1, 0x84) (rerun: 32) setsockopt$sock_attach_bpf(r8, 0x84, 0x9, &(0x7f0000000380), 0x98) (async, rerun: 64) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000001000390400000010000000000000000016f2ec767c88162e2837cf4b849895af724d055dfd81817dedd3", @ANYRES32=r7, @ANYBLOB="01980600000000001800128008000100677265000c00028008000700ac141402"], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (rerun: 64) sendto$packet(r4, &(0x7f0000000240)="3b826a8687", 0x5, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r7, 0x1, 0x4, 0x6, @multicast}, 0x14) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40091}, 0x48854) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x4, 0xa, 0x701, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000020) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) readv(r0, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/246, 0xf6}], 0x1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) ppoll(&(0x7f00000004c0)=[{r0}], 0x1, &(0x7f0000000500)={0x0, 0x3938700}, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000240)={0x301, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) (async) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) (async) syz_emit_ethernet(0x146, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0) executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000380)="270502001a0014000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102821880b", 0x44}, {&(0x7f00000007c0)="b54e8224", 0x4}, {&(0x7f0000000040)="b9b2888fd608c639f9f539a931d941265e40c9b526", 0x15}, {&(0x7f0000000400)="a771936082af", 0x6}], 0x4}, 0x1800) write$cgroup_devices(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='b *:2 m'], 0x9) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f00000008c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000600)={0x24c, 0x13, 0x10, 0x70bd2a, 0x25dfdbfc, {0x26, 0x5, 0x0, 0x3, {0x4e20, 0x4e21, [0x400, 0x77, 0x99e, 0x7], [0x38d, 0x10002000, 0x4, 0xfffffffe], 0x0, [0x4, 0xffff]}, 0x1, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x4a, 0x1, "f89784b9ad6a6512b85263790839d2ec6fe2d28921bc4be229cccbdacf5219572dfaf9e2230c2363794ce6a449f430c1ec67e98d7c941fdb846a0fde8a97d9524e52931f4685"}, @INET_DIAG_REQ_BYTECODE={0xd5, 0x1, "39f85b6ef9ab33e242734c5fc5d9dd923fba393ff69fe40e2cf8c13f922e148260f1933dd9e02d825053774a500f09384e2b09614ac970731106edf22c56ac9f398c0e8bafc5b044225d4745f24048271be8f330408a43e5aa6cd1a8b69a99b12be81ab977c50a6e68d7d0bf86612540878dd61c350f6c73708f9baeeecd35dd3f2e544248ad64bedf6249d99f6285b69c94b9ad32ef21bb0c2cac220e3d78cc028d4bf11b5cae77771c97f859d99c9355267ae7dc260ce80328be5c82933e56efb555e2cb3b519f2008d2aa6971ea3c93"}, @INET_DIAG_REQ_BYTECODE={0xdb, 0x1, "060bf3233b64082120a8d0a532a88e8e50aca4f4ace93d86ce2451f38ed0f9edca8e9d6cc28d809363b36e1166167afecde36aa88122fe18d4aee01fd63f9526230d38674ec75eca845023e47e3cbee7bb432c5a90069b626067eccf62516570e85ea1104e6d1a3502cbdcda7585163d9bc646654d2fda7782aae0b547bebae0020ace72e416b5072db3e71c1c14e687bde76ff60653e1e784ff6220e68ed8f81635a881cd5803f61501204928ec74305868b04ef07c3f8eb3b510446fcdb5254b33cc623f63fc63151e49bee0fbe3e63fb94dfb43e459"}]}, 0x24c}, 0x1, 0x0, 0x0, 0x1abe9132536f29f4}, 0x20000001) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4622, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x0, 0x0, 0x400}}}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xa, 0xfff1}, {0x10, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r7, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000900000000000500200001000000050008"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x74, 0x4, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xbd9}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x809b}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008000}, 0x40082) executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18, &(0x7f00000001c0)={&(0x7f0000000140)="5ab37158946b88213a", 0x9}, 0x1, 0x0, 0x0, 0x20008840}, 0x4000000) readv(r0, &(0x7f00000000c0)=[{&(0x7f00000014c0)=""/4105, 0x1009}], 0x1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0x4, 0x0, &(0x7f0000004800)) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffe49}, 0x42) executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f0000000200)=@ethtool_perm_addr={0x12}}) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x4, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{0x0}], 0x1}, 0x4048043) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r4, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725", 0x74}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8", 0x39}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7", 0xcb}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d490", 0xe0}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="4f1a000000000000240012800b00010067656e657665000014000280050008000100000005000c000100000008000a00", @ANYRESDEC], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000300), 0x40000000000000fb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000240)=0x1) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000100)={0x0, 0xffff, 0x0, 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x8000}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000003c0)={0x3, 0x1, 0x4044000, 0x1000, &(0x7f0000690000/0x1000)=nil}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @tid=r2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) ioctl$CEC_DQEVENT(r6, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r6, 0xc0506107, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a00120002002800000019002d4400009b84136ef75afb83de066a5900e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) program crashed: general protection fault in dummy_udc_start bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunk #1 of len 15 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m43s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 5, 10, 19, 9, 3, 12, 6, 4, 12, 25, 8, 21, 21] detailed listing: executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000005980), 0x0, 0x80201) write(r1, &(0x7f0000000440)="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", 0x111) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000180)={[0xa000, 0x8080000, 0xf000, 0x6000], 0x9, 0x82}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0000000d0085a168d0bf46d32345653600648d0a00050002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) sendmsg$nl_route(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000010400000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400030076657468305f746f5f626f6e6400000014002b8008000100", @ANYRES32=r6], 0x48}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) unshare(0x10040000) openat(0xffffffffffffff9c, &(0x7f0000000280)='./gadget/ep1in-bulk\x00', 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r7, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040002000000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r8, 0x0, &(0x7f0000000000)=""/10, 0x2}, 0x20) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000002600)={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x28, 0x66, 0x0, 0xa, 0x11, 0x0, @empty, @empty, {[@generic={0x44, 0x5, "c12e7a"}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6f7377a903000003b6292e8c6adf38c4f067f694d131977bdeba1fd7b16a399b81abf45140c4cd613c96256915aa2f62f69223d27f1761cb50b19231be30ead2f7b6d3a4b0b50b56ee8044224b3a8e40d2f69ad0320961ae6d49045201ef1f5743fee4203207c44a55e42152735c3bb6518aedfc728df7a73b6bbfc9b57958a19b9c59902f02121fcc8550f5f7d1e200"/155]) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000100)=0xc) r1 = syz_open_procfs(r0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0xfff6) executing program 3: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = mq_open(&(0x7f0000000200)='!sel\x00\x00\x00\x10\x94\xcc\x06\x10\xf7-\x95P\xd7dy\x00\x01\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x001\xa1a\xa5\f\xd7\xf15\x06\xc2db\xd8.j}\x1b1\xeb\"\xdbP;`\xeb1\xd2\r\"{\x9fR\xf2n\xb9\x82E', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000140)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000880)=""/202, 0xca, 0x200000200009, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x19, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071100000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a5cfe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e4b2b9275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf138f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87acbeb48949b63b045313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65039cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f00000000c0)={&(0x7f0000000040)=""/76, 0x4c}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x100, 0x0) executing program 3: io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20002, 0x2}) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xb3) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0xb4, 0x24, 0x20, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x84, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0xefdd}, @TCA_GRED_PARMS={0x38, 0x1, {0x101, 0x5, 0xc3, 0x6, 0x4, 0x6, 0x8000, 0x4, 0x2, 0xf5, 0x9, 0x1, 0x13, 0x41, 0x10000, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x6}, @TCA_GRED_PARMS={0x38, 0x1, {0x2, 0x9, 0x4, 0x7, 0x6, 0xffff, 0x2, 0x7f, 0x1, 0x4, 0x16, 0x4, 0x17, 0x2, 0x8, 0x7}}]}}]}, 0xb4}}, 0x4000000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000a000200000000000000000008000900040100"], 0x30}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsmount(r2, 0x1, 0xe) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r3, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r4, 0x1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r5, r7, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x5c8, &(0x7f0000000880)=ANY=[], 0x0) executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x1, 0x101801) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f00000000c0)=0x2000024) pipe2$9p(0x0, 0x80800) syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000004c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00060008"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) executing program 1: r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0001008158", 0x6}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c0000000000000000", @ANYRES32=r0, @ANYRES64=r0], 0x40}, 0x20000000) (async) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0001008158", 0x6}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c0000000000000000", @ANYRES32=r0, @ANYRES64=r0], 0x40}, 0x20000000) executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fe, 0x0, 0xc000, 0x2000, &(0x7f0000008000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) accept(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) (async) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@mpls_getroute={0x1c, 0x1e, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x2}}, 0x1c}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000000000400000002000000000000080000000000006100", @ANYRES16=r1, @ANYRES64=r0], 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r4, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40091}, 0x48854) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x4, 0xa, 0x701, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000020) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) readv(r0, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/246, 0xf6}], 0x1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) ppoll(&(0x7f00000004c0)=[{r0}], 0x1, &(0x7f0000000500)={0x0, 0x3938700}, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000240)={0x301, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) (async) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) (async) syz_emit_ethernet(0x146, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000000001103aff20010000000000000000000000000001ff02000000000000000000000000000187009078fc000000000000000000000000000000000018000e0124fcaa8fc05a221edb3735a116873685be2878811a4f64e0284643092057b0dfc98cb231f5548ab71153e6681d2b3376e5811ae4787065112ed4250c2490cbe71d2828e909d063b1c61edd5b6288e2700f650f72b3829982734627311e025ae743255c13542e8763d3328f46c611febb756d91aaa8913df0160af9980494fd4a4b5b11b6f3cc44c3fe96b5285eaf0d22918a54de61fc130e627235862106a4b993cbfcff6c2b7ed9e60f9c0886308a1eb5dc9c7f7e63f3fa7424e9fbf08f97a2c39b685d24eeacfce05eb08529015efcb388b2aa2e3adacfd60c94d4d8948f0584b1a189e244bcdc42a28b2d09ad5dd9ce80d1ddc418"], 0x0) executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000380)="270502001a0014000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102821880b", 0x44}, {&(0x7f00000007c0)="b54e8224", 0x4}, {&(0x7f0000000040)="b9b2888fd608c639f9f539a931d941265e40c9b526", 0x15}, {&(0x7f0000000400)="a771936082af", 0x6}], 0x4}, 0x1800) write$cgroup_devices(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='b *:2 m'], 0x9) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f00000008c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000600)={0x24c, 0x13, 0x10, 0x70bd2a, 0x25dfdbfc, {0x26, 0x5, 0x0, 0x3, {0x4e20, 0x4e21, [0x400, 0x77, 0x99e, 0x7], [0x38d, 0x10002000, 0x4, 0xfffffffe], 0x0, [0x4, 0xffff]}, 0x1, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x4a, 0x1, "f89784b9ad6a6512b85263790839d2ec6fe2d28921bc4be229cccbdacf5219572dfaf9e2230c2363794ce6a449f430c1ec67e98d7c941fdb846a0fde8a97d9524e52931f4685"}, @INET_DIAG_REQ_BYTECODE={0xd5, 0x1, "39f85b6ef9ab33e242734c5fc5d9dd923fba393ff69fe40e2cf8c13f922e148260f1933dd9e02d825053774a500f09384e2b09614ac970731106edf22c56ac9f398c0e8bafc5b044225d4745f24048271be8f330408a43e5aa6cd1a8b69a99b12be81ab977c50a6e68d7d0bf86612540878dd61c350f6c73708f9baeeecd35dd3f2e544248ad64bedf6249d99f6285b69c94b9ad32ef21bb0c2cac220e3d78cc028d4bf11b5cae77771c97f859d99c9355267ae7dc260ce80328be5c82933e56efb555e2cb3b519f2008d2aa6971ea3c93"}, @INET_DIAG_REQ_BYTECODE={0xdb, 0x1, "060bf3233b64082120a8d0a532a88e8e50aca4f4ace93d86ce2451f38ed0f9edca8e9d6cc28d809363b36e1166167afecde36aa88122fe18d4aee01fd63f9526230d38674ec75eca845023e47e3cbee7bb432c5a90069b626067eccf62516570e85ea1104e6d1a3502cbdcda7585163d9bc646654d2fda7782aae0b547bebae0020ace72e416b5072db3e71c1c14e687bde76ff60653e1e784ff6220e68ed8f81635a881cd5803f61501204928ec74305868b04ef07c3f8eb3b510446fcdb5254b33cc623f63fc63151e49bee0fbe3e63fb94dfb43e459"}]}, 0x24c}, 0x1, 0x0, 0x0, 0x1abe9132536f29f4}, 0x20000001) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4622, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x0, 0x0, 0x400}}}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xa, 0xfff1}, {0x10, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r7, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000900000000000500200001000000050008"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x74, 0x4, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xbd9}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x809b}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008000}, 0x40082) executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18, &(0x7f00000001c0)={&(0x7f0000000140)="5ab37158946b88213a", 0x9}, 0x1, 0x0, 0x0, 0x20008840}, 0x4000000) readv(r0, &(0x7f00000000c0)=[{&(0x7f00000014c0)=""/4105, 0x1009}], 0x1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0x4, 0x0, &(0x7f0000004800)) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffe49}, 0x42) executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f0000000200)=@ethtool_perm_addr={0x12}}) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x4, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{0x0}], 0x1}, 0x4048043) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r4, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725", 0x74}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8", 0x39}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7", 0xcb}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d490", 0xe0}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="4f1a000000000000240012800b00010067656e657665000014000280050008000100000005000c000100000008000a00", @ANYRESDEC], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000300), 0x40000000000000fb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000240)=0x1) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000100)={0x0, 0xffff, 0x0, 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x8000}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000003c0)={0x3, 0x1, 0x4044000, 0x1000, &(0x7f0000690000/0x1000)=nil}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @tid=r2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) ioctl$CEC_DQEVENT(r6, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r6, 0xc0506107, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a00120002002800000019002d4400009b84136ef75afb83de066a5900e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) program crashed: general protection fault in dummy_udc_start bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <7>, <7> bisect: split chunk #0 of len 7 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 3, 12, 6, 4, 12, 25, 8, 21, 21] detailed listing: executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x1, 0x101801) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f00000000c0)=0x2000024) pipe2$9p(0x0, 0x80800) syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000004c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00060008"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) executing program 1: r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0001008158", 0x6}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c0000000000000000", @ANYRES32=r0, @ANYRES64=r0], 0x40}, 0x20000000) (async) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0001008158", 0x6}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c0000000000000000", @ANYRES32=r0, @ANYRES64=r0], 0x40}, 0x20000000) executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fe, 0x0, 0xc000, 0x2000, &(0x7f0000008000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) accept(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) (async) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@mpls_getroute={0x1c, 0x1e, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x2}}, 0x1c}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000000000400000002000000000000080000000000006100", @ANYRES16=r1, @ANYRES64=r0], 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r4, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40091}, 0x48854) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x4, 0xa, 0x701, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000020) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) readv(r0, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/246, 0xf6}], 0x1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) ppoll(&(0x7f00000004c0)=[{r0}], 0x1, &(0x7f0000000500)={0x0, 0x3938700}, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000240)={0x301, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) (async) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) (async) syz_emit_ethernet(0x146, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000000001103aff20010000000000000000000000000001ff02000000000000000000000000000187009078fc000000000000000000000000000000000018000e0124fcaa8fc05a221edb3735a116873685be2878811a4f64e0284643092057b0dfc98cb231f5548ab71153e6681d2b3376e5811ae4787065112ed4250c2490cbe71d2828e909d063b1c61edd5b6288e2700f650f72b3829982734627311e025ae743255c13542e8763d3328f46c611febb756d91aaa8913df0160af9980494fd4a4b5b11b6f3cc44c3fe96b5285eaf0d22918a54de61fc130e627235862106a4b993cbfcff6c2b7ed9e60f9c0886308a1eb5dc9c7f7e63f3fa7424e9fbf08f97a2c39b685d24eeacfce05eb08529015efcb388b2aa2e3adacfd60c94d4d8948f0584b1a189e244bcdc42a28b2d09ad5dd9ce80d1ddc418"], 0x0) executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000380)="270502001a0014000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102821880b", 0x44}, {&(0x7f00000007c0)="b54e8224", 0x4}, {&(0x7f0000000040)="b9b2888fd608c639f9f539a931d941265e40c9b526", 0x15}, {&(0x7f0000000400)="a771936082af", 0x6}], 0x4}, 0x1800) write$cgroup_devices(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='b *:2 m'], 0x9) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f00000008c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000600)={0x24c, 0x13, 0x10, 0x70bd2a, 0x25dfdbfc, {0x26, 0x5, 0x0, 0x3, {0x4e20, 0x4e21, [0x400, 0x77, 0x99e, 0x7], [0x38d, 0x10002000, 0x4, 0xfffffffe], 0x0, [0x4, 0xffff]}, 0x1, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x4a, 0x1, "f89784b9ad6a6512b85263790839d2ec6fe2d28921bc4be229cccbdacf5219572dfaf9e2230c2363794ce6a449f430c1ec67e98d7c941fdb846a0fde8a97d9524e52931f4685"}, @INET_DIAG_REQ_BYTECODE={0xd5, 0x1, "39f85b6ef9ab33e242734c5fc5d9dd923fba393ff69fe40e2cf8c13f922e148260f1933dd9e02d825053774a500f09384e2b09614ac970731106edf22c56ac9f398c0e8bafc5b044225d4745f24048271be8f330408a43e5aa6cd1a8b69a99b12be81ab977c50a6e68d7d0bf86612540878dd61c350f6c73708f9baeeecd35dd3f2e544248ad64bedf6249d99f6285b69c94b9ad32ef21bb0c2cac220e3d78cc028d4bf11b5cae77771c97f859d99c9355267ae7dc260ce80328be5c82933e56efb555e2cb3b519f2008d2aa6971ea3c93"}, @INET_DIAG_REQ_BYTECODE={0xdb, 0x1, "060bf3233b64082120a8d0a532a88e8e50aca4f4ace93d86ce2451f38ed0f9edca8e9d6cc28d809363b36e1166167afecde36aa88122fe18d4aee01fd63f9526230d38674ec75eca845023e47e3cbee7bb432c5a90069b626067eccf62516570e85ea1104e6d1a3502cbdcda7585163d9bc646654d2fda7782aae0b547bebae0020ace72e416b5072db3e71c1c14e687bde76ff60653e1e784ff6220e68ed8f81635a881cd5803f61501204928ec74305868b04ef07c3f8eb3b510446fcdb5254b33cc623f63fc63151e49bee0fbe3e63fb94dfb43e459"}]}, 0x24c}, 0x1, 0x0, 0x0, 0x1abe9132536f29f4}, 0x20000001) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4622, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x0, 0x0, 0x400}}}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xa, 0xfff1}, {0x10, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r7, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000900000000000500200001000000050008"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x74, 0x4, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xbd9}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x809b}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008000}, 0x40082) executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18, &(0x7f00000001c0)={&(0x7f0000000140)="5ab37158946b88213a", 0x9}, 0x1, 0x0, 0x0, 0x20008840}, 0x4000000) readv(r0, &(0x7f00000000c0)=[{&(0x7f00000014c0)=""/4105, 0x1009}], 0x1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0x4, 0x0, &(0x7f0000004800)) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b7020000380d0000bfa30000000000000703000000feffff720af0fff8ffff1989a4f0ff00000000b7060000080000001e640000000000004504040001000000170400000c000a00b7040000ff0100006a0af2fe00000000850000001a000000b70000003f00000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd8000000000000080231c61ccd106cb937b450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c4608800000000000000005cbb5a2600"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffe49}, 0x42) executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f0000000200)=@ethtool_perm_addr={0x12}}) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x4, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{0x0}], 0x1}, 0x4048043) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r4, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725", 0x74}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8", 0x39}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7", 0xcb}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d490", 0xe0}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="4f1a000000000000240012800b00010067656e657665000014000280050008000100000005000c000100000008000a00", @ANYRESDEC], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000300), 0x40000000000000fb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000240)=0x1) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000100)={0x0, 0xffff, 0x0, 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x8000}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000003c0)={0x3, 0x1, 0x4044000, 0x1000, &(0x7f0000690000/0x1000)=nil}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @tid=r2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) ioctl$CEC_DQEVENT(r6, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r6, 0xc0506107, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a00120002002800000019002d4400009b84136ef75afb83de066a5900e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=1m42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 5, 10, 19, 6, 4, 12, 25, 8, 21, 21] detailed listing: executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000005980), 0x0, 0x80201) write(r1, &(0x7f0000000440)="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", 0x111) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000180)={[0xa000, 0x8080000, 0xf000, 0x6000], 0x9, 0x82}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0000000d0085a168d0bf46d32345653600648d0a00050002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) sendmsg$nl_route(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000010400000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400030076657468305f746f5f626f6e6400000014002b8008000100", @ANYRES32=r6], 0x48}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) unshare(0x10040000) openat(0xffffffffffffff9c, &(0x7f0000000280)='./gadget/ep1in-bulk\x00', 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r7, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040002000000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r8, 0x0, &(0x7f0000000000)=""/10, 0x2}, 0x20) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000002600)={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x28, 0x66, 0x0, 0xa, 0x11, 0x0, @empty, @empty, {[@generic={0x44, 0x5, "c12e7a"}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6f7377a903000003b6292e8c6adf38c4f067f694d131977bdeba1fd7b16a399b81abf45140c4cd613c96256915aa2f62f69223d27f1761cb50b19231be30ead2f7b6d3a4b0b50b56ee8044224b3a8e40d2f69ad0320961ae6d49045201ef1f5743fee4203207c44a55e42152735c3bb6518aedfc728df7a73b6bbfc9b57958a19b9c59902f02121fcc8550f5f7d1e200"/155]) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000100)=0xc) r1 = syz_open_procfs(r0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0xfff6) executing program 3: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = mq_open(&(0x7f0000000200)='!sel\x00\x00\x00\x10\x94\xcc\x06\x10\xf7-\x95P\xd7dy\x00\x01\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x001\xa1a\xa5\f\xd7\xf15\x06\xc2db\xd8.j}\x1b1\xeb\"\xdbP;`\xeb1\xd2\r\"{\x9fR\xf2n\xb9\x82E', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000140)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000880)=""/202, 0xca, 0x200000200009, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x19, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f00000000c0)={&(0x7f0000000040)=""/76, 0x4c}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x100, 0x0) executing program 3: io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20002, 0x2}) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xb3) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0xb4, 0x24, 0x20, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x84, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0xefdd}, @TCA_GRED_PARMS={0x38, 0x1, {0x101, 0x5, 0xc3, 0x6, 0x4, 0x6, 0x8000, 0x4, 0x2, 0xf5, 0x9, 0x1, 0x13, 0x41, 0x10000, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x6}, @TCA_GRED_PARMS={0x38, 0x1, {0x2, 0x9, 0x4, 0x7, 0x6, 0xffff, 0x2, 0x7f, 0x1, 0x4, 0x16, 0x4, 0x17, 0x2, 0x8, 0x7}}]}}]}, 0xb4}}, 0x4000000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000a000200000000000000000008000900040100"], 0x30}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsmount(r2, 0x1, 0xe) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r3, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r4, 0x1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r5, r7, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x5c8, &(0x7f0000000880)=ANY=[], 0x0) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40091}, 0x48854) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x4, 0xa, 0x701, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000020) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) readv(r0, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/246, 0xf6}], 0x1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) ppoll(&(0x7f00000004c0)=[{r0}], 0x1, &(0x7f0000000500)={0x0, 0x3938700}, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000240)={0x301, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) (async) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) (async) syz_emit_ethernet(0x146, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0) executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000380)="270502001a0014000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102821880b", 0x44}, {&(0x7f00000007c0)="b54e8224", 0x4}, {&(0x7f0000000040)="b9b2888fd608c639f9f539a931d941265e40c9b526", 0x15}, {&(0x7f0000000400)="a771936082af", 0x6}], 0x4}, 0x1800) write$cgroup_devices(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='b *:2 m'], 0x9) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f00000008c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000600)={0x24c, 0x13, 0x10, 0x70bd2a, 0x25dfdbfc, {0x26, 0x5, 0x0, 0x3, {0x4e20, 0x4e21, [0x400, 0x77, 0x99e, 0x7], [0x38d, 0x10002000, 0x4, 0xfffffffe], 0x0, [0x4, 0xffff]}, 0x1, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x4a, 0x1, "f89784b9ad6a6512b85263790839d2ec6fe2d28921bc4be229cccbdacf5219572dfaf9e2230c2363794ce6a449f430c1ec67e98d7c941fdb846a0fde8a97d9524e52931f4685"}, @INET_DIAG_REQ_BYTECODE={0xd5, 0x1, "39f85b6ef9ab33e242734c5fc5d9dd923fba393ff69fe40e2cf8c13f922e148260f1933dd9e02d825053774a500f09384e2b09614ac970731106edf22c56ac9f398c0e8bafc5b044225d4745f24048271be8f330408a43e5aa6cd1a8b69a99b12be81ab977c50a6e68d7d0bf86612540878dd61c350f6c73708f9baeeecd35dd3f2e544248ad64bedf6249d99f6285b69c94b9ad32ef21bb0c2cac220e3d78cc028d4bf11b5cae77771c97f859d99c9355267ae7dc260ce80328be5c82933e56efb555e2cb3b519f2008d2aa6971ea3c93"}, @INET_DIAG_REQ_BYTECODE={0xdb, 0x1, "060bf3233b64082120a8d0a532a88e8e50aca4f4ace93d86ce2451f38ed0f9edca8e9d6cc28d809363b36e1166167afecde36aa88122fe18d4aee01fd63f9526230d38674ec75eca845023e47e3cbee7bb432c5a90069b626067eccf62516570e85ea1104e6d1a3502cbdcda7585163d9bc646654d2fda7782aae0b547bebae0020ace72e416b5072db3e71c1c14e687bde76ff60653e1e784ff6220e68ed8f81635a881cd5803f61501204928ec74305868b04ef07c3f8eb3b510446fcdb5254b33cc623f63fc63151e49bee0fbe3e63fb94dfb43e459"}]}, 0x24c}, 0x1, 0x0, 0x0, 0x1abe9132536f29f4}, 0x20000001) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4622, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x0, 0x0, 0x400}}}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xa, 0xfff1}, {0x10, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r7, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000900000000000500200001000000050008"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x74, 0x4, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xbd9}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x809b}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008000}, 0x40082) executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18, &(0x7f00000001c0)={&(0x7f0000000140)="5ab37158946b88213a", 0x9}, 0x1, 0x0, 0x0, 0x20008840}, 0x4000000) readv(r0, &(0x7f00000000c0)=[{&(0x7f00000014c0)=""/4105, 0x1009}], 0x1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0x4, 0x0, &(0x7f0000004800)) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffe49}, 0x42) executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f0000000200)=@ethtool_perm_addr={0x12}}) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x4, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{0x0}], 0x1}, 0x4048043) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r4, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725", 0x74}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8", 0x39}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7", 0xcb}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d490", 0xe0}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="4f1a000000000000240012800b00010067656e657665000014000280050008000100000005000c000100000008000a00", @ANYRESDEC], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000300), 0x40000000000000fb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000240)=0x1) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000100)={0x0, 0xffff, 0x0, 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x8000}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000003c0)={0x3, 0x1, 0x4044000, 0x1000, &(0x7f0000690000/0x1000)=nil}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @tid=r2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) ioctl$CEC_DQEVENT(r6, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r6, 0xc0506107, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a00120002002800000019002d4400009b84136ef75afb83de066a5900e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) program crashed: general protection fault in dummy_udc_start bisect: the chunk can be dropped bisect: split chunk #1 of len 7 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 5, 10, 19, 8, 21, 21] detailed listing: executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000005980), 0x0, 0x80201) write(r1, &(0x7f0000000440)="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", 0x111) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000180)={[0xa000, 0x8080000, 0xf000, 0x6000], 0x9, 0x82}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0000000d0085a168d0bf46d32345653600648d0a00050002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) sendmsg$nl_route(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000010400000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400030076657468305f746f5f626f6e6400000014002b8008000100", @ANYRES32=r6], 0x48}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) unshare(0x10040000) openat(0xffffffffffffff9c, &(0x7f0000000280)='./gadget/ep1in-bulk\x00', 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r7, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040002000000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r8, 0x0, &(0x7f0000000000)=""/10, 0x2}, 0x20) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000002600)={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x28, 0x66, 0x0, 0xa, 0x11, 0x0, @empty, @empty, {[@generic={0x44, 0x5, "c12e7a"}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6f7377a903000003b6292e8c6adf38c4f067f694d131977bdeba1fd7b16a399b81abf45140c4cd613c96256915aa2f62f69223d27f1761cb50b19231be30ead2f7b6d3a4b0b50b56ee8044224b3a8e40d2f69ad0320961ae6d49045201ef1f5743fee4203207c44a55e42152735c3bb6518aedfc728df7a73b6bbfc9b57958a19b9c59902f02121fcc8550f5f7d1e200"/155]) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000100)=0xc) r1 = syz_open_procfs(r0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0xfff6) executing program 3: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = mq_open(&(0x7f0000000200)='!sel\x00\x00\x00\x10\x94\xcc\x06\x10\xf7-\x95P\xd7dy\x00\x01\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x001\xa1a\xa5\f\xd7\xf15\x06\xc2db\xd8.j}\x1b1\xeb\"\xdbP;`\xeb1\xd2\r\"{\x9fR\xf2n\xb9\x82E', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000140)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000880)=""/202, 0xca, 0x200000200009, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x19, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071100000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a5cfe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e4b2b9275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf138f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87acbeb48949b63b045313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65039cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f00000000c0)={&(0x7f0000000040)=""/76, 0x4c}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x100, 0x0) executing program 3: io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20002, 0x2}) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xb3) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0xb4, 0x24, 0x20, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x84, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0xefdd}, @TCA_GRED_PARMS={0x38, 0x1, {0x101, 0x5, 0xc3, 0x6, 0x4, 0x6, 0x8000, 0x4, 0x2, 0xf5, 0x9, 0x1, 0x13, 0x41, 0x10000, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x6}, @TCA_GRED_PARMS={0x38, 0x1, {0x2, 0x9, 0x4, 0x7, 0x6, 0xffff, 0x2, 0x7f, 0x1, 0x4, 0x16, 0x4, 0x17, 0x2, 0x8, 0x7}}]}}]}, 0xb4}}, 0x4000000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000a000200000000000000000008000900040100"], 0x30}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsmount(r2, 0x1, 0xe) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r3, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r4, 0x1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r5, r7, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x5c8, &(0x7f0000000880)=ANY=[], 0x0) executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18, &(0x7f00000001c0)={&(0x7f0000000140)="5ab37158946b88213a", 0x9}, 0x1, 0x0, 0x0, 0x20008840}, 0x4000000) readv(r0, &(0x7f00000000c0)=[{&(0x7f00000014c0)=""/4105, 0x1009}], 0x1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0x4, 0x0, &(0x7f0000004800)) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffe49}, 0x42) executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f0000000200)=@ethtool_perm_addr={0x12}}) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x4, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{0x0}], 0x1}, 0x4048043) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r4, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725", 0x74}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8", 0x39}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7", 0xcb}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d490", 0xe0}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="4f1a000000000000240012800b00010067656e657665000014000280050008000100000005000c000100000008000a00", @ANYRESDEC], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000300), 0x40000000000000fb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000240)=0x1) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000100)={0x0, 0xffff, 0x0, 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x8000}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000003c0)={0x3, 0x1, 0x4044000, 0x1000, &(0x7f0000690000/0x1000)=nil}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @tid=r2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) ioctl$CEC_DQEVENT(r6, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r6, 0xc0506107, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a00120002002800000019002d4400009b84136ef75afb83de066a5900e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=1m42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 5, 10, 19, 6, 4, 12, 25] detailed listing: executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000005980), 0x0, 0x80201) write(r1, &(0x7f0000000440)="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", 0x111) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000180)={[0xa000, 0x8080000, 0xf000, 0x6000], 0x9, 0x82}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0000000d0085a168d0bf46d32345653600648d0a00050002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) sendmsg$nl_route(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000010400000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400030076657468305f746f5f626f6e6400000014002b8008000100", @ANYRES32=r6], 0x48}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) unshare(0x10040000) openat(0xffffffffffffff9c, &(0x7f0000000280)='./gadget/ep1in-bulk\x00', 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r7, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040002000000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r8, 0x0, &(0x7f0000000000)=""/10, 0x2}, 0x20) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000002600)={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x28, 0x66, 0x0, 0xa, 0x11, 0x0, @empty, @empty, {[@generic={0x44, 0x5, "c12e7a"}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6f7377a903000003b6292e8c6adf38c4f067f694d131977bdeba1fd7b16a399b81abf45140c4cd613c96256915aa2f62f69223d27f1761cb50b19231be30ead2f7b6d3a4b0b50b56ee8044224b3a8e40d2f69ad0320961ae6d49045201ef1f5743fee4203207c44a55e42152735c3bb6518aedfc728df7a73b6bbfc9b57958a19b9c59902f02121fcc8550f5f7d1e200"/155]) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000100)=0xc) r1 = syz_open_procfs(r0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0xfff6) executing program 3: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = mq_open(&(0x7f0000000200)='!sel\x00\x00\x00\x10\x94\xcc\x06\x10\xf7-\x95P\xd7dy\x00\x01\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x001\xa1a\xa5\f\xd7\xf15\x06\xc2db\xd8.j}\x1b1\xeb\"\xdbP;`\xeb1\xd2\r\"{\x9fR\xf2n\xb9\x82E', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000140)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000880)=""/202, 0xca, 0x200000200009, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x19, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f00000000c0)={&(0x7f0000000040)=""/76, 0x4c}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x100, 0x0) executing program 3: io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20002, 0x2}) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xb3) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0xb4, 0x24, 0x20, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x84, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0xefdd}, @TCA_GRED_PARMS={0x38, 0x1, {0x101, 0x5, 0xc3, 0x6, 0x4, 0x6, 0x8000, 0x4, 0x2, 0xf5, 0x9, 0x1, 0x13, 0x41, 0x10000, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x6}, @TCA_GRED_PARMS={0x38, 0x1, {0x2, 0x9, 0x4, 0x7, 0x6, 0xffff, 0x2, 0x7f, 0x1, 0x4, 0x16, 0x4, 0x17, 0x2, 0x8, 0x7}}]}}]}, 0xb4}}, 0x4000000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000a000200000000000000000008000900040100"], 0x30}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsmount(r2, 0x1, 0xe) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r3, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r4, 0x1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r5, r7, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x5c8, &(0x7f0000000880)=ANY=[], 0x0) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40091}, 0x48854) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x4, 0xa, 0x701, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000020) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) readv(r0, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/246, 0xf6}], 0x1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) ppoll(&(0x7f00000004c0)=[{r0}], 0x1, &(0x7f0000000500)={0x0, 0x3938700}, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000240)={0x301, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) (async) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) (async) syz_emit_ethernet(0x146, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0) executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000380)="270502001a0014000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102821880b", 0x44}, {&(0x7f00000007c0)="b54e8224", 0x4}, {&(0x7f0000000040)="b9b2888fd608c639f9f539a931d941265e40c9b526", 0x15}, {&(0x7f0000000400)="a771936082af", 0x6}], 0x4}, 0x1800) write$cgroup_devices(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='b *:2 m'], 0x9) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f00000008c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000600)={0x24c, 0x13, 0x10, 0x70bd2a, 0x25dfdbfc, {0x26, 0x5, 0x0, 0x3, {0x4e20, 0x4e21, [0x400, 0x77, 0x99e, 0x7], [0x38d, 0x10002000, 0x4, 0xfffffffe], 0x0, [0x4, 0xffff]}, 0x1, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x4a, 0x1, "f89784b9ad6a6512b85263790839d2ec6fe2d28921bc4be229cccbdacf5219572dfaf9e2230c2363794ce6a449f430c1ec67e98d7c941fdb846a0fde8a97d9524e52931f4685"}, @INET_DIAG_REQ_BYTECODE={0xd5, 0x1, "39f85b6ef9ab33e242734c5fc5d9dd923fba393ff69fe40e2cf8c13f922e148260f1933dd9e02d825053774a500f09384e2b09614ac970731106edf22c56ac9f398c0e8bafc5b044225d4745f24048271be8f330408a43e5aa6cd1a8b69a99b12be81ab977c50a6e68d7d0bf86612540878dd61c350f6c73708f9baeeecd35dd3f2e544248ad64bedf6249d99f6285b69c94b9ad32ef21bb0c2cac220e3d78cc028d4bf11b5cae77771c97f859d99c9355267ae7dc260ce80328be5c82933e56efb555e2cb3b519f2008d2aa6971ea3c93"}, @INET_DIAG_REQ_BYTECODE={0xdb, 0x1, "060bf3233b64082120a8d0a532a88e8e50aca4f4ace93d86ce2451f38ed0f9edca8e9d6cc28d809363b36e1166167afecde36aa88122fe18d4aee01fd63f9526230d38674ec75eca845023e47e3cbee7bb432c5a90069b626067eccf62516570e85ea1104e6d1a3502cbdcda7585163d9bc646654d2fda7782aae0b547bebae0020ace72e416b5072db3e71c1c14e687bde76ff60653e1e784ff6220e68ed8f81635a881cd5803f61501204928ec74305868b04ef07c3f8eb3b510446fcdb5254b33cc623f63fc63151e49bee0fbe3e63fb94dfb43e459"}]}, 0x24c}, 0x1, 0x0, 0x0, 0x1abe9132536f29f4}, 0x20000001) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4622, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x0, 0x0, 0x400}}}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xa, 0xfff1}, {0x10, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r7, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000900000000000500200001000000050008"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x74, 0x4, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xbd9}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x809b}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008000}, 0x40082) program crashed: general protection fault in dummy_udc_start bisect: the chunk can be dropped bisect: split chunks (needed=true): <4>, <4> bisect: split chunk #0 of len 4 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 19, 6, 4, 12, 25] detailed listing: executing program 3: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = mq_open(&(0x7f0000000200)='!sel\x00\x00\x00\x10\x94\xcc\x06\x10\xf7-\x95P\xd7dy\x00\x01\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x001\xa1a\xa5\f\xd7\xf15\x06\xc2db\xd8.j}\x1b1\xeb\"\xdbP;`\xeb1\xd2\r\"{\x9fR\xf2n\xb9\x82E', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000140)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000880)=""/202, 0xca, 0x200000200009, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x19, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f00000000c0)={&(0x7f0000000040)=""/76, 0x4c}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x100, 0x0) executing program 3: io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20002, 0x2}) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xb3) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0xb4, 0x24, 0x20, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x84, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0xefdd}, @TCA_GRED_PARMS={0x38, 0x1, {0x101, 0x5, 0xc3, 0x6, 0x4, 0x6, 0x8000, 0x4, 0x2, 0xf5, 0x9, 0x1, 0x13, 0x41, 0x10000, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x6}, @TCA_GRED_PARMS={0x38, 0x1, {0x2, 0x9, 0x4, 0x7, 0x6, 0xffff, 0x2, 0x7f, 0x1, 0x4, 0x16, 0x4, 0x17, 0x2, 0x8, 0x7}}]}}]}, 0xb4}}, 0x4000000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000a000200000000000000000008000900040100"], 0x30}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsmount(r2, 0x1, 0xe) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r3, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r4, 0x1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r5, r7, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x5c8, &(0x7f0000000880)=ANY=[], 0x0) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40091}, 0x48854) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x4, 0xa, 0x701, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000020) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) readv(r0, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/246, 0xf6}], 0x1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) ppoll(&(0x7f00000004c0)=[{r0}], 0x1, &(0x7f0000000500)={0x0, 0x3938700}, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000240)={0x301, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) (async) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) (async) syz_emit_ethernet(0x146, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000000001103aff20010000000000000000000000000001ff02000000000000000000000000000187009078fc000000000000000000000000000000000018000e0124fcaa8fc05a221edb3735a116873685be2878811a4f64e0284643092057b0dfc98cb231f5548ab71153e6681d2b3376e5811ae4787065112ed4250c2490cbe71d2828e909d063b1c61edd5b6288e2700f650f72b3829982734627311e025ae743255c13542e8763d3328f46c611febb756d91aaa8913df0160af9980494fd4a4b5b11b6f3cc44c3fe96b5285eaf0d22918a54de61fc130e627235862106a4b993cbfcff6c2b7ed9e60f9c0886308a1eb5dc9c7f7e63f3fa7424e9fbf08f97a2c39b685d24eeacfce05eb08529015efcb388b2aa2e3adacfd60c94d4d8948f0584b1a189e244bcdc42a28b2d09ad5dd9ce80d1ddc418"], 0x0) executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000380)="270502001a0014000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102821880b", 0x44}, {&(0x7f00000007c0)="b54e8224", 0x4}, {&(0x7f0000000040)="b9b2888fd608c639f9f539a931d941265e40c9b526", 0x15}, {&(0x7f0000000400)="a771936082af", 0x6}], 0x4}, 0x1800) write$cgroup_devices(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='b *:2 m'], 0x9) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f00000008c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000600)={0x24c, 0x13, 0x10, 0x70bd2a, 0x25dfdbfc, {0x26, 0x5, 0x0, 0x3, {0x4e20, 0x4e21, [0x400, 0x77, 0x99e, 0x7], [0x38d, 0x10002000, 0x4, 0xfffffffe], 0x0, [0x4, 0xffff]}, 0x1, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x4a, 0x1, "f89784b9ad6a6512b85263790839d2ec6fe2d28921bc4be229cccbdacf5219572dfaf9e2230c2363794ce6a449f430c1ec67e98d7c941fdb846a0fde8a97d9524e52931f4685"}, @INET_DIAG_REQ_BYTECODE={0xd5, 0x1, "39f85b6ef9ab33e242734c5fc5d9dd923fba393ff69fe40e2cf8c13f922e148260f1933dd9e02d825053774a500f09384e2b09614ac970731106edf22c56ac9f398c0e8bafc5b044225d4745f24048271be8f330408a43e5aa6cd1a8b69a99b12be81ab977c50a6e68d7d0bf86612540878dd61c350f6c73708f9baeeecd35dd3f2e544248ad64bedf6249d99f6285b69c94b9ad32ef21bb0c2cac220e3d78cc028d4bf11b5cae77771c97f859d99c9355267ae7dc260ce80328be5c82933e56efb555e2cb3b519f2008d2aa6971ea3c93"}, @INET_DIAG_REQ_BYTECODE={0xdb, 0x1, "060bf3233b64082120a8d0a532a88e8e50aca4f4ace93d86ce2451f38ed0f9edca8e9d6cc28d809363b36e1166167afecde36aa88122fe18d4aee01fd63f9526230d38674ec75eca845023e47e3cbee7bb432c5a90069b626067eccf62516570e85ea1104e6d1a3502cbdcda7585163d9bc646654d2fda7782aae0b547bebae0020ace72e416b5072db3e71c1c14e687bde76ff60653e1e784ff6220e68ed8f81635a881cd5803f61501204928ec74305868b04ef07c3f8eb3b510446fcdb5254b33cc623f63fc63151e49bee0fbe3e63fb94dfb43e459"}]}, 0x24c}, 0x1, 0x0, 0x0, 0x1abe9132536f29f4}, 0x20000001) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4622, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x0, 0x0, 0x400}}}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xa, 0xfff1}, {0x10, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r7, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000900000000000500200001000000050008"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x74, 0x4, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xbd9}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x809b}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008000}, 0x40082) program crashed: general protection fault in dummy_udc_start bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunk #1 of len 4 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 19, 12, 25] detailed listing: executing program 3: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = mq_open(&(0x7f0000000200)='!sel\x00\x00\x00\x10\x94\xcc\x06\x10\xf7-\x95P\xd7dy\x00\x01\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x001\xa1a\xa5\f\xd7\xf15\x06\xc2db\xd8.j}\x1b1\xeb\"\xdbP;`\xeb1\xd2\r\"{\x9fR\xf2n\xb9\x82E', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000140)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000880)=""/202, 0xca, 0x200000200009, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x19, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f00000000c0)={&(0x7f0000000040)=""/76, 0x4c}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x100, 0x0) executing program 3: io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20002, 0x2}) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xb3) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0xb4, 0x24, 0x20, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x84, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0xefdd}, @TCA_GRED_PARMS={0x38, 0x1, {0x101, 0x5, 0xc3, 0x6, 0x4, 0x6, 0x8000, 0x4, 0x2, 0xf5, 0x9, 0x1, 0x13, 0x41, 0x10000, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x6}, @TCA_GRED_PARMS={0x38, 0x1, {0x2, 0x9, 0x4, 0x7, 0x6, 0xffff, 0x2, 0x7f, 0x1, 0x4, 0x16, 0x4, 0x17, 0x2, 0x8, 0x7}}]}}]}, 0xb4}}, 0x4000000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000a000200000000000000000008000900040100"], 0x30}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsmount(r2, 0x1, 0xe) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r3, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r4, 0x1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r5, r7, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x5c8, &(0x7f0000000880)=ANY=[], 0x0) executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) ppoll(&(0x7f00000004c0)=[{r0}], 0x1, &(0x7f0000000500)={0x0, 0x3938700}, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000240)={0x301, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) (async) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) (async) syz_emit_ethernet(0x146, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0) executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000380)="270502001a0014000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102821880b", 0x44}, {&(0x7f00000007c0)="b54e8224", 0x4}, {&(0x7f0000000040)="b9b2888fd608c639f9f539a931d941265e40c9b526", 0x15}, {&(0x7f0000000400)="a771936082af", 0x6}], 0x4}, 0x1800) write$cgroup_devices(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='b *:2 m'], 0x9) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f00000008c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000600)={0x24c, 0x13, 0x10, 0x70bd2a, 0x25dfdbfc, {0x26, 0x5, 0x0, 0x3, {0x4e20, 0x4e21, [0x400, 0x77, 0x99e, 0x7], [0x38d, 0x10002000, 0x4, 0xfffffffe], 0x0, [0x4, 0xffff]}, 0x1, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x4a, 0x1, "f89784b9ad6a6512b85263790839d2ec6fe2d28921bc4be229cccbdacf5219572dfaf9e2230c2363794ce6a449f430c1ec67e98d7c941fdb846a0fde8a97d9524e52931f4685"}, @INET_DIAG_REQ_BYTECODE={0xd5, 0x1, "39f85b6ef9ab33e242734c5fc5d9dd923fba393ff69fe40e2cf8c13f922e148260f1933dd9e02d825053774a500f09384e2b09614ac970731106edf22c56ac9f398c0e8bafc5b044225d4745f24048271be8f330408a43e5aa6cd1a8b69a99b12be81ab977c50a6e68d7d0bf86612540878dd61c350f6c73708f9baeeecd35dd3f2e544248ad64bedf6249d99f6285b69c94b9ad32ef21bb0c2cac220e3d78cc028d4bf11b5cae77771c97f859d99c9355267ae7dc260ce80328be5c82933e56efb555e2cb3b519f2008d2aa6971ea3c93"}, @INET_DIAG_REQ_BYTECODE={0xdb, 0x1, "060bf3233b64082120a8d0a532a88e8e50aca4f4ace93d86ce2451f38ed0f9edca8e9d6cc28d809363b36e1166167afecde36aa88122fe18d4aee01fd63f9526230d38674ec75eca845023e47e3cbee7bb432c5a90069b626067eccf62516570e85ea1104e6d1a3502cbdcda7585163d9bc646654d2fda7782aae0b547bebae0020ace72e416b5072db3e71c1c14e687bde76ff60653e1e784ff6220e68ed8f81635a881cd5803f61501204928ec74305868b04ef07c3f8eb3b510446fcdb5254b33cc623f63fc63151e49bee0fbe3e63fb94dfb43e459"}]}, 0x24c}, 0x1, 0x0, 0x0, 0x1abe9132536f29f4}, 0x20000001) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4622, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x0, 0x0, 0x400}}}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xa, 0xfff1}, {0x10, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r7, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000900000000000500200001000000050008"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x74, 0x4, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xbd9}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x809b}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008000}, 0x40082) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 19, 6, 4] detailed listing: executing program 3: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = mq_open(&(0x7f0000000200)='!sel\x00\x00\x00\x10\x94\xcc\x06\x10\xf7-\x95P\xd7dy\x00\x01\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x001\xa1a\xa5\f\xd7\xf15\x06\xc2db\xd8.j}\x1b1\xeb\"\xdbP;`\xeb1\xd2\r\"{\x9fR\xf2n\xb9\x82E', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000140)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000880)=""/202, 0xca, 0x200000200009, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x19, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f00000000c0)={&(0x7f0000000040)=""/76, 0x4c}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x100, 0x0) executing program 3: io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20002, 0x2}) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xb3) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0xb4, 0x24, 0x20, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x84, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0xefdd}, @TCA_GRED_PARMS={0x38, 0x1, {0x101, 0x5, 0xc3, 0x6, 0x4, 0x6, 0x8000, 0x4, 0x2, 0xf5, 0x9, 0x1, 0x13, 0x41, 0x10000, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x6}, @TCA_GRED_PARMS={0x38, 0x1, {0x2, 0x9, 0x4, 0x7, 0x6, 0xffff, 0x2, 0x7f, 0x1, 0x4, 0x16, 0x4, 0x17, 0x2, 0x8, 0x7}}]}}]}, 0xb4}}, 0x4000000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000a000200000000000000000008000900040100"], 0x30}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsmount(r2, 0x1, 0xe) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r3, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r4, 0x1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r5, r7, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x5c8, &(0x7f0000000880)=ANY=[], 0x0) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40091}, 0x48854) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x4, 0xa, 0x701, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000020) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) readv(r0, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/246, 0xf6}], 0x1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) program crashed: general protection fault in set_link_state bisect: the chunk can be dropped bisect: split chunks (needed=true): <2>, <2> bisect: split chunk #0 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [19, 6, 4] detailed listing: executing program 3: io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20002, 0x2}) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xb3) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0xb4, 0x24, 0x20, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x84, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0xefdd}, @TCA_GRED_PARMS={0x38, 0x1, {0x101, 0x5, 0xc3, 0x6, 0x4, 0x6, 0x8000, 0x4, 0x2, 0xf5, 0x9, 0x1, 0x13, 0x41, 0x10000, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x6}, @TCA_GRED_PARMS={0x38, 0x1, {0x2, 0x9, 0x4, 0x7, 0x6, 0xffff, 0x2, 0x7f, 0x1, 0x4, 0x16, 0x4, 0x17, 0x2, 0x8, 0x7}}]}}]}, 0xb4}}, 0x4000000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000a000200000000000000000008000900040100"], 0x30}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsmount(r2, 0x1, 0xe) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r3, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r4, 0x1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r5, r7, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x5c8, &(0x7f0000000880)=ANY=[], 0x0) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40091}, 0x48854) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x4, 0xa, 0x701, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000020) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) readv(r0, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/246, 0xf6}], 0x1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 6, 4] detailed listing: executing program 3: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = mq_open(&(0x7f0000000200)='!sel\x00\x00\x00\x10\x94\xcc\x06\x10\xf7-\x95P\xd7dy\x00\x01\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x001\xa1a\xa5\f\xd7\xf15\x06\xc2db\xd8.j}\x1b1\xeb\"\xdbP;`\xeb1\xd2\r\"{\x9fR\xf2n\xb9\x82E', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000140)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000880)=""/202, 0xca, 0x200000200009, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x19, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f00000000c0)={&(0x7f0000000040)=""/76, 0x4c}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x100, 0x0) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40091}, 0x48854) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x4, 0xa, 0x701, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000020) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) readv(r0, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/246, 0xf6}], 0x1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) program crashed: general protection fault in set_link_state bisect: the chunk can be dropped bisect: split chunk #1 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 4] detailed listing: executing program 3: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = mq_open(&(0x7f0000000200)='!sel\x00\x00\x00\x10\x94\xcc\x06\x10\xf7-\x95P\xd7dy\x00\x01\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x001\xa1a\xa5\f\xd7\xf15\x06\xc2db\xd8.j}\x1b1\xeb\"\xdbP;`\xeb1\xd2\r\"{\x9fR\xf2n\xb9\x82E', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000140)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000880)=""/202, 0xca, 0x200000200009, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x19, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071100000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a5cfe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e4b2b9275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf138f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87acbeb48949b63b045313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65039cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f00000000c0)={&(0x7f0000000040)=""/76, 0x4c}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x100, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) program crashed: general protection fault in dummy_udc_start bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <1>, <1> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: split chunk #1 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 2 programs left: executing program 3: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = mq_open(&(0x7f0000000200)='!sel\x00\x00\x00\x10\x94\xcc\x06\x10\xf7-\x95P\xd7dy\x00\x01\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x001\xa1a\xa5\f\xd7\xf15\x06\xc2db\xd8.j}\x1b1\xeb\"\xdbP;`\xeb1\xd2\r\"{\x9fR\xf2n\xb9\x82E', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000140)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000880)=""/202, 0xca, 0x200000200009, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x19, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f00000000c0)={&(0x7f0000000040)=""/76, 0x4c}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x100, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) bisect: trying to concatenate bisect: concatenate 2 entries minimizing program #0 before concatenation testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 4] detailed listing: executing program 0: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = mq_open(&(0x7f0000000200)='!sel\x00\x00\x00\x10\x94\xcc\x06\x10\xf7-\x95P\xd7dy\x00\x01\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x001\xa1a\xa5\f\xd7\xf15\x06\xc2db\xd8.j}\x1b1\xeb\"\xdbP;`\xeb1\xd2\r\"{\x9fR\xf2n\xb9\x82E', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000140)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000880)=""/202, 0xca, 0x200000200009, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x19, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f00000000c0)={&(0x7f0000000040)=""/76, 0x4c}) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) program crashed: general protection fault in dummy_udc_start testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 4] detailed listing: executing program 0: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = mq_open(&(0x7f0000000200)='!sel\x00\x00\x00\x10\x94\xcc\x06\x10\xf7-\x95P\xd7dy\x00\x01\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x001\xa1a\xa5\f\xd7\xf15\x06\xc2db\xd8.j}\x1b1\xeb\"\xdbP;`\xeb1\xd2\r\"{\x9fR\xf2n\xb9\x82E', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000140)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000880)=""/202, 0xca, 0x200000200009, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x19, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) program crashed: general protection fault in dummy_udc_start testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 4] detailed listing: executing program 0: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = mq_open(&(0x7f0000000200)='!sel\x00\x00\x00\x10\x94\xcc\x06\x10\xf7-\x95P\xd7dy\x00\x01\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x001\xa1a\xa5\f\xd7\xf15\x06\xc2db\xd8.j}\x1b1\xeb\"\xdbP;`\xeb1\xd2\r\"{\x9fR\xf2n\xb9\x82E', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000140)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000880)=""/202, 0xca, 0x200000200009, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) program crashed: general protection fault in dummy_udc_start testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 4] detailed listing: executing program 0: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = mq_open(&(0x7f0000000200)='!sel\x00\x00\x00\x10\x94\xcc\x06\x10\xf7-\x95P\xd7dy\x00\x01\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x001\xa1a\xa5\f\xd7\xf15\x06\xc2db\xd8.j}\x1b1\xeb\"\xdbP;`\xeb1\xd2\r\"{\x9fR\xf2n\xb9\x82E', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000140)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000880)=""/202, 0xca, 0x200000200009, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) program crashed: general protection fault in set_link_state testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 4] detailed listing: executing program 0: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = mq_open(&(0x7f0000000200)='!sel\x00\x00\x00\x10\x94\xcc\x06\x10\xf7-\x95P\xd7dy\x00\x01\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x001\xa1a\xa5\f\xd7\xf15\x06\xc2db\xd8.j}\x1b1\xeb\"\xdbP;`\xeb1\xd2\r\"{\x9fR\xf2n\xb9\x82E', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000140)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000880)=""/202, 0xca, 0x200000200009, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) program crashed: general protection fault in set_link_state testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4] detailed listing: executing program 0: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = mq_open(&(0x7f0000000200)='!sel\x00\x00\x00\x10\x94\xcc\x06\x10\xf7-\x95P\xd7dy\x00\x01\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x001\xa1a\xa5\f\xd7\xf15\x06\xc2db\xd8.j}\x1b1\xeb\"\xdbP;`\xeb1\xd2\r\"{\x9fR\xf2n\xb9\x82E', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000140)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) program crashed: general protection fault in dummy_udc_start testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 4] detailed listing: executing program 0: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mq_open(&(0x7f0000000200)='!sel\x00\x00\x00\x10\x94\xcc\x06\x10\xf7-\x95P\xd7dy\x00\x01\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x001\xa1a\xa5\f\xd7\xf15\x06\xc2db\xd8.j}\x1b1\xeb\"\xdbP;`\xeb1\xd2\r\"{\x9fR\xf2n\xb9\x82E', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000140)={0x2000000000002000, 0x1, 0x56, 0x3}) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) program crashed: general protection fault in dummy_udc_start testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 4] detailed listing: executing program 0: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) program crashed: general protection fault in dummy_udc_start testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 4] detailed listing: executing program 0: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 4] detailed listing: executing program 0: syz_open_dev$char_usb(0xc, 0xb4, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) program did not crash minimized 10 calls -> 2 calls minimizing program #1 before concatenation testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3] detailed listing: executing program 3: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3] detailed listing: executing program 3: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3] detailed listing: executing program 3: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3] detailed listing: executing program 3: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) executing program 0: mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) program did not crash minimized 4 calls -> 4 calls testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$char_usb-mkdirat-mount-openat-write detailed listing: executing program 0: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) program crashed: general protection fault in dummy_udc_start bisect: concatenation succeeded found reproducer with 6 syscalls minimizing guilty program testing program (duration=47.260643264s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$char_usb-mkdirat-mount-openat detailed listing: executing program 0: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) program did not crash testing program (duration=47.260643264s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$char_usb-mkdirat-mount-write detailed listing: executing program 0: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) program did not crash testing program (duration=47.260643264s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$char_usb-mkdirat-openat-write detailed listing: executing program 0: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) program did not crash testing program (duration=47.260643264s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$char_usb-mount-openat-write detailed listing: executing program 0: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) program did not crash testing program (duration=47.260643264s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-mkdirat-mount-openat-write detailed listing: executing program 0: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) program did not crash testing program (duration=47.260643264s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$char_usb-mkdirat-mount-openat-write detailed listing: executing program 0: syz_open_dev$char_usb(0xc, 0xb4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) program did not crash testing program (duration=47.260643264s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$char_usb-mkdirat-mount-openat-write detailed listing: executing program 0: syz_usb_connect(0x3, 0x4e, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) program did not crash testing program (duration=47.260643264s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$char_usb-mkdirat-mount-openat-write detailed listing: executing program 0: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) program did not crash testing program (duration=47.260643264s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$char_usb-mkdirat-mount-openat-write detailed listing: executing program 0: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) program did not crash testing program (duration=47.260643264s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$char_usb-mkdirat-mount-openat-write detailed listing: executing program 0: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) program did not crash testing program (duration=47.260643264s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$char_usb-mkdirat-mount-openat-write detailed listing: executing program 0: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) program did not crash testing program (duration=47.260643264s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$char_usb-mkdirat-mount-openat-write detailed listing: executing program 0: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) program did not crash testing program (duration=47.260643264s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$char_usb-mkdirat-mount-openat-write detailed listing: executing program 0: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, 0x0, 0x0) program did not crash testing program (duration=47.260643264s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$char_usb-mkdirat-mount-openat-write detailed listing: executing program 0: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200), 0x0) program did not crash extracting C reproducer testing compiled C program (duration=47.260643264s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$char_usb-mkdirat-mount-openat-write program crashed: general protection fault in set_link_state simplifying C reproducer testing compiled C program (duration=47.260643264s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$char_usb-mkdirat-mount-openat-write program did not crash testing compiled C program (duration=47.260643264s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$char_usb-mkdirat-mount-openat-write program did not crash testing compiled C program (duration=47.260643264s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$char_usb-mkdirat-mount-openat-write program did not crash testing compiled C program (duration=47.260643264s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$char_usb-mkdirat-mount-openat-write program did not crash testing compiled C program (duration=47.260643264s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$char_usb-mkdirat-mount-openat-write program crashed: general protection fault in set_link_state testing compiled C program (duration=47.260643264s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$char_usb-mkdirat-mount-openat-write program did not crash testing compiled C program (duration=47.260643264s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$char_usb-mkdirat-mount-openat-write program did not crash testing compiled C program (duration=47.260643264s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$char_usb-mkdirat-mount-openat-write program did not crash testing compiled C program (duration=47.260643264s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$char_usb-mkdirat-mount-openat-write program did not crash testing compiled C program (duration=47.260643264s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$char_usb-mkdirat-mount-openat-write program did not crash testing compiled C program (duration=47.260643264s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$char_usb-mkdirat-mount-openat-write program did not crash testing compiled C program (duration=47.260643264s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$char_usb-mkdirat-mount-openat-write program did not crash testing compiled C program (duration=47.260643264s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$char_usb-mkdirat-mount-openat-write program did not crash testing compiled C program (duration=47.260643264s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$char_usb-mkdirat-mount-openat-write program crashed: general protection fault in set_link_state testing compiled C program (duration=47.260643264s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:false Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$char_usb-mkdirat-mount-openat-write program did not crash testing compiled C program (duration=47.260643264s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$char_usb-mkdirat-mount-openat-write program crashed: general protection fault in set_link_state testing program (duration=47.260643264s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$char_usb-mkdirat-mount-openat-write detailed listing: executing program 0: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) program did not crash validation run: crashed=false testing program (duration=47.260643264s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$char_usb-mkdirat-mount-openat-write detailed listing: executing program 0: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) program crashed: general protection fault in dummy_udc_start validation run: crashed=true testing program (duration=47.260643264s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$char_usb-mkdirat-mount-openat-write detailed listing: executing program 0: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) program crashed: general protection fault in set_link_state validation run: crashed=true testing program (duration=47.260643264s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$char_usb-mkdirat-mount-openat-write detailed listing: executing program 0: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) program did not crash validation run: crashed=false testing program (duration=47.260643264s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$char_usb-mkdirat-mount-openat-write detailed listing: executing program 0: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) program did not crash validation run: crashed=false testing program (duration=47.260643264s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$char_usb-mkdirat-mount-openat-write detailed listing: executing program 0: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) program did not crash validation run: crashed=false testing program (duration=47.260643264s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$char_usb-mkdirat-mount-openat-write detailed listing: executing program 0: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) program did not crash validation run: crashed=false testing program (duration=47.260643264s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$char_usb-mkdirat-mount-openat-write detailed listing: executing program 0: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) program did not crash validation run: crashed=false testing program (duration=47.260643264s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$char_usb-mkdirat-mount-openat-write detailed listing: executing program 0: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) program did not crash validation run: crashed=false testing program (duration=47.260643264s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$char_usb-mkdirat-mount-openat-write detailed listing: executing program 0: syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) program did not crash validation run: crashed=false reproducing took 1h43m27.198875051s repro crashed as (corrupted=false): Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] CPU: 2 UID: 0 PID: 6027 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:set_link_state+0x27/0xc70 drivers/usb/gadget/udc/dummy_hcd.c:455 Code: 90 90 90 41 57 41 56 41 55 41 54 55 53 48 89 fb 48 83 ec 18 e8 aa e4 39 fa 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 35 0b 00 00 4c 8d ab a3 00 00 00 48 8b 2b 48 b8 RSP: 0018:ffffc90004257850 EFLAGS: 00010046 RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff87d08c53 RDX: 0000000000000000 RSI: ffffffff87d07d76 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000293 R13: ffff888027364000 R14: 0000000000000000 R15: ffff888027364c00 FS: 0000000000000000(0000) GS:ffff8880d5fd8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00002929259aa000 CR3: 000000002c640000 CR4: 0000000000352ef0 Call Trace: dummy_pullup+0xf3/0x170 drivers/usb/gadget/udc/dummy_hcd.c:933 usb_gadget_disconnect_locked+0x142/0x4e0 drivers/usb/gadget/udc/core.c:785 gadget_unbind_driver+0xd8/0x4f0 drivers/usb/gadget/udc/core.c:1718 device_remove+0xcb/0x180 drivers/base/dd.c:616 __device_release_driver drivers/base/dd.c:1349 [inline] device_release_driver_internal+0x44e/0x620 drivers/base/dd.c:1372 driver_detach+0xd8/0x1b0 drivers/base/dd.c:1435 bus_remove_driver+0x13b/0x2e0 drivers/base/bus.c:832 driver_unregister+0x76/0xb0 drivers/base/driver.c:202 usb_gadget_unregister_driver+0x49/0x70 drivers/usb/gadget/udc/core.c:1784 raw_release+0x19b/0x260 drivers/usb/gadget/legacy/raw_gadget.c:463 __fput+0x3ff/0xb50 fs/file_table.c:512 task_work_run+0x150/0x240 kernel/task_work.c:233 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0x951/0x2ae0 kernel/exit.c:1009 do_group_exit+0xd5/0x2a0 kernel/exit.c:1152 get_signal+0x1ec7/0x21e0 kernel/signal.c:3046 arch_do_signal_or_restart+0x91/0x7e0 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:66 [inline] exit_to_user_mode_loop+0x139/0x6f0 kernel/entry/common.c:101 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:318 [inline] do_syscall_64+0x666/0x870 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f375359dcab Code: Unable to access opcode bytes at 0x7f375359dc81. RSP: 002b:00007f375453ef00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 00007f375359dcab RDX: 00007f375453ffd0 RSI: 0000000080085502 RDI: 0000000000000003 RBP: 00007f375453ffd0 R08: 0000000000000040 R09: 00007f375453efc8 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 R13: 0000000800000000 R14: 0000000000000012 R15: 00007f375365386a Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:set_link_state+0x27/0xc70 drivers/usb/gadget/udc/dummy_hcd.c:455 Code: 90 90 90 41 57 41 56 41 55 41 54 55 53 48 89 fb 48 83 ec 18 e8 aa e4 39 fa 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 35 0b 00 00 4c 8d ab a3 00 00 00 48 8b 2b 48 b8 RSP: 0018:ffffc90004257850 EFLAGS: 00010046 RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff87d08c53 RDX: 0000000000000000 RSI: ffffffff87d07d76 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000293 R13: ffff888027364000 R14: 0000000000000000 R15: ffff888027364c00 FS: 0000000000000000(0000) GS:ffff8880d5fd8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00002929259aa000 CR3: 000000002c640000 CR4: 0000000000352ef0 ---------------- Code disassembly (best guess): 0: 90 nop 1: 90 nop 2: 90 nop 3: 41 57 push %r15 5: 41 56 push %r14 7: 41 55 push %r13 9: 41 54 push %r12 b: 55 push %rbp c: 53 push %rbx d: 48 89 fb mov %rdi,%rbx 10: 48 83 ec 18 sub $0x18,%rsp 14: e8 aa e4 39 fa call 0xfa39e4c3 19: 48 89 da mov %rbx,%rdx 1c: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 23: fc ff df 26: 48 c1 ea 03 shr $0x3,%rdx * 2a: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) <-- trapping instruction 2e: 0f 85 35 0b 00 00 jne 0xb69 34: 4c 8d ab a3 00 00 00 lea 0xa3(%rbx),%r13 3b: 48 8b 2b mov (%rbx),%rbp 3e: 48 rex.W 3f: b8 .byte 0xb8 final repro crashed as (corrupted=false): Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] CPU: 2 UID: 0 PID: 6027 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:set_link_state+0x27/0xc70 drivers/usb/gadget/udc/dummy_hcd.c:455 Code: 90 90 90 41 57 41 56 41 55 41 54 55 53 48 89 fb 48 83 ec 18 e8 aa e4 39 fa 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 35 0b 00 00 4c 8d ab a3 00 00 00 48 8b 2b 48 b8 RSP: 0018:ffffc90004257850 EFLAGS: 00010046 RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff87d08c53 RDX: 0000000000000000 RSI: ffffffff87d07d76 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000293 R13: ffff888027364000 R14: 0000000000000000 R15: ffff888027364c00 FS: 0000000000000000(0000) GS:ffff8880d5fd8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00002929259aa000 CR3: 000000002c640000 CR4: 0000000000352ef0 Call Trace: dummy_pullup+0xf3/0x170 drivers/usb/gadget/udc/dummy_hcd.c:933 usb_gadget_disconnect_locked+0x142/0x4e0 drivers/usb/gadget/udc/core.c:785 gadget_unbind_driver+0xd8/0x4f0 drivers/usb/gadget/udc/core.c:1718 device_remove+0xcb/0x180 drivers/base/dd.c:616 __device_release_driver drivers/base/dd.c:1349 [inline] device_release_driver_internal+0x44e/0x620 drivers/base/dd.c:1372 driver_detach+0xd8/0x1b0 drivers/base/dd.c:1435 bus_remove_driver+0x13b/0x2e0 drivers/base/bus.c:832 driver_unregister+0x76/0xb0 drivers/base/driver.c:202 usb_gadget_unregister_driver+0x49/0x70 drivers/usb/gadget/udc/core.c:1784 raw_release+0x19b/0x260 drivers/usb/gadget/legacy/raw_gadget.c:463 __fput+0x3ff/0xb50 fs/file_table.c:512 task_work_run+0x150/0x240 kernel/task_work.c:233 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0x951/0x2ae0 kernel/exit.c:1009 do_group_exit+0xd5/0x2a0 kernel/exit.c:1152 get_signal+0x1ec7/0x21e0 kernel/signal.c:3046 arch_do_signal_or_restart+0x91/0x7e0 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:66 [inline] exit_to_user_mode_loop+0x139/0x6f0 kernel/entry/common.c:101 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:318 [inline] do_syscall_64+0x666/0x870 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f375359dcab Code: Unable to access opcode bytes at 0x7f375359dc81. RSP: 002b:00007f375453ef00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 00007f375359dcab RDX: 00007f375453ffd0 RSI: 0000000080085502 RDI: 0000000000000003 RBP: 00007f375453ffd0 R08: 0000000000000040 R09: 00007f375453efc8 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 R13: 0000000800000000 R14: 0000000000000012 R15: 00007f375365386a Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:set_link_state+0x27/0xc70 drivers/usb/gadget/udc/dummy_hcd.c:455 Code: 90 90 90 41 57 41 56 41 55 41 54 55 53 48 89 fb 48 83 ec 18 e8 aa e4 39 fa 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 35 0b 00 00 4c 8d ab a3 00 00 00 48 8b 2b 48 b8 RSP: 0018:ffffc90004257850 EFLAGS: 00010046 RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff87d08c53 RDX: 0000000000000000 RSI: ffffffff87d07d76 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000293 R13: ffff888027364000 R14: 0000000000000000 R15: ffff888027364c00 FS: 0000000000000000(0000) GS:ffff8880d5fd8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00002929259aa000 CR3: 000000002c640000 CR4: 0000000000352ef0 ---------------- Code disassembly (best guess): 0: 90 nop 1: 90 nop 2: 90 nop 3: 41 57 push %r15 5: 41 56 push %r14 7: 41 55 push %r13 9: 41 54 push %r12 b: 55 push %rbp c: 53 push %rbx d: 48 89 fb mov %rdi,%rbx 10: 48 83 ec 18 sub $0x18,%rsp 14: e8 aa e4 39 fa call 0xfa39e4c3 19: 48 89 da mov %rbx,%rdx 1c: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 23: fc ff df 26: 48 c1 ea 03 shr $0x3,%rdx * 2a: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) <-- trapping instruction 2e: 0f 85 35 0b 00 00 jne 0xb69 34: 4c 8d ab a3 00 00 00 lea 0xa3(%rbx),%r13 3b: 48 8b 2b mov (%rbx),%rbp 3e: 48 rex.W 3f: b8 .byte 0xb8