Extracting prog: 6h29m5.025820985s Minimizing prog: 1h10m33.227643312s Simplifying prog options: 0s Extracting C: 3m9.865395518s Simplifying C: 27m47.03012436s extracting reproducer from 66 programs testing a last program of every proc single: executing 16 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-ioctl$EVIOCSFF-write$char_usb detailed listing: executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x51, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x202}, {0xffff, 0x5, 0x1, 0x46, 0x2, 0x101}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 7) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$kcm-openat$kvm-ioctl$KVM_CREATE_VM-openat$cgroup_ro-write$binfmt_script-mmap-preadv-syz_init_net_socket$802154_dgram-recvmmsg-sendmsg$802154_dgram-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r3, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x2001, 0x0) sendmsg$802154_dgram(r3, &(0x7f0000002180)={&(0x7f0000000100)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f00000021c0)={0x0}, 0x7, 0x0, 0x0, 0x200040c6}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsmount-fchdir-socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-openat-rseq-futex-read$FUSE-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect-openat$cgroup_subtree-socket$nl_xfrm-sendmsg$netlink-write$cgroup_subtree-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1 detailed listing: executing program 0: r0 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x86) fchdir(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x4000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb2020000) read$FUSE(r3, &(0x7f00000009c0)={0x2020}, 0x2020) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406d0493c20000000000fd09022400010000e8010904000001030000000921fd7f000122eb0009058103"], 0x0) syz_usb_disconnect(r4) r5 = syz_usb_connect(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db2870905"], 0x0) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r7, &(0x7f0000004f00)={0x0, 0x0, &(0x7f0000004e80)=[{&(0x7f00000014c0)={0x10, 0x1d, 0x1, 0x70bd27, 0x25dfdbfe}, 0x10}], 0x1, 0x0, 0x0, 0x8000}, 0x4008040) write$cgroup_subtree(r6, &(0x7f0000000100)={[{0x2b, 'net_prio'}, {0x2d, 'rlimit'}, {0x2b, 'pids'}, {0x2b, 'devices'}]}, 0x21) syz_usb_control_io(r5, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000040)={0x0, 0x7, 0x9, "c41d21447228b2d6c2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-pipe2$9p-pipe2$9p-mount$9p_fd-syz_usb_connect detailed listing: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0x7fffffff}}], [], 0x6b}}) syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c0001020301090229000100000000090400000002020100050200000005"], 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-ioctl$TUNSETLINK-socketpair$nbd-close-socket$vsock_stream-bind$vsock_stream-listen-socket$vsock_stream-mkdirat-mount-mkdirat-mkdirat-mkdirat-timerfd_create-prlimit64-sched_setscheduler-ioprio_set$pid-getpid-quotactl$Q_SYNC-capset-timerfd_settime-mkdirat-ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL-mkdirat-chdir-nanosleep-close detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) close(r0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) r2 = timerfd_create(0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioprio_set$pid(0x2, 0x0, 0x0) getpid() quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x6, 0x81, 0xffffffff, 0x2241d13d}) timerfd_settime(r2, 0x3, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'syztnl1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) chdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00') nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) close(0x3) program crashed: lost connection to test machine suppressed program crash: lost connection to test machine testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mknod$loop-openat2-writev-syz_init_net_socket$nl_rdma-openat$cuse-read$FUSE-mkdirat-mount-openat-write-write$FUSE_ENTRY-ioctl$sock_SIOCGIFINDEX_80211-socket$inet-sendmsg$inet-landlock_restrict_self-socket$kcm-sendmsg$kcm-recvmmsg-recvmsg-socket-sendto-recvmmsg detailed listing: executing program 0: mknod$loop(&(0x7f000000db40)='./file0\x00', 0x1000, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', &(0x7f0000001440)={0x122240, 0x10b, 0x7}, 0x18) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) write(r5, &(0x7f0000000800)='- 1 0 0', 0x7) write$FUSE_ENTRY(r1, &(0x7f0000000140)={0x90, 0x0, r2, {0x20000000000007, 0x0, 0x80006, 0xfa7, 0x0, 0xfffff801, {0x2, 0x0, 0x20e, 0x6, 0x10000, 0x7, 0x77ff, 0x9, 0x4, 0x0, 0x7, r3, r4, 0x5, 0x1000}}}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan1\x00'}) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000001140)={0x8, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="08003a115d923a3d", 0x8}], 0x1}, 0x40408d0) landlock_restrict_self(0xffffffffffffffff, 0xc) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r7, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000001900)=""/4080, 0xff0}, {&(0x7f0000000400)=""/65, 0x41}], 0x3}, 0xb}, {{0x0, 0x0, 0x0}, 0x69b9}], 0x2, 0x42, 0x0) recvmsg(r7, &(0x7f0000004180)={0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000000500)=""/225, 0xe1}, {&(0x7f0000000600)=""/210, 0xd2}, {&(0x7f0000000700)=""/48, 0x30}, {&(0x7f0000000740)=""/78, 0x4e}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000003fc0)=""/242, 0xf2}], 0x6}, 0x60) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/102, 0x38a}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f00000023c0)=""/4098, 0x1e1}, {&(0x7f00000000c0)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x5b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0xa}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000880)=""/207, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000000000)={0x77359400}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-ioctl$TUNSETLINK-socketpair$nbd-close-socket$vsock_stream-bind$vsock_stream-listen-socket$vsock_stream-mkdirat-mount-mkdirat-mkdirat-mkdirat-timerfd_create-prlimit64-sched_setscheduler-ioprio_set$pid-getpid-quotactl$Q_SYNC-capset-timerfd_settime-mkdirat-ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL-mkdirat-chdir-nanosleep-close detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) close(r0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) r2 = timerfd_create(0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioprio_set$pid(0x2, 0x0, 0x0) getpid() quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x6, 0x81, 0xffffffff, 0x2241d13d}) timerfd_settime(r2, 0x3, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'syztnl1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) chdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00') nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) close(0x3) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mknod$loop-openat2-writev-syz_init_net_socket$nl_rdma-openat$cuse-read$FUSE-mkdirat-mount-openat-write-write$FUSE_ENTRY-ioctl$sock_SIOCGIFINDEX_80211-socket$inet-sendmsg$inet-landlock_restrict_self-socket$kcm-sendmsg$kcm-recvmmsg-recvmsg-socket-sendto-recvmmsg detailed listing: executing program 0: mknod$loop(&(0x7f000000db40)='./file0\x00', 0x1000, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', &(0x7f0000001440)={0x122240, 0x10b, 0x7}, 0x18) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) write(r5, &(0x7f0000000800)='- 1 0 0', 0x7) write$FUSE_ENTRY(r1, &(0x7f0000000140)={0x90, 0x0, r2, {0x20000000000007, 0x0, 0x80006, 0xfa7, 0x0, 0xfffff801, {0x2, 0x0, 0x20e, 0x6, 0x10000, 0x7, 0x77ff, 0x9, 0x4, 0x0, 0x7, r3, r4, 0x5, 0x1000}}}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan1\x00'}) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000001140)={0x8, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="08003a115d923a3d", 0x8}], 0x1}, 0x40408d0) landlock_restrict_self(0xffffffffffffffff, 0xc) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r7, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000001900)=""/4080, 0xff0}, {&(0x7f0000000400)=""/65, 0x41}], 0x3}, 0xb}, {{0x0, 0x0, 0x0}, 0x69b9}], 0x2, 0x42, 0x0) recvmsg(r7, &(0x7f0000004180)={0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000000500)=""/225, 0xe1}, {&(0x7f0000000600)=""/210, 0xd2}, {&(0x7f0000000700)=""/48, 0x30}, {&(0x7f0000000740)=""/78, 0x4e}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000003fc0)=""/242, 0xf2}], 0x6}, 0x60) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/102, 0x38a}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f00000023c0)=""/4098, 0x1e1}, {&(0x7f00000000c0)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x5b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0xa}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000880)=""/207, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000000000)={0x77359400}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nullb-sendfile-mkdir-mount-openat-pread64-ioctl$BLKZEROOUT-write$uinput_user_dev-openat$kvm-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-sendmsg$NLBL_UNLABEL_C_STATICADD-ioctl$KVM_SET_USER_MEMORY_REGION-sendmsg$IPSET_CMD_TEST-ioctl$KVM_SET_REGS-openat$kvm-ioctl$KVM_GET_EMULATED_CPUID-ioctl$KVM_RUN-ioctl$KVM_CREATE_VM-dup-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN-add_key$keyring-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU detailed listing: executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) sendfile(r0, r0, 0x0, 0x9) mkdir(&(0x7f0000000100)='./debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./debugfs\x00', &(0x7f00000001c0)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debugfs/ubifs/chk_index\x00', 0x2, 0x0) pread64(r1, 0x0, 0x0, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[], 0x44}}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000000006010200000000000000000500000215d6078005000100070000007cb05b4f7d72e9d5665ff5c862d2c6deabca923ea18d2db9ae6e45907a58a0c9852b6ee97c2fa2f5e043dafe9fc453e2cedece57332f80bea274c5f476cf2e7c0dcf9a5fff38a06942a01666956787f901"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000000280)={0x2, 0x0, [{0x1, 0x1, 0x4, 0x6000, 0x4, 0x0, 0x3ff}, {0x1, 0x10, 0x3, 0x81, 0x7, 0x9d, 0x4f6}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x1000000, 0x0, 0xffffffffffffffff) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nullb-sendfile-mkdir-mount-openat-pread64-ioctl$BLKZEROOUT-write$uinput_user_dev-openat$kvm-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-sendmsg$NLBL_UNLABEL_C_STATICADD-ioctl$KVM_SET_USER_MEMORY_REGION-sendmsg$IPSET_CMD_TEST-ioctl$KVM_SET_REGS-openat$kvm-ioctl$KVM_GET_EMULATED_CPUID-ioctl$KVM_RUN-ioctl$KVM_CREATE_VM-dup-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN-add_key$keyring-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU detailed listing: executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) sendfile(r0, r0, 0x0, 0x9) mkdir(&(0x7f0000000100)='./debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./debugfs\x00', &(0x7f00000001c0)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debugfs/ubifs/chk_index\x00', 0x2, 0x0) pread64(r1, 0x0, 0x0, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[], 0x44}}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000000006010200000000000000000500000215d6078005000100070000007cb05b4f7d72e9d5665ff5c862d2c6deabca923ea18d2db9ae6e45907a58a0c9852b6ee97c2fa2f5e043dafe9fc453e2cedece57332f80bea274c5f476cf2e7c0dcf9a5fff38a06942a01666956787f901"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000000280)={0x2, 0x0, [{0x1, 0x1, 0x4, 0x6000, 0x4, 0x0, 0x3ff}, {0x1, 0x10, 0x3, 0x81, 0x7, 0x9d, 0x4f6}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x1000000, 0x0, 0xffffffffffffffff) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$MSR-syz_open_procfs-mmap$IORING_OFF_SQ_RING-sendmmsg$unix-socket$nl_generic-socket$nl_netfilter-sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED-sendmsg$nl_generic-ioctl$sock_inet6_udp_SIOCINQ-clock_gettime-ppoll-socket$packet-setsockopt$packet_tx_ring-mmap-munmap-syz_clone detailed listing: executing program 0: syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000007c0)=[{0x0}], 0x1}}], 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4050000) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f000000080001"], 0x1c}}, 0x4000080) (async) ioctl$sock_inet6_udp_SIOCINQ(r0, 0xc02063a1, 0x0) (async) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x60}], 0x1, &(0x7f0000000140)={r3, r4+10000000}, &(0x7f0000000200)={[0x9]}, 0x8) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x40010, r5, 0x0) (async) munmap(&(0x7f0000004000/0x3000)=nil, 0x3000) (async) syz_clone(0x98300400, 0x0, 0x0, 0x0, 0x0, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$MSR-syz_open_procfs-mmap$IORING_OFF_SQ_RING-sendmmsg$unix-socket$nl_generic-socket$nl_netfilter-sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED-sendmsg$nl_generic-ioctl$sock_inet6_udp_SIOCINQ-clock_gettime-ppoll-socket$packet-setsockopt$packet_tx_ring-mmap-munmap-syz_clone detailed listing: executing program 0: syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000007c0)=[{0x0}], 0x1}}], 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4050000) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f000000080001"], 0x1c}}, 0x4000080) (async) ioctl$sock_inet6_udp_SIOCINQ(r0, 0xc02063a1, 0x0) (async) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x60}], 0x1, &(0x7f0000000140)={r3, r4+10000000}, &(0x7f0000000200)={[0x9]}, 0x8) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x40010, r5, 0x0) (async) munmap(&(0x7f0000004000/0x3000)=nil, 0x3000) (async) syz_clone(0x98300400, 0x0, 0x0, 0x0, 0x0, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$cuse-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_ublk_add_dev-socket$inet6_tcp-dup-syz_ublk_setup_queues-ioctl$KVM_TDX_INIT_VM-read$FUSE-read$FUSE-write$FUSE_BMAP-write$FUSE_BMAP-socket$nl_generic-sendmsg$nl_generic detailed listing: executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x767a, 0x0, 0x7ffffffe, 0x257, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x1000000, 0x10000004, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x144, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) ioctl$KVM_TDX_INIT_VM(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]}) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) (async) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$cuse-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_ublk_add_dev-socket$inet6_tcp-dup-syz_ublk_setup_queues-ioctl$KVM_TDX_INIT_VM-read$FUSE-read$FUSE-write$FUSE_BMAP-write$FUSE_BMAP-socket$nl_generic-sendmsg$nl_generic detailed listing: executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x767a, 0x0, 0x7ffffffe, 0x257, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x1000000, 0x10000004, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x144, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) ioctl$KVM_TDX_INIT_VM(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]}) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) (async) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$inet-socketpair$unix-sendmsg$inet-recvmsg$unix-mmap$IORING_OFF_SQ_RING-socketpair$unix-syz_ublk_add_dev-socket$inet6_tcp-dup-futex-syz_ublk_setup_queues detailed listing: executing program 0: sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x7, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x8000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$inet-socketpair$unix-sendmsg$inet-recvmsg$unix-mmap$IORING_OFF_SQ_RING-socketpair$unix-syz_ublk_add_dev-socket$inet6_tcp-dup-futex-syz_ublk_setup_queues detailed listing: executing program 0: sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x7, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x8000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) program did not crash single: failed to extract reproducer bisect: bisecting 66 programs with base timeout 6m0s testing program (duration=6m16s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 11, 24, 10, 3, 11, 11, 5, 3, 30, 9, 30, 14, 14, 11, 30, 20, 28, 14, 16, 16, 29, 22, 23, 9, 12, 30, 30, 14, 4, 1, 8, 2, 2, 6, 16, 11, 13, 22, 27, 22, 27, 20, 30, 8, 12, 14, 5, 26, 21, 20, 7, 7, 29, 9, 2, 10, 20, 5, 21, 30, 9, 8, 26, 13, 3] detailed listing: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) close(r3) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000260029002dbd700000000000110000000e005e00759b2506bf0b0031b0000000"], 0x24}, 0x1, 0x0, 0x0, 0x8c811}, 0x40040) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x62600, 0x0) file_getattr(r4, 0x0, &(0x7f0000000040), 0x18, 0x1000) r5 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) bind$alg(r5, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x80000) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000010280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x40800c5}, 0x8004) accept4(r6, 0x0, 0x0, 0x800) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00), r7) sendmsg$TIPC_CMD_SET_LINK_PRI(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000100)={0x68, r8, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {0x0, 0x4109}, {0x4c, 0x18, {0x7f, @media='udp\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4004010}, 0x4040) syz_usb_connect(0x3, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a2401"], 0x0) executing program 1: sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x7, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x8000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) executing program 1: r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000180), 0x0, 0x40002) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, 0x0) r5 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x80) r7 = openat$cgroup_procs(r6, &(0x7f0000001940)='cgroup.procs\x00', 0x2, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x10) r8 = open(&(0x7f0000000040)='./bus\x00', 0x80202, 0x0) sendfile(r8, r7, 0x0, 0x2000000000006) ioctl$FE_GET_EVENT(r1, 0x80286f4e, &(0x7f0000000140)) ioctl$FE_SET_FRONTEND(r1, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @vsb={0x3}}) landlock_restrict_self(r0, 0xb) pipe2(&(0x7f0000000340)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) tee(r10, r9, 0xff, 0x8) r12 = landlock_create_ruleset(&(0x7f0000000100)={0x4424, 0x2}, 0x18, 0x0) landlock_restrict_self(r12, 0xa) vmsplice(r11, &(0x7f0000000300)=[{&(0x7f0000000a40)="8b", 0x1}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000080) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./debug/tracing/trace_pipe\x00', 0x8000, 0x0) r1 = syz_ublk_setup_io_uring(0xd61, &(0x7f0000000500)={0x0, 0x506b, 0x1000, 0x2, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000400)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x2, 0x603, 0x0, 0x0, 0x1000, 0xb6a4, 0x0, 0x0, 0xa8}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r1, r5, &(0x7f0000000180)={0x0, 0x1462, 0x40000, 0x1, 0x39f, 0x0, r1}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x80, 0x5, 0x124, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x2, 0x5, 0x449}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x68ea, 0x40, 0x80000400, 0x90, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8096e6, 0x4, 0x2, 0x40021a}}], 0x4, 0x0, 0x0) syz_clone3(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000000)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x51, 0x2}, @rumble={0x3, 0x6}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) executing program 1: sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x7, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x8000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) executing program 32: sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x7, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x8000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x11, 0x83, 0x20000a2e, 0x401000, 0xe, 0x3, 0x1, 0x1, 0xb000000}}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) open_by_handle_at(r2, &(0x7f000001f500)=ANY=[@ANYBLOB="0c000000fe0000"], 0x0) executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001fffffff500000000000500000a38000000030a03000000000000000000020000000900010073797a30000000000900030000000000000003000c000240000000000000000114000000110001"], 0x60}}, 0x0) executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x6}, 0x1c) r1 = socket$inet(0xa, 0x1, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0xfffffffffffffd31) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r2, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x0, 0x7e}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x7a}, 0x39) r3 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f00000007c0)=@hci={0x1f, 0x8ea8, 0x47}, 0x80, 0x0}, 0x8000) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) umount2(&(0x7f0000000140)='./my_configfs\x00', 0x4) r4 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20004880}, 0x1) sendto$inet6(r0, &(0x7f0000001680)="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", 0x1000, 0x800, 0x0, 0x0) mknod(0x0, 0x40, 0x9) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x8, &(0x7f0000000380)={[0x4]}, 0x8) ioctl$KVM_CAP_EXIT_HYPERCALL(r6, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) executing program 0: openat$kvm(0xffffff9c, 0x0, 0x8000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="03008060", @ANYRES16=r3, @ANYBLOB="070000000000000000000200000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4048054}, 0x0) executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000005600)={0x2, &(0x7f00000055c0)=[{0x5, 0x7, 0x1}, {0x6, 0x2, 0x5, 0x5}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x50880) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f0000003900)=""/151, 0x97}, {&(0x7f0000000040)=""/122, 0x7a}, {&(0x7f0000000240)=""/23, 0x17}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000000180)=""/27, 0x1b}], 0x7}, 0x9}, {{0x0, 0x0, 0x0}, 0xb91b}], 0x4, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) unshare(0x2c020400) r2 = msgget$private(0x0, 0x240) msgsnd(r2, &(0x7f0000000880)={0x2, "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"}, 0xfd1, 0x0) msgrcv(0x0, &(0x7f0000000000), 0xfffffcef, 0x0, 0x4800) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r3 = socket$inet(0x2, 0x7, 0x3) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r7, 0x1, 0xffffffff, 0x0, {{}, {0x0, 0x6}}}, 0x1c}}, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff97f, 0x2, 0x0, 0x4, 0x0, 0xffffffff, 0x10}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) futex(&(0x7f0000000cc0)=0x1, 0xd, 0x0, &(0x7f0000000d40), 0x0, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_connect$uac1(0x2, 0x9a, &(0x7f0000000500)=ANY=[@ANYBLOB="1201010200000020050b431740000102030109028800030109403f0904000000010100000a2401d2000a00020102090401000001020000090401010101020000072401080805000f2402020002ff0f00f441a4440fb209050109ff037808ba072501080403000904020000010200000904020101010200000b240201fc030801371fc807240108050210090582092000030201072501000e03008fe939b6dc009321c2d3bdaf318247e49400513805d256e80097b829823f27d0c3e77f267ce1cbe7b34a4efc7bf53bd910084e37cc40f02ddd5a1bb9d8e938e766c770cf2fbf58ddca26a2a9689af2d1ae33"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) getsockopt$IPT_SO_GET_REVISION_MATCH(r8, 0x0, 0x42, &(0x7f0000000300)={'ipvs\x00'}, &(0x7f0000000340)=0x1e) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @empty}}}, &(0x7f0000000240)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000280)={0x6, 0x8200, 0x3, 0x7, r10}, &(0x7f00000002c0)=0x10) bind(r8, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r8, 0x5) executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x767a, 0x0, 0x7ffffffe, 0x257, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x1000000, 0x10000004, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x144, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) ioctl$KVM_TDX_INIT_VM(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2000000000000000000000000000000007000000000000008f00000000000000060000000000000005000000000000003107000000000000020000000000000040000000000000000200000000000000724c0000020000000000000008000000000000000400000000000000030000000000000004000000000000000100000000000000ffffff7fffffffff4f000000000000006b00000000000000f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000100000017a300000400000003000000020000005a5c0000070000000000000000000000000000000400000094040000070000001f0000000300000009000000a20000000000000000000000000000000d0000000000000001000000ffff0000000000000001000001"]}) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) (async) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 33: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x767a, 0x0, 0x7ffffffe, 0x257, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x1000000, 0x10000004, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x144, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) ioctl$KVM_TDX_INIT_VM(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]}) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) (async) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 5: syz_open_dev$evdev(&(0x7f00000000c0), 0x2a, 0x1002) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xffff, 0x10200) setns(0xc9, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}}) write$tun(r1, &(0x7f0000000080)={@void, @val={0x1, 0x3, 0x1c, 0x10, 0x14, 0x6}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x40, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x0, 0x1}}, {0x1234, 0x4e24, 0x17, 0x0, @opaque="0123456789abcdef0123456789abcd"}}}, 0x35) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000100)=""/208) executing program 5: r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000000)={r2, 0xfffb}, 0x8) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = syz_open_dev$media(&(0x7f00000000c0), 0x72, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r7, 0x890c, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0xa, 0x8000000000002}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r10 = dup3(r9, r8, 0x0) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r11, 0x4004743b, 0x0) r12 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102000000ff6a05df0040000102030109022d00010104400009040001010301030409210800410122f50209058103400004511eddc83c72e4b308e1b1"], &(0x7f0000000180)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x5b0, 0x2, 0x10, 0x5, 0xff, 0xf}, 0x3e, &(0x7f0000000900)={0x5, 0xf, 0x3e, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x28, 0xde, 0x80, 0x5, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x8, 0x8, 0x800}, @ssp_cap={0x24, 0x10, 0xa, 0xff, 0x6, 0xb0f, 0xff0f, 0x8001, [0x0, 0xcf, 0xcf, 0xff003f, 0xff8100, 0x3f30]}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x415}}]}) syz_usb_control_io$hid(r12, &(0x7f0000000640)={0x24, &(0x7f0000000440)={0x20, 0x24, 0xc2, {0xc2, 0x23, "692699e7b63b9ec758eb4aaed4e7322d4ed232b05bc38cb1456222f41c99366ceeb3eb2e1b59b354abbed8e1f13651ea111df51383ddb6e2e3e5df4518c0eab79027f1ef50b489c0b884803be33809f271bef3a3b13b0212e65f1d6f723a8ef695f4837b595623040620b40bf444abe38b86d21d0a9b37bcb45dc282980ef4e980d2e31047492140180291f47ac3387671b5cfd0aa48b0ba3603b9dcbd2a837082772ae3762b36226b5f36a32d32650d18663b426e53261bfc5ccd2d69acd7e6"}}, &(0x7f0000000540)={0x0, 0x3, 0x6a, @string={0x6a, 0x3, "d70736c3c4072dd886331c1443f4cc277cd55277b27cab506d469e3995ea3fd1a330451614112b6cf9aa6a500d089f6ffca8766840a3e58eaab63e5c0aefbbb75d1251465034a4eda4f864ee642c201af3686a4b695a7f17020c9ea503a959da2a044b793e516982"}}, &(0x7f00000005c0)={0x0, 0x22, 0x26, {[@global=@item_4={0x3, 0x1, 0x4, "efac9aa9"}, @main=@item_012={0x1, 0x0, 0xa, 'Z'}, @main=@item_4={0x3, 0x0, 0x8, "6e893f67"}, @local=@item_4={0x3, 0x2, 0x3, "1a659697"}, @global=@item_4={0x3, 0x1, 0xa, "d7b7c467"}, @local=@item_4={0x3, 0x2, 0x7, "483e259a"}, @main=@item_4={0x3, 0x0, 0x9, "3cfdd948"}, @global=@item_012={0x2, 0x1, 0x7, "9b39"}, @local=@item_012={0x2, 0x2, 0x9, 'Lc'}]}}, &(0x7f0000000600)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x6, 0x1, {0x22, 0x427}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000680)={0x20, 0x3, 0x9d, "2262e1cd56e97ca9530a19d2ec5b1d677a800201ce443cc1453dab7541194b59a7d962510681084cf6e077f9287f3346fc2421c83c4003651bc634acb604155c95715f942cc954870a1db612d2d9eb2a0564b87db4340851714de253e237944b6f3e7ccaf4ea087724a3cdee36170e0d137899321975bd66b0823b3e9776f24fce7134f0fda8d973a26c42a85143c7ccc168a4b7e10634559c5f277d03"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000007c0)={0x20, 0x1, 0x83, "ac6f4c92e56a51f7b584cc38362624cbd35d9eed62603153b070b9b694b4e32a305becb6a0183f261887329f1fe3b88d6566b4ca6fab3ced4b4fc24963da9fc3d6279d91be213de8c65cbbb695dcf2b3ba32fcf002c78654423b0d313a78b386e9259b27ade8b4eb6184b3650868db5585691151fb53e512168d5d015e403c69bbdd84"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x16}}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x1058, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x8ab7, 0x4, 0x4, 0x804, 0x7, 0x4, 0x120000, 0x5, 0x0, 0x8, 0x5, 0x2, 0xfffffffffffffffe, 0x101, 0x3, 0x1], 0x8000000, 0x141200}) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000fb0b0f883411eadb0000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c841}, 0x4008094) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r6, 0xae80, 0x0) executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r0, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40002062, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x88042, 0x0) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$sock(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x4f, 0x100}}], 0x18}, 0x2000c004) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x406, r3) recvfrom$l2tp(r4, &(0x7f0000000540)=""/242, 0xf2, 0x2000, &(0x7f0000000640)={0x2, 0x0, @dev}, 0x10) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xa, 0x0, 0x0, 0x7995}, 0x8416, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000b80)={0x2020, 0x0, 0x0, 0x0}, 0x2020) lstat(&(0x7f0000000040)='./sys_mount/block/loop0/queue/scheduler\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r8, r7, &(0x7f0000002080)=0x3a, 0x23b) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x1, 0x0, 0xfffc}}, 0xffffffffffffffd5}}, 0x2) r9 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@filename='./sys_mount\x00', r6, 0x0) write$P9_RSTATu(r1, &(0x7f0000000240)={0x2d2, 0x7d, 0x1, {{0x500, 0xfa, 0x0, 0x6a, {0x40, 0x0, 0x6}, 0x10000000, 0x2000000, 0xfffffffc, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00'/31, 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xfb\xe1a\xe9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x5e, '\xf8\xf6~\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x9d,;\x9e\x1dR\xc3\xd6\xda\x9b\xf1\x99V\x88\xda\xcel\xde{\xa4\xa4\x00\xb4\xb0\xb4\xdb\xe6Od\xb1\xd6?&ym\xcb\xecI\x86#\xd6\xa88\xc6\x9ai\xdf\xcc\x9c\xddY\x06\xf1t\xa6f\xa8R\x9aEw4\a\xdb\xda\xb2\x88[\xaf\x05\x00\x00\x00\x00\x00'}, 0x1c3, 'odev-n\xb1{#\x00\xf9\xda\xa1\xee#&n\xcf\x85\xfe\xa6^\xb2\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\xbd\x7f=\x7f)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x01\x00\x00\x00\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\xcf>\xe3\x88@\x02\xa9\x1cTR\x8b\x80z\x89\xca\x18M\x16d_\x06\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xdbV\xc5}}\xc6&\xe4\xc7\x03\xf1\xc6\x91\xd5D\xb2\xaf\xc46\x11\xa1\xc4\xa3\xa39\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x1fu7y|\xe1\xe4\x11\xea\x91\x8e\xbd\x88\x8c\x1e\x15k\x84V\x93\x1d.\xa7&\xba\x96\t\xd5\x1aA\xdd\xb2\xd5\x0f\x1e|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9G\x8f}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00\x00\x00\x00\x00\x00\x00ta\xb0\xcc\xaa\xa1\x93:\x0e\x8a\x82k\x14\xd4\xfc\xb2\x98\x9f\xfa\xaa\x1a\xcf\xfa\x80T\xe9U\x9d\t\x00\x00\x00\xa0\v\x03\xb3\xd8\x0eU$\xf8I_\xee~\x8d\x88\xcbZ\x04\x03\x02\xac\xb0\xd1&\x0f%\x84\xdbH\xe8\xd9\x06N\x8c\xe1x\xce9n\x85\xb9~H\x86D@I\x81\x0f%\xf1\xce\xca\x97]\xebI\x1a\x12[\xf0\xd7/\x87\xcc\x10\xb0\x15N\b\x93m\xaa\xdd\x8b\x1e\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00', r5, 0x0, r6}}, 0x2d2) executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x602480, 0x104) fsetxattr$security_ima(r1, &(0x7f0000000080), &(0x7f0000000140)=@sha1={0x1, "dfd651eda6f2ced51a4933a527fb8adabc941388"}, 0x15, 0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f00000003c0)=""/87, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r3, 0x1, &(0x7f0000000580)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2, 0x4, r4, 0x0, 0x0, 0x8000, 0x0, 0x4}]) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="280108000c69000000a33559e293390000000000", @ANYRES32=0x0, @ANYBLOB="09000080976b64086800000004000180"], 0x28}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r5 = fsopen(&(0x7f0000000000)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000001c0)='source', &(0x7f00000006c0)='#:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\x1f\x0eHmK\x86\x06\x97\xb9\xc5\xda\xba\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xdavC\xe2\xe8 \xd5-<#\x18\xc3\xb5N(vj\xa7+\xff\xff\xff\x7f0\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\x02`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2}\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x14<\xa9\xa7\xdc[\xd2\xec\xbe\x1a\xa1\x04\xd3\x00\x00\x00\x00\x00\x00\x00\x01o\xc1\xa5\xb6T\r)\x1c\xbe\x12\xd1\xef\xc2S\xcci\xc8\x0e\x00]\xe6|\xccK\xc7\r\xfa \x02\xe8\x1b\xc1\x93\xce\x02%\x86\xcb\x94K\v\xe7x\xe3\x06[/\xf9\xa8\xc2\x9b\xeeF\x88\xc0f\x82\xb7T\r\x04\xbb\x10\x1d3\xa6\x99\x99\xbd\x96\xf3\xa9\x8c\x1b\xb1\x9b\xe9\x0el\x83\x17\xc1\x8cK<\xe9e`\xcf\'\xd9R}>\xb7\xb4\xca\x13!\x03\xc6\xf3\xb4\x82\xb6\xa6;n\x04\x19%\v\xcf5\xf3y\xd3\xfd\xe1l\xbc\x16{\x13pD\xc40H\xee\x9fx\xc7\xb5x\xff\xb0V\x06\xe3\x92\rq\x95x\x9b\xf09\x116$\xf3\xb6\x9c\x87\xa5\x9e\xbf\x19\xf1\xcb\xb4in\xd3G\xf6B\xa51\xa2-\xb5\xd7g\xf9p?\xc9\xf7\xc1\x9b\xb5\x8c\xfaU>\xb6j\xd5N\x9f\xe0*2S,]\xe0+}A\f\xb0r\']\x14Ac^.Y0\";\x92\xd6\xb2\x9e+0\x18\xed\x8elx|\xab\\\t\\V\xd5\xc7f\xa1L\rI\xa5\xf4\xaa\x9b\az\xe0\xe3\xd3VS\xc4\xcd>', 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000440)={0x80000001, 0xffffffffffffffff, 'id0\x00'}) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80001048}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, 0xa, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x12}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000d804}, 0xc090) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1, @empty, 0x2}, {0xa, 0x4e20, 0x104, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, r8, 0x6}}, 0x48) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)={0x90, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x7c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x46}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}]}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r9 = socket(0x10, 0x803, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000005c0)={r6, 0x7d8, 0x2, r6}) sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x43}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) write$RDMA_USER_CM_CMD_GET_EVENT(r7, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VDPA_GET_AS_NUM(r0, 0x8004af7a, &(0x7f0000000000)) ioctl$XFS_IOC_FSGROWFSRT(r0, 0x4008af10, &(0x7f00000002c0)={0x100000000, 0x81}) executing program 5: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000080)}], 0x2}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r3, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x2001, 0x0) sendmsg$802154_dgram(r3, &(0x7f0000002180)={&(0x7f0000000100)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f00000021c0)={0x0}, 0x7, 0x0, 0x0, 0x200040c6}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) executing program 5: syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000007c0)=[{0x0}], 0x1}}], 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4050000) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f000000080001"], 0x1c}}, 0x4000080) (async) ioctl$sock_inet6_udp_SIOCINQ(r0, 0xc02063a1, 0x0) (async) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x60}], 0x1, &(0x7f0000000140)={r3, r4+10000000}, &(0x7f0000000200)={[0x9]}, 0x8) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x40010, r5, 0x0) (async) munmap(&(0x7f0000004000/0x3000)=nil, 0x3000) (async) syz_clone(0x98300400, 0x0, 0x0, 0x0, 0x0, 0x0) executing program 34: syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000007c0)=[{0x0}], 0x1}}], 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4050000) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f000000080001"], 0x1c}}, 0x4000080) (async) ioctl$sock_inet6_udp_SIOCINQ(r0, 0xc02063a1, 0x0) (async) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x60}], 0x1, &(0x7f0000000140)={r3, r4+10000000}, &(0x7f0000000200)={[0x9]}, 0x8) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x40010, r5, 0x0) (async) munmap(&(0x7f0000004000/0x3000)=nil, 0x3000) (async) syz_clone(0x98300400, 0x0, 0x0, 0x0, 0x0, 0x0) executing program 2: prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r1 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[]) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setuid(0xee01) setrlimit(0x40000000000008, &(0x7f00000002c0)={0x4, 0x9}) r2 = shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000e00)={0x0, 0x0}) getgroups(0x3, &(0x7f0000000e80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xee00]) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000ec0)={0x0}, &(0x7f0000000f00)=0xc) read$FUSE(r0, &(0x7f0000000f40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r7 = getegid() r8 = syz_open_dev$dvb_frontend(&(0x7f0000002f80), 0x6, 0x40100) r9 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_open_procfs(r9, &(0x7f0000000040)='net/sco\x00') r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r11}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r11, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r11, &(0x7f0000004300)="00e7a0633e8438bafa888b9b02144af32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd1d8dca68039fe5b2e1a8d7cdfc6d875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064dd2f9ac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060ac1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb8a2defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35300900000045c0973198291bb42b4cfcd3b0c252074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a1fc1327fa760551d3fdeb0b222ab180b16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2447c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e13c4a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b670400d59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8b71fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cab074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63dd4bac9e4d00645cd7b2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3abe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b6dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950de2d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb278bb1d8eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede57b9609e1f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d82dffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a49d694709924275fc0793d56acf9558818dc9eb210749fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab4a1ae10f8ddd086d876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0feaed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d7a3be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e116b656104ca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a133791d3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1e14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2b1f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba4850439ec125b708ed52b52b9f72906477d520c90a9f5dd49a7a33a328137a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdd89e6b674f2c53e329e5f3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfddb2d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73ffecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee3a5db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e2b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4aae137ea3d29070ce3bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f6563aa750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649494e3682d1da81b4a5928d8e18a16c46707a685305e592589acb484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca365892a2b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f08701e9699b11041df8f518dd33203363c8098fbefb01555bcc2542422777b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b300", 0x2000, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x130, 0x0, 0xc, {0x1, 0x3, 0x0, '\x00', {0x7ff, 0x0, 0x80000ae3, 0x5, r12, r13, 0x1000, '\x00', 0x6, 0x800000000000007b, 0x1000000000001, 0x2000004, {0x1, 0x6}, {0x3, 0x45}, {0x14000000, 0x37}, {0x0, 0xa02}, 0x22e3, 0xfffffff8, 0x80000000, 0x5}}}}) lstat(&(0x7f0000002fc0)='./file0\x00', &(0x7f0000003000)) r14 = accept4$phonet_pipe(r0, &(0x7f0000004400), &(0x7f0000004440)=0x10, 0x80800) r15 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r15, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x3, 0x6, 0x34325241, 0x7, 0x6571, 0x6, 0x0, 0x2, 0x1, 0x3, 0x0, 0x4}}) r16 = accept4(r10, &(0x7f0000000700)=@hci, &(0x7f00000003c0)=0x80, 0x80000) r17 = socket$rxrpc(0x21, 0x2, 0xa) sendmmsg$unix(r0, &(0x7f0000004600)=[{{&(0x7f00000000c0)=@file={0x0, './cgroup.cpu/memory.limit_in_bytes\x00'}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000140)="a690b11d6a2a28ebbf1b6f6f675a1ff2dc4f80bbc96069083bf75f3847db179a0b66f3895dbca3cef9b1fe50077cd43a98b538a2df581f5d9e04ffc7c9637c6118173a2f21d66eace7076671a556dc317e2ae8fa321e406dbb1c9f06e9e974ae8c720391e683704eb421586521ee5afadadd1afa368cf1a5b0c7861453d77339131adedfe5531b449ba5099b27ad578bc900f7cc5161638154cb08351fc8df16ffff8d821e914c11055d4268d55869b4c69f21ab9eb4b82c124e8e4b31800ed56800fe9947feac6649349f1cdd180d3929a8eb1aab945e", 0xd7}, {&(0x7f0000000240)="467521d77029fc286bdb3a03ce2086cd489d598a22687b2f080c4210784010fc6d1c9ed3302b9e3be0f2f0bc53124060c1c3ec3be41d44e43c27cbe0fc7a7521eb1231683932da2418bf612d22f3ca54ffa71238fc2d1e4c", 0x58}, {&(0x7f0000000300)="75584080a5cf6bf87e362baf59cd0f0067e7a10b069661209ccfe8789e407dbb80824bc256e1bfa3d62f40f2e182cd1b1d43031d45c933a6b4fbcaddb28bf03a93999b1eb2f61e2a1774a14ba4e2d6f5dc719c57bfb8ba60f94f0188bb3df7da30e4e3c651a59b8620acd96a93921e89352203e07204c3a38b4dfd65dd8570773ec065f399644cc91d389501ca488b7d0cc89c05a633dd77cbeffca28c0b98bfa3aca7f6a13ce6445b5edd4ea9", 0xad}, {&(0x7f0000000440)="41778691a375500a1d7b2a65f267256e58d1d444fd0b6696843c5956251ad1798fd30bffe0a162325f0a5d5e6d1e0c5c4853491a57457f73ab3b59fbad67df11984b8a3a6877fe759c70f365dfca21650089276b1f5cd41f7d9ed291be91e30e18e675656fea29ccf78fe7a7472adeb5ed4e016da706657da773767929bbaba7e36b426631c64819c2c80c", 0x8b}, {&(0x7f0000000500)="4b2e85267ffb7c7d100fbd4f0730d13ce8addd62924c1c03fd9bff520d578347c12e143910a05686811ddd5a6819c2eb5ece49dccbeb2dc24af263512b03528ec53dc9a3de1f7f79edac173ada70696e6bf4e78c74864cfe863b231712731bc57e186eb178638bba86b5ea040317806bf1ebdbe7484cff3d64949ce628de45765768efc3cc519ad89419e9347b29f27585b6bb69d7328765e1bfff39", 0x9c}], 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="21000100"], 0x50, 0x28004084}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000008c0)="ffedd22d6e38f4bdddb8e20886a79b2b4f48cae357dc691232e6458b6b169e6eae54de85bd03f8495d74148214f2651315f4338d4f2658b414e432f41ca33df18273fcb38d48d5211e00e533534cd08645a60400a9238741dc7cd7cc86a2e268e65bad77fffa8b8f21c45613d53f58ff38e6cf3ab1e3fb76d67664ddfdac65a2e68ba233bbcd91fdbf0274004192d2d5b948f63dbae7db62ec8a2446ce9558a194757a2db80e9e54d8cad2adaa", 0xad}, {&(0x7f0000000780)="dc34af8bfea94dcc7be887b7e983aa8e523dc8baa479fb1795ed155ed9e24eebef92e7f119ad7e33bf50fc150fdfcad2410be5e623a3cf56ed6f4b4d6078f5786c13b5665048bd93aff77a30e5f3827b72ac8e61b33a0c7a72dd82806f72d4afb615c36e737a1e2b7172135f2cccddc07510cc7d46f1ee6b0465389ddf807a8a6d706060af37f9b84da4dfd0c0c8bf50d5fe41c95e66009e0d89c16213", 0x9d}, {&(0x7f0000000a00)="4500ed7d8074e750eba6aa08caf3d4bf2e004f705bca3a2b4a3c5da2119a280caf4fdcc4bd53d1afc6e2766ad4600518755929f4776fee2d0533ed89ea14d10dc2944bdde3d76f771d6b8314831d2b2bbb637c5ba4d2d96a8ce73dbdcfe9f9125dd3e96a110a7a687b32635dacc48e1e8dbe44ec27a58ccc8e500200335f8af7dadaad85493468c2cdd4abc34e67851be663234af7ad9ca15bac0ea24d624bd2076dae03ec658f4976b670d01bcd110b033e6ef0baf634991c8b9d14a264db20349305ac0302a785cbb0f5d86c7d2359f0b2d19ee1ce57ca7486bdc945ae262c0a5c2f9dd2a8e40bf41b9085a41c", 0xee}, {&(0x7f0000000b00)="5b9a141158061758b60ddc9db38e76644b8d675e58cc4ac012ace45464c6337cd67072244798dd91b3846019f4b41a0a78a978569d7de6f5a838f43d62bb330027459355be8414164167f7c358e50912ce", 0x51}, {&(0x7f0000000b80)}, {&(0x7f0000000bc0)="98eb1f9712c05ea67cab65bb8fa86b93ef20fc89f7a9293acb52cd83e8d46477188cd410ea3e21eecf3a8ccb7398b21693cb7a2d4003a1f730bfa5897892bc2a3a3da4e085f0638241384fc2075e26ced6e2c9de509e8eded0fb47563f1450da93dd1f0a55dbab21f4256e93363fb15fd0bc5c75d1c5f1984ce0bb45bc4199170102e64a8ca25f67b055585cbf", 0x8d}, {&(0x7f0000000c80)}, {&(0x7f0000000cc0)="c4131e611fd0c628367bdf7abd6c5b1160fc007cb82aca5ea39d143bb7e0ad6387c25e040c173de6be5ae0ee5fb8ec2b870a55c12ccb3d165f150971d58d9c465c70520e13fff7bff82a0eca426be3f04c1bbd6eb0329f65bfd62f7fcbd1e53b1fe557103a67c07741a9659e4ee7584d4cdde7fcb560003e2131af9e0c0605ffd486f2aea3a76928e53076f856399a29c67dcc68573a", 0x96}], 0x8, &(0x7f00000032c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r8, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r16, @ANYRES32=r10, @ANYBLOB="00000000193675ced46fc7401a60ec8511925ac489a6fc19e10926e90b0aef3a1f2bfd611adc83b0a03acfb58ed32223e7beab1a0d0957ee130e4bf449424e4b858568b79628b98a074b9d1b986a6fb462043d0cf292bf058ec56e90c1283614ce0656a0f5eee7b88d0a014554b51bb2d452b6fd8204bbe6f3aadcdfb96e1a7d934b51d27279197900000000000000c857885941ad582ccfb4bbe934c8fc92278e34a102eef20338cd0d7682b3a6875ba3b951070fd0c0647ff3fed92258dcf53a5ace39e9f1ba5b3ee713726a52a98bb5692710e35fab0381514caabbb365"], 0xc8, 0x4000}}, {{&(0x7f0000000980)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000004240), 0x0, 0x0, 0x0, 0x810}}, {{&(0x7f0000004280)=@file={0x0, './cgroup.cpu/memory.limit_in_bytes\x00'}, 0x6e, &(0x7f00000043c0)=[{&(0x7f0000004300)="0222a0bbc0bd91eb4aa1d5c6b1eab55473940850467376c925beb8a7dac5d307127a217297c34e05e7fc50b59f594f9cf06f8eaa97459209fa60ff531a46a4cd26df7e1a0c734f05a58c1f7b14fabb421191322759a17a467b380440c7835cb36f9643c7886e03c3b3d2cf8820409d55fae31cf10beaeb32284cbc172f4ec75935394836c591212baed3ff52414ddbb11988ee075b6b4033281cfc787b88291e77833896fa565764c839324d01", 0xad}], 0x1000000000000064, &(0x7f0000003180)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r14, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r15, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="0000000028000000000000000100000001000000ebe038546273fc081150c608f436bcacd43b5ecc790ef42cb3c21b6f38c85fc2d8582b929e30f74c5b254c4cd133dd5bc5720ef1c26caa78f95a759c0ec033f3197b56b80b095a9341c1a294b0af96e54391cdba16610e290c1f127f9c684d5f49deaf0a4067704a08776e145d2f1bdee394395359eaf8c54c19a9ac184f87b49a5873b5783d3856e65012cdc7ff8311573c11", @ANYRES32=r11, @ANYRES32=r1, @ANYRES32=r17, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32=r1], 0x98, 0x200c0049}}], 0x4, 0x44850) write(r0, &(0x7f0000000080)='4', 0x1) executing program 2: mknod$loop(&(0x7f000000db40)='./file0\x00', 0x1000, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', &(0x7f0000001440)={0x122240, 0x10b, 0x7}, 0x18) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) write(r5, &(0x7f0000000800)='- 1 0 0', 0x7) write$FUSE_ENTRY(r1, &(0x7f0000000140)={0x90, 0x0, r2, {0x20000000000007, 0x0, 0x80006, 0xfa7, 0x0, 0xfffff801, {0x2, 0x0, 0x20e, 0x6, 0x10000, 0x7, 0x77ff, 0x9, 0x4, 0x0, 0x7, r3, r4, 0x5, 0x1000}}}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan1\x00'}) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000001140)={0x8, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="08003a115d923a3d", 0x8}], 0x1}, 0x40408d0) landlock_restrict_self(0xffffffffffffffff, 0xc) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r7, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000001900)=""/4080, 0xff0}, {&(0x7f0000000400)=""/65, 0x41}], 0x3}, 0xb}, {{0x0, 0x0, 0x0}, 0x69b9}], 0x2, 0x42, 0x0) recvmsg(r7, &(0x7f0000004180)={0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000000500)=""/225, 0xe1}, {&(0x7f0000000600)=""/210, 0xd2}, {&(0x7f0000000700)=""/48, 0x30}, {&(0x7f0000000740)=""/78, 0x4e}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000003fc0)=""/242, 0xf2}], 0x6}, 0x60) r8 = socket(0x10, 0x803, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001d80)="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", 0x5f5}], 0x1}, 0x84) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) executing program 2: syz_usb_connect$uac3(0x0, 0xb4, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000401e0448304000010203010902a200030101c010080b0001010130070904000000010130000a2401103e00070000000d240704774cdc6212e694c80014240203050203030500000009008b00d701950013240301020200090401", @ANYBLOB="f8cedf950c8e6366"], 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002fc0), 0x242002, 0x0) fcntl$setstatus(r0, 0x404, 0x26c00) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) splice(r0, &(0x7f0000001740), r0, &(0x7f0000001780)=0x6, 0xbc8fc53, 0x0) r4 = syz_io_uring_setup(0x33c3, &(0x7f0000000000)={0x0, 0x256, 0x4000, 0x1, 0x2d5}, &(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) bind$alg(r0, &(0x7f00000016c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0xa827, 0x8, 0x3, 0x36c, 0x0, r4}, &(0x7f0000000240)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x22f1, 0x800, 0x2, 0xa3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x48c, 0x40, 0x0, 0x12c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa938, 0x200, 0x0, 0x39f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x40a3, 0x0, 0x3, 0x1b6, 0x0, r2}, 0xffffffffffffffff, 0x0, 0x0, 0x0}], 0x4, &(0x7f00000014c0)={0x2e, 0x30, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xd}, 0x0, 0x0, '\x00', {0x2, 0xd11, 0x0, &(0x7f00000004c0)=@buf_512="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"}}, &(0x7f0000001540)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x24, 0xf, 0x6, 0x201, 0x0, 0x0, {0xe, 0x0, 0x7}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x800}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x10) r8 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000040)=0x40) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001580), 0x400000, 0x0) r10 = gettid() syz_ublk_add_dev(r0, r5, 0x0, r6, &(0x7f0000001600)={0x2e, 0x8, 0x0, r9, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x210a, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000015c0)=@new_dev={0x2, 0x84, 0x0, 0x0, 0x1000, 0xffffffff, r10, 0x0, 0xa0}}}, &(0x7f0000001680)) r11 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi1\x00', 0x2, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r11, 0x2000) close(r11) executing program 2: mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) syz_clone(0x10000, &(0x7f0000000480)="6a1a6bc95f0e55cd35fcf346c90e52f93164d7015060afcc1dcf21092b68cca58194536144352c9f45f05f80b2ca8a772539ab12eefe72be0f889fcc1ee14c5445ecb577eea34d17c0462d8a3508b08297987fd03f06e50882ea71cc64bdfce2f7fe65c0dc59c367657c6c17a54746ff903494bc0bd482888c4c1d5ec8de65e7d18fffe2c420049970d6fbe17ac24d339c37d765ad893f42c87f0214880330cf0ec8a2aaf17c2ecf84400308534a7d1d7bf12961bd3d11331a31f908c3fd59c6d94279c3f61dac1719697a2d33a523360215501dbb7ee3f261a5fb91fb3ba62ef816ad69ee7b994cb3d40b801051803af0d1b416a0111702aca32a2ff1b2c34e94351f1ada6614c21c764b56149559ba95fae4b1d6ed7047b5b25891a286e148cdf9aa3c37f0229b18e6775169d9d4e65cdd961ba2d845cc7b3e2004fbfabae3d96aa98503b88854206886ef87fe935f5e30d7ef868170f4a12c5a84db4ea21e9811e552f17c0c40c06029657d75abff05042606681b9179e4631ec190ca9bfbe17ab844aae0d95d2d845416c41b865c03d4c12c95379d6c7e825179761a1b3957ba0c257440a30e881575ec51539427aaf5ecb6f8997fc2b989b94717fb7c11fa29f4e921bf409706ef2525d76ed120b30872dbe6ce9aa2840a80273a50e1ca4d73c295deb96b4412e3e40f0e10d0e6c0fbb4b3c2bd35eeb67e75d3802cd4b3b5b15020c85720dcc38da3fa00978db1b84e7facb012056d958c3008e0c7d1cdc09050905f8008e7d42d06f5a186d52828bc01c3ef7703983ceaca9f72ad50f38affbf9ab1d716468d38dccb21fba421ec214e7b922e853855e15a59505585fd7ac9f937fedb4fa5f0947223932e47d383701336b3a1492910e26955ce491a2c9359666b3c95bad66944e4d08c1b41c1358d8da7431c9ee8e6cc5073f7106fcc49b84cafcfe34f5eb3ac0d8781279cb3d1d78a4c2c594926f9fae2daa94d358c260fb6c810bb01e43e25a05e8e5dfa0d458ee500bda348cde3244dee033c56a2b0b3ea36fcea670b787fecfbea87847d0224d86f1e1dfc34c415f86d123ee0deae62a5a630f18dba2fba86c91dfd4a4fa5df130d5ed98a3b0ebd9666f8595d66f3311176ca5d291fd70fb963ad04fed4e310ad0b0f4273698dcfbe023148b5ce3fd525f03f89c4b66c486bdbf0f3e740c53f165fabc8d9c3e9b767ce7de44a38560b3c29e2a7f1a2afa1386feea90f1bf85f7ad0256e230557482614a9747615cd2eac4a27d53c62108733d22ea330770a2a740843816135158a48dfca46fe1b2bde129060cb70be516cbcd8728b70cefd20a7d3313fd7f08a0d31e9d6244634c5b72a7cc938990a862360604f554c3b914c161ee3a134e6485de731282a59dc87fed38fe096017651383a110a8a99597771df7f6e9956e68dcaf9621505c0db370f4a4cafc22c854a390149c1a7668bd49a199d40afb34643e8029dc49a0f447999c935cd9e71902a34e26dd5c97a116e650df74464ffad2a5737f4b48fcf4b47a5a68cc57a86864d71decd12012e75c9f489e8ad75787a34e21beb07c4a79df21560deb6cca59d508db267650a950286d6b8ed3be814862edfa91837c076d0ab48f0da512d55f7325e3ec89b7f9d9ed1cef29cc22a6d794cdb26a67f7f96ba76c9c426df5ac7ef6df15569da6f67eb3c7a5aa5bee504c6a0abc50c2df788ea98f758a6ae81e4c885fc31c4171ef8c9a5d8eddd1d1262aaecef782ea96a82e094f7b852b49d779e2b2c2d734d6aeb8e6914a516ab7e7fe742a2ab32227a57e211c321ae63bdf70a939b517b89b2b992b3c25b76a5f9e8257f2d13ab97f6348c9b8a6329584294f26ce44691fabfa754d25e9986d9166c55b47722e6aa2b6c2bc4599c0ae2ab6f782d1653217b380cd1701f15c4aac2af4b9b45dff10bf3e0ddd86e9bb9d93a2fa835baab39e951144c7d0523beb84007b35ae7f4abc1c2718934984c824a6507ec96e843571d35955ae15953ff1cc597e2c7f1607010504ddc74f7be312587e0d9c1b7b6179a67bf5cfa8c286feeb91db1a7d5c0d24e25a7bdf779a43c4cb087b367d81bb4b53c12804a13c77d14d2863c11ac10db398e33c5f8512314b25975723120c2a7d2dae18c0a0800fcd416d38c28740bf8b94b85176d7ba505e21c3dd053ff7a1dbd92485403b99653ee3aae8217c585279fcfe77e49dd3e24af3f036e48e08d6300e332c5d9b1a946ca8d28dd4f53156fbb549b2f53a5ee791dda8cbd8def892d714385e39ca3d90ba43992fd42267868273c1444e0ba6bc587d647fa859c8fa098727eb477f10bdb698d817390375770d3f8958de6463bf15c29d131e73d54c9743bd3dfef429090e74a133143cddcf7e6ec81dcff87e6197aa24be554a6be73723fc516d1fde06ba79e0214bcdca3bddb4104b2715a6bde3b93576e3f593d26dde4272e93af66df246036b59311f152742c0dbec93aed18ab6acab99b5074ac5bd62c0593eaede63e20d2c14e58c6412668945855ce2fdf569c05417e7ddee6682137c292c82064eae6e3de7c180ba715467de04b5b6045d4d302347e49899c4597998c5636bb5b3711e9ef5ec10e37cd82c4c6bc92045ee4422b53097dc663daa6e20544f8bc99f89cc1cf5f3821aba7c82697a6be523cc89c43259993a1021be0cfc7063c3111be6ffcc72799482697ccff193fdb1a641dfe80ed57d7c852307b4d67eb7fcc1407c87e86a90a23fff5e16698398b4d723c57c2404797ef5830f3bef1fb144c90db29eee62a3397ca66521d9d856cb7baa6d64637cf68158c0ef08e81b79518231f4247b2553304ffe94e6d5cc7e032b0442b4ccc9ed7690f880986ee181d3909dd434d92abfcc085fca8b3a1fd521b136d1efa9479046f61a9e6c58fe57d3e1d99744dac163f502c0b0fdf2e3b36056c14719a4ab698ccc0e427c6c7f313d974175a0f14e08f25c32b795d91dd7a4b6eb5ad841b0f2068e111af0ececfbc8fd874b7cf54c7157680af60be5080e9fe9eb6366d14ceda56de3eef1d2a513d124076771e5bea1ebb41d2025e18a54461e050c1de45a7b5fc490ac991d9cae821e4f145dbd0406d4783a7cbaaa00ddaf9e9ee93860b75333795427bc4033c1297f1abcf550467bfff169444379fac67d9d36722247383bad42f3de407958e91472147274ad76f27d8e984a47d74c8f386754df0742eefaafd793bbd2e5d9f57701afb575d909a7ace4ffc09e68675fe36b3ac2828a238696f32c4c2bf849fddbec3b16f33b6701cc24ba2ad9837e9505c7ab1f1e38c0654652e11333e73dea2152acd4a272e5ca8eb41edf1e69001e12c85dee214ab64543b8099587ff17bca60898e886ed274d6628e49a608649dfe9ce57479f84ed1a5fcdea2e6225018a14de8859914ea2dd9816b24bbd06985b182e61379ab9ca474bb01d96b8eb54f61a099f23ab03d06b6eccacbce8f4d6ccf4606261d99e54d07d1212a8ad0ee98c973f286af62e64496dede5d69126bc28e4e5f8eeff4ee9809c21bf7640c3edbde78974364e94b0ccbe06bfc3dfe4670a8f5651fc814a2ae377a0864d10b69f495078d3ecb761e3913aaf35aa15567e8eccaad71bd98a4278ad3fe42bafbe19ac28e11dd9a0f53d6d034d585e25f44f057976499f7a7031e86a9d13b312f50cc01747bbcf9a339c00b534e7d7f90055310535a561a17c605c5b7734b73dffead3bea09c82c74bfa724d937284cf97c4397decea8881ce8d7e4370b740f35ede1dc1c365ac2260f8d22d207ee81145e861e0e615a1fe4cb82f99a6593eb83c47c5f269a41238d8c2cc938e67a36fd6b309acf56467656bf5d6e97fd7ada9d5f0afba8bbbdf67161fac4888081e8da51d897672a28f4c430c09b741cce7b9364a8d4cfc5d7ac4adf0d534b941d567cb2833dbec95822a991010914ea348d16c92f918de7abfa985510f6bb21d40f711843ed7ff521c4d7eb5170a8ec6e1fa5917a7fde767cc7c1006427a068437a5aa7497496f634020e920daa0072ba8c77eed53878df8ce4cf162af6702d75b9a5f8435276c16c312892e3bd848e0babdc2f5cc42a4eb1b3abb240d315b37d31fa55fce4ee9632f0cead2916579ef9e8d1995a015a8f3ddc3e8d059930dab90c461e3e3e56ce273d4f2c63f351e33b2df4f3019b48dcac824e40736d3a8757797b84a5a8e4057d55cef2e0674ad13efa27793691245ddeb549ca96c0fce1a4823e3b5da6e11d35b6444307f7a22a66a438f3f32580ecc33cdef10a420699d89ee419162bbbe33f8249ee54c85524ffab0bcc1324d6b104095fb047edd3e0b9c4db83987697b40444e0e55de117e6aba5fe0ae1b7df05a583ab1c82304f0656818a681fc9df6c6571b55a09264298cc4fb93685c20cd95a1e4e1a5ded15fcafb8d2e797cb9d97a7a1867e4da5ffd5ff8022998d4ae0b48de24f61a58eb1df306113c51b26719c0b4957d33c13d2586e781394188bf5cc314143a47d5eecdc80592dc2f0f266f487e5df5d13ae6a6b0be95c1220b3b913c7ca760f37b641ce62cb32480454f69ef6c44853062ae186fb377829bf8fb2ad31f1157617ba9f731e38776a11155fcce6fa9d20afcdcc71f0d97020177adc3bdf5bc5d166daff91ac7b03bf110187da0ca80760eba4a79a845b6261793cc6fc06cd0f75b88cafcf5afd173c67e37a1c285bc9bd1edeeb4dbb5624e57e403155aa76a6dbaae66199ce86f6d6a149e207f96ab46bb7f64d1d81e9e6333def8fb719af51c3ae55ba60ee48023c73448c65fb03af4f2372d84a8ac682017925b249923ff7967409c6d3e4719966870c40017964cea1d24e7a1ffed6f28e45f99cee63cd4abbfbdd7b15d2c8205d09ae812ace3fd4504e7ed0a768f84802fa68d1f2d956fb0a5484dcdf25b1e19f6597742544ef5c5acdbc444d793efb8f0c2ea2a751a27789271bdd5fb7f58d740dae26e49dff9f3e8d6e59995befd1d16c6ca59da92588a2badfa8857d36f8ae5e6d4803792f8828c4b7bd3abea06e045b59dd345d5ae87ace252cff1400e008095e414352d5bfefdd025eeeca82764ecd8b4158d171255f7d1bbf8fcffa92818b5f5e660befb9aed24d10c73e0779e9fc2135a544d85cbeadbe9025bb6603fc5ff8d2ce3a629ea68b0379ba0bfa15166149f6906e5bb4f73cf753910f65491a7710d9b78d722554778cef7279e37c7a1d6612e684248050d12155d1a1893e125725660260192754e23e7547658cfea61f1588db481c5a313e647a7f603bdfdfce980078935fd548b05359db60474a6eea454c0108945102e87e9b74ae8d0417b67ecbaef1a975b39df9734bd8cb8aa500037b5826e1a31d9c7a4adaf288b1c1c3d3602c8288829c50244bb46eda49186118810fcdf03ec0df06852006f1e8725951f8d4f9a6adefa5b0ac27368c29a097bc0b7235674cd6aa7c757d2641ed88632c5827536f92d52c4a8cb068401aaafb679b3ec2d1c02088d1debd4342c68beb84fc424d4c394762555814811ec77c3825f5d99b49d856323ad3d4b823367cf9db661eeb3718d2d528450ee8334ac75ba966842e344ecf3ad926bdf96fb91ec4ff6e0c50399037471e3ed7bb87bd7c01e6dc7fb1b1dcd5a99c9e649067c971ebab7a83dff86b7ea417ae0445e23c580480e192b88bf6495277273e4df9aed17b2a46c566d7352351639e9a4aa11b4910536c2f7b3b647190190f4614f8289453812d4997fa32f29b6d22b3d23a8bac2a95c539837d93d6202c0370654f7aae", 0x1000, &(0x7f0000001480), &(0x7f00000014c0), &(0x7f0000001500)="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") mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2082, 0x0) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1ac}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$input_event(r2, &(0x7f0000000180)={{0x77359400}, 0x11, 0x178}, 0x18) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x5}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x10) (async) socket(0x1a, 0x3, 0xf) (async) syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x41, 0x17, 0x99, 0x20, 0x4b4, 0x1002, 0x6f78, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c, 0x1, 0x40, 0x7, 0x40, 0x40, "", [{{0x9, 0x4, 0x4a, 0xc, 0x0, 0xba, 0x54, 0x77, 0x7, [@uac_control={{0xa, 0x24, 0x1, 0x1, 0xa}}]}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x1c) (async) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c24020659ce8cfffb140106760824f2b3c887f9227747a98f5c037820e0133364c808b55b8508f251b3daccb1d7e4a9d3e9b6bd815fb1b9d82df2b253cd95c5c8455bdd44b6ad03f1f05da0b341bdd1844d365f0319009d57a57b12b0d745dacddba5c105959c94caaf", @ANYRES8=r1, @ANYBLOB="07b0"], 0x0) executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) sendfile(r0, r0, 0x0, 0x9) mkdir(&(0x7f0000000100)='./debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./debugfs\x00', &(0x7f00000001c0)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debugfs/ubifs/chk_index\x00', 0x2, 0x0) pread64(r1, 0x0, 0x0, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[], 0x44}}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000000006010200000000000000000500000215d6078005000100070000007cb05b4f7d72e9d5665ff5c862d2c6deabca923ea18d2db9ae6e45907a58a0c9852b6ee97c2fa2f5e043dafe9fc453e2cedece57332f80bea274c5f476cf2e7c0dcf9a5fff38a06942a01666956787f901"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000000280)={0x2, 0x0, [{0x1, 0x1, 0x4, 0x6000, 0x4, 0x0, 0x3ff}, {0x1, 0x10, 0x3, 0x81, 0x7, 0x9d, 0x4f6}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x1000000, 0x0, 0xffffffffffffffff) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) executing program 35: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) sendfile(r0, r0, 0x0, 0x9) mkdir(&(0x7f0000000100)='./debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./debugfs\x00', &(0x7f00000001c0)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debugfs/ubifs/chk_index\x00', 0x2, 0x0) pread64(r1, 0x0, 0x0, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[], 0x44}}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000000006010200000000000000000500000215d6078005000100070000007cb05b4f7d72e9d5665ff5c862d2c6deabca923ea18d2db9ae6e45907a58a0c9852b6ee97c2fa2f5e043dafe9fc453e2cedece57332f80bea274c5f476cf2e7c0dcf9a5fff38a06942a01666956787f901"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000000280)={0x2, 0x0, [{0x1, 0x1, 0x4, 0x6000, 0x4, 0x0, 0x3ff}, {0x1, 0x10, 0x3, 0x81, 0x7, 0x9d, 0x4f6}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x1000000, 0x0, 0xffffffffffffffff) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) executing program 6: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='system.sockprotoname\x00', 0x0, 0x0, 0x2) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20980, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x85, 0x6, 0x0, 0x0, 0x10003, 0x3d, 0x400200cc4, 0xffd, 0x4, 0x9, 0x8001, 0x4, 0x2, 0xfffffffffffffffc, 0x6a, 0x8d], 0x60000, 0x2011c0}) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xc4, 0x1, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x36c9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x419}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010102}}}]}, @CTA_TUPLE_ORIG={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x14, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0xc, 0x3}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x8}]}}, @CTA_LABELS_MASK={0x8, 0x17, [0x401]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x81}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4081}, 0x20000800) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x2480) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0x80045500, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 6: prlimit64(0x0, 0x6, &(0x7f0000000040)={0x0, 0x1}, 0x0) syz_clone3(&(0x7f0000000800)={0x200000, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = fanotify_init(0x4000, 0x2) fanotify_mark(r0, 0x105, 0x9971, 0xffffffffffffffff, 0x0) executing program 6: request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0xfffffffffffffffe) (fail_nth: 18) executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0, 0x4000}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 6: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x601, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000810) executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCMBIS(r0, 0x5416, 0x0) (fail_nth: 2) executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000300), 0x22242, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x3, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz0\x00', 0x0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0), 0x2) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000240)={0x4, 0x20, 0x18, 0x1, 0x100, &(0x7f0000001100)="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"}) executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-256-x86\x00'}, 0x58) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r2 = dup2(r1, r1) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000000)={0x2, 0x2, 0xd98, 0x13, "48e4ed7da8a5793d14be0e92e080922245a750555f268709d9ce00"}) (async) ioctl$TCFLSH(r2, 0x540b, 0x1) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000005c0)=0x9, 0xfc17) (async) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f00000000c0)={0x0, 0xffff, 0x0, 0x0, 0x0}) ptrace(0x8, r4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e21, 0x0, @empty, 0x2}}, 0x101, 0x5, 0x9, 0x3, 0x42, 0x9, 0xb1}, 0x0) (async) landlock_create_ruleset(0x0, 0x0, 0x2) (async) read$eventfd(r2, &(0x7f00000001c0), 0x8) (async) sendto$packet(r3, &(0x7f00000002c0)="05030500d3fc030000004788800509101128", 0x100f, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r3, 0x8008f511, &(0x7f0000000180)) executing program 3: r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x37, 0xd7, 0x81, 0x10, 0x9022, 0xd632, 0xd781, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xce, 0x9, 0x10, 0x2, "", [{{0x9, 0x4, 0x42, 0x7, 0x0, 0xd6, 0x5f, 0x3, 0xff}}]}}]}}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$lan78xx(r0, &(0x7f0000000d40)={0x14, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x30, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000300)=""/230, 0xe6}], 0x1) syz_usb_connect$midi(0x5, 0x0, 0x0, 0x0) executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) fchown(r0, 0xee00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x112) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000200)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/v4_end_grace\x00', 0x1, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) r3 = syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000177000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYRES8=r2], 0x0) sendmsg(r0, &(0x7f0000002880)={&(0x7f0000000140)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0xfffffffffffffe95, &(0x7f0000000500)=[{&(0x7f0000000280)="e6b62a02b72ccf28f0aa6cf3b6003c6296fa2d90c1def88dac9d372277a81d393dcda1d1f099cf965317af046d16886807010067566df4cb6b0db144adb266dcd3e661a0b6032ea74bd97f85355d9b9e195fb5dfc734fa3ac43d52a3ee3c68ab8b96d1139a7d10ef59ca9c14bed0f26332cd2ef2a5d027772e972af17ded53f128c4e1986b5e1180a528ae046c7cbd8a571ed7f8ca5baf44382ccdd3ed4c87b27abd3459", 0xa4}, {&(0x7f0000000400)="2a5a34f0ceee0f1fecde5cec66e66d529e01fb30b3d159b96b7b759b097504022cc8e7cbd8036bb186e8a79ae8b4c61242d195048dc6fe5443797818b7539f9cda21a45530fab7bb3776358317e13636a4acd01cc1061ec3951f0f310fbf69d60c5f9f43dc4adcfde1e34d3288609152a8053eeed496bebd5c25201cd9fb66e3678077e3d18286803e6dc9fa9303a819ead135c1d560bef8ab4f4bfb223da850ac82aa55d1ae3437b2abc9cffcc2f336c10f81860964255710bf87830e0cfdead8a0bea6892dc840bc32d534ef86a1efb6362b0a8c85da7b9c536da7fbc12d4737383ba48e07eacd", 0x5}], 0x2, &(0x7f0000000540)=ANY=[@ANYRESDEC=r3], 0x2328}, 0x20008890) r4 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000040), &(0x7f00000001c0)=0x4) write(r2, &(0x7f00000000c0)="2722963e262c5e", 0x4) executing program 3: mknod$loop(&(0x7f000000db40)='./file0\x00', 0x1000, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', &(0x7f0000001440)={0x122240, 0x10b, 0x7}, 0x18) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) write(r5, &(0x7f0000000800)='- 1 0 0', 0x7) write$FUSE_ENTRY(r1, &(0x7f0000000140)={0x90, 0x0, r2, {0x20000000000007, 0x0, 0x80006, 0xfa7, 0x0, 0xfffff801, {0x2, 0x0, 0x20e, 0x6, 0x10000, 0x7, 0x77ff, 0x9, 0x4, 0x0, 0x7, r3, r4, 0x5, 0x1000}}}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan1\x00'}) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000001140)={0x8, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="08003a115d923a3d", 0x8}], 0x1}, 0x40408d0) landlock_restrict_self(0xffffffffffffffff, 0xc) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r7, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000001900)=""/4080, 0xff0}, {&(0x7f0000000400)=""/65, 0x41}], 0x3}, 0xb}, {{0x0, 0x0, 0x0}, 0x69b9}], 0x2, 0x42, 0x0) recvmsg(r7, &(0x7f0000004180)={0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000000500)=""/225, 0xe1}, {&(0x7f0000000600)=""/210, 0xd2}, {&(0x7f0000000700)=""/48, 0x30}, {&(0x7f0000000740)=""/78, 0x4e}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000003fc0)=""/242, 0xf2}], 0x6}, 0x60) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/102, 0x38a}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f00000023c0)=""/4098, 0x1e1}, {&(0x7f00000000c0)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x5b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0xa}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000880)=""/207, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000000000)={0x77359400}) executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) close(r0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) r2 = timerfd_create(0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioprio_set$pid(0x2, 0x0, 0x0) getpid() quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x6, 0x81, 0xffffffff, 0x2241d13d}) timerfd_settime(r2, 0x3, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'syztnl1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) chdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00') nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) close(0x3) executing program 36: mknod$loop(&(0x7f000000db40)='./file0\x00', 0x1000, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', &(0x7f0000001440)={0x122240, 0x10b, 0x7}, 0x18) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) write(r5, &(0x7f0000000800)='- 1 0 0', 0x7) write$FUSE_ENTRY(r1, &(0x7f0000000140)={0x90, 0x0, r2, {0x20000000000007, 0x0, 0x80006, 0xfa7, 0x0, 0xfffff801, {0x2, 0x0, 0x20e, 0x6, 0x10000, 0x7, 0x77ff, 0x9, 0x4, 0x0, 0x7, r3, r4, 0x5, 0x1000}}}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan1\x00'}) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000001140)={0x8, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="08003a115d923a3d", 0x8}], 0x1}, 0x40408d0) landlock_restrict_self(0xffffffffffffffff, 0xc) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r7, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000001900)=""/4080, 0xff0}, {&(0x7f0000000400)=""/65, 0x41}], 0x3}, 0xb}, {{0x0, 0x0, 0x0}, 0x69b9}], 0x2, 0x42, 0x0) recvmsg(r7, &(0x7f0000004180)={0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000000500)=""/225, 0xe1}, {&(0x7f0000000600)=""/210, 0xd2}, {&(0x7f0000000700)=""/48, 0x30}, {&(0x7f0000000740)=""/78, 0x4e}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000003fc0)=""/242, 0xf2}], 0x6}, 0x60) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/102, 0x38a}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f00000023c0)=""/4098, 0x1e1}, {&(0x7f00000000c0)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x5b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0xa}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000880)=""/207, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000000000)={0x77359400}) executing program 37: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) close(r0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) r2 = timerfd_create(0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioprio_set$pid(0x2, 0x0, 0x0) getpid() quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x6, 0x81, 0xffffffff, 0x2241d13d}) timerfd_settime(r2, 0x3, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'syztnl1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) chdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00') nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) close(0x3) executing program 8: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f00000000c0)=0x7b, 0x4) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) readv(r1, &(0x7f0000000a80)=[{&(0x7f00000009c0)=""/65, 0x41}], 0x1) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000003d00)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r6}, @ptr={0x70742a85, 0x80000, &(0x7f0000000440)=""/210, 0xd2, 0x800001, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x50, 0x1, 0x2}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time}], 0x38) write(r0, &(0x7f0000000100)='~}', 0x2) executing program 8: r0 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x2) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc45}) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) r3 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x6e0, 0x0, 0x3d}]}) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000340), 0x20000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x100000009, 0xfffffffffffffffd, 0x71, 0x1000, 0x49d1, 0x2d7, 0x8000000000000000, 0x8000000000000000, 0x3, 0x0, 0x10000000004, 0x401, 0x2, 0x3ff], 0xeeee8000, 0x284e97}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f00000002c0)={0x48}) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) recvfrom$llc(r7, &(0x7f0000000100)=""/165, 0xa5, 0x1, 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1f00, 0x1, 0x13, r0, 0x81000000) syz_open_dev$vim2m(&(0x7f00000000c0), 0x20006, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'ip6_vti0\x00'}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x83}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x118}}, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r11, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x400000f5, 0x0, 0xfb}]}) executing program 8: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/rfkill/rfkill0/state\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)="3bbbcdfb", 0x4) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a94ea0609eebd008300000000"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x9, 0x6, &(0x7f0000000000)='BBBBBB') executing program 8: r0 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) ioctl$MTDFILEMODE(r0, 0x4d13, 0x1) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0xfdef) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x2, 0x2d7, 0x8000000000000000, 0x8000000000000000, 0x5, 0x0, 0x4, 0x401, 0x2, 0x5, 0x8d], 0xeeee8000, 0x284e97}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)={0x9, 0x0, [{0x8d1}, {0x331, 0x0, 0x1}, {0x860, 0x0, 0x4}, {0x119, 0x0, 0xd}, {0x2f7, 0x0, 0x5}, {0x204, 0x0, 0x8}, {0x388, 0x0, 0x8}, {0x400000b6, 0x0, 0x8}, {0x630, 0x0, 0x3}]}) executing program 8: mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000500)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, 0x0, 0x90) (async) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800}]}, &(0x7f0000000200)=0x10) (async) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, 0x0, 0x0) (async) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001ec0), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000100)={0x5, {0x521, 0x1, 0x7, 0x4e0}, {0x6, 0x7, 0x0, 0x1}, {0xffffffe7, 0x3}}) executing program 8: openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0x7fffffff}}], [], 0x6b}}) syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c0001020301090229000100000000090400000002020100050200000005"], 0x0) executing program 9: r0 = syz_open_dev$vbi(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000001c0)={0x0, 0x1, 0x10, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90e, 0x6, '\x00', @p_u32=0x0}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="68fa140000002d000b00fdffffff00000000090000000457cedd575eda2d1ebc87551cefb27728412ab5647e7be52804c29a44e8274425fcbee123a2e0958a8dfcc3713092485047c27a1711ac8d33b2987199bdb53798002bb1203841c52b7bc7f6629e71d6cbdb1b647b6fbe878dd117e3621a5477dc"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000040)=[0x20, 0x4, 0x40005002, 0xffff32eb, 0x2, 0xffffdff9, 0x2d7b, 0x401, 0x0, 0x3, 0x0, 0x3, 0xfe09, 0xd2, 0x80000002], 0x1, 0x4000003}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000078000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000004c000480480001800a0001006d61746368000000380002800e000100636f6e6e627974657300000008000240000000001c00030000"], 0x100}}, 0x0) syz_usb_connect$uac1(0x0, 0xfe, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x1, 0x0, 0x8a, 0x40, 0x83}, 0x20, &(0x7f00000001c0)={0x5, 0xf, 0x20, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x6, 0xfc01}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x1e, 0xf2, 0xfd9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x2, 0x1, 0x3}]}, 0x6, [{0xd7, &(0x7f0000000200)=@string={0xd7, 0x3, "ffef3fe5e1b918d91fbe45e55d0299cbad736ba0a610296e178d82758e8ed71341807ba6d59661ace229161c06705061cc59700208b2d5d63bbb955e9dbe53f39160894998933fb852044def4fc37c2b7fb276e21dc862cbfdbdb7f430225270b557b2559bc9705722eaf1cfe8328218cad684327d2b94e0b34e248b2c137a65cce4cd01f04f0106cff86a033c188f39ff68d878fc43bab81f472e9e679c484cd8c4b6c2cdf1bd930d4ced0340da0cb3d959048d7ae6afbf250e0be6c492f7e5f56c7e748e844254d7d4e4664874bc4fbbf1740fb9"}}, {0x6f, &(0x7f0000000300)=@string={0x6f, 0x3, "52459ffd4fd96b283eb160d5ef25b35eff9b1818b8db44f6b5a7e38883137a5d531ab63c97be90f0b5b08ea6571d9f27c283742a6869e8906d4df3c5122d32b054d2fe64b3754390e23a6f02842c5dcedea79956f027d5c1e86a1609d2e05a3e2af01043b3aaab04aa86357de6"}}, {0xe5, &(0x7f0000000380)=@string={0xe5, 0x3, "40714ac23946d9dbeff497794047ee097b162434796b49bc9008b0eefa5bbcde466f315b6670f7d1371a9d0fb17fc4fb180cc25c64c45ce3f901ca7d71c0b9367c3a063b6c5d8320afaf9430950b34de2e8f4b4ea7dad4fae776acfcbb44e7eb25850ee02adaa8b03134f9800b185028d64f0661a0b5d8bbdca81e5b9098b3700e30544d27e735cd3e1ec4fc2dbad70378cf43435c92edda48008a4a50c1c25fe3ae981753913490ca28e23ba93a209e3b0dd5a64b6d0e849e93ab433f7025a3e958987a73dfe59d6662a23c6db8515cb90deb3a2aca29047956e06c4c119c18b9723d"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x420}}]}) syz_open_dev$vbi(&(0x7f0000000380), 0x0, 0x2) (async) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000001c0)={0x0, 0x1, 0x10, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90e, 0x6, '\x00', @p_u32=0x0}}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="68fa140000002d000b00fdffffff00000000090000000457cedd575eda2d1ebc87551cefb27728412ab5647e7be52804c29a44e8274425fcbee123a2e0958a8dfcc3713092485047c27a1711ac8d33b2987199bdb53798002bb1203841c52b7bc7f6629e71d6cbdb1b647b6fbe878dd117e3621a5477dc"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) (async) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) (async) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000040)=[0x20, 0x4, 0x40005002, 0xffff32eb, 0x2, 0xffffdff9, 0x2d7b, 0x401, 0x0, 0x3, 0x0, 0x3, 0xfe09, 0xd2, 0x80000002], 0x1, 0x4000003}) (async) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000078000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000004c000480480001800a0001006d61746368000000380002800e000100636f6e6e627974657300000008000240000000001c00030000"], 0x100}}, 0x0) (async) syz_usb_connect$uac1(0x0, 0xfe, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x1, 0x0, 0x8a, 0x40, 0x83}, 0x20, &(0x7f00000001c0)={0x5, 0xf, 0x20, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x6, 0xfc01}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x1e, 0xf2, 0xfd9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x2, 0x1, 0x3}]}, 0x6, [{0xd7, &(0x7f0000000200)=@string={0xd7, 0x3, "ffef3fe5e1b918d91fbe45e55d0299cbad736ba0a610296e178d82758e8ed71341807ba6d59661ace229161c06705061cc59700208b2d5d63bbb955e9dbe53f39160894998933fb852044def4fc37c2b7fb276e21dc862cbfdbdb7f430225270b557b2559bc9705722eaf1cfe8328218cad684327d2b94e0b34e248b2c137a65cce4cd01f04f0106cff86a033c188f39ff68d878fc43bab81f472e9e679c484cd8c4b6c2cdf1bd930d4ced0340da0cb3d959048d7ae6afbf250e0be6c492f7e5f56c7e748e844254d7d4e4664874bc4fbbf1740fb9"}}, {0x6f, &(0x7f0000000300)=@string={0x6f, 0x3, "52459ffd4fd96b283eb160d5ef25b35eff9b1818b8db44f6b5a7e38883137a5d531ab63c97be90f0b5b08ea6571d9f27c283742a6869e8906d4df3c5122d32b054d2fe64b3754390e23a6f02842c5dcedea79956f027d5c1e86a1609d2e05a3e2af01043b3aaab04aa86357de6"}}, {0xe5, &(0x7f0000000380)=@string={0xe5, 0x3, "40714ac23946d9dbeff497794047ee097b162434796b49bc9008b0eefa5bbcde466f315b6670f7d1371a9d0fb17fc4fb180cc25c64c45ce3f901ca7d71c0b9367c3a063b6c5d8320afaf9430950b34de2e8f4b4ea7dad4fae776acfcbb44e7eb25850ee02adaa8b03134f9800b185028d64f0661a0b5d8bbdca81e5b9098b3700e30544d27e735cd3e1ec4fc2dbad70378cf43435c92edda48008a4a50c1c25fe3ae981753913490ca28e23ba93a209e3b0dd5a64b6d0e849e93ab433f7025a3e958987a73dfe59d6662a23c6db8515cb90deb3a2aca29047956e06c4c119c18b9723d"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x420}}]}) (async) executing program 9: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c74, 0x40040, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1533, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'lo\x00'}) clock_gettime(0x17, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000080)={0x2b, 0x0, 0xffffffc5}) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40046302, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000240)={0x74, 0x0, 0x54}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000440)="2ef2dd0500800000260f8e1b0000000f23d00f21f835000000010f23f836362e6726af440f20c0350e000000440f22c0b805000000b900980000b805000000b96d0000000f01d90f01c9c4e27d933438410f79d226450f01cb660f013b", 0x5d}], 0x1, 0x0, 0x0, 0x0) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f00000000c0)={0x6}, 0x1) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fd3000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x2e, 0x0, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) r8 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r8, 0x40305652, &(0x7f0000000080)={0xffff, 0x3, 0x6, 0x489, 0x7, 0x1, 0x4}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) executing program 9: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x80, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000280), 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) executing program 7: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x80, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000280), 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) (fail_nth: 1) executing program 7: syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x80) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) setsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f00000000c0)="870846434a6781d4c2f7162861afce643bf97a9e76b6e6dd203b84c3c7ef96862be316eea573cf995c7a483f0891a64c9ce0af25707f545bb66fa7b2d557ad140b6ee2d2c76dc4dba4429ca9f2829b322825d516ac13c27d9ef49d03f06ff4e391594234efb2315fbffff0cbb7e1b17f1b342d199326eff644fd633f8a760551ad52fbccbf11738bec951ad2c1e56783a08a737cfb46f7152d3081ba0a8235c9eb2e70f243c4467b19cc43d2309adfa8252e809746729703e7698f23bb318eb81aac71405f1fb9fed1faf306fd49d057719a5c2ae215665e560e3a3b14d35dc59c7d5d79fb", 0xe5) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@empty, @in=@private=0xa010101, 0x4, 0x0, 0x0, 0x0, 0x2, 0x20}, {0x0, 0xffffffffffffffff, 0x6}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x41}, 0x4d2, 0x6c}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0xb}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400000}}, 0xe8) (async) r4 = epoll_create(0x7) (async) r5 = epoll_create1(0x0) r6 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180)) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000040)) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000003c0)) (async) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000080)={0x1008}) (async) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) syz_open_procfs(0x0, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r9, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) socket(0x22, 0x6, 0x9) (async) bind$can_raw(r9, &(0x7f0000000080)={0x1d, r10}, 0x10) (async) write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$audio1(0xffffffffffffff9c, &(0x7f00000001c0), 0x208000, 0x0) (async) ioctl$SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000200)) executing program 9: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xa0}}, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x80, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000280), 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0105b08, &(0x7f0000000040)) executing program 7: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000012140100000000060000000008004f000000000008004b001300000008000300010000000800150002000000080001"], 0x38}, 0x1, 0x0, 0x0, 0x4008814}, 0x8090) (fail_nth: 5) executing program 7: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x1c, 0x5e, 0x101, 0x0, 0xffffffff, "", [@typed={0xc, 0x10, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f0000000100)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001680)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b40000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c0002800500010000000000066e6186bf04000008000740000004001800068014000400"], 0xb4}, 0x1, 0x4000000}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000200)={0x1, @win={{0x81, 0x4, 0x42474752, 0x2}, 0x3, 0x5, 0x0, 0x3, 0x0, 0xfe}}) executing program 7: r0 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x86) fchdir(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x4000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb2020000) read$FUSE(r3, &(0x7f00000009c0)={0x2020}, 0x2020) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406d0493c20000000000fd09022400010000e8010904000001030000000921fd7f000122eb0009058103"], 0x0) syz_usb_disconnect(r4) r5 = syz_usb_connect(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db2870905"], 0x0) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r7, &(0x7f0000004f00)={0x0, 0x0, &(0x7f0000004e80)=[{&(0x7f00000014c0)={0x10, 0x1d, 0x1, 0x70bd27, 0x25dfdbfe}, 0x10}], 0x1, 0x0, 0x0, 0x8000}, 0x4008040) write$cgroup_subtree(r6, &(0x7f0000000100)={[{0x2b, 'net_prio'}, {0x2d, 'rlimit'}, {0x2b, 'pids'}, {0x2b, 'devices'}]}, 0x21) syz_usb_control_io(r5, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000040)={0x0, 0x7, 0x9, "c41d21447228b2d6c2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, r2}) (fail_nth: 1) executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r3, 0x6f6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r6, 0x1, 0x0, 0x1000000, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r8 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r10 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r10, 0x11b, 0x7, &(0x7f0000001040), &(0x7f0000001080)=0x26) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, r9}) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000040)) executing program 4: msgget(0x3, 0x136) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$nfc_llcp(r0, 0x118, 0x1, 0x0, 0x0) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) (async) sendmmsg$inet(r1, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7bebc905a984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee38", 0xf4}, {&(0x7f0000000cc0)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8009900000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000000000000000000000000000c7aa5035897b20a6c23f1fc4af2990c07f6d4b985a3dd9740bd33848702930cd523b91f0e15f2a4d81f18b", 0x12e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000e40)="31fdffffffffffffff74098b2e5e55a1828636f60fbfcfdac56c75f1687f0c562874230300d69f117e766bdbad0c2171ad6227e1173afcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbb9de494c9721d9bf80f2f75c3b4bea78e385ea382294882839a22674037b89108a1420e33eb9be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d889c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a48793d7368b992a889f51854c7b63c1808f3125266538de14f70d50bc538b280501c0dc939a30878c909ff313bbdc541643f1af579f8b654da0115e0700000096362f98cadcef093d5984160442728903d659ba4bf7ce6eb88419c3e0d74eb3781eca2529bac17d7f9f2a75fcacfc6c9e926b4a26847a48f62c95faa03fc5174544451a7b3aa2448ca7ce877a01cee5efa9258055048b69722784ec8d7b23e683c07c1564ef0fc20f74e581f2162aa5a24e05c9e3221d1d1f7b68", 0x185}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9", 0xb2}], 0x1}}], 0x3, 0x2090) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2000003, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000005480)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x18, 0x7, r1, 0x0, &(0x7f0000004d00)={&(0x7f00000002c0)=@isdn, 0x80, &(0x7f0000004c40)=[{&(0x7f0000000700)=""/170, 0xaa}, {&(0x7f00000007c0)=""/232, 0xf5}, {&(0x7f00000008c0)=""/209, 0xd1}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/4096, 0x1000}, {&(0x7f0000004b80)=""/165, 0xa5}], 0x6, &(0x7f0000004cc0)=""/58, 0x53}, 0x0, 0x10123, 0x1, {0x3}}) (async) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000046000900000000000000000002000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000044) (async, rerun: 32) socket(0x40000000015, 0x5, 0x0) (rerun: 32) r7 = socket(0x29, 0x80000, 0xe) setsockopt$ALG_SET_AEAD_AUTHSIZE(r7, 0x6a, 0x5, 0x20000000, 0x3) (async, rerun: 64) socket(0x22, 0x5, 0x0) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async, rerun: 64) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) getsockopt$sock_cred(r8, 0x1, 0x11, 0x0, &(0x7f0000000040)) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002"], 0x20}}, 0x0) (async) r10 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r10, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r10, 0x7a0, &(0x7f0000000000)={@my=0x0}) executing program 9: r0 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000300)={0x10}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000480)={0xa, 0x1, 0x7}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0xe5c}}, './file0\x00'}) getsockopt$packet_int(r4, 0x107, 0x9, &(0x7f0000000040), &(0x7f0000000080)=0x4) executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8840) r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000780)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000080)="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", 0x559, r1) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="021800001c000000000000000000000005000500000000000a004e2200000400ff0100000000000000000000000000010a00000000000000080012000000000000000000feffffff060000000000000000000000000000007f0000010000000000000000000000007f00000100000000000000000000000005000600000000000a004e240000000300000000000000000000ff1900000000000a004e20fffffffcfc020000000000000000000000000001020000000a004e2200007bfffc010000000000000000000000000001c0ffffff00"/224], 0xe0}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000040)={0xb, 0x1, 0xb, 0x8, "77f15ef6983d2e9e4cea7f3566bf701fa00d6a39ad4b3eb72544d4c1ba33b030"}) executing program 4: syz_usb_connect(0x5, 0x35, &(0x7f0000000b00)={{0x12, 0x1, 0x201, 0xd4, 0xc1, 0xd6, 0x20, 0x1c40, 0x534, 0x2724, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x23, 0x1, 0xa5, 0x8, 0x80, 0xb7, "", [{{0x9, 0x4, 0xa2, 0x5, 0x1, 0x47, 0xee, 0xb9, 0x9, [], [{{0x9, 0x5, 0x6, 0x0, 0x10, 0x8, 0x8, 0x40, [@generic={0x8, 0xb, "04c541edc61d"}]}}]}}]}}]}}, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x5, 0x35, &(0x7f0000000b00)={{0x12, 0x1, 0x201, 0xd4, 0xc1, 0xd6, 0x20, 0x1c40, 0x534, 0x2724, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x23, 0x1, 0xa5, 0x8, 0x80, 0xb7, "", [{{0x9, 0x4, 0xa2, 0x5, 0x1, 0x47, 0xee, 0xb9, 0x9, [], [{{0x9, 0x5, 0x6, 0x0, 0x10, 0x8, 0x8, 0x40, [@generic={0x8, 0xb, "04c541edc61d"}]}}]}}]}}]}}, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0)=0x1000, 0x4) r2 = syz_open_dev$vim2m(&(0x7f0000001580), 0x8b2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x24, 0x1, 0x80, "3a8e2ba74088c20500ca1000000000000400b2b679d200", 0x41564e57}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x24, 0x1, 0x80, "3a8e2ba74088c20500ca1000000000000400b2b679d200", 0x41564e57}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000200)="10031200e0ff02000203000000000000005ded2735f4db171088aa96862ccf5de98480d1e24037215786d82ea13bb171f5b7efa975a72d0713bde6012fd67a71a81fc9c6d168ab9627dbe571d2386870c98e91672a99519c272fc7ceb41e54ece51ffd51b4d2d4d5905b0598eccfe0ad0761bdb137bd5a66774ef57866bfc8d59e5f7f09d0a03b96cb11563eced5fc78731c2c95115db1d5d654010e0262e7f4d189d15cf722015b8e284b5ef466ef8003842f06a30121888e5842dd76b8f38c7d49a4ee0e340000000000", 0xfffffebf, 0x4000040, &(0x7f0000000140)={0x11, 0x8, r3}, 0x14) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000100)=0xffffffffffffffff) (async) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000100)=0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0)) r4 = socket(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000080)=0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r5, @ANYBLOB="07b0cf7e2c89cc"], 0x0) clock_getres(0xa, 0x0) fcntl$getflags(r0, 0x3) executing program 9: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r3, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x2001, 0x0) sendmsg$802154_dgram(r3, &(0x7f0000002180)={&(0x7f0000000100)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f00000021c0)={0x0}, 0x7, 0x0, 0x0, 0x200040c6}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x51, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x202}, {0xffff, 0x5, 0x1, 0x46, 0x2, 0x101}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 7) program crashed: INFO: task hung in nfsd_nl_cache_flush_doit bisect: bisecting 66 programs bisect: split chunks (needed=false): <66> bisect: split chunk #0 of len 66 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=6m11s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [22, 23, 9, 12, 30, 30, 14, 4, 1, 8, 2, 2, 6, 16, 11, 13, 22, 27, 22, 27, 20, 30, 8, 12, 14, 5, 26, 21, 20, 7, 7, 29, 9, 2, 10, 20, 5, 21, 30, 9, 8, 26, 13, 3] detailed listing: executing program 2: mknod$loop(&(0x7f000000db40)='./file0\x00', 0x1000, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', &(0x7f0000001440)={0x122240, 0x10b, 0x7}, 0x18) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) write(r5, &(0x7f0000000800)='- 1 0 0', 0x7) write$FUSE_ENTRY(r1, &(0x7f0000000140)={0x90, 0x0, r2, {0x20000000000007, 0x0, 0x80006, 0xfa7, 0x0, 0xfffff801, {0x2, 0x0, 0x20e, 0x6, 0x10000, 0x7, 0x77ff, 0x9, 0x4, 0x0, 0x7, r3, r4, 0x5, 0x1000}}}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan1\x00'}) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000001140)={0x8, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="08003a115d923a3d", 0x8}], 0x1}, 0x40408d0) landlock_restrict_self(0xffffffffffffffff, 0xc) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r7, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000001900)=""/4080, 0xff0}, {&(0x7f0000000400)=""/65, 0x41}], 0x3}, 0xb}, {{0x0, 0x0, 0x0}, 0x69b9}], 0x2, 0x42, 0x0) recvmsg(r7, &(0x7f0000004180)={0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000000500)=""/225, 0xe1}, {&(0x7f0000000600)=""/210, 0xd2}, {&(0x7f0000000700)=""/48, 0x30}, {&(0x7f0000000740)=""/78, 0x4e}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000003fc0)=""/242, 0xf2}], 0x6}, 0x60) r8 = socket(0x10, 0x803, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001d80)="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", 0x5f5}], 0x1}, 0x84) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) executing program 2: syz_usb_connect$uac3(0x0, 0xb4, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000401e0448304000010203010902a200030101c010080b0001010130070904000000010130000a2401103e00070000000d240704774cdc6212e694c80014240203050203030500000009008b00d701950013240301020200090401", @ANYBLOB="f8cedf950c8e6366"], 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002fc0), 0x242002, 0x0) fcntl$setstatus(r0, 0x404, 0x26c00) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) splice(r0, &(0x7f0000001740), r0, &(0x7f0000001780)=0x6, 0xbc8fc53, 0x0) r4 = syz_io_uring_setup(0x33c3, &(0x7f0000000000)={0x0, 0x256, 0x4000, 0x1, 0x2d5}, &(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) bind$alg(r0, &(0x7f00000016c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0xa827, 0x8, 0x3, 0x36c, 0x0, r4}, &(0x7f0000000240)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x22f1, 0x800, 0x2, 0xa3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x48c, 0x40, 0x0, 0x12c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa938, 0x200, 0x0, 0x39f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x40a3, 0x0, 0x3, 0x1b6, 0x0, r2}, 0xffffffffffffffff, 0x0, 0x0, 0x0}], 0x4, &(0x7f00000014c0)={0x2e, 0x30, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xd}, 0x0, 0x0, '\x00', {0x2, 0xd11, 0x0, &(0x7f00000004c0)=@buf_512="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"}}, &(0x7f0000001540)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x24, 0xf, 0x6, 0x201, 0x0, 0x0, {0xe, 0x0, 0x7}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x800}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x10) r8 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000040)=0x40) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001580), 0x400000, 0x0) r10 = gettid() syz_ublk_add_dev(r0, r5, 0x0, r6, &(0x7f0000001600)={0x2e, 0x8, 0x0, r9, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x210a, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000015c0)=@new_dev={0x2, 0x84, 0x0, 0x0, 0x1000, 0xffffffff, r10, 0x0, 0xa0}}}, &(0x7f0000001680)) r11 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi1\x00', 0x2, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r11, 0x2000) close(r11) executing program 2: mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) syz_clone(0x10000, &(0x7f0000000480)="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", 0x1000, &(0x7f0000001480), &(0x7f00000014c0), &(0x7f0000001500)="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") mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2082, 0x0) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1ac}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$input_event(r2, &(0x7f0000000180)={{0x77359400}, 0x11, 0x178}, 0x18) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x5}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x10) (async) socket(0x1a, 0x3, 0xf) (async) syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x41, 0x17, 0x99, 0x20, 0x4b4, 0x1002, 0x6f78, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c, 0x1, 0x40, 0x7, 0x40, 0x40, "", [{{0x9, 0x4, 0x4a, 0xc, 0x0, 0xba, 0x54, 0x77, 0x7, [@uac_control={{0xa, 0x24, 0x1, 0x1, 0xa}}]}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x1c) (async) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c24020659ce8cfffb140106760824f2b3c887f9227747a98f5c037820e0133364c808b55b8508f251b3daccb1d7e4a9d3e9b6bd815fb1b9d82df2b253cd95c5c8455bdd44b6ad03f1f05da0b341bdd1844d365f0319009d57a57b12b0d745dacddba5c105959c94caaf", @ANYRES8=r1, @ANYBLOB="07b0"], 0x0) executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) sendfile(r0, r0, 0x0, 0x9) mkdir(&(0x7f0000000100)='./debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./debugfs\x00', &(0x7f00000001c0)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debugfs/ubifs/chk_index\x00', 0x2, 0x0) pread64(r1, 0x0, 0x0, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[], 0x44}}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000000006010200000000000000000500000215d6078005000100070000007cb05b4f7d72e9d5665ff5c862d2c6deabca923ea18d2db9ae6e45907a58a0c9852b6ee97c2fa2f5e043dafe9fc453e2cedece57332f80bea274c5f476cf2e7c0dcf9a5fff38a06942a01666956787f901"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000000280)={0x2, 0x0, [{0x1, 0x1, 0x4, 0x6000, 0x4, 0x0, 0x3ff}, {0x1, 0x10, 0x3, 0x81, 0x7, 0x9d, 0x4f6}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x1000000, 0x0, 0xffffffffffffffff) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) executing program 35: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) sendfile(r0, r0, 0x0, 0x9) mkdir(&(0x7f0000000100)='./debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./debugfs\x00', &(0x7f00000001c0)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debugfs/ubifs/chk_index\x00', 0x2, 0x0) pread64(r1, 0x0, 0x0, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[], 0x44}}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000000006010200000000000000000500000215d6078005000100070000007cb05b4f7d72e9d5665ff5c862d2c6deabca923ea18d2db9ae6e45907a58a0c9852b6ee97c2fa2f5e043dafe9fc453e2cedece57332f80bea274c5f476cf2e7c0dcf9a5fff38a06942a01666956787f901"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000000280)={0x2, 0x0, [{0x1, 0x1, 0x4, 0x6000, 0x4, 0x0, 0x3ff}, {0x1, 0x10, 0x3, 0x81, 0x7, 0x9d, 0x4f6}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x1000000, 0x0, 0xffffffffffffffff) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) executing program 6: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='system.sockprotoname\x00', 0x0, 0x0, 0x2) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20980, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x85, 0x6, 0x0, 0x0, 0x10003, 0x3d, 0x400200cc4, 0xffd, 0x4, 0x9, 0x8001, 0x4, 0x2, 0xfffffffffffffffc, 0x6a, 0x8d], 0x60000, 0x2011c0}) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xc4, 0x1, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x36c9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x419}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010102}}}]}, @CTA_TUPLE_ORIG={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x14, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0xc, 0x3}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x8}]}}, @CTA_LABELS_MASK={0x8, 0x17, [0x401]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x81}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4081}, 0x20000800) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x2480) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0x80045500, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 6: prlimit64(0x0, 0x6, &(0x7f0000000040)={0x0, 0x1}, 0x0) syz_clone3(&(0x7f0000000800)={0x200000, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = fanotify_init(0x4000, 0x2) fanotify_mark(r0, 0x105, 0x9971, 0xffffffffffffffff, 0x0) executing program 6: request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0xfffffffffffffffe) (fail_nth: 18) executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0, 0x4000}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 6: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x601, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000810) executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCMBIS(r0, 0x5416, 0x0) (fail_nth: 2) executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000300), 0x22242, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x3, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz0\x00', 0x0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0), 0x2) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000240)={0x4, 0x20, 0x18, 0x1, 0x100, &(0x7f0000001100)="387ed7626d850509a2d6c1aa38f15cd0c234cb226db671261fff7ce9c555f18dafae3530db6dd493f2a3cc88731b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef494c89092883b902a41cd75387ef6f7bc7d461d5e665f398ff95596dc94ec97003c7e6f3c82fbd8de6e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a750ecb3421143c5c4ded0f06affc524dcf3418272619b6a952db5bc96141b26c54d13c7a5416287a3b6f7aadf50bc549974b6401a19cdb130282b955582efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8ddbf5e20d604413ed2ddf9bcbf881caf811852806175d638909f6234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa0284a3e90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def9122c0d2c1e558dc6586958a283762386ecf369274e43003a0fdff59ea515eb44504901ef0d00baa91c10a8e44a7e58b4f8c6a1c6b9b5ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc5092548feaef72c5d42cece59181fcb5bad8c24bd9f8f78dd85b82831325501e80d899e9252f99d3a266639438ac5252d9bccff4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2b046c6eecc7fa18914beb66ac9e519bd333b30d3ce2f50dddeea3447aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b68986af3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9000400002f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d01000100df6f40a80ace2bb8a2aad3b0c66915927db4233181943d88c0c76d5969e2043db5bd77fd600000013139929cefec965c0c761785a4d23332ba1f0875e3146afef5b20cc306d3ecee65944fe9829ed0c3f6bb2fd81bc31152538db50f47dc38ba908a0d808687e478a609fe0daa02d4e9c618b99266e7f2e98597e2813e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d472dd0e1aa1ab704782b41bde141f99c4894ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e87dde71929f918b98c413923167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d2195ff9c6320c85bddc42915e4f3a5db642447bc2195a3d64e04c9ecd1c313c08e29a814bd8fed1ab6d2846c73345962895d289ac718aacac2e0e32b75ce814731c542091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00"}) executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-256-x86\x00'}, 0x58) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r2 = dup2(r1, r1) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000000)={0x2, 0x2, 0xd98, 0x13, "48e4ed7da8a5793d14be0e92e080922245a750555f268709d9ce00"}) (async) ioctl$TCFLSH(r2, 0x540b, 0x1) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000005c0)=0x9, 0xfc17) (async) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f00000000c0)={0x0, 0xffff, 0x0, 0x0, 0x0}) ptrace(0x8, r4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e21, 0x0, @empty, 0x2}}, 0x101, 0x5, 0x9, 0x3, 0x42, 0x9, 0xb1}, 0x0) (async) landlock_create_ruleset(0x0, 0x0, 0x2) (async) read$eventfd(r2, &(0x7f00000001c0), 0x8) (async) sendto$packet(r3, &(0x7f00000002c0)="05030500d3fc030000004788800509101128", 0x100f, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r3, 0x8008f511, &(0x7f0000000180)) executing program 3: r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x37, 0xd7, 0x81, 0x10, 0x9022, 0xd632, 0xd781, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xce, 0x9, 0x10, 0x2, "", [{{0x9, 0x4, 0x42, 0x7, 0x0, 0xd6, 0x5f, 0x3, 0xff}}]}}]}}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$lan78xx(r0, &(0x7f0000000d40)={0x14, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x30, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000300)=""/230, 0xe6}], 0x1) syz_usb_connect$midi(0x5, 0x0, 0x0, 0x0) executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) fchown(r0, 0xee00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x112) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000200)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/v4_end_grace\x00', 0x1, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) r3 = syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000177000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYRES8=r2], 0x0) sendmsg(r0, &(0x7f0000002880)={&(0x7f0000000140)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0xfffffffffffffe95, &(0x7f0000000500)=[{&(0x7f0000000280)="e6b62a02b72ccf28f0aa6cf3b6003c6296fa2d90c1def88dac9d372277a81d393dcda1d1f099cf965317af046d16886807010067566df4cb6b0db144adb266dcd3e661a0b6032ea74bd97f85355d9b9e195fb5dfc734fa3ac43d52a3ee3c68ab8b96d1139a7d10ef59ca9c14bed0f26332cd2ef2a5d027772e972af17ded53f128c4e1986b5e1180a528ae046c7cbd8a571ed7f8ca5baf44382ccdd3ed4c87b27abd3459", 0xa4}, {&(0x7f0000000400)="2a5a34f0ceee0f1fecde5cec66e66d529e01fb30b3d159b96b7b759b097504022cc8e7cbd8036bb186e8a79ae8b4c61242d195048dc6fe5443797818b7539f9cda21a45530fab7bb3776358317e13636a4acd01cc1061ec3951f0f310fbf69d60c5f9f43dc4adcfde1e34d3288609152a8053eeed496bebd5c25201cd9fb66e3678077e3d18286803e6dc9fa9303a819ead135c1d560bef8ab4f4bfb223da850ac82aa55d1ae3437b2abc9cffcc2f336c10f81860964255710bf87830e0cfdead8a0bea6892dc840bc32d534ef86a1efb6362b0a8c85da7b9c536da7fbc12d4737383ba48e07eacd", 0x5}], 0x2, &(0x7f0000000540)=ANY=[@ANYRESDEC=r3], 0x2328}, 0x20008890) r4 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000040), &(0x7f00000001c0)=0x4) write(r2, &(0x7f00000000c0)="2722963e262c5e", 0x4) executing program 3: mknod$loop(&(0x7f000000db40)='./file0\x00', 0x1000, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', &(0x7f0000001440)={0x122240, 0x10b, 0x7}, 0x18) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) write(r5, &(0x7f0000000800)='- 1 0 0', 0x7) write$FUSE_ENTRY(r1, &(0x7f0000000140)={0x90, 0x0, r2, {0x20000000000007, 0x0, 0x80006, 0xfa7, 0x0, 0xfffff801, {0x2, 0x0, 0x20e, 0x6, 0x10000, 0x7, 0x77ff, 0x9, 0x4, 0x0, 0x7, r3, r4, 0x5, 0x1000}}}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan1\x00'}) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000001140)={0x8, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="08003a115d923a3d", 0x8}], 0x1}, 0x40408d0) landlock_restrict_self(0xffffffffffffffff, 0xc) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r7, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000001900)=""/4080, 0xff0}, {&(0x7f0000000400)=""/65, 0x41}], 0x3}, 0xb}, {{0x0, 0x0, 0x0}, 0x69b9}], 0x2, 0x42, 0x0) recvmsg(r7, &(0x7f0000004180)={0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000000500)=""/225, 0xe1}, {&(0x7f0000000600)=""/210, 0xd2}, {&(0x7f0000000700)=""/48, 0x30}, {&(0x7f0000000740)=""/78, 0x4e}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000003fc0)=""/242, 0xf2}], 0x6}, 0x60) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/102, 0x38a}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f00000023c0)=""/4098, 0x1e1}, {&(0x7f00000000c0)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x5b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0xa}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000880)=""/207, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000000000)={0x77359400}) executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) close(r0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) r2 = timerfd_create(0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioprio_set$pid(0x2, 0x0, 0x0) getpid() quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x6, 0x81, 0xffffffff, 0x2241d13d}) timerfd_settime(r2, 0x3, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'syztnl1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) chdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00') nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) close(0x3) executing program 36: mknod$loop(&(0x7f000000db40)='./file0\x00', 0x1000, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', &(0x7f0000001440)={0x122240, 0x10b, 0x7}, 0x18) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) write(r5, &(0x7f0000000800)='- 1 0 0', 0x7) write$FUSE_ENTRY(r1, &(0x7f0000000140)={0x90, 0x0, r2, {0x20000000000007, 0x0, 0x80006, 0xfa7, 0x0, 0xfffff801, {0x2, 0x0, 0x20e, 0x6, 0x10000, 0x7, 0x77ff, 0x9, 0x4, 0x0, 0x7, r3, r4, 0x5, 0x1000}}}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan1\x00'}) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000001140)={0x8, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="08003a115d923a3d", 0x8}], 0x1}, 0x40408d0) landlock_restrict_self(0xffffffffffffffff, 0xc) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r7, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000001900)=""/4080, 0xff0}, {&(0x7f0000000400)=""/65, 0x41}], 0x3}, 0xb}, {{0x0, 0x0, 0x0}, 0x69b9}], 0x2, 0x42, 0x0) recvmsg(r7, &(0x7f0000004180)={0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000000500)=""/225, 0xe1}, {&(0x7f0000000600)=""/210, 0xd2}, {&(0x7f0000000700)=""/48, 0x30}, {&(0x7f0000000740)=""/78, 0x4e}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000003fc0)=""/242, 0xf2}], 0x6}, 0x60) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/102, 0x38a}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f00000023c0)=""/4098, 0x1e1}, {&(0x7f00000000c0)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x5b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0xa}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000880)=""/207, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000000000)={0x77359400}) executing program 37: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) close(r0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) r2 = timerfd_create(0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioprio_set$pid(0x2, 0x0, 0x0) getpid() quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x6, 0x81, 0xffffffff, 0x2241d13d}) timerfd_settime(r2, 0x3, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'syztnl1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) chdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00') nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) close(0x3) executing program 8: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f00000000c0)=0x7b, 0x4) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) readv(r1, &(0x7f0000000a80)=[{&(0x7f00000009c0)=""/65, 0x41}], 0x1) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000003d00)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r6}, @ptr={0x70742a85, 0x80000, &(0x7f0000000440)=""/210, 0xd2, 0x800001, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x50, 0x1, 0x2}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time}], 0x38) write(r0, &(0x7f0000000100)='~}', 0x2) executing program 8: r0 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x2) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc45}) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) r3 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x6e0, 0x0, 0x3d}]}) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000340), 0x20000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x100000009, 0xfffffffffffffffd, 0x71, 0x1000, 0x49d1, 0x2d7, 0x8000000000000000, 0x8000000000000000, 0x3, 0x0, 0x10000000004, 0x401, 0x2, 0x3ff], 0xeeee8000, 0x284e97}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f00000002c0)={0x48}) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) recvfrom$llc(r7, &(0x7f0000000100)=""/165, 0xa5, 0x1, 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1f00, 0x1, 0x13, r0, 0x81000000) syz_open_dev$vim2m(&(0x7f00000000c0), 0x20006, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'ip6_vti0\x00'}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x83}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x118}}, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r11, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x400000f5, 0x0, 0xfb}]}) executing program 8: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/rfkill/rfkill0/state\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)="3bbbcdfb", 0x4) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a94ea0609eebd008300000000"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x9, 0x6, &(0x7f0000000000)='BBBBBB') executing program 8: r0 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) ioctl$MTDFILEMODE(r0, 0x4d13, 0x1) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0xfdef) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x2, 0x2d7, 0x8000000000000000, 0x8000000000000000, 0x5, 0x0, 0x4, 0x401, 0x2, 0x5, 0x8d], 0xeeee8000, 0x284e97}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)={0x9, 0x0, [{0x8d1}, {0x331, 0x0, 0x1}, {0x860, 0x0, 0x4}, {0x119, 0x0, 0xd}, {0x2f7, 0x0, 0x5}, {0x204, 0x0, 0x8}, {0x388, 0x0, 0x8}, {0x400000b6, 0x0, 0x8}, {0x630, 0x0, 0x3}]}) executing program 8: mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000500)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, 0x0, 0x90) (async) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800}]}, &(0x7f0000000200)=0x10) (async) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, 0x0, 0x0) (async) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001ec0), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000100)={0x5, {0x521, 0x1, 0x7, 0x4e0}, {0x6, 0x7, 0x0, 0x1}, {0xffffffe7, 0x3}}) executing program 8: openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0x7fffffff}}], [], 0x6b}}) syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c0001020301090229000100000000090400000002020100050200000005"], 0x0) executing program 9: r0 = syz_open_dev$vbi(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000001c0)={0x0, 0x1, 0x10, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90e, 0x6, '\x00', @p_u32=0x0}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="68fa140000002d000b00fdffffff00000000090000000457cedd575eda2d1ebc87551cefb27728412ab5647e7be52804c29a44e8274425fcbee123a2e0958a8dfcc3713092485047c27a1711ac8d33b2987199bdb53798002bb1203841c52b7bc7f6629e71d6cbdb1b647b6fbe878dd117e3621a5477dc"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000040)=[0x20, 0x4, 0x40005002, 0xffff32eb, 0x2, 0xffffdff9, 0x2d7b, 0x401, 0x0, 0x3, 0x0, 0x3, 0xfe09, 0xd2, 0x80000002], 0x1, 0x4000003}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000078000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000004c000480480001800a0001006d61746368000000380002800e000100636f6e6e627974657300000008000240000000001c00030000"], 0x100}}, 0x0) syz_usb_connect$uac1(0x0, 0xfe, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x1, 0x0, 0x8a, 0x40, 0x83}, 0x20, &(0x7f00000001c0)={0x5, 0xf, 0x20, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x6, 0xfc01}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x1e, 0xf2, 0xfd9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x2, 0x1, 0x3}]}, 0x6, [{0xd7, &(0x7f0000000200)=@string={0xd7, 0x3, "ffef3fe5e1b918d91fbe45e55d0299cbad736ba0a610296e178d82758e8ed71341807ba6d59661ace229161c06705061cc59700208b2d5d63bbb955e9dbe53f39160894998933fb852044def4fc37c2b7fb276e21dc862cbfdbdb7f430225270b557b2559bc9705722eaf1cfe8328218cad684327d2b94e0b34e248b2c137a65cce4cd01f04f0106cff86a033c188f39ff68d878fc43bab81f472e9e679c484cd8c4b6c2cdf1bd930d4ced0340da0cb3d959048d7ae6afbf250e0be6c492f7e5f56c7e748e844254d7d4e4664874bc4fbbf1740fb9"}}, {0x6f, &(0x7f0000000300)=@string={0x6f, 0x3, "52459ffd4fd96b283eb160d5ef25b35eff9b1818b8db44f6b5a7e38883137a5d531ab63c97be90f0b5b08ea6571d9f27c283742a6869e8906d4df3c5122d32b054d2fe64b3754390e23a6f02842c5dcedea79956f027d5c1e86a1609d2e05a3e2af01043b3aaab04aa86357de6"}}, {0xe5, &(0x7f0000000380)=@string={0xe5, 0x3, "40714ac23946d9dbeff497794047ee097b162434796b49bc9008b0eefa5bbcde466f315b6670f7d1371a9d0fb17fc4fb180cc25c64c45ce3f901ca7d71c0b9367c3a063b6c5d8320afaf9430950b34de2e8f4b4ea7dad4fae776acfcbb44e7eb25850ee02adaa8b03134f9800b185028d64f0661a0b5d8bbdca81e5b9098b3700e30544d27e735cd3e1ec4fc2dbad70378cf43435c92edda48008a4a50c1c25fe3ae981753913490ca28e23ba93a209e3b0dd5a64b6d0e849e93ab433f7025a3e958987a73dfe59d6662a23c6db8515cb90deb3a2aca29047956e06c4c119c18b9723d"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x420}}]}) syz_open_dev$vbi(&(0x7f0000000380), 0x0, 0x2) (async) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000001c0)={0x0, 0x1, 0x10, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90e, 0x6, '\x00', @p_u32=0x0}}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="68fa140000002d000b00fdffffff00000000090000000457cedd575eda2d1ebc87551cefb27728412ab5647e7be52804c29a44e8274425fcbee123a2e0958a8dfcc3713092485047c27a1711ac8d33b2987199bdb53798002bb1203841c52b7bc7f6629e71d6cbdb1b647b6fbe878dd117e3621a5477dc"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) (async) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) (async) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000040)=[0x20, 0x4, 0x40005002, 0xffff32eb, 0x2, 0xffffdff9, 0x2d7b, 0x401, 0x0, 0x3, 0x0, 0x3, 0xfe09, 0xd2, 0x80000002], 0x1, 0x4000003}) (async) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000078000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000004c000480480001800a0001006d61746368000000380002800e000100636f6e6e627974657300000008000240000000001c00030000"], 0x100}}, 0x0) (async) syz_usb_connect$uac1(0x0, 0xfe, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x1, 0x0, 0x8a, 0x40, 0x83}, 0x20, &(0x7f00000001c0)={0x5, 0xf, 0x20, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x6, 0xfc01}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x1e, 0xf2, 0xfd9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x2, 0x1, 0x3}]}, 0x6, [{0xd7, &(0x7f0000000200)=@string={0xd7, 0x3, "ffef3fe5e1b918d91fbe45e55d0299cbad736ba0a610296e178d82758e8ed71341807ba6d59661ace229161c06705061cc59700208b2d5d63bbb955e9dbe53f39160894998933fb852044def4fc37c2b7fb276e21dc862cbfdbdb7f430225270b557b2559bc9705722eaf1cfe8328218cad684327d2b94e0b34e248b2c137a65cce4cd01f04f0106cff86a033c188f39ff68d878fc43bab81f472e9e679c484cd8c4b6c2cdf1bd930d4ced0340da0cb3d959048d7ae6afbf250e0be6c492f7e5f56c7e748e844254d7d4e4664874bc4fbbf1740fb9"}}, {0x6f, &(0x7f0000000300)=@string={0x6f, 0x3, "52459ffd4fd96b283eb160d5ef25b35eff9b1818b8db44f6b5a7e38883137a5d531ab63c97be90f0b5b08ea6571d9f27c283742a6869e8906d4df3c5122d32b054d2fe64b3754390e23a6f02842c5dcedea79956f027d5c1e86a1609d2e05a3e2af01043b3aaab04aa86357de6"}}, {0xe5, &(0x7f0000000380)=@string={0xe5, 0x3, "40714ac23946d9dbeff497794047ee097b162434796b49bc9008b0eefa5bbcde466f315b6670f7d1371a9d0fb17fc4fb180cc25c64c45ce3f901ca7d71c0b9367c3a063b6c5d8320afaf9430950b34de2e8f4b4ea7dad4fae776acfcbb44e7eb25850ee02adaa8b03134f9800b185028d64f0661a0b5d8bbdca81e5b9098b3700e30544d27e735cd3e1ec4fc2dbad70378cf43435c92edda48008a4a50c1c25fe3ae981753913490ca28e23ba93a209e3b0dd5a64b6d0e849e93ab433f7025a3e958987a73dfe59d6662a23c6db8515cb90deb3a2aca29047956e06c4c119c18b9723d"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x420}}]}) (async) executing program 9: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c74, 0x40040, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1533, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'lo\x00'}) clock_gettime(0x17, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000080)={0x2b, 0x0, 0xffffffc5}) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40046302, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000240)={0x74, 0x0, 0x54}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000440)="2ef2dd0500800000260f8e1b0000000f23d00f21f835000000010f23f836362e6726af440f20c0350e000000440f22c0b805000000b900980000b805000000b96d0000000f01d90f01c9c4e27d933438410f79d226450f01cb660f013b", 0x5d}], 0x1, 0x0, 0x0, 0x0) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f00000000c0)={0x6}, 0x1) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fd3000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x2e, 0x0, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) r8 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r8, 0x40305652, &(0x7f0000000080)={0xffff, 0x3, 0x6, 0x489, 0x7, 0x1, 0x4}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) executing program 9: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x80, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000280), 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) executing program 7: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x80, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000280), 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) (fail_nth: 1) executing program 7: syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x80) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) setsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f00000000c0)="870846434a6781d4c2f7162861afce643bf97a9e76b6e6dd203b84c3c7ef96862be316eea573cf995c7a483f0891a64c9ce0af25707f545bb66fa7b2d557ad140b6ee2d2c76dc4dba4429ca9f2829b322825d516ac13c27d9ef49d03f06ff4e391594234efb2315fbffff0cbb7e1b17f1b342d199326eff644fd633f8a760551ad52fbccbf11738bec951ad2c1e56783a08a737cfb46f7152d3081ba0a8235c9eb2e70f243c4467b19cc43d2309adfa8252e809746729703e7698f23bb318eb81aac71405f1fb9fed1faf306fd49d057719a5c2ae215665e560e3a3b14d35dc59c7d5d79fb", 0xe5) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@empty, @in=@private=0xa010101, 0x4, 0x0, 0x0, 0x0, 0x2, 0x20}, {0x0, 0xffffffffffffffff, 0x6}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x41}, 0x4d2, 0x6c}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0xb}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400000}}, 0xe8) (async) r4 = epoll_create(0x7) (async) r5 = epoll_create1(0x0) r6 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180)) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000040)) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000003c0)) (async) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000080)={0x1008}) (async) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) syz_open_procfs(0x0, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r9, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) socket(0x22, 0x6, 0x9) (async) bind$can_raw(r9, &(0x7f0000000080)={0x1d, r10}, 0x10) (async) write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$audio1(0xffffffffffffff9c, &(0x7f00000001c0), 0x208000, 0x0) (async) ioctl$SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000200)) executing program 9: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xa0}}, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x80, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000280), 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0105b08, &(0x7f0000000040)) executing program 7: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000012140100000000060000000008004f000000000008004b001300000008000300010000000800150002000000080001"], 0x38}, 0x1, 0x0, 0x0, 0x4008814}, 0x8090) (fail_nth: 5) executing program 7: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x1c, 0x5e, 0x101, 0x0, 0xffffffff, "", [@typed={0xc, 0x10, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f0000000100)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001680)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b40000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c0002800500010000000000066e6186bf04000008000740000004001800068014000400"], 0xb4}, 0x1, 0x4000000}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000200)={0x1, @win={{0x81, 0x4, 0x42474752, 0x2}, 0x3, 0x5, 0x0, 0x3, 0x0, 0xfe}}) executing program 7: r0 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x86) fchdir(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x4000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb2020000) read$FUSE(r3, &(0x7f00000009c0)={0x2020}, 0x2020) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406d0493c20000000000fd09022400010000e8010904000001030000000921fd7f000122eb0009058103"], 0x0) syz_usb_disconnect(r4) r5 = syz_usb_connect(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db2870905"], 0x0) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r7, &(0x7f0000004f00)={0x0, 0x0, &(0x7f0000004e80)=[{&(0x7f00000014c0)={0x10, 0x1d, 0x1, 0x70bd27, 0x25dfdbfe}, 0x10}], 0x1, 0x0, 0x0, 0x8000}, 0x4008040) write$cgroup_subtree(r6, &(0x7f0000000100)={[{0x2b, 'net_prio'}, {0x2d, 'rlimit'}, {0x2b, 'pids'}, {0x2b, 'devices'}]}, 0x21) syz_usb_control_io(r5, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000040)={0x0, 0x7, 0x9, "c41d21447228b2d6c2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, r2}) (fail_nth: 1) executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r3, 0x6f6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r6, 0x1, 0x0, 0x1000000, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r8 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r10 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r10, 0x11b, 0x7, &(0x7f0000001040), &(0x7f0000001080)=0x26) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, r9}) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000040)) executing program 4: msgget(0x3, 0x136) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$nfc_llcp(r0, 0x118, 0x1, 0x0, 0x0) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) (async) sendmmsg$inet(r1, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7bebc905a984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee38", 0xf4}, {&(0x7f0000000cc0)="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", 0x12e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000e40)="31fdffffffffffffff74098b2e5e55a1828636f60fbfcfdac56c75f1687f0c562874230300d69f117e766bdbad0c2171ad6227e1173afcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbb9de494c9721d9bf80f2f75c3b4bea78e385ea382294882839a22674037b89108a1420e33eb9be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d889c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a48793d7368b992a889f51854c7b63c1808f3125266538de14f70d50bc538b280501c0dc939a30878c909ff313bbdc541643f1af579f8b654da0115e0700000096362f98cadcef093d5984160442728903d659ba4bf7ce6eb88419c3e0d74eb3781eca2529bac17d7f9f2a75fcacfc6c9e926b4a26847a48f62c95faa03fc5174544451a7b3aa2448ca7ce877a01cee5efa9258055048b69722784ec8d7b23e683c07c1564ef0fc20f74e581f2162aa5a24e05c9e3221d1d1f7b68", 0x185}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9", 0xb2}], 0x1}}], 0x3, 0x2090) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2000003, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000005480)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x18, 0x7, r1, 0x0, &(0x7f0000004d00)={&(0x7f00000002c0)=@isdn, 0x80, &(0x7f0000004c40)=[{&(0x7f0000000700)=""/170, 0xaa}, {&(0x7f00000007c0)=""/232, 0xf5}, {&(0x7f00000008c0)=""/209, 0xd1}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/4096, 0x1000}, {&(0x7f0000004b80)=""/165, 0xa5}], 0x6, &(0x7f0000004cc0)=""/58, 0x53}, 0x0, 0x10123, 0x1, {0x3}}) (async) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000046000900000000000000000002000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000044) (async, rerun: 32) socket(0x40000000015, 0x5, 0x0) (rerun: 32) r7 = socket(0x29, 0x80000, 0xe) setsockopt$ALG_SET_AEAD_AUTHSIZE(r7, 0x6a, 0x5, 0x20000000, 0x3) (async, rerun: 64) socket(0x22, 0x5, 0x0) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async, rerun: 64) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) getsockopt$sock_cred(r8, 0x1, 0x11, 0x0, &(0x7f0000000040)) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002"], 0x20}}, 0x0) (async) r10 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r10, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r10, 0x7a0, &(0x7f0000000000)={@my=0x0}) executing program 9: r0 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000300)={0x10}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000480)={0xa, 0x1, 0x7}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0xe5c}}, './file0\x00'}) getsockopt$packet_int(r4, 0x107, 0x9, &(0x7f0000000040), &(0x7f0000000080)=0x4) executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8840) r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000780)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000080)="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", 0x559, r1) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="021800001c000000000000000000000005000500000000000a004e2200000400ff0100000000000000000000000000010a00000000000000080012000000000000000000feffffff060000000000000000000000000000007f0000010000000000000000000000007f00000100000000000000000000000005000600000000000a004e240000000300000000000000000000ff1900000000000a004e20fffffffcfc020000000000000000000000000001020000000a004e2200007bfffc010000000000000000000000000001c0ffffff00"/224], 0xe0}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000040)={0xb, 0x1, 0xb, 0x8, "77f15ef6983d2e9e4cea7f3566bf701fa00d6a39ad4b3eb72544d4c1ba33b030"}) executing program 4: syz_usb_connect(0x5, 0x35, &(0x7f0000000b00)={{0x12, 0x1, 0x201, 0xd4, 0xc1, 0xd6, 0x20, 0x1c40, 0x534, 0x2724, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x23, 0x1, 0xa5, 0x8, 0x80, 0xb7, "", [{{0x9, 0x4, 0xa2, 0x5, 0x1, 0x47, 0xee, 0xb9, 0x9, [], [{{0x9, 0x5, 0x6, 0x0, 0x10, 0x8, 0x8, 0x40, [@generic={0x8, 0xb, "04c541edc61d"}]}}]}}]}}]}}, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x5, 0x35, &(0x7f0000000b00)={{0x12, 0x1, 0x201, 0xd4, 0xc1, 0xd6, 0x20, 0x1c40, 0x534, 0x2724, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x23, 0x1, 0xa5, 0x8, 0x80, 0xb7, "", [{{0x9, 0x4, 0xa2, 0x5, 0x1, 0x47, 0xee, 0xb9, 0x9, [], [{{0x9, 0x5, 0x6, 0x0, 0x10, 0x8, 0x8, 0x40, [@generic={0x8, 0xb, "04c541edc61d"}]}}]}}]}}]}}, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0)=0x1000, 0x4) r2 = syz_open_dev$vim2m(&(0x7f0000001580), 0x8b2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x24, 0x1, 0x80, "3a8e2ba74088c20500ca1000000000000400b2b679d200", 0x41564e57}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x24, 0x1, 0x80, "3a8e2ba74088c20500ca1000000000000400b2b679d200", 0x41564e57}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000200)="10031200e0ff02000203000000000000005ded2735f4db171088aa96862ccf5de98480d1e24037215786d82ea13bb171f5b7efa975a72d0713bde6012fd67a71a81fc9c6d168ab9627dbe571d2386870c98e91672a99519c272fc7ceb41e54ece51ffd51b4d2d4d5905b0598eccfe0ad0761bdb137bd5a66774ef57866bfc8d59e5f7f09d0a03b96cb11563eced5fc78731c2c95115db1d5d654010e0262e7f4d189d15cf722015b8e284b5ef466ef8003842f06a30121888e5842dd76b8f38c7d49a4ee0e340000000000", 0xfffffebf, 0x4000040, &(0x7f0000000140)={0x11, 0x8, r3}, 0x14) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000100)=0xffffffffffffffff) (async) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000100)=0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0)) r4 = socket(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000080)=0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r5, @ANYBLOB="07b0cf7e2c89cc"], 0x0) clock_getres(0xa, 0x0) fcntl$getflags(r0, 0x3) executing program 9: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r3, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x2001, 0x0) sendmsg$802154_dgram(r3, &(0x7f0000002180)={&(0x7f0000000100)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f00000021c0)={0x0}, 0x7, 0x0, 0x0, 0x200040c6}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x51, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x202}, {0xffff, 0x5, 0x1, 0x46, 0x2, 0x101}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 7) program did not crash bisect: testing without sub-chunk 2/3 testing program (duration=6m11s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 11, 24, 10, 3, 11, 11, 5, 3, 30, 9, 30, 14, 14, 11, 30, 20, 28, 14, 16, 16, 29, 8, 12, 14, 5, 26, 21, 20, 7, 7, 29, 9, 2, 10, 20, 5, 21, 30, 9, 8, 26, 13, 3] detailed listing: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) close(r3) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000260029002dbd700000000000110000000e005e00759b2506bf0b0031b0000000"], 0x24}, 0x1, 0x0, 0x0, 0x8c811}, 0x40040) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x62600, 0x0) file_getattr(r4, 0x0, &(0x7f0000000040), 0x18, 0x1000) r5 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) bind$alg(r5, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x80000) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000010280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x40800c5}, 0x8004) accept4(r6, 0x0, 0x0, 0x800) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00), r7) sendmsg$TIPC_CMD_SET_LINK_PRI(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000100)={0x68, r8, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {0x0, 0x4109}, {0x4c, 0x18, {0x7f, @media='udp\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4004010}, 0x4040) syz_usb_connect(0x3, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a2401"], 0x0) executing program 1: sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x7, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x8000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) executing program 1: r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000180), 0x0, 0x40002) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, 0x0) r5 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x80) r7 = openat$cgroup_procs(r6, &(0x7f0000001940)='cgroup.procs\x00', 0x2, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x10) r8 = open(&(0x7f0000000040)='./bus\x00', 0x80202, 0x0) sendfile(r8, r7, 0x0, 0x2000000000006) ioctl$FE_GET_EVENT(r1, 0x80286f4e, &(0x7f0000000140)) ioctl$FE_SET_FRONTEND(r1, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @vsb={0x3}}) landlock_restrict_self(r0, 0xb) pipe2(&(0x7f0000000340)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) tee(r10, r9, 0xff, 0x8) r12 = landlock_create_ruleset(&(0x7f0000000100)={0x4424, 0x2}, 0x18, 0x0) landlock_restrict_self(r12, 0xa) vmsplice(r11, &(0x7f0000000300)=[{&(0x7f0000000a40)="8b", 0x1}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000080) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./debug/tracing/trace_pipe\x00', 0x8000, 0x0) r1 = syz_ublk_setup_io_uring(0xd61, &(0x7f0000000500)={0x0, 0x506b, 0x1000, 0x2, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000400)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x2, 0x603, 0x0, 0x0, 0x1000, 0xb6a4, 0x0, 0x0, 0xa8}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r1, r5, &(0x7f0000000180)={0x0, 0x1462, 0x40000, 0x1, 0x39f, 0x0, r1}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x80, 0x5, 0x124, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x2, 0x5, 0x449}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x68ea, 0x40, 0x80000400, 0x90, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8096e6, 0x4, 0x2, 0x40021a}}], 0x4, 0x0, 0x0) syz_clone3(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000000)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x51, 0x2}, @rumble={0x3, 0x6}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) executing program 1: sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x7, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x8000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) executing program 32: sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x7, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x8000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x11, 0x83, 0x20000a2e, 0x401000, 0xe, 0x3, 0x1, 0x1, 0xb000000}}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) open_by_handle_at(r2, &(0x7f000001f500)=ANY=[@ANYBLOB="0c000000fe0000"], 0x0) executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001fffffff500000000000500000a38000000030a03000000000000000000020000000900010073797a30000000000900030000000000000003000c000240000000000000000114000000110001"], 0x60}}, 0x0) executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x6}, 0x1c) r1 = socket$inet(0xa, 0x1, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0xfffffffffffffd31) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r2, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x0, 0x7e}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x7a}, 0x39) r3 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f00000007c0)=@hci={0x1f, 0x8ea8, 0x47}, 0x80, 0x0}, 0x8000) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) umount2(&(0x7f0000000140)='./my_configfs\x00', 0x4) r4 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20004880}, 0x1) sendto$inet6(r0, &(0x7f0000001680)="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", 0x1000, 0x800, 0x0, 0x0) mknod(0x0, 0x40, 0x9) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x8, &(0x7f0000000380)={[0x4]}, 0x8) ioctl$KVM_CAP_EXIT_HYPERCALL(r6, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) executing program 0: openat$kvm(0xffffff9c, 0x0, 0x8000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="03008060", @ANYRES16=r3, @ANYBLOB="070000000000000000000200000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4048054}, 0x0) executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000005600)={0x2, &(0x7f00000055c0)=[{0x5, 0x7, 0x1}, {0x6, 0x2, 0x5, 0x5}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x50880) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f0000003900)=""/151, 0x97}, {&(0x7f0000000040)=""/122, 0x7a}, {&(0x7f0000000240)=""/23, 0x17}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000000180)=""/27, 0x1b}], 0x7}, 0x9}, {{0x0, 0x0, 0x0}, 0xb91b}], 0x4, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) unshare(0x2c020400) r2 = msgget$private(0x0, 0x240) msgsnd(r2, &(0x7f0000000880)={0x2, "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"}, 0xfd1, 0x0) msgrcv(0x0, &(0x7f0000000000), 0xfffffcef, 0x0, 0x4800) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r3 = socket$inet(0x2, 0x7, 0x3) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r7, 0x1, 0xffffffff, 0x0, {{}, {0x0, 0x6}}}, 0x1c}}, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff97f, 0x2, 0x0, 0x4, 0x0, 0xffffffff, 0x10}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) futex(&(0x7f0000000cc0)=0x1, 0xd, 0x0, &(0x7f0000000d40), 0x0, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_connect$uac1(0x2, 0x9a, &(0x7f0000000500)=ANY=[@ANYBLOB="1201010200000020050b431740000102030109028800030109403f0904000000010100000a2401d2000a00020102090401000001020000090401010101020000072401080805000f2402020002ff0f00f441a4440fb209050109ff037808ba072501080403000904020000010200000904020101010200000b240201fc030801371fc807240108050210090582092000030201072501000e03008fe939b6dc009321c2d3bdaf318247e49400513805d256e80097b829823f27d0c3e77f267ce1cbe7b34a4efc7bf53bd910084e37cc40f02ddd5a1bb9d8e938e766c770cf2fbf58ddca26a2a9689af2d1ae33"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) getsockopt$IPT_SO_GET_REVISION_MATCH(r8, 0x0, 0x42, &(0x7f0000000300)={'ipvs\x00'}, &(0x7f0000000340)=0x1e) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @empty}}}, &(0x7f0000000240)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000280)={0x6, 0x8200, 0x3, 0x7, r10}, &(0x7f00000002c0)=0x10) bind(r8, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r8, 0x5) executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x767a, 0x0, 0x7ffffffe, 0x257, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x1000000, 0x10000004, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x144, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) ioctl$KVM_TDX_INIT_VM(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]}) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) (async) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 33: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x767a, 0x0, 0x7ffffffe, 0x257, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x1000000, 0x10000004, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x144, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) ioctl$KVM_TDX_INIT_VM(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]}) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) (async) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 5: syz_open_dev$evdev(&(0x7f00000000c0), 0x2a, 0x1002) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xffff, 0x10200) setns(0xc9, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}}) write$tun(r1, &(0x7f0000000080)={@void, @val={0x1, 0x3, 0x1c, 0x10, 0x14, 0x6}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x40, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x0, 0x1}}, {0x1234, 0x4e24, 0x17, 0x0, @opaque="0123456789abcdef0123456789abcd"}}}, 0x35) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000100)=""/208) executing program 5: r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000000)={r2, 0xfffb}, 0x8) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = syz_open_dev$media(&(0x7f00000000c0), 0x72, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r7, 0x890c, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0xa, 0x8000000000002}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r10 = dup3(r9, r8, 0x0) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r11, 0x4004743b, 0x0) r12 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102000000ff6a05df0040000102030109022d00010104400009040001010301030409210800410122f50209058103400004511eddc83c72e4b308e1b1"], &(0x7f0000000180)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x5b0, 0x2, 0x10, 0x5, 0xff, 0xf}, 0x3e, &(0x7f0000000900)={0x5, 0xf, 0x3e, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x28, 0xde, 0x80, 0x5, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x8, 0x8, 0x800}, @ssp_cap={0x24, 0x10, 0xa, 0xff, 0x6, 0xb0f, 0xff0f, 0x8001, [0x0, 0xcf, 0xcf, 0xff003f, 0xff8100, 0x3f30]}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x415}}]}) syz_usb_control_io$hid(r12, &(0x7f0000000640)={0x24, &(0x7f0000000440)={0x20, 0x24, 0xc2, {0xc2, 0x23, "692699e7b63b9ec758eb4aaed4e7322d4ed232b05bc38cb1456222f41c99366ceeb3eb2e1b59b354abbed8e1f13651ea111df51383ddb6e2e3e5df4518c0eab79027f1ef50b489c0b884803be33809f271bef3a3b13b0212e65f1d6f723a8ef695f4837b595623040620b40bf444abe38b86d21d0a9b37bcb45dc282980ef4e980d2e31047492140180291f47ac3387671b5cfd0aa48b0ba3603b9dcbd2a837082772ae3762b36226b5f36a32d32650d18663b426e53261bfc5ccd2d69acd7e6"}}, &(0x7f0000000540)={0x0, 0x3, 0x6a, @string={0x6a, 0x3, "d70736c3c4072dd886331c1443f4cc277cd55277b27cab506d469e3995ea3fd1a330451614112b6cf9aa6a500d089f6ffca8766840a3e58eaab63e5c0aefbbb75d1251465034a4eda4f864ee642c201af3686a4b695a7f17020c9ea503a959da2a044b793e516982"}}, &(0x7f00000005c0)={0x0, 0x22, 0x26, {[@global=@item_4={0x3, 0x1, 0x4, "efac9aa9"}, @main=@item_012={0x1, 0x0, 0xa, 'Z'}, @main=@item_4={0x3, 0x0, 0x8, "6e893f67"}, @local=@item_4={0x3, 0x2, 0x3, "1a659697"}, @global=@item_4={0x3, 0x1, 0xa, "d7b7c467"}, @local=@item_4={0x3, 0x2, 0x7, "483e259a"}, @main=@item_4={0x3, 0x0, 0x9, "3cfdd948"}, @global=@item_012={0x2, 0x1, 0x7, "9b39"}, @local=@item_012={0x2, 0x2, 0x9, 'Lc'}]}}, &(0x7f0000000600)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x6, 0x1, {0x22, 0x427}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000680)={0x20, 0x3, 0x9d, "2262e1cd56e97ca9530a19d2ec5b1d677a800201ce443cc1453dab7541194b59a7d962510681084cf6e077f9287f3346fc2421c83c4003651bc634acb604155c95715f942cc954870a1db612d2d9eb2a0564b87db4340851714de253e237944b6f3e7ccaf4ea087724a3cdee36170e0d137899321975bd66b0823b3e9776f24fce7134f0fda8d973a26c42a85143c7ccc168a4b7e10634559c5f277d03"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000007c0)={0x20, 0x1, 0x83, "ac6f4c92e56a51f7b584cc38362624cbd35d9eed62603153b070b9b694b4e32a305becb6a0183f261887329f1fe3b88d6566b4ca6fab3ced4b4fc24963da9fc3d6279d91be213de8c65cbbb695dcf2b3ba32fcf002c78654423b0d313a78b386e9259b27ade8b4eb6184b3650868db5585691151fb53e512168d5d015e403c69bbdd84"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x16}}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x1058, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x8ab7, 0x4, 0x4, 0x804, 0x7, 0x4, 0x120000, 0x5, 0x0, 0x8, 0x5, 0x2, 0xfffffffffffffffe, 0x101, 0x3, 0x1], 0x8000000, 0x141200}) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000fb0b0f883411eadb0000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c841}, 0x4008094) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r6, 0xae80, 0x0) executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r0, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40002062, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x88042, 0x0) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$sock(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x4f, 0x100}}], 0x18}, 0x2000c004) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x406, r3) recvfrom$l2tp(r4, &(0x7f0000000540)=""/242, 0xf2, 0x2000, &(0x7f0000000640)={0x2, 0x0, @dev}, 0x10) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xa, 0x0, 0x0, 0x7995}, 0x8416, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000b80)={0x2020, 0x0, 0x0, 0x0}, 0x2020) lstat(&(0x7f0000000040)='./sys_mount/block/loop0/queue/scheduler\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r8, r7, &(0x7f0000002080)=0x3a, 0x23b) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x1, 0x0, 0xfffc}}, 0xffffffffffffffd5}}, 0x2) r9 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@filename='./sys_mount\x00', r6, 0x0) write$P9_RSTATu(r1, &(0x7f0000000240)={0x2d2, 0x7d, 0x1, {{0x500, 0xfa, 0x0, 0x6a, {0x40, 0x0, 0x6}, 0x10000000, 0x2000000, 0xfffffffc, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00'/31, 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xfb\xe1a\xe9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x5e, '\xf8\xf6~\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x9d,;\x9e\x1dR\xc3\xd6\xda\x9b\xf1\x99V\x88\xda\xcel\xde{\xa4\xa4\x00\xb4\xb0\xb4\xdb\xe6Od\xb1\xd6?&ym\xcb\xecI\x86#\xd6\xa88\xc6\x9ai\xdf\xcc\x9c\xddY\x06\xf1t\xa6f\xa8R\x9aEw4\a\xdb\xda\xb2\x88[\xaf\x05\x00\x00\x00\x00\x00'}, 0x1c3, 'odev-n\xb1{#\x00\xf9\xda\xa1\xee#&n\xcf\x85\xfe\xa6^\xb2\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\xbd\x7f=\x7f)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x01\x00\x00\x00\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\xcf>\xe3\x88@\x02\xa9\x1cTR\x8b\x80z\x89\xca\x18M\x16d_\x06\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xdbV\xc5}}\xc6&\xe4\xc7\x03\xf1\xc6\x91\xd5D\xb2\xaf\xc46\x11\xa1\xc4\xa3\xa39\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x1fu7y|\xe1\xe4\x11\xea\x91\x8e\xbd\x88\x8c\x1e\x15k\x84V\x93\x1d.\xa7&\xba\x96\t\xd5\x1aA\xdd\xb2\xd5\x0f\x1e|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9G\x8f}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00\x00\x00\x00\x00\x00\x00ta\xb0\xcc\xaa\xa1\x93:\x0e\x8a\x82k\x14\xd4\xfc\xb2\x98\x9f\xfa\xaa\x1a\xcf\xfa\x80T\xe9U\x9d\t\x00\x00\x00\xa0\v\x03\xb3\xd8\x0eU$\xf8I_\xee~\x8d\x88\xcbZ\x04\x03\x02\xac\xb0\xd1&\x0f%\x84\xdbH\xe8\xd9\x06N\x8c\xe1x\xce9n\x85\xb9~H\x86D@I\x81\x0f%\xf1\xce\xca\x97]\xebI\x1a\x12[\xf0\xd7/\x87\xcc\x10\xb0\x15N\b\x93m\xaa\xdd\x8b\x1e\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00', r5, 0x0, r6}}, 0x2d2) executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x602480, 0x104) fsetxattr$security_ima(r1, &(0x7f0000000080), &(0x7f0000000140)=@sha1={0x1, "dfd651eda6f2ced51a4933a527fb8adabc941388"}, 0x15, 0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f00000003c0)=""/87, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r3, 0x1, &(0x7f0000000580)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2, 0x4, r4, 0x0, 0x0, 0x8000, 0x0, 0x4}]) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="280108000c69000000a33559e293390000000000", @ANYRES32=0x0, @ANYBLOB="09000080976b64086800000004000180"], 0x28}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r5 = fsopen(&(0x7f0000000000)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000001c0)='source', &(0x7f00000006c0)='#:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\x1f\x0eHmK\x86\x06\x97\xb9\xc5\xda\xba\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xdavC\xe2\xe8 \xd5-<#\x18\xc3\xb5N(vj\xa7+\xff\xff\xff\x7f0\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\x02`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2}\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x14<\xa9\xa7\xdc[\xd2\xec\xbe\x1a\xa1\x04\xd3\x00\x00\x00\x00\x00\x00\x00\x01o\xc1\xa5\xb6T\r)\x1c\xbe\x12\xd1\xef\xc2S\xcci\xc8\x0e\x00]\xe6|\xccK\xc7\r\xfa \x02\xe8\x1b\xc1\x93\xce\x02%\x86\xcb\x94K\v\xe7x\xe3\x06[/\xf9\xa8\xc2\x9b\xeeF\x88\xc0f\x82\xb7T\r\x04\xbb\x10\x1d3\xa6\x99\x99\xbd\x96\xf3\xa9\x8c\x1b\xb1\x9b\xe9\x0el\x83\x17\xc1\x8cK<\xe9e`\xcf\'\xd9R}>\xb7\xb4\xca\x13!\x03\xc6\xf3\xb4\x82\xb6\xa6;n\x04\x19%\v\xcf5\xf3y\xd3\xfd\xe1l\xbc\x16{\x13pD\xc40H\xee\x9fx\xc7\xb5x\xff\xb0V\x06\xe3\x92\rq\x95x\x9b\xf09\x116$\xf3\xb6\x9c\x87\xa5\x9e\xbf\x19\xf1\xcb\xb4in\xd3G\xf6B\xa51\xa2-\xb5\xd7g\xf9p?\xc9\xf7\xc1\x9b\xb5\x8c\xfaU>\xb6j\xd5N\x9f\xe0*2S,]\xe0+}A\f\xb0r\']\x14Ac^.Y0\";\x92\xd6\xb2\x9e+0\x18\xed\x8elx|\xab\\\t\\V\xd5\xc7f\xa1L\rI\xa5\xf4\xaa\x9b\az\xe0\xe3\xd3VS\xc4\xcd>', 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000440)={0x80000001, 0xffffffffffffffff, 'id0\x00'}) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80001048}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, 0xa, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x12}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000d804}, 0xc090) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1, @empty, 0x2}, {0xa, 0x4e20, 0x104, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, r8, 0x6}}, 0x48) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)={0x90, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x7c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x46}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}]}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r9 = socket(0x10, 0x803, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000005c0)={r6, 0x7d8, 0x2, r6}) sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x43}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) write$RDMA_USER_CM_CMD_GET_EVENT(r7, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VDPA_GET_AS_NUM(r0, 0x8004af7a, &(0x7f0000000000)) ioctl$XFS_IOC_FSGROWFSRT(r0, 0x4008af10, &(0x7f00000002c0)={0x100000000, 0x81}) executing program 5: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000080)}], 0x2}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r3, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x2001, 0x0) sendmsg$802154_dgram(r3, &(0x7f0000002180)={&(0x7f0000000100)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f00000021c0)={0x0}, 0x7, 0x0, 0x0, 0x200040c6}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) executing program 5: syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000007c0)=[{0x0}], 0x1}}], 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4050000) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f000000080001"], 0x1c}}, 0x4000080) (async) ioctl$sock_inet6_udp_SIOCINQ(r0, 0xc02063a1, 0x0) (async) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x60}], 0x1, &(0x7f0000000140)={r3, r4+10000000}, &(0x7f0000000200)={[0x9]}, 0x8) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x40010, r5, 0x0) (async) munmap(&(0x7f0000004000/0x3000)=nil, 0x3000) (async) syz_clone(0x98300400, 0x0, 0x0, 0x0, 0x0, 0x0) executing program 34: syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000007c0)=[{0x0}], 0x1}}], 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4050000) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f000000080001"], 0x1c}}, 0x4000080) (async) ioctl$sock_inet6_udp_SIOCINQ(r0, 0xc02063a1, 0x0) (async) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x60}], 0x1, &(0x7f0000000140)={r3, r4+10000000}, &(0x7f0000000200)={[0x9]}, 0x8) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x40010, r5, 0x0) (async) munmap(&(0x7f0000004000/0x3000)=nil, 0x3000) (async) syz_clone(0x98300400, 0x0, 0x0, 0x0, 0x0, 0x0) executing program 2: prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r1 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[]) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setuid(0xee01) setrlimit(0x40000000000008, &(0x7f00000002c0)={0x4, 0x9}) r2 = shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000e00)={0x0, 0x0}) getgroups(0x3, &(0x7f0000000e80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xee00]) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000ec0)={0x0}, &(0x7f0000000f00)=0xc) read$FUSE(r0, &(0x7f0000000f40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r7 = getegid() r8 = syz_open_dev$dvb_frontend(&(0x7f0000002f80), 0x6, 0x40100) r9 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_open_procfs(r9, &(0x7f0000000040)='net/sco\x00') r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r11}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r11, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r11, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x130, 0x0, 0xc, {0x1, 0x3, 0x0, '\x00', {0x7ff, 0x0, 0x80000ae3, 0x5, r12, r13, 0x1000, '\x00', 0x6, 0x800000000000007b, 0x1000000000001, 0x2000004, {0x1, 0x6}, {0x3, 0x45}, {0x14000000, 0x37}, {0x0, 0xa02}, 0x22e3, 0xfffffff8, 0x80000000, 0x5}}}}) lstat(&(0x7f0000002fc0)='./file0\x00', &(0x7f0000003000)) r14 = accept4$phonet_pipe(r0, &(0x7f0000004400), &(0x7f0000004440)=0x10, 0x80800) r15 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r15, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x3, 0x6, 0x34325241, 0x7, 0x6571, 0x6, 0x0, 0x2, 0x1, 0x3, 0x0, 0x4}}) r16 = accept4(r10, &(0x7f0000000700)=@hci, &(0x7f00000003c0)=0x80, 0x80000) r17 = socket$rxrpc(0x21, 0x2, 0xa) sendmmsg$unix(r0, &(0x7f0000004600)=[{{&(0x7f00000000c0)=@file={0x0, './cgroup.cpu/memory.limit_in_bytes\x00'}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000140)="a690b11d6a2a28ebbf1b6f6f675a1ff2dc4f80bbc96069083bf75f3847db179a0b66f3895dbca3cef9b1fe50077cd43a98b538a2df581f5d9e04ffc7c9637c6118173a2f21d66eace7076671a556dc317e2ae8fa321e406dbb1c9f06e9e974ae8c720391e683704eb421586521ee5afadadd1afa368cf1a5b0c7861453d77339131adedfe5531b449ba5099b27ad578bc900f7cc5161638154cb08351fc8df16ffff8d821e914c11055d4268d55869b4c69f21ab9eb4b82c124e8e4b31800ed56800fe9947feac6649349f1cdd180d3929a8eb1aab945e", 0xd7}, {&(0x7f0000000240)="467521d77029fc286bdb3a03ce2086cd489d598a22687b2f080c4210784010fc6d1c9ed3302b9e3be0f2f0bc53124060c1c3ec3be41d44e43c27cbe0fc7a7521eb1231683932da2418bf612d22f3ca54ffa71238fc2d1e4c", 0x58}, {&(0x7f0000000300)="75584080a5cf6bf87e362baf59cd0f0067e7a10b069661209ccfe8789e407dbb80824bc256e1bfa3d62f40f2e182cd1b1d43031d45c933a6b4fbcaddb28bf03a93999b1eb2f61e2a1774a14ba4e2d6f5dc719c57bfb8ba60f94f0188bb3df7da30e4e3c651a59b8620acd96a93921e89352203e07204c3a38b4dfd65dd8570773ec065f399644cc91d389501ca488b7d0cc89c05a633dd77cbeffca28c0b98bfa3aca7f6a13ce6445b5edd4ea9", 0xad}, {&(0x7f0000000440)="41778691a375500a1d7b2a65f267256e58d1d444fd0b6696843c5956251ad1798fd30bffe0a162325f0a5d5e6d1e0c5c4853491a57457f73ab3b59fbad67df11984b8a3a6877fe759c70f365dfca21650089276b1f5cd41f7d9ed291be91e30e18e675656fea29ccf78fe7a7472adeb5ed4e016da706657da773767929bbaba7e36b426631c64819c2c80c", 0x8b}, {&(0x7f0000000500)="4b2e85267ffb7c7d100fbd4f0730d13ce8addd62924c1c03fd9bff520d578347c12e143910a05686811ddd5a6819c2eb5ece49dccbeb2dc24af263512b03528ec53dc9a3de1f7f79edac173ada70696e6bf4e78c74864cfe863b231712731bc57e186eb178638bba86b5ea040317806bf1ebdbe7484cff3d64949ce628de45765768efc3cc519ad89419e9347b29f27585b6bb69d7328765e1bfff39", 0x9c}], 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="21000100"], 0x50, 0x28004084}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000008c0)="ffedd22d6e38f4bdddb8e20886a79b2b4f48cae357dc691232e6458b6b169e6eae54de85bd03f8495d74148214f2651315f4338d4f2658b414e432f41ca33df18273fcb38d48d5211e00e533534cd08645a60400a9238741dc7cd7cc86a2e268e65bad77fffa8b8f21c45613d53f58ff38e6cf3ab1e3fb76d67664ddfdac65a2e68ba233bbcd91fdbf0274004192d2d5b948f63dbae7db62ec8a2446ce9558a194757a2db80e9e54d8cad2adaa", 0xad}, {&(0x7f0000000780)="dc34af8bfea94dcc7be887b7e983aa8e523dc8baa479fb1795ed155ed9e24eebef92e7f119ad7e33bf50fc150fdfcad2410be5e623a3cf56ed6f4b4d6078f5786c13b5665048bd93aff77a30e5f3827b72ac8e61b33a0c7a72dd82806f72d4afb615c36e737a1e2b7172135f2cccddc07510cc7d46f1ee6b0465389ddf807a8a6d706060af37f9b84da4dfd0c0c8bf50d5fe41c95e66009e0d89c16213", 0x9d}, {&(0x7f0000000a00)="4500ed7d8074e750eba6aa08caf3d4bf2e004f705bca3a2b4a3c5da2119a280caf4fdcc4bd53d1afc6e2766ad4600518755929f4776fee2d0533ed89ea14d10dc2944bdde3d76f771d6b8314831d2b2bbb637c5ba4d2d96a8ce73dbdcfe9f9125dd3e96a110a7a687b32635dacc48e1e8dbe44ec27a58ccc8e500200335f8af7dadaad85493468c2cdd4abc34e67851be663234af7ad9ca15bac0ea24d624bd2076dae03ec658f4976b670d01bcd110b033e6ef0baf634991c8b9d14a264db20349305ac0302a785cbb0f5d86c7d2359f0b2d19ee1ce57ca7486bdc945ae262c0a5c2f9dd2a8e40bf41b9085a41c", 0xee}, {&(0x7f0000000b00)="5b9a141158061758b60ddc9db38e76644b8d675e58cc4ac012ace45464c6337cd67072244798dd91b3846019f4b41a0a78a978569d7de6f5a838f43d62bb330027459355be8414164167f7c358e50912ce", 0x51}, {&(0x7f0000000b80)}, {&(0x7f0000000bc0)="98eb1f9712c05ea67cab65bb8fa86b93ef20fc89f7a9293acb52cd83e8d46477188cd410ea3e21eecf3a8ccb7398b21693cb7a2d4003a1f730bfa5897892bc2a3a3da4e085f0638241384fc2075e26ced6e2c9de509e8eded0fb47563f1450da93dd1f0a55dbab21f4256e93363fb15fd0bc5c75d1c5f1984ce0bb45bc4199170102e64a8ca25f67b055585cbf", 0x8d}, {&(0x7f0000000c80)}, {&(0x7f0000000cc0)="c4131e611fd0c628367bdf7abd6c5b1160fc007cb82aca5ea39d143bb7e0ad6387c25e040c173de6be5ae0ee5fb8ec2b870a55c12ccb3d165f150971d58d9c465c70520e13fff7bff82a0eca426be3f04c1bbd6eb0329f65bfd62f7fcbd1e53b1fe557103a67c07741a9659e4ee7584d4cdde7fcb560003e2131af9e0c0605ffd486f2aea3a76928e53076f856399a29c67dcc68573a", 0x96}], 0x8, &(0x7f00000032c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r8, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r16, @ANYRES32=r10, @ANYBLOB="00000000193675ced46fc7401a60ec8511925ac489a6fc19e10926e90b0aef3a1f2bfd611adc83b0a03acfb58ed32223e7beab1a0d0957ee130e4bf449424e4b858568b79628b98a074b9d1b986a6fb462043d0cf292bf058ec56e90c1283614ce0656a0f5eee7b88d0a014554b51bb2d452b6fd8204bbe6f3aadcdfb96e1a7d934b51d27279197900000000000000c857885941ad582ccfb4bbe934c8fc92278e34a102eef20338cd0d7682b3a6875ba3b951070fd0c0647ff3fed92258dcf53a5ace39e9f1ba5b3ee713726a52a98bb5692710e35fab0381514caabbb365"], 0xc8, 0x4000}}, {{&(0x7f0000000980)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000004240), 0x0, 0x0, 0x0, 0x810}}, {{&(0x7f0000004280)=@file={0x0, './cgroup.cpu/memory.limit_in_bytes\x00'}, 0x6e, &(0x7f00000043c0)=[{&(0x7f0000004300)="0222a0bbc0bd91eb4aa1d5c6b1eab55473940850467376c925beb8a7dac5d307127a217297c34e05e7fc50b59f594f9cf06f8eaa97459209fa60ff531a46a4cd26df7e1a0c734f05a58c1f7b14fabb421191322759a17a467b380440c7835cb36f9643c7886e03c3b3d2cf8820409d55fae31cf10beaeb32284cbc172f4ec75935394836c591212baed3ff52414ddbb11988ee075b6b4033281cfc787b88291e77833896fa565764c839324d01", 0xad}], 0x1000000000000064, &(0x7f0000003180)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r14, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r15, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="0000000028000000000000000100000001000000ebe038546273fc081150c608f436bcacd43b5ecc790ef42cb3c21b6f38c85fc2d8582b929e30f74c5b254c4cd133dd5bc5720ef1c26caa78f95a759c0ec033f3197b56b80b095a9341c1a294b0af96e54391cdba16610e290c1f127f9c684d5f49deaf0a4067704a08776e145d2f1bdee394395359eaf8c54c19a9ac184f87b49a5873b5783d3856e65012cdc7ff8311573c11", @ANYRES32=r11, @ANYRES32=r1, @ANYRES32=r17, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32=r1], 0x98, 0x200c0049}}], 0x4, 0x44850) write(r0, &(0x7f0000000080)='4', 0x1) executing program 8: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/rfkill/rfkill0/state\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)="3bbbcdfb", 0x4) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a94ea0609eebd008300000000"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x9, 0x6, &(0x7f0000000000)='BBBBBB') executing program 8: r0 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) ioctl$MTDFILEMODE(r0, 0x4d13, 0x1) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0xfdef) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x2, 0x2d7, 0x8000000000000000, 0x8000000000000000, 0x5, 0x0, 0x4, 0x401, 0x2, 0x5, 0x8d], 0xeeee8000, 0x284e97}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)={0x9, 0x0, [{0x8d1}, {0x331, 0x0, 0x1}, {0x860, 0x0, 0x4}, {0x119, 0x0, 0xd}, {0x2f7, 0x0, 0x5}, {0x204, 0x0, 0x8}, {0x388, 0x0, 0x8}, {0x400000b6, 0x0, 0x8}, {0x630, 0x0, 0x3}]}) executing program 8: mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000500)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, 0x0, 0x90) (async) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800}]}, &(0x7f0000000200)=0x10) (async) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, 0x0, 0x0) (async) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001ec0), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000100)={0x5, {0x521, 0x1, 0x7, 0x4e0}, {0x6, 0x7, 0x0, 0x1}, {0xffffffe7, 0x3}}) executing program 8: openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0x7fffffff}}], [], 0x6b}}) syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c0001020301090229000100000000090400000002020100050200000005"], 0x0) executing program 9: r0 = syz_open_dev$vbi(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000001c0)={0x0, 0x1, 0x10, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90e, 0x6, '\x00', @p_u32=0x0}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="68fa140000002d000b00fdffffff00000000090000000457cedd575eda2d1ebc87551cefb27728412ab5647e7be52804c29a44e8274425fcbee123a2e0958a8dfcc3713092485047c27a1711ac8d33b2987199bdb53798002bb1203841c52b7bc7f6629e71d6cbdb1b647b6fbe878dd117e3621a5477dc"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000040)=[0x20, 0x4, 0x40005002, 0xffff32eb, 0x2, 0xffffdff9, 0x2d7b, 0x401, 0x0, 0x3, 0x0, 0x3, 0xfe09, 0xd2, 0x80000002], 0x1, 0x4000003}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000078000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000004c000480480001800a0001006d61746368000000380002800e000100636f6e6e627974657300000008000240000000001c00030000"], 0x100}}, 0x0) syz_usb_connect$uac1(0x0, 0xfe, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x1, 0x0, 0x8a, 0x40, 0x83}, 0x20, &(0x7f00000001c0)={0x5, 0xf, 0x20, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x6, 0xfc01}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x1e, 0xf2, 0xfd9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x2, 0x1, 0x3}]}, 0x6, [{0xd7, &(0x7f0000000200)=@string={0xd7, 0x3, "ffef3fe5e1b918d91fbe45e55d0299cbad736ba0a610296e178d82758e8ed71341807ba6d59661ace229161c06705061cc59700208b2d5d63bbb955e9dbe53f39160894998933fb852044def4fc37c2b7fb276e21dc862cbfdbdb7f430225270b557b2559bc9705722eaf1cfe8328218cad684327d2b94e0b34e248b2c137a65cce4cd01f04f0106cff86a033c188f39ff68d878fc43bab81f472e9e679c484cd8c4b6c2cdf1bd930d4ced0340da0cb3d959048d7ae6afbf250e0be6c492f7e5f56c7e748e844254d7d4e4664874bc4fbbf1740fb9"}}, {0x6f, &(0x7f0000000300)=@string={0x6f, 0x3, "52459ffd4fd96b283eb160d5ef25b35eff9b1818b8db44f6b5a7e38883137a5d531ab63c97be90f0b5b08ea6571d9f27c283742a6869e8906d4df3c5122d32b054d2fe64b3754390e23a6f02842c5dcedea79956f027d5c1e86a1609d2e05a3e2af01043b3aaab04aa86357de6"}}, {0xe5, &(0x7f0000000380)=@string={0xe5, 0x3, "40714ac23946d9dbeff497794047ee097b162434796b49bc9008b0eefa5bbcde466f315b6670f7d1371a9d0fb17fc4fb180cc25c64c45ce3f901ca7d71c0b9367c3a063b6c5d8320afaf9430950b34de2e8f4b4ea7dad4fae776acfcbb44e7eb25850ee02adaa8b03134f9800b185028d64f0661a0b5d8bbdca81e5b9098b3700e30544d27e735cd3e1ec4fc2dbad70378cf43435c92edda48008a4a50c1c25fe3ae981753913490ca28e23ba93a209e3b0dd5a64b6d0e849e93ab433f7025a3e958987a73dfe59d6662a23c6db8515cb90deb3a2aca29047956e06c4c119c18b9723d"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x420}}]}) syz_open_dev$vbi(&(0x7f0000000380), 0x0, 0x2) (async) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000001c0)={0x0, 0x1, 0x10, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90e, 0x6, '\x00', @p_u32=0x0}}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="68fa140000002d000b00fdffffff00000000090000000457cedd575eda2d1ebc87551cefb27728412ab5647e7be52804c29a44e8274425fcbee123a2e0958a8dfcc3713092485047c27a1711ac8d33b2987199bdb53798002bb1203841c52b7bc7f6629e71d6cbdb1b647b6fbe878dd117e3621a5477dc"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) (async) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) (async) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000040)=[0x20, 0x4, 0x40005002, 0xffff32eb, 0x2, 0xffffdff9, 0x2d7b, 0x401, 0x0, 0x3, 0x0, 0x3, 0xfe09, 0xd2, 0x80000002], 0x1, 0x4000003}) (async) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000078000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000004c000480480001800a0001006d61746368000000380002800e000100636f6e6e627974657300000008000240000000001c00030000"], 0x100}}, 0x0) (async) syz_usb_connect$uac1(0x0, 0xfe, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x1, 0x0, 0x8a, 0x40, 0x83}, 0x20, &(0x7f00000001c0)={0x5, 0xf, 0x20, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x6, 0xfc01}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x1e, 0xf2, 0xfd9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x2, 0x1, 0x3}]}, 0x6, [{0xd7, &(0x7f0000000200)=@string={0xd7, 0x3, "ffef3fe5e1b918d91fbe45e55d0299cbad736ba0a610296e178d82758e8ed71341807ba6d59661ace229161c06705061cc59700208b2d5d63bbb955e9dbe53f39160894998933fb852044def4fc37c2b7fb276e21dc862cbfdbdb7f430225270b557b2559bc9705722eaf1cfe8328218cad684327d2b94e0b34e248b2c137a65cce4cd01f04f0106cff86a033c188f39ff68d878fc43bab81f472e9e679c484cd8c4b6c2cdf1bd930d4ced0340da0cb3d959048d7ae6afbf250e0be6c492f7e5f56c7e748e844254d7d4e4664874bc4fbbf1740fb9"}}, {0x6f, &(0x7f0000000300)=@string={0x6f, 0x3, "52459ffd4fd96b283eb160d5ef25b35eff9b1818b8db44f6b5a7e38883137a5d531ab63c97be90f0b5b08ea6571d9f27c283742a6869e8906d4df3c5122d32b054d2fe64b3754390e23a6f02842c5dcedea79956f027d5c1e86a1609d2e05a3e2af01043b3aaab04aa86357de6"}}, {0xe5, &(0x7f0000000380)=@string={0xe5, 0x3, "40714ac23946d9dbeff497794047ee097b162434796b49bc9008b0eefa5bbcde466f315b6670f7d1371a9d0fb17fc4fb180cc25c64c45ce3f901ca7d71c0b9367c3a063b6c5d8320afaf9430950b34de2e8f4b4ea7dad4fae776acfcbb44e7eb25850ee02adaa8b03134f9800b185028d64f0661a0b5d8bbdca81e5b9098b3700e30544d27e735cd3e1ec4fc2dbad70378cf43435c92edda48008a4a50c1c25fe3ae981753913490ca28e23ba93a209e3b0dd5a64b6d0e849e93ab433f7025a3e958987a73dfe59d6662a23c6db8515cb90deb3a2aca29047956e06c4c119c18b9723d"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x420}}]}) (async) executing program 9: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c74, 0x40040, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1533, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'lo\x00'}) clock_gettime(0x17, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000080)={0x2b, 0x0, 0xffffffc5}) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40046302, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000240)={0x74, 0x0, 0x54}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000440)="2ef2dd0500800000260f8e1b0000000f23d00f21f835000000010f23f836362e6726af440f20c0350e000000440f22c0b805000000b900980000b805000000b96d0000000f01d90f01c9c4e27d933438410f79d226450f01cb660f013b", 0x5d}], 0x1, 0x0, 0x0, 0x0) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f00000000c0)={0x6}, 0x1) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fd3000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x2e, 0x0, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) r8 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r8, 0x40305652, &(0x7f0000000080)={0xffff, 0x3, 0x6, 0x489, 0x7, 0x1, 0x4}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) executing program 9: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x80, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000280), 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) executing program 7: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x80, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000280), 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) (fail_nth: 1) executing program 7: syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x80) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) setsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f00000000c0)="870846434a6781d4c2f7162861afce643bf97a9e76b6e6dd203b84c3c7ef96862be316eea573cf995c7a483f0891a64c9ce0af25707f545bb66fa7b2d557ad140b6ee2d2c76dc4dba4429ca9f2829b322825d516ac13c27d9ef49d03f06ff4e391594234efb2315fbffff0cbb7e1b17f1b342d199326eff644fd633f8a760551ad52fbccbf11738bec951ad2c1e56783a08a737cfb46f7152d3081ba0a8235c9eb2e70f243c4467b19cc43d2309adfa8252e809746729703e7698f23bb318eb81aac71405f1fb9fed1faf306fd49d057719a5c2ae215665e560e3a3b14d35dc59c7d5d79fb", 0xe5) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@empty, @in=@private=0xa010101, 0x4, 0x0, 0x0, 0x0, 0x2, 0x20}, {0x0, 0xffffffffffffffff, 0x6}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x41}, 0x4d2, 0x6c}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0xb}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400000}}, 0xe8) (async) r4 = epoll_create(0x7) (async) r5 = epoll_create1(0x0) r6 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180)) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000040)) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000003c0)) (async) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000080)={0x1008}) (async) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) syz_open_procfs(0x0, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r9, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) socket(0x22, 0x6, 0x9) (async) bind$can_raw(r9, &(0x7f0000000080)={0x1d, r10}, 0x10) (async) write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$audio1(0xffffffffffffff9c, &(0x7f00000001c0), 0x208000, 0x0) (async) ioctl$SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000200)) executing program 9: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xa0}}, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x80, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000280), 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0105b08, &(0x7f0000000040)) executing program 7: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000012140100000000060000000008004f000000000008004b001300000008000300010000000800150002000000080001"], 0x38}, 0x1, 0x0, 0x0, 0x4008814}, 0x8090) (fail_nth: 5) executing program 7: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x1c, 0x5e, 0x101, 0x0, 0xffffffff, "", [@typed={0xc, 0x10, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f0000000100)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001680)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b40000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c0002800500010000000000066e6186bf04000008000740000004001800068014000400"], 0xb4}, 0x1, 0x4000000}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000200)={0x1, @win={{0x81, 0x4, 0x42474752, 0x2}, 0x3, 0x5, 0x0, 0x3, 0x0, 0xfe}}) executing program 7: r0 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x86) fchdir(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x4000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb2020000) read$FUSE(r3, &(0x7f00000009c0)={0x2020}, 0x2020) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406d0493c20000000000fd09022400010000e8010904000001030000000921fd7f000122eb0009058103"], 0x0) syz_usb_disconnect(r4) r5 = syz_usb_connect(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db2870905"], 0x0) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r7, &(0x7f0000004f00)={0x0, 0x0, &(0x7f0000004e80)=[{&(0x7f00000014c0)={0x10, 0x1d, 0x1, 0x70bd27, 0x25dfdbfe}, 0x10}], 0x1, 0x0, 0x0, 0x8000}, 0x4008040) write$cgroup_subtree(r6, &(0x7f0000000100)={[{0x2b, 'net_prio'}, {0x2d, 'rlimit'}, {0x2b, 'pids'}, {0x2b, 'devices'}]}, 0x21) syz_usb_control_io(r5, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000040)={0x0, 0x7, 0x9, "c41d21447228b2d6c2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, r2}) (fail_nth: 1) executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r3, 0x6f6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r6, 0x1, 0x0, 0x1000000, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r8 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r10 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r10, 0x11b, 0x7, &(0x7f0000001040), &(0x7f0000001080)=0x26) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, r9}) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000040)) executing program 4: msgget(0x3, 0x136) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$nfc_llcp(r0, 0x118, 0x1, 0x0, 0x0) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) (async) sendmmsg$inet(r1, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7bebc905a984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee38", 0xf4}, {&(0x7f0000000cc0)="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", 0x12e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000e40)="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", 0x185}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9", 0xb2}], 0x1}}], 0x3, 0x2090) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2000003, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000005480)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x18, 0x7, r1, 0x0, &(0x7f0000004d00)={&(0x7f00000002c0)=@isdn, 0x80, &(0x7f0000004c40)=[{&(0x7f0000000700)=""/170, 0xaa}, {&(0x7f00000007c0)=""/232, 0xf5}, {&(0x7f00000008c0)=""/209, 0xd1}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/4096, 0x1000}, {&(0x7f0000004b80)=""/165, 0xa5}], 0x6, &(0x7f0000004cc0)=""/58, 0x53}, 0x0, 0x10123, 0x1, {0x3}}) (async) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000046000900000000000000000002000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000044) (async, rerun: 32) socket(0x40000000015, 0x5, 0x0) (rerun: 32) r7 = socket(0x29, 0x80000, 0xe) setsockopt$ALG_SET_AEAD_AUTHSIZE(r7, 0x6a, 0x5, 0x20000000, 0x3) (async, rerun: 64) socket(0x22, 0x5, 0x0) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async, rerun: 64) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) getsockopt$sock_cred(r8, 0x1, 0x11, 0x0, &(0x7f0000000040)) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002"], 0x20}}, 0x0) (async) r10 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r10, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r10, 0x7a0, &(0x7f0000000000)={@my=0x0}) executing program 9: r0 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000300)={0x10}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000480)={0xa, 0x1, 0x7}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0xe5c}}, './file0\x00'}) getsockopt$packet_int(r4, 0x107, 0x9, &(0x7f0000000040), &(0x7f0000000080)=0x4) executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8840) r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000780)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000080)="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", 0x559, r1) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="021800001c000000000000000000000005000500000000000a004e2200000400ff0100000000000000000000000000010a00000000000000080012000000000000000000feffffff060000000000000000000000000000007f0000010000000000000000000000007f00000100000000000000000000000005000600000000000a004e240000000300000000000000000000ff1900000000000a004e20fffffffcfc020000000000000000000000000001020000000a004e2200007bfffc010000000000000000000000000001c0ffffff00"/224], 0xe0}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000040)={0xb, 0x1, 0xb, 0x8, "77f15ef6983d2e9e4cea7f3566bf701fa00d6a39ad4b3eb72544d4c1ba33b030"}) executing program 4: syz_usb_connect(0x5, 0x35, &(0x7f0000000b00)={{0x12, 0x1, 0x201, 0xd4, 0xc1, 0xd6, 0x20, 0x1c40, 0x534, 0x2724, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x23, 0x1, 0xa5, 0x8, 0x80, 0xb7, "", [{{0x9, 0x4, 0xa2, 0x5, 0x1, 0x47, 0xee, 0xb9, 0x9, [], [{{0x9, 0x5, 0x6, 0x0, 0x10, 0x8, 0x8, 0x40, [@generic={0x8, 0xb, "04c541edc61d"}]}}]}}]}}]}}, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x5, 0x35, &(0x7f0000000b00)={{0x12, 0x1, 0x201, 0xd4, 0xc1, 0xd6, 0x20, 0x1c40, 0x534, 0x2724, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x23, 0x1, 0xa5, 0x8, 0x80, 0xb7, "", [{{0x9, 0x4, 0xa2, 0x5, 0x1, 0x47, 0xee, 0xb9, 0x9, [], [{{0x9, 0x5, 0x6, 0x0, 0x10, 0x8, 0x8, 0x40, [@generic={0x8, 0xb, "04c541edc61d"}]}}]}}]}}]}}, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0)=0x1000, 0x4) r2 = syz_open_dev$vim2m(&(0x7f0000001580), 0x8b2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x24, 0x1, 0x80, "3a8e2ba74088c20500ca1000000000000400b2b679d200", 0x41564e57}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x24, 0x1, 0x80, "3a8e2ba74088c20500ca1000000000000400b2b679d200", 0x41564e57}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000200)="10031200e0ff02000203000000000000005ded2735f4db171088aa96862ccf5de98480d1e24037215786d82ea13bb171f5b7efa975a72d0713bde6012fd67a71a81fc9c6d168ab9627dbe571d2386870c98e91672a99519c272fc7ceb41e54ece51ffd51b4d2d4d5905b0598eccfe0ad0761bdb137bd5a66774ef57866bfc8d59e5f7f09d0a03b96cb11563eced5fc78731c2c95115db1d5d654010e0262e7f4d189d15cf722015b8e284b5ef466ef8003842f06a30121888e5842dd76b8f38c7d49a4ee0e340000000000", 0xfffffebf, 0x4000040, &(0x7f0000000140)={0x11, 0x8, r3}, 0x14) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000100)=0xffffffffffffffff) (async) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000100)=0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0)) r4 = socket(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000080)=0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r5, @ANYBLOB="07b0cf7e2c89cc"], 0x0) clock_getres(0xa, 0x0) fcntl$getflags(r0, 0x3) executing program 9: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r3, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x2001, 0x0) sendmsg$802154_dgram(r3, &(0x7f0000002180)={&(0x7f0000000100)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f00000021c0)={0x0}, 0x7, 0x0, 0x0, 0x200040c6}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x51, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x202}, {0xffff, 0x5, 0x1, 0x46, 0x2, 0x101}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 7) program crashed: INFO: task hung in nfsd_nl_cache_flush_doit bisect: the chunk can be dropped bisect: testing without sub-chunk 3/3 testing program (duration=6m5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 11, 24, 10, 3, 11, 11, 5, 3, 30, 9, 30, 14, 14, 11, 30, 20, 28, 14, 16, 16, 29] detailed listing: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) close(r3) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000260029002dbd700000000000110000000e005e00759b2506bf0b0031b0000000"], 0x24}, 0x1, 0x0, 0x0, 0x8c811}, 0x40040) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x62600, 0x0) file_getattr(r4, 0x0, &(0x7f0000000040), 0x18, 0x1000) r5 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) bind$alg(r5, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x80000) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000010280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x40800c5}, 0x8004) accept4(r6, 0x0, 0x0, 0x800) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00), r7) sendmsg$TIPC_CMD_SET_LINK_PRI(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000100)={0x68, r8, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {0x0, 0x4109}, {0x4c, 0x18, {0x7f, @media='udp\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4004010}, 0x4040) syz_usb_connect(0x3, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a2401"], 0x0) executing program 1: sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x7, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x8000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) executing program 1: r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000180), 0x0, 0x40002) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, 0x0) r5 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x80) r7 = openat$cgroup_procs(r6, &(0x7f0000001940)='cgroup.procs\x00', 0x2, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x10) r8 = open(&(0x7f0000000040)='./bus\x00', 0x80202, 0x0) sendfile(r8, r7, 0x0, 0x2000000000006) ioctl$FE_GET_EVENT(r1, 0x80286f4e, &(0x7f0000000140)) ioctl$FE_SET_FRONTEND(r1, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @vsb={0x3}}) landlock_restrict_self(r0, 0xb) pipe2(&(0x7f0000000340)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) tee(r10, r9, 0xff, 0x8) r12 = landlock_create_ruleset(&(0x7f0000000100)={0x4424, 0x2}, 0x18, 0x0) landlock_restrict_self(r12, 0xa) vmsplice(r11, &(0x7f0000000300)=[{&(0x7f0000000a40)="8b", 0x1}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000080) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./debug/tracing/trace_pipe\x00', 0x8000, 0x0) r1 = syz_ublk_setup_io_uring(0xd61, &(0x7f0000000500)={0x0, 0x506b, 0x1000, 0x2, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000400)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x2, 0x603, 0x0, 0x0, 0x1000, 0xb6a4, 0x0, 0x0, 0xa8}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r1, r5, &(0x7f0000000180)={0x0, 0x1462, 0x40000, 0x1, 0x39f, 0x0, r1}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x80, 0x5, 0x124, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x2, 0x5, 0x449}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x68ea, 0x40, 0x80000400, 0x90, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8096e6, 0x4, 0x2, 0x40021a}}], 0x4, 0x0, 0x0) syz_clone3(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000000)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x51, 0x2}, @rumble={0x3, 0x6}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) executing program 1: sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x7, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x8000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) executing program 32: sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x7, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x8000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x11, 0x83, 0x20000a2e, 0x401000, 0xe, 0x3, 0x1, 0x1, 0xb000000}}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) open_by_handle_at(r2, &(0x7f000001f500)=ANY=[@ANYBLOB="0c000000fe0000"], 0x0) executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001fffffff500000000000500000a38000000030a03000000000000000000020000000900010073797a30000000000900030000000000000003000c000240000000000000000114000000110001"], 0x60}}, 0x0) executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x6}, 0x1c) r1 = socket$inet(0xa, 0x1, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0xfffffffffffffd31) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r2, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x0, 0x7e}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x7a}, 0x39) r3 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f00000007c0)=@hci={0x1f, 0x8ea8, 0x47}, 0x80, 0x0}, 0x8000) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) umount2(&(0x7f0000000140)='./my_configfs\x00', 0x4) r4 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20004880}, 0x1) sendto$inet6(r0, &(0x7f0000001680)="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", 0x1000, 0x800, 0x0, 0x0) mknod(0x0, 0x40, 0x9) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x8, &(0x7f0000000380)={[0x4]}, 0x8) ioctl$KVM_CAP_EXIT_HYPERCALL(r6, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) executing program 0: openat$kvm(0xffffff9c, 0x0, 0x8000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="03008060", @ANYRES16=r3, @ANYBLOB="070000000000000000000200000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4048054}, 0x0) executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000005600)={0x2, &(0x7f00000055c0)=[{0x5, 0x7, 0x1}, {0x6, 0x2, 0x5, 0x5}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x50880) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f0000003900)=""/151, 0x97}, {&(0x7f0000000040)=""/122, 0x7a}, {&(0x7f0000000240)=""/23, 0x17}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000000180)=""/27, 0x1b}], 0x7}, 0x9}, {{0x0, 0x0, 0x0}, 0xb91b}], 0x4, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) unshare(0x2c020400) r2 = msgget$private(0x0, 0x240) msgsnd(r2, &(0x7f0000000880)={0x2, "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"}, 0xfd1, 0x0) msgrcv(0x0, &(0x7f0000000000), 0xfffffcef, 0x0, 0x4800) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r3 = socket$inet(0x2, 0x7, 0x3) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r7, 0x1, 0xffffffff, 0x0, {{}, {0x0, 0x6}}}, 0x1c}}, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff97f, 0x2, 0x0, 0x4, 0x0, 0xffffffff, 0x10}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) futex(&(0x7f0000000cc0)=0x1, 0xd, 0x0, &(0x7f0000000d40), 0x0, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_connect$uac1(0x2, 0x9a, &(0x7f0000000500)=ANY=[@ANYBLOB="1201010200000020050b431740000102030109028800030109403f0904000000010100000a2401d2000a00020102090401000001020000090401010101020000072401080805000f2402020002ff0f00f441a4440fb209050109ff037808ba072501080403000904020000010200000904020101010200000b240201fc030801371fc807240108050210090582092000030201072501000e03008fe939b6dc009321c2d3bdaf318247e49400513805d256e80097b829823f27d0c3e77f267ce1cbe7b34a4efc7bf53bd910084e37cc40f02ddd5a1bb9d8e938e766c770cf2fbf58ddca26a2a9689af2d1ae33"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) getsockopt$IPT_SO_GET_REVISION_MATCH(r8, 0x0, 0x42, &(0x7f0000000300)={'ipvs\x00'}, &(0x7f0000000340)=0x1e) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @empty}}}, &(0x7f0000000240)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000280)={0x6, 0x8200, 0x3, 0x7, r10}, &(0x7f00000002c0)=0x10) bind(r8, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r8, 0x5) executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x767a, 0x0, 0x7ffffffe, 0x257, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x1000000, 0x10000004, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x144, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) ioctl$KVM_TDX_INIT_VM(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]}) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) (async) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 33: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x767a, 0x0, 0x7ffffffe, 0x257, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x1000000, 0x10000004, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x144, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) ioctl$KVM_TDX_INIT_VM(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2000000000000000000000000000000007000000000000008f00000000000000060000000000000005000000000000003107000000000000020000000000000040000000000000000200000000000000724c0000020000000000000008000000000000000400000000000000030000000000000004000000000000000100000000000000ffffff7fffffffff4f000000000000006b00000000000000f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000100000017a300000400000003000000020000005a5c0000070000000000000000000000000000000400000094040000070000001f0000000300000009000000a20000000000000000000000000000000d0000000000000001000000ffff0000000000000001000001"]}) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) (async) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 5: syz_open_dev$evdev(&(0x7f00000000c0), 0x2a, 0x1002) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xffff, 0x10200) setns(0xc9, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}}) write$tun(r1, &(0x7f0000000080)={@void, @val={0x1, 0x3, 0x1c, 0x10, 0x14, 0x6}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x40, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x0, 0x1}}, {0x1234, 0x4e24, 0x17, 0x0, @opaque="0123456789abcdef0123456789abcd"}}}, 0x35) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000100)=""/208) executing program 5: r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000000)={r2, 0xfffb}, 0x8) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = syz_open_dev$media(&(0x7f00000000c0), 0x72, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r7, 0x890c, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0xa, 0x8000000000002}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r10 = dup3(r9, r8, 0x0) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r11, 0x4004743b, 0x0) r12 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102000000ff6a05df0040000102030109022d00010104400009040001010301030409210800410122f50209058103400004511eddc83c72e4b308e1b1"], &(0x7f0000000180)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x5b0, 0x2, 0x10, 0x5, 0xff, 0xf}, 0x3e, &(0x7f0000000900)={0x5, 0xf, 0x3e, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x28, 0xde, 0x80, 0x5, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x8, 0x8, 0x800}, @ssp_cap={0x24, 0x10, 0xa, 0xff, 0x6, 0xb0f, 0xff0f, 0x8001, [0x0, 0xcf, 0xcf, 0xff003f, 0xff8100, 0x3f30]}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x415}}]}) syz_usb_control_io$hid(r12, &(0x7f0000000640)={0x24, &(0x7f0000000440)={0x20, 0x24, 0xc2, {0xc2, 0x23, "692699e7b63b9ec758eb4aaed4e7322d4ed232b05bc38cb1456222f41c99366ceeb3eb2e1b59b354abbed8e1f13651ea111df51383ddb6e2e3e5df4518c0eab79027f1ef50b489c0b884803be33809f271bef3a3b13b0212e65f1d6f723a8ef695f4837b595623040620b40bf444abe38b86d21d0a9b37bcb45dc282980ef4e980d2e31047492140180291f47ac3387671b5cfd0aa48b0ba3603b9dcbd2a837082772ae3762b36226b5f36a32d32650d18663b426e53261bfc5ccd2d69acd7e6"}}, &(0x7f0000000540)={0x0, 0x3, 0x6a, @string={0x6a, 0x3, "d70736c3c4072dd886331c1443f4cc277cd55277b27cab506d469e3995ea3fd1a330451614112b6cf9aa6a500d089f6ffca8766840a3e58eaab63e5c0aefbbb75d1251465034a4eda4f864ee642c201af3686a4b695a7f17020c9ea503a959da2a044b793e516982"}}, &(0x7f00000005c0)={0x0, 0x22, 0x26, {[@global=@item_4={0x3, 0x1, 0x4, "efac9aa9"}, @main=@item_012={0x1, 0x0, 0xa, 'Z'}, @main=@item_4={0x3, 0x0, 0x8, "6e893f67"}, @local=@item_4={0x3, 0x2, 0x3, "1a659697"}, @global=@item_4={0x3, 0x1, 0xa, "d7b7c467"}, @local=@item_4={0x3, 0x2, 0x7, "483e259a"}, @main=@item_4={0x3, 0x0, 0x9, "3cfdd948"}, @global=@item_012={0x2, 0x1, 0x7, "9b39"}, @local=@item_012={0x2, 0x2, 0x9, 'Lc'}]}}, &(0x7f0000000600)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x6, 0x1, {0x22, 0x427}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000680)={0x20, 0x3, 0x9d, "2262e1cd56e97ca9530a19d2ec5b1d677a800201ce443cc1453dab7541194b59a7d962510681084cf6e077f9287f3346fc2421c83c4003651bc634acb604155c95715f942cc954870a1db612d2d9eb2a0564b87db4340851714de253e237944b6f3e7ccaf4ea087724a3cdee36170e0d137899321975bd66b0823b3e9776f24fce7134f0fda8d973a26c42a85143c7ccc168a4b7e10634559c5f277d03"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000007c0)={0x20, 0x1, 0x83, "ac6f4c92e56a51f7b584cc38362624cbd35d9eed62603153b070b9b694b4e32a305becb6a0183f261887329f1fe3b88d6566b4ca6fab3ced4b4fc24963da9fc3d6279d91be213de8c65cbbb695dcf2b3ba32fcf002c78654423b0d313a78b386e9259b27ade8b4eb6184b3650868db5585691151fb53e512168d5d015e403c69bbdd84"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x16}}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x1058, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x8ab7, 0x4, 0x4, 0x804, 0x7, 0x4, 0x120000, 0x5, 0x0, 0x8, 0x5, 0x2, 0xfffffffffffffffe, 0x101, 0x3, 0x1], 0x8000000, 0x141200}) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000fb0b0f883411eadb0000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c841}, 0x4008094) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r6, 0xae80, 0x0) executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r0, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40002062, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x88042, 0x0) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$sock(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x4f, 0x100}}], 0x18}, 0x2000c004) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x406, r3) recvfrom$l2tp(r4, &(0x7f0000000540)=""/242, 0xf2, 0x2000, &(0x7f0000000640)={0x2, 0x0, @dev}, 0x10) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xa, 0x0, 0x0, 0x7995}, 0x8416, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000b80)={0x2020, 0x0, 0x0, 0x0}, 0x2020) lstat(&(0x7f0000000040)='./sys_mount/block/loop0/queue/scheduler\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r8, r7, &(0x7f0000002080)=0x3a, 0x23b) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x1, 0x0, 0xfffc}}, 0xffffffffffffffd5}}, 0x2) r9 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@filename='./sys_mount\x00', r6, 0x0) write$P9_RSTATu(r1, &(0x7f0000000240)={0x2d2, 0x7d, 0x1, {{0x500, 0xfa, 0x0, 0x6a, {0x40, 0x0, 0x6}, 0x10000000, 0x2000000, 0xfffffffc, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00'/31, 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xfb\xe1a\xe9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x5e, '\xf8\xf6~\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x9d,;\x9e\x1dR\xc3\xd6\xda\x9b\xf1\x99V\x88\xda\xcel\xde{\xa4\xa4\x00\xb4\xb0\xb4\xdb\xe6Od\xb1\xd6?&ym\xcb\xecI\x86#\xd6\xa88\xc6\x9ai\xdf\xcc\x9c\xddY\x06\xf1t\xa6f\xa8R\x9aEw4\a\xdb\xda\xb2\x88[\xaf\x05\x00\x00\x00\x00\x00'}, 0x1c3, 'odev-n\xb1{#\x00\xf9\xda\xa1\xee#&n\xcf\x85\xfe\xa6^\xb2\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\xbd\x7f=\x7f)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x01\x00\x00\x00\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\xcf>\xe3\x88@\x02\xa9\x1cTR\x8b\x80z\x89\xca\x18M\x16d_\x06\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xdbV\xc5}}\xc6&\xe4\xc7\x03\xf1\xc6\x91\xd5D\xb2\xaf\xc46\x11\xa1\xc4\xa3\xa39\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x1fu7y|\xe1\xe4\x11\xea\x91\x8e\xbd\x88\x8c\x1e\x15k\x84V\x93\x1d.\xa7&\xba\x96\t\xd5\x1aA\xdd\xb2\xd5\x0f\x1e|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9G\x8f}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00\x00\x00\x00\x00\x00\x00ta\xb0\xcc\xaa\xa1\x93:\x0e\x8a\x82k\x14\xd4\xfc\xb2\x98\x9f\xfa\xaa\x1a\xcf\xfa\x80T\xe9U\x9d\t\x00\x00\x00\xa0\v\x03\xb3\xd8\x0eU$\xf8I_\xee~\x8d\x88\xcbZ\x04\x03\x02\xac\xb0\xd1&\x0f%\x84\xdbH\xe8\xd9\x06N\x8c\xe1x\xce9n\x85\xb9~H\x86D@I\x81\x0f%\xf1\xce\xca\x97]\xebI\x1a\x12[\xf0\xd7/\x87\xcc\x10\xb0\x15N\b\x93m\xaa\xdd\x8b\x1e\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00', r5, 0x0, r6}}, 0x2d2) executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x602480, 0x104) fsetxattr$security_ima(r1, &(0x7f0000000080), &(0x7f0000000140)=@sha1={0x1, "dfd651eda6f2ced51a4933a527fb8adabc941388"}, 0x15, 0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f00000003c0)=""/87, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r3, 0x1, &(0x7f0000000580)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2, 0x4, r4, 0x0, 0x0, 0x8000, 0x0, 0x4}]) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="280108000c69000000a33559e293390000000000", @ANYRES32=0x0, @ANYBLOB="09000080976b64086800000004000180"], 0x28}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r5 = fsopen(&(0x7f0000000000)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000001c0)='source', &(0x7f00000006c0)='#:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\x1f\x0eHmK\x86\x06\x97\xb9\xc5\xda\xba\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xdavC\xe2\xe8 \xd5-<#\x18\xc3\xb5N(vj\xa7+\xff\xff\xff\x7f0\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\x02`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2}\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x14<\xa9\xa7\xdc[\xd2\xec\xbe\x1a\xa1\x04\xd3\x00\x00\x00\x00\x00\x00\x00\x01o\xc1\xa5\xb6T\r)\x1c\xbe\x12\xd1\xef\xc2S\xcci\xc8\x0e\x00]\xe6|\xccK\xc7\r\xfa \x02\xe8\x1b\xc1\x93\xce\x02%\x86\xcb\x94K\v\xe7x\xe3\x06[/\xf9\xa8\xc2\x9b\xeeF\x88\xc0f\x82\xb7T\r\x04\xbb\x10\x1d3\xa6\x99\x99\xbd\x96\xf3\xa9\x8c\x1b\xb1\x9b\xe9\x0el\x83\x17\xc1\x8cK<\xe9e`\xcf\'\xd9R}>\xb7\xb4\xca\x13!\x03\xc6\xf3\xb4\x82\xb6\xa6;n\x04\x19%\v\xcf5\xf3y\xd3\xfd\xe1l\xbc\x16{\x13pD\xc40H\xee\x9fx\xc7\xb5x\xff\xb0V\x06\xe3\x92\rq\x95x\x9b\xf09\x116$\xf3\xb6\x9c\x87\xa5\x9e\xbf\x19\xf1\xcb\xb4in\xd3G\xf6B\xa51\xa2-\xb5\xd7g\xf9p?\xc9\xf7\xc1\x9b\xb5\x8c\xfaU>\xb6j\xd5N\x9f\xe0*2S,]\xe0+}A\f\xb0r\']\x14Ac^.Y0\";\x92\xd6\xb2\x9e+0\x18\xed\x8elx|\xab\\\t\\V\xd5\xc7f\xa1L\rI\xa5\xf4\xaa\x9b\az\xe0\xe3\xd3VS\xc4\xcd>', 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000440)={0x80000001, 0xffffffffffffffff, 'id0\x00'}) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80001048}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, 0xa, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x12}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000d804}, 0xc090) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1, @empty, 0x2}, {0xa, 0x4e20, 0x104, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, r8, 0x6}}, 0x48) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)={0x90, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x7c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x46}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}]}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r9 = socket(0x10, 0x803, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000005c0)={r6, 0x7d8, 0x2, r6}) sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x43}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) write$RDMA_USER_CM_CMD_GET_EVENT(r7, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VDPA_GET_AS_NUM(r0, 0x8004af7a, &(0x7f0000000000)) ioctl$XFS_IOC_FSGROWFSRT(r0, 0x4008af10, &(0x7f00000002c0)={0x100000000, 0x81}) executing program 5: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000080)}], 0x2}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r3, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x2001, 0x0) sendmsg$802154_dgram(r3, &(0x7f0000002180)={&(0x7f0000000100)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f00000021c0)={0x0}, 0x7, 0x0, 0x0, 0x200040c6}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) executing program 5: syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000007c0)=[{0x0}], 0x1}}], 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4050000) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f000000080001"], 0x1c}}, 0x4000080) (async) ioctl$sock_inet6_udp_SIOCINQ(r0, 0xc02063a1, 0x0) (async) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x60}], 0x1, &(0x7f0000000140)={r3, r4+10000000}, &(0x7f0000000200)={[0x9]}, 0x8) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x40010, r5, 0x0) (async) munmap(&(0x7f0000004000/0x3000)=nil, 0x3000) (async) syz_clone(0x98300400, 0x0, 0x0, 0x0, 0x0, 0x0) executing program 34: syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000007c0)=[{0x0}], 0x1}}], 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4050000) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f000000080001"], 0x1c}}, 0x4000080) (async) ioctl$sock_inet6_udp_SIOCINQ(r0, 0xc02063a1, 0x0) (async) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x60}], 0x1, &(0x7f0000000140)={r3, r4+10000000}, &(0x7f0000000200)={[0x9]}, 0x8) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x40010, r5, 0x0) (async) munmap(&(0x7f0000004000/0x3000)=nil, 0x3000) (async) syz_clone(0x98300400, 0x0, 0x0, 0x0, 0x0, 0x0) executing program 2: prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r1 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[]) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setuid(0xee01) setrlimit(0x40000000000008, &(0x7f00000002c0)={0x4, 0x9}) r2 = shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000e00)={0x0, 0x0}) getgroups(0x3, &(0x7f0000000e80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xee00]) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000ec0)={0x0}, &(0x7f0000000f00)=0xc) read$FUSE(r0, &(0x7f0000000f40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r7 = getegid() r8 = syz_open_dev$dvb_frontend(&(0x7f0000002f80), 0x6, 0x40100) r9 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_open_procfs(r9, &(0x7f0000000040)='net/sco\x00') r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r11}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r11, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r11, &(0x7f0000004300)="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 <> 40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000040)=[0x20, 0x4, 0x40005002, 0xffff32eb, 0x2, 0xffffdff9, 0x2d7b, 0x401, 0x0, 0x3, 0x0, 0x3, 0xfe09, 0xd2, 0x80000002], 0x1, 0x4000003}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000078000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000004c000480480001800a0001006d61746368000000380002800e000100636f6e6e627974657300000008000240000000001c00030000"], 0x100}}, 0x0) syz_usb_connect$uac1(0x0, 0xfe, &(0x7f0000000080)=ANY=[@ANYBLOB="120100020000000882050c004000010203010902ec000301fca0050904000000010100000a2401030033000201020c2402010204040f0a00e20e11240601050508000200010009000a000f05240404080724070600000109040100000102000009040101010102000009240202060001007f072401061800000a24020105030c80f11a092402010301fa081609050109ff030d030407250100090900090402000001020000090402010101025793e0e419dc00000a2402020100f9ff070511240202c500fdff0d4deb9745aeebe78c0a2402020a00a00005fe0f240201020207008f3b3b742a52320c24020240005d00816707c209058209080000fa1507"], &(0x7f0000000540)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x1, 0x0, 0x8a, 0x40, 0x83}, 0x20, &(0x7f00000001c0)={0x5, 0xf, 0x20, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x6, 0xfc01}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x1e, 0xf2, 0xfd9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x2, 0x1, 0x3}]}, 0x6, [{0xd7, &(0x7f0000000200)=@string={0xd7, 0x3, "ffef3fe5e1b918d91fbe45e55d0299cbad736ba0a610296e178d82758e8ed71341807ba6d59661ace229161c06705061cc59700208b2d5d63bbb955e9dbe53f39160894998933fb852044def4fc37c2b7fb276e21dc862cbfdbdb7f430225270b557b2559bc9705722eaf1cfe8328218cad684327d2b94e0b34e248b2c137a65cce4cd01f04f0106cff86a033c188f39ff68d878fc43bab81f472e9e679c484cd8c4b6c2cdf1bd930d4ced0340da0cb3d959048d7ae6afbf250e0be6c492f7e5f56c7e748e844254d7d4e4664874bc4fbbf1740fb9"}}, {0x6f, &(0x7f0000000300)=@string={0x6f, 0x3, "52459ffd4fd96b283eb160d5ef25b35eff9b1818b8db44f6b5a7e38883137a5d531ab63c97be90f0b5b08ea6571d9f27c283742a6869e8906d4df3c5122d32b054d2fe64b3754390e23a6f02842c5dcedea79956f027d5c1e86a1609d2e05a3e2af01043b3aaab04aa86357de6"}}, {0xe5, &(0x7f0000000380)=@string={0xe5, 0x3, "40714ac23946d9dbeff497794047ee097b162434796b49bc9008b0eefa5bbcde466f315b6670f7d1371a9d0fb17fc4fb180cc25c64c45ce3f901ca7d71c0b9367c3a063b6c5d8320afaf9430950b34de2e8f4b4ea7dad4fae776acfcbb44e7eb25850ee02adaa8b03134f9800b185028d64f0661a0b5d8bbdca81e5b9098b3700e30544d27e735cd3e1ec4fc2dbad70378cf43435c92edda48008a4a50c1c25fe3ae981753913490ca28e23ba93a209e3b0dd5a64b6d0e849e93ab433f7025a3e958987a73dfe59d6662a23c6db8515cb90deb3a2aca29047956e06c4c119c18b9723d"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x420}}]}) syz_open_dev$vbi(&(0x7f0000000380), 0x0, 0x2) (async) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000001c0)={0x0, 0x1, 0x10, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90e, 0x6, '\x00', @p_u32=0x0}}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="68fa140000002d000b00fdffffff00000000090000000457cedd575eda2d1ebc87551cefb27728412ab5647e7be52804c29a44e8274425fcbee123a2e0958a8dfcc3713092485047c27a1711ac8d33b2987199bdb53798002bb1203841c52b7bc7f6629e71d6cbdb1b647b6fbe878dd117e3621a5477dc"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) (async) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) (async) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000040)=[0x20, 0x4, 0x40005002, 0xffff32eb, 0x2, 0xffffdff9, 0x2d7b, 0x401, 0x0, 0x3, 0x0, 0x3, 0xfe09, 0xd2, 0x80000002], 0x1, 0x4000003}) (async) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000078000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000004c000480480001800a0001006d61746368000000380002800e000100636f6e6e627974657300000008000240000000001c00030000"], 0x100}}, 0x0) (async) syz_usb_connect$uac1(0x0, 0xfe, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x1, 0x0, 0x8a, 0x40, 0x83}, 0x20, &(0x7f00000001c0)={0x5, 0xf, 0x20, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x6, 0xfc01}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x1e, 0xf2, 0xfd9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x2, 0x1, 0x3}]}, 0x6, [{0xd7, &(0x7f0000000200)=@string={0xd7, 0x3, "ffef3fe5e1b918d91fbe45e55d0299cbad736ba0a610296e178d82758e8ed71341807ba6d59661ace229161c06705061cc59700208b2d5d63bbb955e9dbe53f39160894998933fb852044def4fc37c2b7fb276e21dc862cbfdbdb7f430225270b557b2559bc9705722eaf1cfe8328218cad684327d2b94e0b34e248b2c137a65cce4cd01f04f0106cff86a033c188f39ff68d878fc43bab81f472e9e679c484cd8c4b6c2cdf1bd930d4ced0340da0cb3d959048d7ae6afbf250e0be6c492f7e5f56c7e748e844254d7d4e4664874bc4fbbf1740fb9"}}, {0x6f, &(0x7f0000000300)=@string={0x6f, 0x3, "52459ffd4fd96b283eb160d5ef25b35eff9b1818b8db44f6b5a7e38883137a5d531ab63c97be90f0b5b08ea6571d9f27c283742a6869e8906d4df3c5122d32b054d2fe64b3754390e23a6f02842c5dcedea79956f027d5c1e86a1609d2e05a3e2af01043b3aaab04aa86357de6"}}, {0xe5, &(0x7f0000000380)=@string={0xe5, 0x3, "40714ac23946d9dbeff497794047ee097b162434796b49bc9008b0eefa5bbcde466f315b6670f7d1371a9d0fb17fc4fb180cc25c64c45ce3f901ca7d71c0b9367c3a063b6c5d8320afaf9430950b34de2e8f4b4ea7dad4fae776acfcbb44e7eb25850ee02adaa8b03134f9800b185028d64f0661a0b5d8bbdca81e5b9098b3700e30544d27e735cd3e1ec4fc2dbad70378cf43435c92edda48008a4a50c1c25fe3ae981753913490ca28e23ba93a209e3b0dd5a64b6d0e849e93ab433f7025a3e958987a73dfe59d6662a23c6db8515cb90deb3a2aca29047956e06c4c119c18b9723d"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x420}}]}) (async) executing program 9: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c74, 0x40040, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1533, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'lo\x00'}) clock_gettime(0x17, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000080)={0x2b, 0x0, 0xffffffc5}) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40046302, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000240)={0x74, 0x0, 0x54}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000440)="2ef2dd0500800000260f8e1b0000000f23d00f21f835000000010f23f836362e6726af440f20c0350e000000440f22c0b805000000b900980000b805000000b96d0000000f01d90f01c9c4e27d933438410f79d226450f01cb660f013b", 0x5d}], 0x1, 0x0, 0x0, 0x0) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f00000000c0)={0x6}, 0x1) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fd3000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x2e, 0x0, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) r8 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r8, 0x40305652, &(0x7f0000000080)={0xffff, 0x3, 0x6, 0x489, 0x7, 0x1, 0x4}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) executing program 9: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x80, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000280), 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) executing program 7: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x80, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000280), 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) (fail_nth: 1) executing program 7: syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x80) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) setsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f00000000c0)="870846434a6781d4c2f7162861afce643bf97a9e76b6e6dd203b84c3c7ef96862be316eea573cf995c7a483f0891a64c9ce0af25707f545bb66fa7b2d557ad140b6ee2d2c76dc4dba4429ca9f2829b322825d516ac13c27d9ef49d03f06ff4e391594234efb2315fbffff0cbb7e1b17f1b342d199326eff644fd633f8a760551ad52fbccbf11738bec951ad2c1e56783a08a737cfb46f7152d3081ba0a8235c9eb2e70f243c4467b19cc43d2309adfa8252e809746729703e7698f23bb318eb81aac71405f1fb9fed1faf306fd49d057719a5c2ae215665e560e3a3b14d35dc59c7d5d79fb", 0xe5) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@empty, @in=@private=0xa010101, 0x4, 0x0, 0x0, 0x0, 0x2, 0x20}, {0x0, 0xffffffffffffffff, 0x6}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x41}, 0x4d2, 0x6c}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0xb}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400000}}, 0xe8) (async) r4 = epoll_create(0x7) (async) r5 = epoll_create1(0x0) r6 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180)) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000040)) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000003c0)) (async) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000080)={0x1008}) (async) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) syz_open_procfs(0x0, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r9, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) socket(0x22, 0x6, 0x9) (async) bind$can_raw(r9, &(0x7f0000000080)={0x1d, r10}, 0x10) (async) write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$audio1(0xffffffffffffff9c, &(0x7f00000001c0), 0x208000, 0x0) (async) ioctl$SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000200)) executing program 9: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xa0}}, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x80, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000280), 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0105b08, &(0x7f0000000040)) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=6m4s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 14, 14, 11, 30, 20, 8, 12, 14, 5, 26, 21, 20, 7, 7, 29, 9] detailed listing: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000005600)={0x2, &(0x7f00000055c0)=[{0x5, 0x7, 0x1}, {0x6, 0x2, 0x5, 0x5}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x50880) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f0000003900)=""/151, 0x97}, {&(0x7f0000000040)=""/122, 0x7a}, {&(0x7f0000000240)=""/23, 0x17}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000000180)=""/27, 0x1b}], 0x7}, 0x9}, {{0x0, 0x0, 0x0}, 0xb91b}], 0x4, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) unshare(0x2c020400) r2 = msgget$private(0x0, 0x240) msgsnd(r2, &(0x7f0000000880)={0x2, "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"}, 0xfd1, 0x0) msgrcv(0x0, &(0x7f0000000000), 0xfffffcef, 0x0, 0x4800) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r3 = socket$inet(0x2, 0x7, 0x3) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r7, 0x1, 0xffffffff, 0x0, {{}, {0x0, 0x6}}}, 0x1c}}, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff97f, 0x2, 0x0, 0x4, 0x0, 0xffffffff, 0x10}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) futex(&(0x7f0000000cc0)=0x1, 0xd, 0x0, &(0x7f0000000d40), 0x0, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_connect$uac1(0x2, 0x9a, &(0x7f0000000500)=ANY=[@ANYBLOB="1201010200000020050b431740000102030109028800030109403f0904000000010100000a2401d2000a00020102090401000001020000090401010101020000072401080805000f2402020002ff0f00f441a4440fb209050109ff037808ba072501080403000904020000010200000904020101010200000b240201fc030801371fc807240108050210090582092000030201072501000e03008fe939b6dc009321c2d3bdaf318247e49400513805d256e80097b829823f27d0c3e77f267ce1cbe7b34a4efc7bf53bd910084e37cc40f02ddd5a1bb9d8e938e766c770cf2fbf58ddca26a2a9689af2d1ae33"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) getsockopt$IPT_SO_GET_REVISION_MATCH(r8, 0x0, 0x42, &(0x7f0000000300)={'ipvs\x00'}, &(0x7f0000000340)=0x1e) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @empty}}}, &(0x7f0000000240)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000280)={0x6, 0x8200, 0x3, 0x7, r10}, &(0x7f00000002c0)=0x10) bind(r8, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r8, 0x5) executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x767a, 0x0, 0x7ffffffe, 0x257, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x1000000, 0x10000004, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x144, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) ioctl$KVM_TDX_INIT_VM(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]}) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) (async) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 33: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x767a, 0x0, 0x7ffffffe, 0x257, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x1000000, 0x10000004, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x144, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) ioctl$KVM_TDX_INIT_VM(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]}) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) (async) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 5: syz_open_dev$evdev(&(0x7f00000000c0), 0x2a, 0x1002) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xffff, 0x10200) setns(0xc9, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}}) write$tun(r1, &(0x7f0000000080)={@void, @val={0x1, 0x3, 0x1c, 0x10, 0x14, 0x6}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x40, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x0, 0x1}}, {0x1234, 0x4e24, 0x17, 0x0, @opaque="0123456789abcdef0123456789abcd"}}}, 0x35) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000100)=""/208) executing program 5: r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000000)={r2, 0xfffb}, 0x8) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = syz_open_dev$media(&(0x7f00000000c0), 0x72, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r7, 0x890c, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0xa, 0x8000000000002}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r10 = dup3(r9, r8, 0x0) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r11, 0x4004743b, 0x0) r12 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102000000ff6a05df0040000102030109022d00010104400009040001010301030409210800410122f50209058103400004511eddc83c72e4b308e1b1"], &(0x7f0000000180)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x5b0, 0x2, 0x10, 0x5, 0xff, 0xf}, 0x3e, &(0x7f0000000900)={0x5, 0xf, 0x3e, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x28, 0xde, 0x80, 0x5, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x8, 0x8, 0x800}, @ssp_cap={0x24, 0x10, 0xa, 0xff, 0x6, 0xb0f, 0xff0f, 0x8001, [0x0, 0xcf, 0xcf, 0xff003f, 0xff8100, 0x3f30]}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x415}}]}) syz_usb_control_io$hid(r12, &(0x7f0000000640)={0x24, &(0x7f0000000440)={0x20, 0x24, 0xc2, {0xc2, 0x23, "692699e7b63b9ec758eb4aaed4e7322d4ed232b05bc38cb1456222f41c99366ceeb3eb2e1b59b354abbed8e1f13651ea111df51383ddb6e2e3e5df4518c0eab79027f1ef50b489c0b884803be33809f271bef3a3b13b0212e65f1d6f723a8ef695f4837b595623040620b40bf444abe38b86d21d0a9b37bcb45dc282980ef4e980d2e31047492140180291f47ac3387671b5cfd0aa48b0ba3603b9dcbd2a837082772ae3762b36226b5f36a32d32650d18663b426e53261bfc5ccd2d69acd7e6"}}, &(0x7f0000000540)={0x0, 0x3, 0x6a, @string={0x6a, 0x3, "d70736c3c4072dd886331c1443f4cc277cd55277b27cab506d469e3995ea3fd1a330451614112b6cf9aa6a500d089f6ffca8766840a3e58eaab63e5c0aefbbb75d1251465034a4eda4f864ee642c201af3686a4b695a7f17020c9ea503a959da2a044b793e516982"}}, &(0x7f00000005c0)={0x0, 0x22, 0x26, {[@global=@item_4={0x3, 0x1, 0x4, "efac9aa9"}, @main=@item_012={0x1, 0x0, 0xa, 'Z'}, @main=@item_4={0x3, 0x0, 0x8, "6e893f67"}, @local=@item_4={0x3, 0x2, 0x3, "1a659697"}, @global=@item_4={0x3, 0x1, 0xa, "d7b7c467"}, @local=@item_4={0x3, 0x2, 0x7, "483e259a"}, @main=@item_4={0x3, 0x0, 0x9, "3cfdd948"}, @global=@item_012={0x2, 0x1, 0x7, "9b39"}, @local=@item_012={0x2, 0x2, 0x9, 'Lc'}]}}, &(0x7f0000000600)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x6, 0x1, {0x22, 0x427}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000680)={0x20, 0x3, 0x9d, "2262e1cd56e97ca9530a19d2ec5b1d677a800201ce443cc1453dab7541194b59a7d962510681084cf6e077f9287f3346fc2421c83c4003651bc634acb604155c95715f942cc954870a1db612d2d9eb2a0564b87db4340851714de253e237944b6f3e7ccaf4ea087724a3cdee36170e0d137899321975bd66b0823b3e9776f24fce7134f0fda8d973a26c42a85143c7ccc168a4b7e10634559c5f277d03"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000007c0)={0x20, 0x1, 0x83, "ac6f4c92e56a51f7b584cc38362624cbd35d9eed62603153b070b9b694b4e32a305becb6a0183f261887329f1fe3b88d6566b4ca6fab3ced4b4fc24963da9fc3d6279d91be213de8c65cbbb695dcf2b3ba32fcf002c78654423b0d313a78b386e9259b27ade8b4eb6184b3650868db5585691151fb53e512168d5d015e403c69bbdd84"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x16}}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x1058, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x8ab7, 0x4, 0x4, 0x804, 0x7, 0x4, 0x120000, 0x5, 0x0, 0x8, 0x5, 0x2, 0xfffffffffffffffe, 0x101, 0x3, 0x1], 0x8000000, 0x141200}) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000fb0b0f883411eadb0000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c841}, 0x4008094) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r6, 0xae80, 0x0) executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r0, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40002062, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x88042, 0x0) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$sock(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x4f, 0x100}}], 0x18}, 0x2000c004) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x406, r3) recvfrom$l2tp(r4, &(0x7f0000000540)=""/242, 0xf2, 0x2000, &(0x7f0000000640)={0x2, 0x0, @dev}, 0x10) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xa, 0x0, 0x0, 0x7995}, 0x8416, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000b80)={0x2020, 0x0, 0x0, 0x0}, 0x2020) lstat(&(0x7f0000000040)='./sys_mount/block/loop0/queue/scheduler\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r8, r7, &(0x7f0000002080)=0x3a, 0x23b) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x1, 0x0, 0xfffc}}, 0xffffffffffffffd5}}, 0x2) r9 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@filename='./sys_mount\x00', r6, 0x0) write$P9_RSTATu(r1, &(0x7f0000000240)={0x2d2, 0x7d, 0x1, {{0x500, 0xfa, 0x0, 0x6a, {0x40, 0x0, 0x6}, 0x10000000, 0x2000000, 0xfffffffc, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00'/31, 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xfb\xe1a\xe9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x5e, '\xf8\xf6~\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x9d,;\x9e\x1dR\xc3\xd6\xda\x9b\xf1\x99V\x88\xda\xcel\xde{\xa4\xa4\x00\xb4\xb0\xb4\xdb\xe6Od\xb1\xd6?&ym\xcb\xecI\x86#\xd6\xa88\xc6\x9ai\xdf\xcc\x9c\xddY\x06\xf1t\xa6f\xa8R\x9aEw4\a\xdb\xda\xb2\x88[\xaf\x05\x00\x00\x00\x00\x00'}, 0x1c3, 'odev-n\xb1{#\x00\xf9\xda\xa1\xee#&n\xcf\x85\xfe\xa6^\xb2\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\xbd\x7f=\x7f)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x01\x00\x00\x00\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\xcf>\xe3\x88@\x02\xa9\x1cTR\x8b\x80z\x89\xca\x18M\x16d_\x06\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xdbV\xc5}}\xc6&\xe4\xc7\x03\xf1\xc6\x91\xd5D\xb2\xaf\xc46\x11\xa1\xc4\xa3\xa39\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x1fu7y|\xe1\xe4\x11\xea\x91\x8e\xbd\x88\x8c\x1e\x15k\x84V\x93\x1d.\xa7&\xba\x96\t\xd5\x1aA\xdd\xb2\xd5\x0f\x1e|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9G\x8f}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00\x00\x00\x00\x00\x00\x00ta\xb0\xcc\xaa\xa1\x93:\x0e\x8a\x82k\x14\xd4\xfc\xb2\x98\x9f\xfa\xaa\x1a\xcf\xfa\x80T\xe9U\x9d\t\x00\x00\x00\xa0\v\x03\xb3\xd8\x0eU$\xf8I_\xee~\x8d\x88\xcbZ\x04\x03\x02\xac\xb0\xd1&\x0f%\x84\xdbH\xe8\xd9\x06N\x8c\xe1x\xce9n\x85\xb9~H\x86D@I\x81\x0f%\xf1\xce\xca\x97]\xebI\x1a\x12[\xf0\xd7/\x87\xcc\x10\xb0\x15N\b\x93m\xaa\xdd\x8b\x1e\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00', r5, 0x0, r6}}, 0x2d2) executing program 8: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/rfkill/rfkill0/state\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)="3bbbcdfb", 0x4) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a94ea0609eebd008300000000"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x9, 0x6, &(0x7f0000000000)='BBBBBB') executing program 8: r0 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) ioctl$MTDFILEMODE(r0, 0x4d13, 0x1) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0xfdef) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x2, 0x2d7, 0x8000000000000000, 0x8000000000000000, 0x5, 0x0, 0x4, 0x401, 0x2, 0x5, 0x8d], 0xeeee8000, 0x284e97}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)={0x9, 0x0, [{0x8d1}, {0x331, 0x0, 0x1}, {0x860, 0x0, 0x4}, {0x119, 0x0, 0xd}, {0x2f7, 0x0, 0x5}, {0x204, 0x0, 0x8}, {0x388, 0x0, 0x8}, {0x400000b6, 0x0, 0x8}, {0x630, 0x0, 0x3}]}) executing program 8: mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000500)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, 0x0, 0x90) (async) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800}]}, &(0x7f0000000200)=0x10) (async) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, 0x0, 0x0) (async) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001ec0), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000100)={0x5, {0x521, 0x1, 0x7, 0x4e0}, {0x6, 0x7, 0x0, 0x1}, {0xffffffe7, 0x3}}) executing program 8: openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0x7fffffff}}], [], 0x6b}}) syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c0001020301090229000100000000090400000002020100050200000005"], 0x0) executing program 9: r0 = syz_open_dev$vbi(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000001c0)={0x0, 0x1, 0x10, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90e, 0x6, '\x00', @p_u32=0x0}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="68fa140000002d000b00fdffffff00000000090000000457cedd575eda2d1ebc87551cefb27728412ab5647e7be52804c29a44e8274425fcbee123a2e0958a8dfcc3713092485047c27a1711ac8d33b2987199bdb53798002bb1203841c52b7bc7f6629e71d6cbdb1b647b6fbe878dd117e3621a5477dc"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000040)=[0x20, 0x4, 0x40005002, 0xffff32eb, 0x2, 0xffffdff9, 0x2d7b, 0x401, 0x0, 0x3, 0x0, 0x3, 0xfe09, 0xd2, 0x80000002], 0x1, 0x4000003}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000078000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000004c000480480001800a0001006d61746368000000380002800e000100636f6e6e627974657300000008000240000000001c00030000"], 0x100}}, 0x0) syz_usb_connect$uac1(0x0, 0xfe, &(0x7f0000000080)=ANY=[@ANYBLOB="120100020000000882050c004000010203010902ec000301fca0050904000000010100000a2401030033000201020c2402010204040f0a00e20e11240601050508000200010009000a000f05240404080724070600000109040100000102000009040101010102000009240202060001007f072401061800000a24020105030c80f11a092402010301fa081609050109ff030d030407250100090900090402000001020000090402010101025793e0e419dc00000a2402020100f9ff070511240202c500fdff0d4deb9745aeebe78c0a2402020a00a00005fe0f240201020207008f3b3b742a52320c24020240005d00816707c209058209080000fa1507"], &(0x7f0000000540)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x1, 0x0, 0x8a, 0x40, 0x83}, 0x20, &(0x7f00000001c0)={0x5, 0xf, 0x20, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x6, 0xfc01}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x1e, 0xf2, 0xfd9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x2, 0x1, 0x3}]}, 0x6, [{0xd7, &(0x7f0000000200)=@string={0xd7, 0x3, "ffef3fe5e1b918d91fbe45e55d0299cbad736ba0a610296e178d82758e8ed71341807ba6d59661ace229161c06705061cc59700208b2d5d63bbb955e9dbe53f39160894998933fb852044def4fc37c2b7fb276e21dc862cbfdbdb7f430225270b557b2559bc9705722eaf1cfe8328218cad684327d2b94e0b34e248b2c137a65cce4cd01f04f0106cff86a033c188f39ff68d878fc43bab81f472e9e679c484cd8c4b6c2cdf1bd930d4ced0340da0cb3d959048d7ae6afbf250e0be6c492f7e5f56c7e748e844254d7d4e4664874bc4fbbf1740fb9"}}, {0x6f, &(0x7f0000000300)=@string={0x6f, 0x3, "52459ffd4fd96b283eb160d5ef25b35eff9b1818b8db44f6b5a7e38883137a5d531ab63c97be90f0b5b08ea6571d9f27c283742a6869e8906d4df3c5122d32b054d2fe64b3754390e23a6f02842c5dcedea79956f027d5c1e86a1609d2e05a3e2af01043b3aaab04aa86357de6"}}, {0xe5, &(0x7f0000000380)=@string={0xe5, 0x3, "40714ac23946d9dbeff497794047ee097b162434796b49bc9008b0eefa5bbcde466f315b6670f7d1371a9d0fb17fc4fb180cc25c64c45ce3f901ca7d71c0b9367c3a063b6c5d8320afaf9430950b34de2e8f4b4ea7dad4fae776acfcbb44e7eb25850ee02adaa8b03134f9800b185028d64f0661a0b5d8bbdca81e5b9098b3700e30544d27e735cd3e1ec4fc2dbad70378cf43435c92edda48008a4a50c1c25fe3ae981753913490ca28e23ba93a209e3b0dd5a64b6d0e849e93ab433f7025a3e958987a73dfe59d6662a23c6db8515cb90deb3a2aca29047956e06c4c119c18b9723d"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x420}}]}) syz_open_dev$vbi(&(0x7f0000000380), 0x0, 0x2) (async) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000001c0)={0x0, 0x1, 0x10, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90e, 0x6, '\x00', @p_u32=0x0}}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="68fa140000002d000b00fdffffff00000000090000000457cedd575eda2d1ebc87551cefb27728412ab5647e7be52804c29a44e8274425fcbee123a2e0958a8dfcc3713092485047c27a1711ac8d33b2987199bdb53798002bb1203841c52b7bc7f6629e71d6cbdb1b647b6fbe878dd117e3621a5477dc"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) (async) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) (async) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000040)=[0x20, 0x4, 0x40005002, 0xffff32eb, 0x2, 0xffffdff9, 0x2d7b, 0x401, 0x0, 0x3, 0x0, 0x3, 0xfe09, 0xd2, 0x80000002], 0x1, 0x4000003}) (async) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000078000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000004c000480480001800a0001006d61746368000000380002800e000100636f6e6e627974657300000008000240000000001c00030000"], 0x100}}, 0x0) (async) syz_usb_connect$uac1(0x0, 0xfe, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x1, 0x0, 0x8a, 0x40, 0x83}, 0x20, &(0x7f00000001c0)={0x5, 0xf, 0x20, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x6, 0xfc01}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x1e, 0xf2, 0xfd9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x2, 0x1, 0x3}]}, 0x6, [{0xd7, &(0x7f0000000200)=@string={0xd7, 0x3, "ffef3fe5e1b918d91fbe45e55d0299cbad736ba0a610296e178d82758e8ed71341807ba6d59661ace229161c06705061cc59700208b2d5d63bbb955e9dbe53f39160894998933fb852044def4fc37c2b7fb276e21dc862cbfdbdb7f430225270b557b2559bc9705722eaf1cfe8328218cad684327d2b94e0b34e248b2c137a65cce4cd01f04f0106cff86a033c188f39ff68d878fc43bab81f472e9e679c484cd8c4b6c2cdf1bd930d4ced0340da0cb3d959048d7ae6afbf250e0be6c492f7e5f56c7e748e844254d7d4e4664874bc4fbbf1740fb9"}}, {0x6f, &(0x7f0000000300)=@string={0x6f, 0x3, "52459ffd4fd96b283eb160d5ef25b35eff9b1818b8db44f6b5a7e38883137a5d531ab63c97be90f0b5b08ea6571d9f27c283742a6869e8906d4df3c5122d32b054d2fe64b3754390e23a6f02842c5dcedea79956f027d5c1e86a1609d2e05a3e2af01043b3aaab04aa86357de6"}}, {0xe5, &(0x7f0000000380)=@string={0xe5, 0x3, "40714ac23946d9dbeff497794047ee097b162434796b49bc9008b0eefa5bbcde466f315b6670f7d1371a9d0fb17fc4fb180cc25c64c45ce3f901ca7d71c0b9367c3a063b6c5d8320afaf9430950b34de2e8f4b4ea7dad4fae776acfcbb44e7eb25850ee02adaa8b03134f9800b185028d64f0661a0b5d8bbdca81e5b9098b3700e30544d27e735cd3e1ec4fc2dbad70378cf43435c92edda48008a4a50c1c25fe3ae981753913490ca28e23ba93a209e3b0dd5a64b6d0e849e93ab433f7025a3e958987a73dfe59d6662a23c6db8515cb90deb3a2aca29047956e06c4c119c18b9723d"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x420}}]}) (async) executing program 9: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c74, 0x40040, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1533, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'lo\x00'}) clock_gettime(0x17, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000080)={0x2b, 0x0, 0xffffffc5}) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40046302, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000240)={0x74, 0x0, 0x54}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000440)="2ef2dd0500800000260f8e1b0000000f23d00f21f835000000010f23f836362e6726af440f20c0350e000000440f22c0b805000000b900980000b805000000b96d0000000f01d90f01c9c4e27d933438410f79d226450f01cb660f013b", 0x5d}], 0x1, 0x0, 0x0, 0x0) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f00000000c0)={0x6}, 0x1) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fd3000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x2e, 0x0, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) r8 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r8, 0x40305652, &(0x7f0000000080)={0xffff, 0x3, 0x6, 0x489, 0x7, 0x1, 0x4}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) executing program 9: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x80, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000280), 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) executing program 7: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x80, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000280), 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) (fail_nth: 1) executing program 7: syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x80) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) setsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f00000000c0)="870846434a6781d4c2f7162861afce643bf97a9e76b6e6dd203b84c3c7ef96862be316eea573cf995c7a483f0891a64c9ce0af25707f545bb66fa7b2d557ad140b6ee2d2c76dc4dba4429ca9f2829b322825d516ac13c27d9ef49d03f06ff4e391594234efb2315fbffff0cbb7e1b17f1b342d199326eff644fd633f8a760551ad52fbccbf11738bec951ad2c1e56783a08a737cfb46f7152d3081ba0a8235c9eb2e70f243c4467b19cc43d2309adfa8252e809746729703e7698f23bb318eb81aac71405f1fb9fed1faf306fd49d057719a5c2ae215665e560e3a3b14d35dc59c7d5d79fb", 0xe5) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@empty, @in=@private=0xa010101, 0x4, 0x0, 0x0, 0x0, 0x2, 0x20}, {0x0, 0xffffffffffffffff, 0x6}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x41}, 0x4d2, 0x6c}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0xb}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400000}}, 0xe8) (async) r4 = epoll_create(0x7) (async) r5 = epoll_create1(0x0) r6 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180)) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000040)) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000003c0)) (async) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000080)={0x1008}) (async) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) syz_open_procfs(0x0, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r9, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) socket(0x22, 0x6, 0x9) (async) bind$can_raw(r9, &(0x7f0000000080)={0x1d, r10}, 0x10) (async) write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$audio1(0xffffffffffffff9c, &(0x7f00000001c0), 0x208000, 0x0) (async) ioctl$SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000200)) executing program 9: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xa0}}, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x80, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000280), 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0105b08, &(0x7f0000000040)) program crashed: INFO: task hung in nfsd_nl_listener_set_doit bisect: the chunk can be dropped bisect: split chunk #1 of len 11 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m2s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 14, 14, 11, 30, 20, 20, 7, 7, 29, 9] detailed listing: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000005600)={0x2, &(0x7f00000055c0)=[{0x5, 0x7, 0x1}, {0x6, 0x2, 0x5, 0x5}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x50880) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f0000003900)=""/151, 0x97}, {&(0x7f0000000040)=""/122, 0x7a}, {&(0x7f0000000240)=""/23, 0x17}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000000180)=""/27, 0x1b}], 0x7}, 0x9}, {{0x0, 0x0, 0x0}, 0xb91b}], 0x4, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) unshare(0x2c020400) r2 = msgget$private(0x0, 0x240) msgsnd(r2, &(0x7f0000000880)={0x2, "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"}, 0xfd1, 0x0) msgrcv(0x0, &(0x7f0000000000), 0xfffffcef, 0x0, 0x4800) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r3 = socket$inet(0x2, 0x7, 0x3) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r7, 0x1, 0xffffffff, 0x0, {{}, {0x0, 0x6}}}, 0x1c}}, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff97f, 0x2, 0x0, 0x4, 0x0, 0xffffffff, 0x10}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) futex(&(0x7f0000000cc0)=0x1, 0xd, 0x0, &(0x7f0000000d40), 0x0, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_connect$uac1(0x2, 0x9a, &(0x7f0000000500)=ANY=[@ANYBLOB="1201010200000020050b431740000102030109028800030109403f0904000000010100000a2401d2000a00020102090401000001020000090401010101020000072401080805000f2402020002ff0f00f441a4440fb209050109ff037808ba072501080403000904020000010200000904020101010200000b240201fc030801371fc807240108050210090582092000030201072501000e03008fe939b6dc009321c2d3bdaf318247e49400513805d256e80097b829823f27d0c3e77f267ce1cbe7b34a4efc7bf53bd910084e37cc40f02ddd5a1bb9d8e938e766c770cf2fbf58ddca26a2a9689af2d1ae33"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) getsockopt$IPT_SO_GET_REVISION_MATCH(r8, 0x0, 0x42, &(0x7f0000000300)={'ipvs\x00'}, &(0x7f0000000340)=0x1e) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @empty}}}, &(0x7f0000000240)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000280)={0x6, 0x8200, 0x3, 0x7, r10}, &(0x7f00000002c0)=0x10) bind(r8, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r8, 0x5) executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x767a, 0x0, 0x7ffffffe, 0x257, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x1000000, 0x10000004, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x144, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) ioctl$KVM_TDX_INIT_VM(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2000000000000000000000000000000007000000000000008f00000000000000060000000000000005000000000000003107000000000000020000000000000040000000000000000200000000000000724c0000020000000000000008000000000000000400000000000000030000000000000004000000000000000100000000000000ffffff7fffffffff4f000000000000006b00000000000000f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000100000017a300000400000003000000020000005a5c0000070000000000000000000000000000000400000094040000070000001f0000000300000009000000a20000000000000000000000000000000d0000000000000001000000ffff0000000000000001000001"]}) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) (async) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 33: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x767a, 0x0, 0x7ffffffe, 0x257, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x1000000, 0x10000004, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x144, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) ioctl$KVM_TDX_INIT_VM(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]}) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) (async) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 5: syz_open_dev$evdev(&(0x7f00000000c0), 0x2a, 0x1002) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xffff, 0x10200) setns(0xc9, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}}) write$tun(r1, &(0x7f0000000080)={@void, @val={0x1, 0x3, 0x1c, 0x10, 0x14, 0x6}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x40, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x0, 0x1}}, {0x1234, 0x4e24, 0x17, 0x0, @opaque="0123456789abcdef0123456789abcd"}}}, 0x35) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000100)=""/208) executing program 5: r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000000)={r2, 0xfffb}, 0x8) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = syz_open_dev$media(&(0x7f00000000c0), 0x72, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r7, 0x890c, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0xa, 0x8000000000002}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r10 = dup3(r9, r8, 0x0) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r11, 0x4004743b, 0x0) r12 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102000000ff6a05df0040000102030109022d00010104400009040001010301030409210800410122f50209058103400004511eddc83c72e4b308e1b1"], &(0x7f0000000180)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x5b0, 0x2, 0x10, 0x5, 0xff, 0xf}, 0x3e, &(0x7f0000000900)={0x5, 0xf, 0x3e, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x28, 0xde, 0x80, 0x5, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x8, 0x8, 0x800}, @ssp_cap={0x24, 0x10, 0xa, 0xff, 0x6, 0xb0f, 0xff0f, 0x8001, [0x0, 0xcf, 0xcf, 0xff003f, 0xff8100, 0x3f30]}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x415}}]}) syz_usb_control_io$hid(r12, &(0x7f0000000640)={0x24, &(0x7f0000000440)={0x20, 0x24, 0xc2, {0xc2, 0x23, "692699e7b63b9ec758eb4aaed4e7322d4ed232b05bc38cb1456222f41c99366ceeb3eb2e1b59b354abbed8e1f13651ea111df51383ddb6e2e3e5df4518c0eab79027f1ef50b489c0b884803be33809f271bef3a3b13b0212e65f1d6f723a8ef695f4837b595623040620b40bf444abe38b86d21d0a9b37bcb45dc282980ef4e980d2e31047492140180291f47ac3387671b5cfd0aa48b0ba3603b9dcbd2a837082772ae3762b36226b5f36a32d32650d18663b426e53261bfc5ccd2d69acd7e6"}}, &(0x7f0000000540)={0x0, 0x3, 0x6a, @string={0x6a, 0x3, "d70736c3c4072dd886331c1443f4cc277cd55277b27cab506d469e3995ea3fd1a330451614112b6cf9aa6a500d089f6ffca8766840a3e58eaab63e5c0aefbbb75d1251465034a4eda4f864ee642c201af3686a4b695a7f17020c9ea503a959da2a044b793e516982"}}, &(0x7f00000005c0)={0x0, 0x22, 0x26, {[@global=@item_4={0x3, 0x1, 0x4, "efac9aa9"}, @main=@item_012={0x1, 0x0, 0xa, 'Z'}, @main=@item_4={0x3, 0x0, 0x8, "6e893f67"}, @local=@item_4={0x3, 0x2, 0x3, "1a659697"}, @global=@item_4={0x3, 0x1, 0xa, "d7b7c467"}, @local=@item_4={0x3, 0x2, 0x7, "483e259a"}, @main=@item_4={0x3, 0x0, 0x9, "3cfdd948"}, @global=@item_012={0x2, 0x1, 0x7, "9b39"}, @local=@item_012={0x2, 0x2, 0x9, 'Lc'}]}}, &(0x7f0000000600)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x6, 0x1, {0x22, 0x427}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000680)={0x20, 0x3, 0x9d, "2262e1cd56e97ca9530a19d2ec5b1d677a800201ce443cc1453dab7541194b59a7d962510681084cf6e077f9287f3346fc2421c83c4003651bc634acb604155c95715f942cc954870a1db612d2d9eb2a0564b87db4340851714de253e237944b6f3e7ccaf4ea087724a3cdee36170e0d137899321975bd66b0823b3e9776f24fce7134f0fda8d973a26c42a85143c7ccc168a4b7e10634559c5f277d03"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000007c0)={0x20, 0x1, 0x83, "ac6f4c92e56a51f7b584cc38362624cbd35d9eed62603153b070b9b694b4e32a305becb6a0183f261887329f1fe3b88d6566b4ca6fab3ced4b4fc24963da9fc3d6279d91be213de8c65cbbb695dcf2b3ba32fcf002c78654423b0d313a78b386e9259b27ade8b4eb6184b3650868db5585691151fb53e512168d5d015e403c69bbdd84"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x16}}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x1058, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x8ab7, 0x4, 0x4, 0x804, 0x7, 0x4, 0x120000, 0x5, 0x0, 0x8, 0x5, 0x2, 0xfffffffffffffffe, 0x101, 0x3, 0x1], 0x8000000, 0x141200}) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000fb0b0f883411eadb0000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c841}, 0x4008094) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r6, 0xae80, 0x0) executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r0, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40002062, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x88042, 0x0) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$sock(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x4f, 0x100}}], 0x18}, 0x2000c004) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x406, r3) recvfrom$l2tp(r4, &(0x7f0000000540)=""/242, 0xf2, 0x2000, &(0x7f0000000640)={0x2, 0x0, @dev}, 0x10) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xa, 0x0, 0x0, 0x7995}, 0x8416, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000b80)={0x2020, 0x0, 0x0, 0x0}, 0x2020) lstat(&(0x7f0000000040)='./sys_mount/block/loop0/queue/scheduler\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r8, r7, &(0x7f0000002080)=0x3a, 0x23b) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x1, 0x0, 0xfffc}}, 0xffffffffffffffd5}}, 0x2) r9 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@filename='./sys_mount\x00', r6, 0x0) write$P9_RSTATu(r1, &(0x7f0000000240)={0x2d2, 0x7d, 0x1, {{0x500, 0xfa, 0x0, 0x6a, {0x40, 0x0, 0x6}, 0x10000000, 0x2000000, 0xfffffffc, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00'/31, 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xfb\xe1a\xe9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x5e, '\xf8\xf6~\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x9d,;\x9e\x1dR\xc3\xd6\xda\x9b\xf1\x99V\x88\xda\xcel\xde{\xa4\xa4\x00\xb4\xb0\xb4\xdb\xe6Od\xb1\xd6?&ym\xcb\xecI\x86#\xd6\xa88\xc6\x9ai\xdf\xcc\x9c\xddY\x06\xf1t\xa6f\xa8R\x9aEw4\a\xdb\xda\xb2\x88[\xaf\x05\x00\x00\x00\x00\x00'}, 0x1c3, 'odev-n\xb1{#\x00\xf9\xda\xa1\xee#&n\xcf\x85\xfe\xa6^\xb2\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\xbd\x7f=\x7f)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x01\x00\x00\x00\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\xcf>\xe3\x88@\x02\xa9\x1cTR\x8b\x80z\x89\xca\x18M\x16d_\x06\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xdbV\xc5}}\xc6&\xe4\xc7\x03\xf1\xc6\x91\xd5D\xb2\xaf\xc46\x11\xa1\xc4\xa3\xa39\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x1fu7y|\xe1\xe4\x11\xea\x91\x8e\xbd\x88\x8c\x1e\x15k\x84V\x93\x1d.\xa7&\xba\x96\t\xd5\x1aA\xdd\xb2\xd5\x0f\x1e|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9G\x8f}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00\x00\x00\x00\x00\x00\x00ta\xb0\xcc\xaa\xa1\x93:\x0e\x8a\x82k\x14\xd4\xfc\xb2\x98\x9f\xfa\xaa\x1a\xcf\xfa\x80T\xe9U\x9d\t\x00\x00\x00\xa0\v\x03\xb3\xd8\x0eU$\xf8I_\xee~\x8d\x88\xcbZ\x04\x03\x02\xac\xb0\xd1&\x0f%\x84\xdbH\xe8\xd9\x06N\x8c\xe1x\xce9n\x85\xb9~H\x86D@I\x81\x0f%\xf1\xce\xca\x97]\xebI\x1a\x12[\xf0\xd7/\x87\xcc\x10\xb0\x15N\b\x93m\xaa\xdd\x8b\x1e\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00', r5, 0x0, r6}}, 0x2d2) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40046302, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000240)={0x74, 0x0, 0x54}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000440)="2ef2dd0500800000260f8e1b0000000f23d00f21f835000000010f23f836362e6726af440f20c0350e000000440f22c0b805000000b900980000b805000000b96d0000000f01d90f01c9c4e27d933438410f79d226450f01cb660f013b", 0x5d}], 0x1, 0x0, 0x0, 0x0) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f00000000c0)={0x6}, 0x1) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fd3000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x2e, 0x0, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) r8 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r8, 0x40305652, &(0x7f0000000080)={0xffff, 0x3, 0x6, 0x489, 0x7, 0x1, 0x4}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) executing program 9: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x80, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000280), 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) executing program 7: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x80, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000280), 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) (fail_nth: 1) executing program 7: syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x80) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) setsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f00000000c0)="870846434a6781d4c2f7162861afce643bf97a9e76b6e6dd203b84c3c7ef96862be316eea573cf995c7a483f0891a64c9ce0af25707f545bb66fa7b2d557ad140b6ee2d2c76dc4dba4429ca9f2829b322825d516ac13c27d9ef49d03f06ff4e391594234efb2315fbffff0cbb7e1b17f1b342d199326eff644fd633f8a760551ad52fbccbf11738bec951ad2c1e56783a08a737cfb46f7152d3081ba0a8235c9eb2e70f243c4467b19cc43d2309adfa8252e809746729703e7698f23bb318eb81aac71405f1fb9fed1faf306fd49d057719a5c2ae215665e560e3a3b14d35dc59c7d5d79fb", 0xe5) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@empty, @in=@private=0xa010101, 0x4, 0x0, 0x0, 0x0, 0x2, 0x20}, {0x0, 0xffffffffffffffff, 0x6}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x41}, 0x4d2, 0x6c}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0xb}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400000}}, 0xe8) (async) r4 = epoll_create(0x7) (async) r5 = epoll_create1(0x0) r6 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180)) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000040)) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000003c0)) (async) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000080)={0x1008}) (async) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) syz_open_procfs(0x0, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r9, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) socket(0x22, 0x6, 0x9) (async) bind$can_raw(r9, &(0x7f0000000080)={0x1d, r10}, 0x10) (async) write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$audio1(0xffffffffffffff9c, &(0x7f00000001c0), 0x208000, 0x0) (async) ioctl$SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000200)) executing program 9: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xa0}}, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x80, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000280), 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0105b08, &(0x7f0000000040)) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=6m3s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 14, 14, 11, 30, 20, 8, 12, 14, 5, 26, 21] detailed listing: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000005600)={0x2, &(0x7f00000055c0)=[{0x5, 0x7, 0x1}, {0x6, 0x2, 0x5, 0x5}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x50880) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f0000003900)=""/151, 0x97}, {&(0x7f0000000040)=""/122, 0x7a}, {&(0x7f0000000240)=""/23, 0x17}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000000180)=""/27, 0x1b}], 0x7}, 0x9}, {{0x0, 0x0, 0x0}, 0xb91b}], 0x4, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) unshare(0x2c020400) r2 = msgget$private(0x0, 0x240) msgsnd(r2, &(0x7f0000000880)={0x2, "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"}, 0xfd1, 0x0) msgrcv(0x0, &(0x7f0000000000), 0xfffffcef, 0x0, 0x4800) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r3 = socket$inet(0x2, 0x7, 0x3) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r7, 0x1, 0xffffffff, 0x0, {{}, {0x0, 0x6}}}, 0x1c}}, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff97f, 0x2, 0x0, 0x4, 0x0, 0xffffffff, 0x10}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) futex(&(0x7f0000000cc0)=0x1, 0xd, 0x0, &(0x7f0000000d40), 0x0, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_connect$uac1(0x2, 0x9a, &(0x7f0000000500)=ANY=[@ANYBLOB="1201010200000020050b431740000102030109028800030109403f0904000000010100000a2401d2000a00020102090401000001020000090401010101020000072401080805000f2402020002ff0f00f441a4440fb209050109ff037808ba072501080403000904020000010200000904020101010200000b240201fc030801371fc807240108050210090582092000030201072501000e03008fe939b6dc009321c2d3bdaf318247e49400513805d256e80097b829823f27d0c3e77f267ce1cbe7b34a4efc7bf53bd910084e37cc40f02ddd5a1bb9d8e938e766c770cf2fbf58ddca26a2a9689af2d1ae33"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) getsockopt$IPT_SO_GET_REVISION_MATCH(r8, 0x0, 0x42, &(0x7f0000000300)={'ipvs\x00'}, &(0x7f0000000340)=0x1e) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @empty}}}, &(0x7f0000000240)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000280)={0x6, 0x8200, 0x3, 0x7, r10}, &(0x7f00000002c0)=0x10) bind(r8, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r8, 0x5) executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x767a, 0x0, 0x7ffffffe, 0x257, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x1000000, 0x10000004, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x144, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) ioctl$KVM_TDX_INIT_VM(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]}) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) (async) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 33: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x767a, 0x0, 0x7ffffffe, 0x257, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x1000000, 0x10000004, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x144, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) ioctl$KVM_TDX_INIT_VM(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]}) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) (async) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 5: syz_open_dev$evdev(&(0x7f00000000c0), 0x2a, 0x1002) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xffff, 0x10200) setns(0xc9, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}}) write$tun(r1, &(0x7f0000000080)={@void, @val={0x1, 0x3, 0x1c, 0x10, 0x14, 0x6}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x40, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x0, 0x1}}, {0x1234, 0x4e24, 0x17, 0x0, @opaque="0123456789abcdef0123456789abcd"}}}, 0x35) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000100)=""/208) executing program 5: r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000000)={r2, 0xfffb}, 0x8) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = syz_open_dev$media(&(0x7f00000000c0), 0x72, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r7, 0x890c, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0xa, 0x8000000000002}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r10 = dup3(r9, r8, 0x0) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r11, 0x4004743b, 0x0) r12 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102000000ff6a05df0040000102030109022d00010104400009040001010301030409210800410122f50209058103400004511eddc83c72e4b308e1b1"], &(0x7f0000000180)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x5b0, 0x2, 0x10, 0x5, 0xff, 0xf}, 0x3e, &(0x7f0000000900)={0x5, 0xf, 0x3e, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x28, 0xde, 0x80, 0x5, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x8, 0x8, 0x800}, @ssp_cap={0x24, 0x10, 0xa, 0xff, 0x6, 0xb0f, 0xff0f, 0x8001, [0x0, 0xcf, 0xcf, 0xff003f, 0xff8100, 0x3f30]}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x415}}]}) syz_usb_control_io$hid(r12, &(0x7f0000000640)={0x24, &(0x7f0000000440)={0x20, 0x24, 0xc2, {0xc2, 0x23, "692699e7b63b9ec758eb4aaed4e7322d4ed232b05bc38cb1456222f41c99366ceeb3eb2e1b59b354abbed8e1f13651ea111df51383ddb6e2e3e5df4518c0eab79027f1ef50b489c0b884803be33809f271bef3a3b13b0212e65f1d6f723a8ef695f4837b595623040620b40bf444abe38b86d21d0a9b37bcb45dc282980ef4e980d2e31047492140180291f47ac3387671b5cfd0aa48b0ba3603b9dcbd2a837082772ae3762b36226b5f36a32d32650d18663b426e53261bfc5ccd2d69acd7e6"}}, &(0x7f0000000540)={0x0, 0x3, 0x6a, @string={0x6a, 0x3, "d70736c3c4072dd886331c1443f4cc277cd55277b27cab506d469e3995ea3fd1a330451614112b6cf9aa6a500d089f6ffca8766840a3e58eaab63e5c0aefbbb75d1251465034a4eda4f864ee642c201af3686a4b695a7f17020c9ea503a959da2a044b793e516982"}}, &(0x7f00000005c0)={0x0, 0x22, 0x26, {[@global=@item_4={0x3, 0x1, 0x4, "efac9aa9"}, @main=@item_012={0x1, 0x0, 0xa, 'Z'}, @main=@item_4={0x3, 0x0, 0x8, "6e893f67"}, @local=@item_4={0x3, 0x2, 0x3, "1a659697"}, @global=@item_4={0x3, 0x1, 0xa, "d7b7c467"}, @local=@item_4={0x3, 0x2, 0x7, "483e259a"}, @main=@item_4={0x3, 0x0, 0x9, "3cfdd948"}, @global=@item_012={0x2, 0x1, 0x7, "9b39"}, @local=@item_012={0x2, 0x2, 0x9, 'Lc'}]}}, &(0x7f0000000600)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x6, 0x1, {0x22, 0x427}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000680)={0x20, 0x3, 0x9d, "2262e1cd56e97ca9530a19d2ec5b1d677a800201ce443cc1453dab7541194b59a7d962510681084cf6e077f9287f3346fc2421c83c4003651bc634acb604155c95715f942cc954870a1db612d2d9eb2a0564b87db4340851714de253e237944b6f3e7ccaf4ea087724a3cdee36170e0d137899321975bd66b0823b3e9776f24fce7134f0fda8d973a26c42a85143c7ccc168a4b7e10634559c5f277d03"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000007c0)={0x20, 0x1, 0x83, "ac6f4c92e56a51f7b584cc38362624cbd35d9eed62603153b070b9b694b4e32a305becb6a0183f261887329f1fe3b88d6566b4ca6fab3ced4b4fc24963da9fc3d6279d91be213de8c65cbbb695dcf2b3ba32fcf002c78654423b0d313a78b386e9259b27ade8b4eb6184b3650868db5585691151fb53e512168d5d015e403c69bbdd84"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x16}}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x1058, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x8ab7, 0x4, 0x4, 0x804, 0x7, 0x4, 0x120000, 0x5, 0x0, 0x8, 0x5, 0x2, 0xfffffffffffffffe, 0x101, 0x3, 0x1], 0x8000000, 0x141200}) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000fb0b0f883411eadb0000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c841}, 0x4008094) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r6, 0xae80, 0x0) executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r0, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40002062, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x88042, 0x0) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$sock(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x4f, 0x100}}], 0x18}, 0x2000c004) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x406, r3) recvfrom$l2tp(r4, &(0x7f0000000540)=""/242, 0xf2, 0x2000, &(0x7f0000000640)={0x2, 0x0, @dev}, 0x10) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xa, 0x0, 0x0, 0x7995}, 0x8416, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000b80)={0x2020, 0x0, 0x0, 0x0}, 0x2020) lstat(&(0x7f0000000040)='./sys_mount/block/loop0/queue/scheduler\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r8, r7, &(0x7f0000002080)=0x3a, 0x23b) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x1, 0x0, 0xfffc}}, 0xffffffffffffffd5}}, 0x2) r9 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@filename='./sys_mount\x00', r6, 0x0) write$P9_RSTATu(r1, &(0x7f0000000240)={0x2d2, 0x7d, 0x1, {{0x500, 0xfa, 0x0, 0x6a, {0x40, 0x0, 0x6}, 0x10000000, 0x2000000, 0xfffffffc, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00'/31, 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xfb\xe1a\xe9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x5e, '\xf8\xf6~\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x9d,;\x9e\x1dR\xc3\xd6\xda\x9b\xf1\x99V\x88\xda\xcel\xde{\xa4\xa4\x00\xb4\xb0\xb4\xdb\xe6Od\xb1\xd6?&ym\xcb\xecI\x86#\xd6\xa88\xc6\x9ai\xdf\xcc\x9c\xddY\x06\xf1t\xa6f\xa8R\x9aEw4\a\xdb\xda\xb2\x88[\xaf\x05\x00\x00\x00\x00\x00'}, 0x1c3, 'odev-n\xb1{#\x00\xf9\xda\xa1\xee#&n\xcf\x85\xfe\xa6^\xb2\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\xbd\x7f=\x7f)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x01\x00\x00\x00\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\xcf>\xe3\x88@\x02\xa9\x1cTR\x8b\x80z\x89\xca\x18M\x16d_\x06\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xdbV\xc5}}\xc6&\xe4\xc7\x03\xf1\xc6\x91\xd5D\xb2\xaf\xc46\x11\xa1\xc4\xa3\xa39\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x1fu7y|\xe1\xe4\x11\xea\x91\x8e\xbd\x88\x8c\x1e\x15k\x84V\x93\x1d.\xa7&\xba\x96\t\xd5\x1aA\xdd\xb2\xd5\x0f\x1e|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9G\x8f}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00\x00\x00\x00\x00\x00\x00ta\xb0\xcc\xaa\xa1\x93:\x0e\x8a\x82k\x14\xd4\xfc\xb2\x98\x9f\xfa\xaa\x1a\xcf\xfa\x80T\xe9U\x9d\t\x00\x00\x00\xa0\v\x03\xb3\xd8\x0eU$\xf8I_\xee~\x8d\x88\xcbZ\x04\x03\x02\xac\xb0\xd1&\x0f%\x84\xdbH\xe8\xd9\x06N\x8c\xe1x\xce9n\x85\xb9~H\x86D@I\x81\x0f%\xf1\xce\xca\x97]\xebI\x1a\x12[\xf0\xd7/\x87\xcc\x10\xb0\x15N\b\x93m\xaa\xdd\x8b\x1e\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00', r5, 0x0, r6}}, 0x2d2) executing program 8: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/rfkill/rfkill0/state\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)="3bbbcdfb", 0x4) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a94ea0609eebd008300000000"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x9, 0x6, &(0x7f0000000000)='BBBBBB') executing program 8: r0 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) ioctl$MTDFILEMODE(r0, 0x4d13, 0x1) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0xfdef) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x2, 0x2d7, 0x8000000000000000, 0x8000000000000000, 0x5, 0x0, 0x4, 0x401, 0x2, 0x5, 0x8d], 0xeeee8000, 0x284e97}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)={0x9, 0x0, [{0x8d1}, {0x331, 0x0, 0x1}, {0x860, 0x0, 0x4}, {0x119, 0x0, 0xd}, {0x2f7, 0x0, 0x5}, {0x204, 0x0, 0x8}, {0x388, 0x0, 0x8}, {0x400000b6, 0x0, 0x8}, {0x630, 0x0, 0x3}]}) executing program 8: mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000500)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, 0x0, 0x90) (async) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800}]}, &(0x7f0000000200)=0x10) (async) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, 0x0, 0x0) (async) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001ec0), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000100)={0x5, {0x521, 0x1, 0x7, 0x4e0}, {0x6, 0x7, 0x0, 0x1}, {0xffffffe7, 0x3}}) executing program 8: openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0x7fffffff}}], [], 0x6b}}) syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c0001020301090229000100000000090400000002020100050200000005"], 0x0) executing program 9: r0 = syz_open_dev$vbi(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000001c0)={0x0, 0x1, 0x10, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90e, 0x6, '\x00', @p_u32=0x0}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="68fa140000002d000b00fdffffff00000000090000000457cedd575eda2d1ebc87551cefb27728412ab5647e7be52804c29a44e8274425fcbee123a2e0958a8dfcc3713092485047c27a1711ac8d33b2987199bdb53798002bb1203841c52b7bc7f6629e71d6cbdb1b647b6fbe878dd117e3621a5477dc"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000040)=[0x20, 0x4, 0x40005002, 0xffff32eb, 0x2, 0xffffdff9, 0x2d7b, 0x401, 0x0, 0x3, 0x0, 0x3, 0xfe09, 0xd2, 0x80000002], 0x1, 0x4000003}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000078000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000004c000480480001800a0001006d61746368000000380002800e000100636f6e6e627974657300000008000240000000001c00030000"], 0x100}}, 0x0) syz_usb_connect$uac1(0x0, 0xfe, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x1, 0x0, 0x8a, 0x40, 0x83}, 0x20, &(0x7f00000001c0)={0x5, 0xf, 0x20, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x6, 0xfc01}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x1e, 0xf2, 0xfd9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x2, 0x1, 0x3}]}, 0x6, [{0xd7, &(0x7f0000000200)=@string={0xd7, 0x3, "ffef3fe5e1b918d91fbe45e55d0299cbad736ba0a610296e178d82758e8ed71341807ba6d59661ace229161c06705061cc59700208b2d5d63bbb955e9dbe53f39160894998933fb852044def4fc37c2b7fb276e21dc862cbfdbdb7f430225270b557b2559bc9705722eaf1cfe8328218cad684327d2b94e0b34e248b2c137a65cce4cd01f04f0106cff86a033c188f39ff68d878fc43bab81f472e9e679c484cd8c4b6c2cdf1bd930d4ced0340da0cb3d959048d7ae6afbf250e0be6c492f7e5f56c7e748e844254d7d4e4664874bc4fbbf1740fb9"}}, {0x6f, &(0x7f0000000300)=@string={0x6f, 0x3, "52459ffd4fd96b283eb160d5ef25b35eff9b1818b8db44f6b5a7e38883137a5d531ab63c97be90f0b5b08ea6571d9f27c283742a6869e8906d4df3c5122d32b054d2fe64b3754390e23a6f02842c5dcedea79956f027d5c1e86a1609d2e05a3e2af01043b3aaab04aa86357de6"}}, {0xe5, &(0x7f0000000380)=@string={0xe5, 0x3, "40714ac23946d9dbeff497794047ee097b162434796b49bc9008b0eefa5bbcde466f315b6670f7d1371a9d0fb17fc4fb180cc25c64c45ce3f901ca7d71c0b9367c3a063b6c5d8320afaf9430950b34de2e8f4b4ea7dad4fae776acfcbb44e7eb25850ee02adaa8b03134f9800b185028d64f0661a0b5d8bbdca81e5b9098b3700e30544d27e735cd3e1ec4fc2dbad70378cf43435c92edda48008a4a50c1c25fe3ae981753913490ca28e23ba93a209e3b0dd5a64b6d0e849e93ab433f7025a3e958987a73dfe59d6662a23c6db8515cb90deb3a2aca29047956e06c4c119c18b9723d"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x420}}]}) syz_open_dev$vbi(&(0x7f0000000380), 0x0, 0x2) (async) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000001c0)={0x0, 0x1, 0x10, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90e, 0x6, '\x00', @p_u32=0x0}}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="68fa140000002d000b00fdffffff00000000090000000457cedd575eda2d1ebc87551cefb27728412ab5647e7be52804c29a44e8274425fcbee123a2e0958a8dfcc3713092485047c27a1711ac8d33b2987199bdb53798002bb1203841c52b7bc7f6629e71d6cbdb1b647b6fbe878dd117e3621a5477dc"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) (async) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) (async) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000040)=[0x20, 0x4, 0x40005002, 0xffff32eb, 0x2, 0xffffdff9, 0x2d7b, 0x401, 0x0, 0x3, 0x0, 0x3, 0xfe09, 0xd2, 0x80000002], 0x1, 0x4000003}) (async) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000078000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000004c000480480001800a0001006d61746368000000380002800e000100636f6e6e627974657300000008000240000000001c00030000"], 0x100}}, 0x0) (async) syz_usb_connect$uac1(0x0, 0xfe, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x1, 0x0, 0x8a, 0x40, 0x83}, 0x20, &(0x7f00000001c0)={0x5, 0xf, 0x20, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x6, 0xfc01}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x1e, 0xf2, 0xfd9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x2, 0x1, 0x3}]}, 0x6, [{0xd7, &(0x7f0000000200)=@string={0xd7, 0x3, "ffef3fe5e1b918d91fbe45e55d0299cbad736ba0a610296e178d82758e8ed71341807ba6d59661ace229161c06705061cc59700208b2d5d63bbb955e9dbe53f39160894998933fb852044def4fc37c2b7fb276e21dc862cbfdbdb7f430225270b557b2559bc9705722eaf1cfe8328218cad684327d2b94e0b34e248b2c137a65cce4cd01f04f0106cff86a033c188f39ff68d878fc43bab81f472e9e679c484cd8c4b6c2cdf1bd930d4ced0340da0cb3d959048d7ae6afbf250e0be6c492f7e5f56c7e748e844254d7d4e4664874bc4fbbf1740fb9"}}, {0x6f, &(0x7f0000000300)=@string={0x6f, 0x3, "52459ffd4fd96b283eb160d5ef25b35eff9b1818b8db44f6b5a7e38883137a5d531ab63c97be90f0b5b08ea6571d9f27c283742a6869e8906d4df3c5122d32b054d2fe64b3754390e23a6f02842c5dcedea79956f027d5c1e86a1609d2e05a3e2af01043b3aaab04aa86357de6"}}, {0xe5, &(0x7f0000000380)=@string={0xe5, 0x3, "40714ac23946d9dbeff497794047ee097b162434796b49bc9008b0eefa5bbcde466f315b6670f7d1371a9d0fb17fc4fb180cc25c64c45ce3f901ca7d71c0b9367c3a063b6c5d8320afaf9430950b34de2e8f4b4ea7dad4fae776acfcbb44e7eb25850ee02adaa8b03134f9800b185028d64f0661a0b5d8bbdca81e5b9098b3700e30544d27e735cd3e1ec4fc2dbad70378cf43435c92edda48008a4a50c1c25fe3ae981753913490ca28e23ba93a209e3b0dd5a64b6d0e849e93ab433f7025a3e958987a73dfe59d6662a23c6db8515cb90deb3a2aca29047956e06c4c119c18b9723d"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x420}}]}) (async) executing program 9: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c74, 0x40040, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1533, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'lo\x00'}) clock_gettime(0x17, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000080)={0x2b, 0x0, 0xffffffc5}) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) program crashed: INFO: task hung in nfsd_nl_listener_set_doit bisect: the chunk can be dropped bisect: split chunks (needed=true): <6>, <6> bisect: split chunk #0 of len 6 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m2s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 30, 20, 8, 12, 14, 5, 26, 21] detailed listing: executing program 5: syz_open_dev$evdev(&(0x7f00000000c0), 0x2a, 0x1002) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xffff, 0x10200) setns(0xc9, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}}) write$tun(r1, &(0x7f0000000080)={@void, @val={0x1, 0x3, 0x1c, 0x10, 0x14, 0x6}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x40, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x0, 0x1}}, {0x1234, 0x4e24, 0x17, 0x0, @opaque="0123456789abcdef0123456789abcd"}}}, 0x35) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000100)=""/208) executing program 5: r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000000)={r2, 0xfffb}, 0x8) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = syz_open_dev$media(&(0x7f00000000c0), 0x72, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r7, 0x890c, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0xa, 0x8000000000002}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r10 = dup3(r9, r8, 0x0) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r11, 0x4004743b, 0x0) r12 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102000000ff6a05df0040000102030109022d00010104400009040001010301030409210800410122f50209058103400004511eddc83c72e4b308e1b1"], &(0x7f0000000180)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x5b0, 0x2, 0x10, 0x5, 0xff, 0xf}, 0x3e, &(0x7f0000000900)={0x5, 0xf, 0x3e, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x28, 0xde, 0x80, 0x5, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x8, 0x8, 0x800}, @ssp_cap={0x24, 0x10, 0xa, 0xff, 0x6, 0xb0f, 0xff0f, 0x8001, [0x0, 0xcf, 0xcf, 0xff003f, 0xff8100, 0x3f30]}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x415}}]}) syz_usb_control_io$hid(r12, &(0x7f0000000640)={0x24, &(0x7f0000000440)={0x20, 0x24, 0xc2, {0xc2, 0x23, "692699e7b63b9ec758eb4aaed4e7322d4ed232b05bc38cb1456222f41c99366ceeb3eb2e1b59b354abbed8e1f13651ea111df51383ddb6e2e3e5df4518c0eab79027f1ef50b489c0b884803be33809f271bef3a3b13b0212e65f1d6f723a8ef695f4837b595623040620b40bf444abe38b86d21d0a9b37bcb45dc282980ef4e980d2e31047492140180291f47ac3387671b5cfd0aa48b0ba3603b9dcbd2a837082772ae3762b36226b5f36a32d32650d18663b426e53261bfc5ccd2d69acd7e6"}}, &(0x7f0000000540)={0x0, 0x3, 0x6a, @string={0x6a, 0x3, "d70736c3c4072dd886331c1443f4cc277cd55277b27cab506d469e3995ea3fd1a330451614112b6cf9aa6a500d089f6ffca8766840a3e58eaab63e5c0aefbbb75d1251465034a4eda4f864ee642c201af3686a4b695a7f17020c9ea503a959da2a044b793e516982"}}, &(0x7f00000005c0)={0x0, 0x22, 0x26, {[@global=@item_4={0x3, 0x1, 0x4, "efac9aa9"}, @main=@item_012={0x1, 0x0, 0xa, 'Z'}, @main=@item_4={0x3, 0x0, 0x8, "6e893f67"}, @local=@item_4={0x3, 0x2, 0x3, "1a659697"}, @global=@item_4={0x3, 0x1, 0xa, "d7b7c467"}, @local=@item_4={0x3, 0x2, 0x7, "483e259a"}, @main=@item_4={0x3, 0x0, 0x9, "3cfdd948"}, @global=@item_012={0x2, 0x1, 0x7, "9b39"}, @local=@item_012={0x2, 0x2, 0x9, 'Lc'}]}}, &(0x7f0000000600)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x6, 0x1, {0x22, 0x427}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000680)={0x20, 0x3, 0x9d, "2262e1cd56e97ca9530a19d2ec5b1d677a800201ce443cc1453dab7541194b59a7d962510681084cf6e077f9287f3346fc2421c83c4003651bc634acb604155c95715f942cc954870a1db612d2d9eb2a0564b87db4340851714de253e237944b6f3e7ccaf4ea087724a3cdee36170e0d137899321975bd66b0823b3e9776f24fce7134f0fda8d973a26c42a85143c7ccc168a4b7e10634559c5f277d03"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000007c0)={0x20, 0x1, 0x83, "ac6f4c92e56a51f7b584cc38362624cbd35d9eed62603153b070b9b694b4e32a305becb6a0183f261887329f1fe3b88d6566b4ca6fab3ced4b4fc24963da9fc3d6279d91be213de8c65cbbb695dcf2b3ba32fcf002c78654423b0d313a78b386e9259b27ade8b4eb6184b3650868db5585691151fb53e512168d5d015e403c69bbdd84"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x16}}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x1058, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x8ab7, 0x4, 0x4, 0x804, 0x7, 0x4, 0x120000, 0x5, 0x0, 0x8, 0x5, 0x2, 0xfffffffffffffffe, 0x101, 0x3, 0x1], 0x8000000, 0x141200}) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000fb0b0f883411eadb0000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c841}, 0x4008094) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r6, 0xae80, 0x0) executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r0, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40002062, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x88042, 0x0) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$sock(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x4f, 0x100}}], 0x18}, 0x2000c004) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x406, r3) recvfrom$l2tp(r4, &(0x7f0000000540)=""/242, 0xf2, 0x2000, &(0x7f0000000640)={0x2, 0x0, @dev}, 0x10) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xa, 0x0, 0x0, 0x7995}, 0x8416, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000b80)={0x2020, 0x0, 0x0, 0x0}, 0x2020) lstat(&(0x7f0000000040)='./sys_mount/block/loop0/queue/scheduler\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r8, r7, &(0x7f0000002080)=0x3a, 0x23b) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x1, 0x0, 0xfffc}}, 0xffffffffffffffd5}}, 0x2) r9 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@filename='./sys_mount\x00', r6, 0x0) write$P9_RSTATu(r1, &(0x7f0000000240)={0x2d2, 0x7d, 0x1, {{0x500, 0xfa, 0x0, 0x6a, {0x40, 0x0, 0x6}, 0x10000000, 0x2000000, 0xfffffffc, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00'/31, 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xfb\xe1a\xe9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x5e, '\xf8\xf6~\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x9d,;\x9e\x1dR\xc3\xd6\xda\x9b\xf1\x99V\x88\xda\xcel\xde{\xa4\xa4\x00\xb4\xb0\xb4\xdb\xe6Od\xb1\xd6?&ym\xcb\xecI\x86#\xd6\xa88\xc6\x9ai\xdf\xcc\x9c\xddY\x06\xf1t\xa6f\xa8R\x9aEw4\a\xdb\xda\xb2\x88[\xaf\x05\x00\x00\x00\x00\x00'}, 0x1c3, 'odev-n\xb1{#\x00\xf9\xda\xa1\xee#&n\xcf\x85\xfe\xa6^\xb2\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\xbd\x7f=\x7f)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x01\x00\x00\x00\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\xcf>\xe3\x88@\x02\xa9\x1cTR\x8b\x80z\x89\xca\x18M\x16d_\x06\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xdbV\xc5}}\xc6&\xe4\xc7\x03\xf1\xc6\x91\xd5D\xb2\xaf\xc46\x11\xa1\xc4\xa3\xa39\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x1fu7y|\xe1\xe4\x11\xea\x91\x8e\xbd\x88\x8c\x1e\x15k\x84V\x93\x1d.\xa7&\xba\x96\t\xd5\x1aA\xdd\xb2\xd5\x0f\x1e|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9G\x8f}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00\x00\x00\x00\x00\x00\x00ta\xb0\xcc\xaa\xa1\x93:\x0e\x8a\x82k\x14\xd4\xfc\xb2\x98\x9f\xfa\xaa\x1a\xcf\xfa\x80T\xe9U\x9d\t\x00\x00\x00\xa0\v\x03\xb3\xd8\x0eU$\xf8I_\xee~\x8d\x88\xcbZ\x04\x03\x02\xac\xb0\xd1&\x0f%\x84\xdbH\xe8\xd9\x06N\x8c\xe1x\xce9n\x85\xb9~H\x86D@I\x81\x0f%\xf1\xce\xca\x97]\xebI\x1a\x12[\xf0\xd7/\x87\xcc\x10\xb0\x15N\b\x93m\xaa\xdd\x8b\x1e\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00', r5, 0x0, r6}}, 0x2d2) executing program 8: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/rfkill/rfkill0/state\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)="3bbbcdfb", 0x4) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a94ea0609eebd008300000000"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x9, 0x6, &(0x7f0000000000)='BBBBBB') executing program 8: r0 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) ioctl$MTDFILEMODE(r0, 0x4d13, 0x1) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0xfdef) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x2, 0x2d7, 0x8000000000000000, 0x8000000000000000, 0x5, 0x0, 0x4, 0x401, 0x2, 0x5, 0x8d], 0xeeee8000, 0x284e97}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)={0x9, 0x0, [{0x8d1}, {0x331, 0x0, 0x1}, {0x860, 0x0, 0x4}, {0x119, 0x0, 0xd}, {0x2f7, 0x0, 0x5}, {0x204, 0x0, 0x8}, {0x388, 0x0, 0x8}, {0x400000b6, 0x0, 0x8}, {0x630, 0x0, 0x3}]}) executing program 8: mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000500)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, 0x0, 0x90) (async) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800}]}, &(0x7f0000000200)=0x10) (async) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, 0x0, 0x0) (async) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001ec0), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000100)={0x5, {0x521, 0x1, 0x7, 0x4e0}, {0x6, 0x7, 0x0, 0x1}, {0xffffffe7, 0x3}}) executing program 8: openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0x7fffffff}}], [], 0x6b}}) syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c0001020301090229000100000000090400000002020100050200000005"], 0x0) executing program 9: r0 = syz_open_dev$vbi(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000001c0)={0x0, 0x1, 0x10, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90e, 0x6, '\x00', @p_u32=0x0}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="68fa140000002d000b00fdffffff00000000090000000457cedd575eda2d1ebc87551cefb27728412ab5647e7be52804c29a44e8274425fcbee123a2e0958a8dfcc3713092485047c27a1711ac8d33b2987199bdb53798002bb1203841c52b7bc7f6629e71d6cbdb1b647b6fbe878dd117e3621a5477dc"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000040)=[0x20, 0x4, 0x40005002, 0xffff32eb, 0x2, 0xffffdff9, 0x2d7b, 0x401, 0x0, 0x3, 0x0, 0x3, 0xfe09, 0xd2, 0x80000002], 0x1, 0x4000003}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000078000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000004c000480480001800a0001006d61746368000000380002800e000100636f6e6e627974657300000008000240000000001c00030000"], 0x100}}, 0x0) syz_usb_connect$uac1(0x0, 0xfe, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x1, 0x0, 0x8a, 0x40, 0x83}, 0x20, &(0x7f00000001c0)={0x5, 0xf, 0x20, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x6, 0xfc01}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x1e, 0xf2, 0xfd9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x2, 0x1, 0x3}]}, 0x6, [{0xd7, &(0x7f0000000200)=@string={0xd7, 0x3, "ffef3fe5e1b918d91fbe45e55d0299cbad736ba0a610296e178d82758e8ed71341807ba6d59661ace229161c06705061cc59700208b2d5d63bbb955e9dbe53f39160894998933fb852044def4fc37c2b7fb276e21dc862cbfdbdb7f430225270b557b2559bc9705722eaf1cfe8328218cad684327d2b94e0b34e248b2c137a65cce4cd01f04f0106cff86a033c188f39ff68d878fc43bab81f472e9e679c484cd8c4b6c2cdf1bd930d4ced0340da0cb3d959048d7ae6afbf250e0be6c492f7e5f56c7e748e844254d7d4e4664874bc4fbbf1740fb9"}}, {0x6f, &(0x7f0000000300)=@string={0x6f, 0x3, "52459ffd4fd96b283eb160d5ef25b35eff9b1818b8db44f6b5a7e38883137a5d531ab63c97be90f0b5b08ea6571d9f27c283742a6869e8906d4df3c5122d32b054d2fe64b3754390e23a6f02842c5dcedea79956f027d5c1e86a1609d2e05a3e2af01043b3aaab04aa86357de6"}}, {0xe5, &(0x7f0000000380)=@string={0xe5, 0x3, "40714ac23946d9dbeff497794047ee097b162434796b49bc9008b0eefa5bbcde466f315b6670f7d1371a9d0fb17fc4fb180cc25c64c45ce3f901ca7d71c0b9367c3a063b6c5d8320afaf9430950b34de2e8f4b4ea7dad4fae776acfcbb44e7eb25850ee02adaa8b03134f9800b185028d64f0661a0b5d8bbdca81e5b9098b3700e30544d27e735cd3e1ec4fc2dbad70378cf43435c92edda48008a4a50c1c25fe3ae981753913490ca28e23ba93a209e3b0dd5a64b6d0e849e93ab433f7025a3e958987a73dfe59d6662a23c6db8515cb90deb3a2aca29047956e06c4c119c18b9723d"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x420}}]}) syz_open_dev$vbi(&(0x7f0000000380), 0x0, 0x2) (async) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000001c0)={0x0, 0x1, 0x10, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90e, 0x6, '\x00', @p_u32=0x0}}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="68fa140000002d000b00fdffffff00000000090000000457cedd575eda2d1ebc87551cefb27728412ab5647e7be52804c29a44e8274425fcbee123a2e0958a8dfcc3713092485047c27a1711ac8d33b2987199bdb53798002bb1203841c52b7bc7f6629e71d6cbdb1b647b6fbe878dd117e3621a5477dc"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) (async) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) (async) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000040)=[0x20, 0x4, 0x40005002, 0xffff32eb, 0x2, 0xffffdff9, 0x2d7b, 0x401, 0x0, 0x3, 0x0, 0x3, 0xfe09, 0xd2, 0x80000002], 0x1, 0x4000003}) (async) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000078000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000004c000480480001800a0001006d61746368000000380002800e000100636f6e6e627974657300000008000240000000001c00030000"], 0x100}}, 0x0) (async) syz_usb_connect$uac1(0x0, 0xfe, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x1, 0x0, 0x8a, 0x40, 0x83}, 0x20, &(0x7f00000001c0)={0x5, 0xf, 0x20, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x6, 0xfc01}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x1e, 0xf2, 0xfd9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x2, 0x1, 0x3}]}, 0x6, [{0xd7, &(0x7f0000000200)=@string={0xd7, 0x3, "ffef3fe5e1b918d91fbe45e55d0299cbad736ba0a610296e178d82758e8ed71341807ba6d59661ace229161c06705061cc59700208b2d5d63bbb955e9dbe53f39160894998933fb852044def4fc37c2b7fb276e21dc862cbfdbdb7f430225270b557b2559bc9705722eaf1cfe8328218cad684327d2b94e0b34e248b2c137a65cce4cd01f04f0106cff86a033c188f39ff68d878fc43bab81f472e9e679c484cd8c4b6c2cdf1bd930d4ced0340da0cb3d959048d7ae6afbf250e0be6c492f7e5f56c7e748e844254d7d4e4664874bc4fbbf1740fb9"}}, {0x6f, &(0x7f0000000300)=@string={0x6f, 0x3, "52459ffd4fd96b283eb160d5ef25b35eff9b1818b8db44f6b5a7e38883137a5d531ab63c97be90f0b5b08ea6571d9f27c283742a6869e8906d4df3c5122d32b054d2fe64b3754390e23a6f02842c5dcedea79956f027d5c1e86a1609d2e05a3e2af01043b3aaab04aa86357de6"}}, {0xe5, &(0x7f0000000380)=@string={0xe5, 0x3, "40714ac23946d9dbeff497794047ee097b162434796b49bc9008b0eefa5bbcde466f315b6670f7d1371a9d0fb17fc4fb180cc25c64c45ce3f901ca7d71c0b9367c3a063b6c5d8320afaf9430950b34de2e8f4b4ea7dad4fae776acfcbb44e7eb25850ee02adaa8b03134f9800b185028d64f0661a0b5d8bbdca81e5b9098b3700e30544d27e735cd3e1ec4fc2dbad70378cf43435c92edda48008a4a50c1c25fe3ae981753913490ca28e23ba93a209e3b0dd5a64b6d0e849e93ab433f7025a3e958987a73dfe59d6662a23c6db8515cb90deb3a2aca29047956e06c4c119c18b9723d"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x420}}]}) (async) executing program 9: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c74, 0x40040, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1533, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'lo\x00'}) clock_gettime(0x17, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000080)={0x2b, 0x0, 0xffffffc5}) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=6m2s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 14, 14, 8, 12, 14, 5, 26, 21] detailed listing: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000005600)={0x2, &(0x7f00000055c0)=[{0x5, 0x7, 0x1}, {0x6, 0x2, 0x5, 0x5}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x50880) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f0000003900)=""/151, 0x97}, {&(0x7f0000000040)=""/122, 0x7a}, {&(0x7f0000000240)=""/23, 0x17}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000000180)=""/27, 0x1b}], 0x7}, 0x9}, {{0x0, 0x0, 0x0}, 0xb91b}], 0x4, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) unshare(0x2c020400) r2 = msgget$private(0x0, 0x240) msgsnd(r2, &(0x7f0000000880)={0x2, "ee42821b1c4caaea41c37605858c2e4c333010004b2773d118d62b48c6c10972d002976bf44c1659163f1b1081ce5a07d4d2d11bdd55d6f3e78c5eb10491714b3397fb0217f6c0c7b381dbe591ec8a3a33f0df6b52ad2e14e2299f80d221cb5733ba378bb7b51305e23b03a33bc2a5a1d57177e8849c536d3d45b227f400ad7f690e08448eee45487595ffe7f3cd371a7ad1c75dca24cb4ccc2deff5830aef85429ea7db2c798108c7893d3227e76f043389a61f74e65f9d23da4706383f6af635215d8c6b7a408d1161d0b7b42a177b3c3007e1741f21140a20f2e7310b34ad06707746b818759bf3738f7fe054c0c092e4094e6f2028494683e55e4cac29ce9a19d4279337b8f05ce105a2d8dd3441769673a35f77bffd0bcba53441b12e9482121627f96c61281f180f66fa39003047a09cc037a5969ac0fabd25e9246a419e5cdcb2c5db788d9c1d32f00ce428497b299dadc5959336de73833aff4633bb79d36168db980ce8cdee71e568d68e37023827a81bc4b80aba19c6972807ca8097091b1aa3c501f94ebaabf3a31cc773e651e65c5e0267f201bf46590c35483f01fd13a0e063797ac987d00430629f029b0f7b3d902c2249bd41f3ef366e06115503e64ba466d9b1ce6661817b45313096551dcb3e11bf1775f0777864ddd9960d843bbed0fa0c9b38de88ca7d54d4982895b235452d10ff9edfa3ddddd45a6e4673994cd06e9e62998f9984959dfe45229b688f38a4d2ecc0f6e9d5e27e136eb1727e6e4ce6d15360df07e8f608e35bf325d0751437e9da28b41c1b6ab5f0174165857c125e4a052221589a9e7dc44517fe19026e53e6d1ea03551c06f905178bfe44b9fa707fd5f9547808c72d9267eb89d3ad8f4e6a25bef93737a671485f3a9aa41bf4321ece49d62a4765820f9f526924f8707ab9e886ad6baf841467fa0be154fe531ec91a74dca5d74597707b30e069664d0f775ca36907a225fcbad3bdd39a32f2a4310584c1e52eb2db10db83cdeb6be8f7d316f7808e558129c59a3f9e99acba845935ac74d86b459bf75367d4e106e39c47d9c928d30bd56dda1736d070dfaec636d788db11cac44cd88df8ed930e322f0cc23ce095d1c4ff9333668027d4097832e44d90ae9dfffafa4f9eb953f38e6efadc7353c638f32ab6eacc6a6b888e8ad3dc4db734fc6f2a7682fc4bb3f49d3ba890890880a546c84b5e5fec26ad3a274342b2efa62efa3a3b7baeffa2a430b96d8aa09f89b9baf6c2157901b0cd19f1778a3ece5f3171a6a290ffd65adbc08accdfc807fb136ccfc4adfb2f1ce9d4e8085506b99d7794ad5ee323a98f1a93e655a88df717a41e7852e94e914944fe5af7454b144f7079b433bd0be47bb6f6abaeec1e4a580d367d5ca7e59fe78f30e9f122d1a2743172489dabec25fbf7ae21775af4f3cde4a18ddbf8517b75c2695d161160992c036e74707526b10e010cd10ff3197cca4839ca5e2e91de3837750ce1da299e621117f5302a89844b65e5c890a7d5c508127bd99008d4da7724ed9a0933bafb1d448cc8c3de807e9fb0b69e8971bcf09511d0ca99bdf6969784633b9d411f228d1542450d6ef9c77b5f510c1303389cc588ad0da8eced2c6eee8a020cce6aa8877fc29d52b53a4977c50402cb9f3f5aeacae761bee4f685536d390b90ef0021a29a903015dbac15318a3dbabaf2595bd6a37199c5eae26862898b13bc4ffd0500dfd2b1e03e72223ed992697fb63e824cf6e2c2136e57b0ff6fe81579f8c24892bd8f461caf110a97580ae9d278cf3c52f846da43a88d40234e16783beb379acb137b11090bd9bbe1c3d2e1b9b97b683c51ff28472d48c1e400a53ed694b5feab7d2449a6e2fb7c4a202f4923d85bb7f3e33add906fc9223105ea3efd3c1bad314dae722df8ddb6e05bc03573d25b8e06f3b266dff9aff15e4e77ec75124cceba595ea95891aa89a5cab46ffeda22b5f45115d57874ee219b84d884f16193e63ac482a75d47a5411ffc5c85df802131e07baa78881e20a5d10650d8df1957735759f55ee3ba2faa7af0a9e19b1af881c6e963db8f74c8d3c26bb281fc6ce2ff89d0dead1573e9840c9343f99e5cee86bfbad595c6594023ef58cb09f3be849eb4bd9d85531244b28bbffab5f44200be5bff8d53f418de2df46b41123ed8326db4e6a6a4be67521c5bb7356c21c8e34e3fe98ccefb589d23ffe01dca2705cecad8b60533e65311c477dbac542af5df0d0be2fa80f18b81e30c7a0a206bf47bd0e9662cd7897c94c41adf266199f22fe991d2da8a6b7f7452794ab8d646d46c8892756722dc06abbdf26a1f87e08f8f1716f424bdd7e970e3c01ad6954a287884c60c47450001f93987814d682bc7279cf9b59e13b032221d650d9766b9997b3f766d436d57089dbf5688a4da4a9b09ec8527248e1bd951c62edd2c4623bb3c8597082e7149893c43331478c6853509a78836de879903a05772979550c7080475068158274b01a2b8e9f45a96a932186f689b1f5b6949989820c5cb8aa5f563a259ec30a22fa02d0fb73126fb059834081126806b8ea0cfb4a6e6caf1bb1ecee42d119b6c0c6d7adbfc91499d8065871bc0ba7819a13e03103460f0264ded3d72cb9a29172f0296193b1663dd993b31cdc92f406f8016bdb8123158624cd08cfafc0de4e496443a55164b2c7290c23ca8da929daf4f25c890bd98a8f61b958d3b953a3dcb9fd266ba04ef63f96ea6df6c6801e9d7b5c9242a3f71c04ba5477459e9a827cb0c8de8027825430b381528823228d3236706f9fb0ecd751aed976ac446e3d07d20c662f690e24d2b20457031d6acdea6e638aad8c80b986a27191c436c0bde3cce3f44bf53cf1d74d0e93ae5f1b1fae1456ba674be39cd39b000a66fc95ef9021698f31288c9a666a59d76298bbdc7bf16f774f07b6ab22267e797bed9efd395de7724dc47e9df684eaaa48d9f03a761c54c916a33c79b3d5b05033bd95d3fcb2ce6f08fd02e15e5684eac997158ed1d300e2f8a857c29a2b6cba9e5b36fd3fed6d233196f489d7a2b301fcbe488dbdf3c33683936341553775f8c145ee0c6840260e93f6c69edd2ebfba3981e90bb2f5720b673340f10cfeee976c8d295d972544a8d3f0a66d2593ed530062cc432934b80e0614d31fc8adfa59dbaf79a4ab02a13c3ec662e5556a97cae80b86ba1a86790a923116778985399c9373d1df2dea8df7232591674c3314fb515f80a1e8e6ef05daacdea35d60e4c29b052341f51eae22afcfd621417d5b9ed2b97edec15dc675f22f0b40fca22e1220d32b92e1149523aa704f3303758718f1ff5b8766d987ecf9774dd39a771521fab0ff82af26268047a5e8e5e447074746cd7f8b9a915c47e10549bb9bbdaccf10685a1fb1cbd5d1ee7bbab772e3aebd4ba0c33da629ea687d9ff3a395898f9144ddd7ff4e84db70f64cb80d196b9fe7a4dcfd7f967c206701da05d8f3bc0286d6f3347a7ea31ed3af28998edaa0a1fb63ff812045a891202a07063c81f2acacf2d1410a8c8d885d6f6ac79a38c4c1b4e774c954999d6f2a481840e2471ec36b843bbf636417bce4bae137461e73e3205313827f5a7a8cd09b1a31961190ba6a89ebe20d62a1c56f3d6cf10f56eec36ce5cd826588658e3de39ca727d01ae3f7e330f686b0ddb3e5eef053ddf300f9213f9ba1060144af32a03b39c5d585074b4fb2ad4f445acdd3e226791520a91ab38115c09d96f5d09ddc3b42cc80e4516e43dcad0facf4108d707d9fa015e5851f67dc34d611113324d99516ecedf16d2aaada9dfc9b9dac383cfc2dfa287023d87b35084e1ba34df21432c66bd2d9bbd3954aa0fa3254eb395404cb542f8896dc2dfc72064d7f86177bf6eb23ba375b3056aaecc10db2dbc2b72e80dddf34f4a96b4b5f0f0e4fb40bf0c2ac2cd1aecd82fad57131a4bfabf3110eb72e10f6c8fcfd6d476258d62314180bd23444fd1b5fbd7c6129949f1350c131876739fee3badd462f0b321abfcb84007cc9bd41489f1c6f623d6829a1bd044671fc8267e5dc0379eb011d29e85626f567ed532c9d8ca5017acef09f4bc26841927608fa7058aad064962623609870c0d9c686156bb5c8a457b5bc3528806da25c8439dc832417c2bb7e6d637a02bc7bce9c523407b5e2836f25faa644ed9528d81a62651a6f29f66204c6237a95af8adfc8714da22e897ab7b764422395a80d18bab2da11029104c63b8b8eacdc3e9dc05711cc57b734780c23d22351648336ae6e0768f4a6e119d892eaf82b4952aac226675ed64977434aad83d9b0ba48a8cfc5887196725ff84517bdc516addd16d7bada138dafe021e7b61577b9c23ca18aacd4f6f87f5f4eacb6c235bf4d67c76e0959d6abe68c1e50ab88ba681f365baab58e7f062013e5c40bdad743e9c54528b90b45d36a17b2dd5f18ca0e93375e4b7651465cf0a03770c5497d6fd6ec99e7b406b3550a448cddd747fb929df571d030b5498251735b09e02b3a731c1d04ca2c9f2dd476650e496c4c215959030059b1ad4b6537419399707a99e8f528ceeead9f69b05a11c745a65f93f76ccc18aff0618bf133345a185ead44efffc0eac9a9af143864ef4e14733f9c1c1d49de4dd64c96dbbf83695e1d4515483b09aa138c6f74839f717f0674209720684580a4faa69b27518e8f915650c1dbc4ed1f14a29f34453bbd00e2876c98fe7ab2a87b073370ffbb9c62283535ab8f25b927c544e430274f2a4c0fba799df8666bf8a54d4e5e701721eb1d5efb4cb658e1d2788c645bf200f5951768cb76ca64f88c7349bfd432c0d75f2536353bee169f099280736c961a7d115115545cde211863f111b2ea7e225063980fe1f7b726ae723b8d81fde89eb0e5887209dcf777528f014c947509d7e0400f66862487805e7aedbcee3ad81a48bc528a0fb66c4146cb34e7981fc26b2a866d7bd9b02c782da5ef2605cd31c9d79c1fc493d5c54da22d7f0376323850279abc81e6a9aec889087a901a445cce42f29f58c39a02ed53d1b475f179d3ad95e373dc97ab2cdfe31559163858c9b0cc463705a8846773d205d9d78cb046e640734c6e0609753d0872ff9cc39b282433a8960a588700026c5795dcadd8d71868f2defaa2a4e75b113e1f1c9c1497f75a6c989138abf70f01b197f0fdface51f94aacc52de214a78bc0374d6d4d7422e2bf153aadeefe2ac829b667776bebf55919c8234b039a45e8866d5af85ec0fa40a11f10ca5a16ed725927c9fc881e0c8484f153495db6cccc8b481c8267ef119acdaf282094c7bedea9e14ef34b3b7841c9719c076f8d48eb2e7f4baafd1a16f7f85da5677c4e21ea0dd6a47f882eb524e18c4b0f06e1d2526c5a0e215aa89d5e710708a34002b1d8d2ca17db8f8b9e51dc6309e2ac8f2bbc327f53efb1d3f574db89d3608f17f8f88315caa2398c0e0ad494e44a8884285e9baf78ebc515262464e67c0a1226bf1b46594c23af4aab9d81c5db1fa0c209bc7fe40541317858877f670f81d30d2cebb628c5a7b3761686fbc2e9630470d42e1654373543367b62dbc2196e2c5cd74006d77ace5cf910951af44ad62d14b7428d6e9aa7aeab063168d441b1436a063e9dc3bba97865f2e55e000a6d80b2f8cfead58c15fe8913919bedbcda13c2af493fd4f7e0c528c670bff3d4641eab66c8613a64ab9965a89"}, 0xfd1, 0x0) msgrcv(0x0, &(0x7f0000000000), 0xfffffcef, 0x0, 0x4800) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r3 = socket$inet(0x2, 0x7, 0x3) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r7, 0x1, 0xffffffff, 0x0, {{}, {0x0, 0x6}}}, 0x1c}}, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff97f, 0x2, 0x0, 0x4, 0x0, 0xffffffff, 0x10}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) futex(&(0x7f0000000cc0)=0x1, 0xd, 0x0, &(0x7f0000000d40), 0x0, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_connect$uac1(0x2, 0x9a, &(0x7f0000000500)=ANY=[@ANYBLOB="1201010200000020050b431740000102030109028800030109403f0904000000010100000a2401d2000a00020102090401000001020000090401010101020000072401080805000f2402020002ff0f00f441a4440fb209050109ff037808ba072501080403000904020000010200000904020101010200000b240201fc030801371fc807240108050210090582092000030201072501000e03008fe939b6dc009321c2d3bdaf318247e49400513805d256e80097b829823f27d0c3e77f267ce1cbe7b34a4efc7bf53bd910084e37cc40f02ddd5a1bb9d8e938e766c770cf2fbf58ddca26a2a9689af2d1ae33"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) getsockopt$IPT_SO_GET_REVISION_MATCH(r8, 0x0, 0x42, &(0x7f0000000300)={'ipvs\x00'}, &(0x7f0000000340)=0x1e) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @empty}}}, &(0x7f0000000240)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000280)={0x6, 0x8200, 0x3, 0x7, r10}, &(0x7f00000002c0)=0x10) bind(r8, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r8, 0x5) executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x767a, 0x0, 0x7ffffffe, 0x257, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x1000000, 0x10000004, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x144, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) ioctl$KVM_TDX_INIT_VM(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]}) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) (async) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 33: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x767a, 0x0, 0x7ffffffe, 0x257, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x1000000, 0x10000004, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x144, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) ioctl$KVM_TDX_INIT_VM(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]}) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) (async) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 8: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/rfkill/rfkill0/state\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)="3bbbcdfb", 0x4) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a94ea0609eebd008300000000"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x9, 0x6, &(0x7f0000000000)='BBBBBB') executing program 8: r0 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) ioctl$MTDFILEMODE(r0, 0x4d13, 0x1) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0xfdef) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x2, 0x2d7, 0x8000000000000000, 0x8000000000000000, 0x5, 0x0, 0x4, 0x401, 0x2, 0x5, 0x8d], 0xeeee8000, 0x284e97}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)={0x9, 0x0, [{0x8d1}, {0x331, 0x0, 0x1}, {0x860, 0x0, 0x4}, {0x119, 0x0, 0xd}, {0x2f7, 0x0, 0x5}, {0x204, 0x0, 0x8}, {0x388, 0x0, 0x8}, {0x400000b6, 0x0, 0x8}, {0x630, 0x0, 0x3}]}) executing program 8: mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000500)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, 0x0, 0x90) (async) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800}]}, &(0x7f0000000200)=0x10) (async) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, 0x0, 0x0) (async) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001ec0), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000100)={0x5, {0x521, 0x1, 0x7, 0x4e0}, {0x6, 0x7, 0x0, 0x1}, {0xffffffe7, 0x3}}) executing program 8: openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0x7fffffff}}], [], 0x6b}}) syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c0001020301090229000100000000090400000002020100050200000005"], 0x0) executing program 9: r0 = syz_open_dev$vbi(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000001c0)={0x0, 0x1, 0x10, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90e, 0x6, '\x00', @p_u32=0x0}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="68fa140000002d000b00fdffffff00000000090000000457cedd575eda2d1ebc87551cefb27728412ab5647e7be52804c29a44e8274425fcbee123a2e0958a8dfcc3713092485047c27a1711ac8d33b2987199bdb53798002bb1203841c52b7bc7f6629e71d6cbdb1b647b6fbe878dd117e3621a5477dc"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000040)=[0x20, 0x4, 0x40005002, 0xffff32eb, 0x2, 0xffffdff9, 0x2d7b, 0x401, 0x0, 0x3, 0x0, 0x3, 0xfe09, 0xd2, 0x80000002], 0x1, 0x4000003}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000078000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000004c000480480001800a0001006d61746368000000380002800e000100636f6e6e627974657300000008000240000000001c00030000"], 0x100}}, 0x0) syz_usb_connect$uac1(0x0, 0xfe, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x1, 0x0, 0x8a, 0x40, 0x83}, 0x20, &(0x7f00000001c0)={0x5, 0xf, 0x20, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x6, 0xfc01}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x1e, 0xf2, 0xfd9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x2, 0x1, 0x3}]}, 0x6, [{0xd7, &(0x7f0000000200)=@string={0xd7, 0x3, "ffef3fe5e1b918d91fbe45e55d0299cbad736ba0a610296e178d82758e8ed71341807ba6d59661ace229161c06705061cc59700208b2d5d63bbb955e9dbe53f39160894998933fb852044def4fc37c2b7fb276e21dc862cbfdbdb7f430225270b557b2559bc9705722eaf1cfe8328218cad684327d2b94e0b34e248b2c137a65cce4cd01f04f0106cff86a033c188f39ff68d878fc43bab81f472e9e679c484cd8c4b6c2cdf1bd930d4ced0340da0cb3d959048d7ae6afbf250e0be6c492f7e5f56c7e748e844254d7d4e4664874bc4fbbf1740fb9"}}, {0x6f, &(0x7f0000000300)=@string={0x6f, 0x3, "52459ffd4fd96b283eb160d5ef25b35eff9b1818b8db44f6b5a7e38883137a5d531ab63c97be90f0b5b08ea6571d9f27c283742a6869e8906d4df3c5122d32b054d2fe64b3754390e23a6f02842c5dcedea79956f027d5c1e86a1609d2e05a3e2af01043b3aaab04aa86357de6"}}, {0xe5, &(0x7f0000000380)=@string={0xe5, 0x3, "40714ac23946d9dbeff497794047ee097b162434796b49bc9008b0eefa5bbcde466f315b6670f7d1371a9d0fb17fc4fb180cc25c64c45ce3f901ca7d71c0b9367c3a063b6c5d8320afaf9430950b34de2e8f4b4ea7dad4fae776acfcbb44e7eb25850ee02adaa8b03134f9800b185028d64f0661a0b5d8bbdca81e5b9098b3700e30544d27e735cd3e1ec4fc2dbad70378cf43435c92edda48008a4a50c1c25fe3ae981753913490ca28e23ba93a209e3b0dd5a64b6d0e849e93ab433f7025a3e958987a73dfe59d6662a23c6db8515cb90deb3a2aca29047956e06c4c119c18b9723d"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x420}}]}) syz_open_dev$vbi(&(0x7f0000000380), 0x0, 0x2) (async) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000001c0)={0x0, 0x1, 0x10, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90e, 0x6, '\x00', @p_u32=0x0}}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="68fa140000002d000b00fdffffff00000000090000000457cedd575eda2d1ebc87551cefb27728412ab5647e7be52804c29a44e8274425fcbee123a2e0958a8dfcc3713092485047c27a1711ac8d33b2987199bdb53798002bb1203841c52b7bc7f6629e71d6cbdb1b647b6fbe878dd117e3621a5477dc"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) (async) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) (async) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000040)=[0x20, 0x4, 0x40005002, 0xffff32eb, 0x2, 0xffffdff9, 0x2d7b, 0x401, 0x0, 0x3, 0x0, 0x3, 0xfe09, 0xd2, 0x80000002], 0x1, 0x4000003}) (async) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000078000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000004c000480480001800a0001006d61746368000000380002800e000100636f6e6e627974657300000008000240000000001c00030000"], 0x100}}, 0x0) (async) syz_usb_connect$uac1(0x0, 0xfe, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x1, 0x0, 0x8a, 0x40, 0x83}, 0x20, &(0x7f00000001c0)={0x5, 0xf, 0x20, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x6, 0xfc01}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x1e, 0xf2, 0xfd9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x2, 0x1, 0x3}]}, 0x6, [{0xd7, &(0x7f0000000200)=@string={0xd7, 0x3, "ffef3fe5e1b918d91fbe45e55d0299cbad736ba0a610296e178d82758e8ed71341807ba6d59661ace229161c06705061cc59700208b2d5d63bbb955e9dbe53f39160894998933fb852044def4fc37c2b7fb276e21dc862cbfdbdb7f430225270b557b2559bc9705722eaf1cfe8328218cad684327d2b94e0b34e248b2c137a65cce4cd01f04f0106cff86a033c188f39ff68d878fc43bab81f472e9e679c484cd8c4b6c2cdf1bd930d4ced0340da0cb3d959048d7ae6afbf250e0be6c492f7e5f56c7e748e844254d7d4e4664874bc4fbbf1740fb9"}}, {0x6f, &(0x7f0000000300)=@string={0x6f, 0x3, "52459ffd4fd96b283eb160d5ef25b35eff9b1818b8db44f6b5a7e38883137a5d531ab63c97be90f0b5b08ea6571d9f27c283742a6869e8906d4df3c5122d32b054d2fe64b3754390e23a6f02842c5dcedea79956f027d5c1e86a1609d2e05a3e2af01043b3aaab04aa86357de6"}}, {0xe5, &(0x7f0000000380)=@string={0xe5, 0x3, "40714ac23946d9dbeff497794047ee097b162434796b49bc9008b0eefa5bbcde466f315b6670f7d1371a9d0fb17fc4fb180cc25c64c45ce3f901ca7d71c0b9367c3a063b6c5d8320afaf9430950b34de2e8f4b4ea7dad4fae776acfcbb44e7eb25850ee02adaa8b03134f9800b185028d64f0661a0b5d8bbdca81e5b9098b3700e30544d27e735cd3e1ec4fc2dbad70378cf43435c92edda48008a4a50c1c25fe3ae981753913490ca28e23ba93a209e3b0dd5a64b6d0e849e93ab433f7025a3e958987a73dfe59d6662a23c6db8515cb90deb3a2aca29047956e06c4c119c18b9723d"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x420}}]}) (async) executing program 9: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c74, 0x40040, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1533, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'lo\x00'}) clock_gettime(0x17, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000080)={0x2b, 0x0, 0xffffffc5}) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) program crashed: INFO: task hung in nfsd_nl_listener_set_doit bisect: the chunk can be dropped bisect: split chunk #1 of len 6 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 14, 14, 5, 26, 21] detailed listing: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000005600)={0x2, &(0x7f00000055c0)=[{0x5, 0x7, 0x1}, {0x6, 0x2, 0x5, 0x5}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x50880) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f0000003900)=""/151, 0x97}, {&(0x7f0000000040)=""/122, 0x7a}, {&(0x7f0000000240)=""/23, 0x17}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000000180)=""/27, 0x1b}], 0x7}, 0x9}, {{0x0, 0x0, 0x0}, 0xb91b}], 0x4, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) unshare(0x2c020400) r2 = msgget$private(0x0, 0x240) msgsnd(r2, &(0x7f0000000880)={0x2, "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"}, 0xfd1, 0x0) msgrcv(0x0, &(0x7f0000000000), 0xfffffcef, 0x0, 0x4800) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r3 = socket$inet(0x2, 0x7, 0x3) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r7, 0x1, 0xffffffff, 0x0, {{}, {0x0, 0x6}}}, 0x1c}}, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff97f, 0x2, 0x0, 0x4, 0x0, 0xffffffff, 0x10}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) futex(&(0x7f0000000cc0)=0x1, 0xd, 0x0, &(0x7f0000000d40), 0x0, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_connect$uac1(0x2, 0x9a, &(0x7f0000000500)=ANY=[@ANYBLOB="1201010200000020050b431740000102030109028800030109403f0904000000010100000a2401d2000a00020102090401000001020000090401010101020000072401080805000f2402020002ff0f00f441a4440fb209050109ff037808ba072501080403000904020000010200000904020101010200000b240201fc030801371fc807240108050210090582092000030201072501000e03008fe939b6dc009321c2d3bdaf318247e49400513805d256e80097b829823f27d0c3e77f267ce1cbe7b34a4efc7bf53bd910084e37cc40f02ddd5a1bb9d8e938e766c770cf2fbf58ddca26a2a9689af2d1ae33"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) getsockopt$IPT_SO_GET_REVISION_MATCH(r8, 0x0, 0x42, &(0x7f0000000300)={'ipvs\x00'}, &(0x7f0000000340)=0x1e) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @empty}}}, &(0x7f0000000240)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000280)={0x6, 0x8200, 0x3, 0x7, r10}, &(0x7f00000002c0)=0x10) bind(r8, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r8, 0x5) executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x767a, 0x0, 0x7ffffffe, 0x257, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x1000000, 0x10000004, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x144, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) ioctl$KVM_TDX_INIT_VM(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2000000000000000000000000000000007000000000000008f00000000000000060000000000000005000000000000003107000000000000020000000000000040000000000000000200000000000000724c0000020000000000000008000000000000000400000000000000030000000000000004000000000000000100000000000000ffffff7fffffffff4f000000000000006b00000000000000f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000100000017a300000400000003000000020000005a5c0000070000000000000000000000000000000400000094040000070000001f0000000300000009000000a20000000000000000000000000000000d0000000000000001000000ffff0000000000000001000001"]}) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) (async) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 33: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x767a, 0x0, 0x7ffffffe, 0x257, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x1000000, 0x10000004, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x144, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) ioctl$KVM_TDX_INIT_VM(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]}) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) (async) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 8: openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0x7fffffff}}], [], 0x6b}}) syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c0001020301090229000100000000090400000002020100050200000005"], 0x0) executing program 9: r0 = syz_open_dev$vbi(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000001c0)={0x0, 0x1, 0x10, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90e, 0x6, '\x00', @p_u32=0x0}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="68fa140000002d000b00fdffffff00000000090000000457cedd575eda2d1ebc87551cefb27728412ab5647e7be52804c29a44e8274425fcbee123a2e0958a8dfcc3713092485047c27a1711ac8d33b2987199bdb53798002bb1203841c52b7bc7f6629e71d6cbdb1b647b6fbe878dd117e3621a5477dc"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000040)=[0x20, 0x4, 0x40005002, 0xffff32eb, 0x2, 0xffffdff9, 0x2d7b, 0x401, 0x0, 0x3, 0x0, 0x3, 0xfe09, 0xd2, 0x80000002], 0x1, 0x4000003}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000078000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000004c000480480001800a0001006d61746368000000380002800e000100636f6e6e627974657300000008000240000000001c00030000"], 0x100}}, 0x0) syz_usb_connect$uac1(0x0, 0xfe, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x1, 0x0, 0x8a, 0x40, 0x83}, 0x20, &(0x7f00000001c0)={0x5, 0xf, 0x20, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x6, 0xfc01}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x1e, 0xf2, 0xfd9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x2, 0x1, 0x3}]}, 0x6, [{0xd7, &(0x7f0000000200)=@string={0xd7, 0x3, "ffef3fe5e1b918d91fbe45e55d0299cbad736ba0a610296e178d82758e8ed71341807ba6d59661ace229161c06705061cc59700208b2d5d63bbb955e9dbe53f39160894998933fb852044def4fc37c2b7fb276e21dc862cbfdbdb7f430225270b557b2559bc9705722eaf1cfe8328218cad684327d2b94e0b34e248b2c137a65cce4cd01f04f0106cff86a033c188f39ff68d878fc43bab81f472e9e679c484cd8c4b6c2cdf1bd930d4ced0340da0cb3d959048d7ae6afbf250e0be6c492f7e5f56c7e748e844254d7d4e4664874bc4fbbf1740fb9"}}, {0x6f, &(0x7f0000000300)=@string={0x6f, 0x3, "52459ffd4fd96b283eb160d5ef25b35eff9b1818b8db44f6b5a7e38883137a5d531ab63c97be90f0b5b08ea6571d9f27c283742a6869e8906d4df3c5122d32b054d2fe64b3754390e23a6f02842c5dcedea79956f027d5c1e86a1609d2e05a3e2af01043b3aaab04aa86357de6"}}, {0xe5, &(0x7f0000000380)=@string={0xe5, 0x3, "40714ac23946d9dbeff497794047ee097b162434796b49bc9008b0eefa5bbcde466f315b6670f7d1371a9d0fb17fc4fb180cc25c64c45ce3f901ca7d71c0b9367c3a063b6c5d8320afaf9430950b34de2e8f4b4ea7dad4fae776acfcbb44e7eb25850ee02adaa8b03134f9800b185028d64f0661a0b5d8bbdca81e5b9098b3700e30544d27e735cd3e1ec4fc2dbad70378cf43435c92edda48008a4a50c1c25fe3ae981753913490ca28e23ba93a209e3b0dd5a64b6d0e849e93ab433f7025a3e958987a73dfe59d6662a23c6db8515cb90deb3a2aca29047956e06c4c119c18b9723d"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x420}}]}) syz_open_dev$vbi(&(0x7f0000000380), 0x0, 0x2) (async) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000001c0)={0x0, 0x1, 0x10, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90e, 0x6, '\x00', @p_u32=0x0}}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="68fa140000002d000b00fdffffff00000000090000000457cedd575eda2d1ebc87551cefb27728412ab5647e7be52804c29a44e8274425fcbee123a2e0958a8dfcc3713092485047c27a1711ac8d33b2987199bdb53798002bb1203841c52b7bc7f6629e71d6cbdb1b647b6fbe878dd117e3621a5477dc"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) (async) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) (async) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000040)=[0x20, 0x4, 0x40005002, 0xffff32eb, 0x2, 0xffffdff9, 0x2d7b, 0x401, 0x0, 0x3, 0x0, 0x3, 0xfe09, 0xd2, 0x80000002], 0x1, 0x4000003}) (async) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000078000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000004c000480480001800a0001006d61746368000000380002800e000100636f6e6e627974657300000008000240000000001c00030000"], 0x100}}, 0x0) (async) syz_usb_connect$uac1(0x0, 0xfe, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x1, 0x0, 0x8a, 0x40, 0x83}, 0x20, &(0x7f00000001c0)={0x5, 0xf, 0x20, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x6, 0xfc01}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x1e, 0xf2, 0xfd9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x2, 0x1, 0x3}]}, 0x6, [{0xd7, &(0x7f0000000200)=@string={0xd7, 0x3, "ffef3fe5e1b918d91fbe45e55d0299cbad736ba0a610296e178d82758e8ed71341807ba6d59661ace229161c06705061cc59700208b2d5d63bbb955e9dbe53f39160894998933fb852044def4fc37c2b7fb276e21dc862cbfdbdb7f430225270b557b2559bc9705722eaf1cfe8328218cad684327d2b94e0b34e248b2c137a65cce4cd01f04f0106cff86a033c188f39ff68d878fc43bab81f472e9e679c484cd8c4b6c2cdf1bd930d4ced0340da0cb3d959048d7ae6afbf250e0be6c492f7e5f56c7e748e844254d7d4e4664874bc4fbbf1740fb9"}}, {0x6f, &(0x7f0000000300)=@string={0x6f, 0x3, "52459ffd4fd96b283eb160d5ef25b35eff9b1818b8db44f6b5a7e38883137a5d531ab63c97be90f0b5b08ea6571d9f27c283742a6869e8906d4df3c5122d32b054d2fe64b3754390e23a6f02842c5dcedea79956f027d5c1e86a1609d2e05a3e2af01043b3aaab04aa86357de6"}}, {0xe5, &(0x7f0000000380)=@string={0xe5, 0x3, "40714ac23946d9dbeff497794047ee097b162434796b49bc9008b0eefa5bbcde466f315b6670f7d1371a9d0fb17fc4fb180cc25c64c45ce3f901ca7d71c0b9367c3a063b6c5d8320afaf9430950b34de2e8f4b4ea7dad4fae776acfcbb44e7eb25850ee02adaa8b03134f9800b185028d64f0661a0b5d8bbdca81e5b9098b3700e30544d27e735cd3e1ec4fc2dbad70378cf43435c92edda48008a4a50c1c25fe3ae981753913490ca28e23ba93a209e3b0dd5a64b6d0e849e93ab433f7025a3e958987a73dfe59d6662a23c6db8515cb90deb3a2aca29047956e06c4c119c18b9723d"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x420}}]}) (async) executing program 9: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c74, 0x40040, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1533, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'lo\x00'}) clock_gettime(0x17, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000080)={0x2b, 0x0, 0xffffffc5}) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) program crashed: lost connection to test machine suppressed program crash: lost connection to test machine bisect: testing without sub-chunk 2/2 testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 14, 14, 8, 12, 14] detailed listing: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000005600)={0x2, &(0x7f00000055c0)=[{0x5, 0x7, 0x1}, {0x6, 0x2, 0x5, 0x5}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x50880) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f0000003900)=""/151, 0x97}, {&(0x7f0000000040)=""/122, 0x7a}, {&(0x7f0000000240)=""/23, 0x17}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000000180)=""/27, 0x1b}], 0x7}, 0x9}, {{0x0, 0x0, 0x0}, 0xb91b}], 0x4, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) unshare(0x2c020400) r2 = msgget$private(0x0, 0x240) msgsnd(r2, &(0x7f0000000880)={0x2, "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"}, 0xfd1, 0x0) msgrcv(0x0, &(0x7f0000000000), 0xfffffcef, 0x0, 0x4800) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r3 = socket$inet(0x2, 0x7, 0x3) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r7, 0x1, 0xffffffff, 0x0, {{}, {0x0, 0x6}}}, 0x1c}}, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff97f, 0x2, 0x0, 0x4, 0x0, 0xffffffff, 0x10}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) futex(&(0x7f0000000cc0)=0x1, 0xd, 0x0, &(0x7f0000000d40), 0x0, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_connect$uac1(0x2, 0x9a, &(0x7f0000000500)=ANY=[@ANYBLOB="1201010200000020050b431740000102030109028800030109403f0904000000010100000a2401d2000a00020102090401000001020000090401010101020000072401080805000f2402020002ff0f00f441a4440fb209050109ff037808ba072501080403000904020000010200000904020101010200000b240201fc030801371fc807240108050210090582092000030201072501000e03008fe939b6dc009321c2d3bdaf318247e49400513805d256e80097b829823f27d0c3e77f267ce1cbe7b34a4efc7bf53bd910084e37cc40f02ddd5a1bb9d8e938e766c770cf2fbf58ddca26a2a9689af2d1ae33"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) getsockopt$IPT_SO_GET_REVISION_MATCH(r8, 0x0, 0x42, &(0x7f0000000300)={'ipvs\x00'}, &(0x7f0000000340)=0x1e) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @empty}}}, &(0x7f0000000240)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000280)={0x6, 0x8200, 0x3, 0x7, r10}, &(0x7f00000002c0)=0x10) bind(r8, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r8, 0x5) executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x767a, 0x0, 0x7ffffffe, 0x257, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x1000000, 0x10000004, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x144, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) ioctl$KVM_TDX_INIT_VM(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]}) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) (async) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 33: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x767a, 0x0, 0x7ffffffe, 0x257, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x1000000, 0x10000004, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x144, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) ioctl$KVM_TDX_INIT_VM(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]}) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) (async) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 8: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/rfkill/rfkill0/state\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)="3bbbcdfb", 0x4) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a94ea0609eebd008300000000"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x9, 0x6, &(0x7f0000000000)='BBBBBB') executing program 8: r0 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) ioctl$MTDFILEMODE(r0, 0x4d13, 0x1) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0xfdef) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x2, 0x2d7, 0x8000000000000000, 0x8000000000000000, 0x5, 0x0, 0x4, 0x401, 0x2, 0x5, 0x8d], 0xeeee8000, 0x284e97}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)={0x9, 0x0, [{0x8d1}, {0x331, 0x0, 0x1}, {0x860, 0x0, 0x4}, {0x119, 0x0, 0xd}, {0x2f7, 0x0, 0x5}, {0x204, 0x0, 0x8}, {0x388, 0x0, 0x8}, {0x400000b6, 0x0, 0x8}, {0x630, 0x0, 0x3}]}) executing program 8: mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000500)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, 0x0, 0x90) (async) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800}]}, &(0x7f0000000200)=0x10) (async) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, 0x0, 0x0) (async) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001ec0), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000100)={0x5, {0x521, 0x1, 0x7, 0x4e0}, {0x6, 0x7, 0x0, 0x1}, {0xffffffe7, 0x3}}) program did not crash bisect: split chunks (needed=true): <3>, <3>, <3> bisect: split chunk #0 of len 3 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 8, 12, 14, 5, 26, 21] detailed listing: executing program 33: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x767a, 0x0, 0x7ffffffe, 0x257, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x1000000, 0x10000004, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x144, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) ioctl$KVM_TDX_INIT_VM(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]}) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) (async) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 8: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/rfkill/rfkill0/state\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)="3bbbcdfb", 0x4) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a94ea0609eebd008300000000"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x9, 0x6, &(0x7f0000000000)='BBBBBB') executing program 8: r0 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) ioctl$MTDFILEMODE(r0, 0x4d13, 0x1) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0xfdef) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x2, 0x2d7, 0x8000000000000000, 0x8000000000000000, 0x5, 0x0, 0x4, 0x401, 0x2, 0x5, 0x8d], 0xeeee8000, 0x284e97}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)={0x9, 0x0, [{0x8d1}, {0x331, 0x0, 0x1}, {0x860, 0x0, 0x4}, {0x119, 0x0, 0xd}, {0x2f7, 0x0, 0x5}, {0x204, 0x0, 0x8}, {0x388, 0x0, 0x8}, {0x400000b6, 0x0, 0x8}, {0x630, 0x0, 0x3}]}) executing program 8: mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000500)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, 0x0, 0x90) (async) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800}]}, &(0x7f0000000200)=0x10) (async) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, 0x0, 0x0) (async) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001ec0), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000100)={0x5, {0x521, 0x1, 0x7, 0x4e0}, {0x6, 0x7, 0x0, 0x1}, {0xffffffe7, 0x3}}) executing program 8: openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0x7fffffff}}], [], 0x6b}}) syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c0001020301090229000100000000090400000002020100050200000005"], 0x0) executing program 9: r0 = syz_open_dev$vbi(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000001c0)={0x0, 0x1, 0x10, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90e, 0x6, '\x00', @p_u32=0x0}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="68fa140000002d000b00fdffffff00000000090000000457cedd575eda2d1ebc87551cefb27728412ab5647e7be52804c29a44e8274425fcbee123a2e0958a8dfcc3713092485047c27a1711ac8d33b2987199bdb53798002bb1203841c52b7bc7f6629e71d6cbdb1b647b6fbe878dd117e3621a5477dc"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000040)=[0x20, 0x4, 0x40005002, 0xffff32eb, 0x2, 0xffffdff9, 0x2d7b, 0x401, 0x0, 0x3, 0x0, 0x3, 0xfe09, 0xd2, 0x80000002], 0x1, 0x4000003}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000078000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000004c000480480001800a0001006d61746368000000380002800e000100636f6e6e627974657300000008000240000000001c00030000"], 0x100}}, 0x0) syz_usb_connect$uac1(0x0, 0xfe, &(0x7f0000000080)=ANY=[@ANYBLOB="120100020000000882050c004000010203010902ec000301fca0050904000000010100000a2401030033000201020c2402010204040f0a00e20e11240601050508000200010009000a000f05240404080724070600000109040100000102000009040101010102000009240202060001007f072401061800000a24020105030c80f11a092402010301fa081609050109ff030d030407250100090900090402000001020000090402010101025793e0e419dc00000a2402020100f9ff070511240202c500fdff0d4deb9745aeebe78c0a2402020a00a00005fe0f240201020207008f3b3b742a52320c24020240005d00816707c209058209080000fa1507"], &(0x7f0000000540)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x1, 0x0, 0x8a, 0x40, 0x83}, 0x20, &(0x7f00000001c0)={0x5, 0xf, 0x20, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x6, 0xfc01}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x1e, 0xf2, 0xfd9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x2, 0x1, 0x3}]}, 0x6, [{0xd7, &(0x7f0000000200)=@string={0xd7, 0x3, "ffef3fe5e1b918d91fbe45e55d0299cbad736ba0a610296e178d82758e8ed71341807ba6d59661ace229161c06705061cc59700208b2d5d63bbb955e9dbe53f39160894998933fb852044def4fc37c2b7fb276e21dc862cbfdbdb7f430225270b557b2559bc9705722eaf1cfe8328218cad684327d2b94e0b34e248b2c137a65cce4cd01f04f0106cff86a033c188f39ff68d878fc43bab81f472e9e679c484cd8c4b6c2cdf1bd930d4ced0340da0cb3d959048d7ae6afbf250e0be6c492f7e5f56c7e748e844254d7d4e4664874bc4fbbf1740fb9"}}, {0x6f, &(0x7f0000000300)=@string={0x6f, 0x3, "52459ffd4fd96b283eb160d5ef25b35eff9b1818b8db44f6b5a7e38883137a5d531ab63c97be90f0b5b08ea6571d9f27c283742a6869e8906d4df3c5122d32b054d2fe64b3754390e23a6f02842c5dcedea79956f027d5c1e86a1609d2e05a3e2af01043b3aaab04aa86357de6"}}, {0xe5, &(0x7f0000000380)=@string={0xe5, 0x3, "40714ac23946d9dbeff497794047ee097b162434796b49bc9008b0eefa5bbcde466f315b6670f7d1371a9d0fb17fc4fb180cc25c64c45ce3f901ca7d71c0b9367c3a063b6c5d8320afaf9430950b34de2e8f4b4ea7dad4fae776acfcbb44e7eb25850ee02adaa8b03134f9800b185028d64f0661a0b5d8bbdca81e5b9098b3700e30544d27e735cd3e1ec4fc2dbad70378cf43435c92edda48008a4a50c1c25fe3ae981753913490ca28e23ba93a209e3b0dd5a64b6d0e849e93ab433f7025a3e958987a73dfe59d6662a23c6db8515cb90deb3a2aca29047956e06c4c119c18b9723d"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x420}}]}) syz_open_dev$vbi(&(0x7f0000000380), 0x0, 0x2) (async) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000001c0)={0x0, 0x1, 0x10, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90e, 0x6, '\x00', @p_u32=0x0}}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="68fa140000002d000b00fdffffff00000000090000000457cedd575eda2d1ebc87551cefb27728412ab5647e7be52804c29a44e8274425fcbee123a2e0958a8dfcc3713092485047c27a1711ac8d33b2987199bdb53798002bb1203841c52b7bc7f6629e71d6cbdb1b647b6fbe878dd117e3621a5477dc"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) (async) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) (async) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000040)=[0x20, 0x4, 0x40005002, 0xffff32eb, 0x2, 0xffffdff9, 0x2d7b, 0x401, 0x0, 0x3, 0x0, 0x3, 0xfe09, 0xd2, 0x80000002], 0x1, 0x4000003}) (async) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000078000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000004c000480480001800a0001006d61746368000000380002800e000100636f6e6e627974657300000008000240000000001c00030000"], 0x100}}, 0x0) (async) syz_usb_connect$uac1(0x0, 0xfe, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x1, 0x0, 0x8a, 0x40, 0x83}, 0x20, &(0x7f00000001c0)={0x5, 0xf, 0x20, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x6, 0xfc01}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x1e, 0xf2, 0xfd9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x2, 0x1, 0x3}]}, 0x6, [{0xd7, &(0x7f0000000200)=@string={0xd7, 0x3, "ffef3fe5e1b918d91fbe45e55d0299cbad736ba0a610296e178d82758e8ed71341807ba6d59661ace229161c06705061cc59700208b2d5d63bbb955e9dbe53f39160894998933fb852044def4fc37c2b7fb276e21dc862cbfdbdb7f430225270b557b2559bc9705722eaf1cfe8328218cad684327d2b94e0b34e248b2c137a65cce4cd01f04f0106cff86a033c188f39ff68d878fc43bab81f472e9e679c484cd8c4b6c2cdf1bd930d4ced0340da0cb3d959048d7ae6afbf250e0be6c492f7e5f56c7e748e844254d7d4e4664874bc4fbbf1740fb9"}}, {0x6f, &(0x7f0000000300)=@string={0x6f, 0x3, "52459ffd4fd96b283eb160d5ef25b35eff9b1818b8db44f6b5a7e38883137a5d531ab63c97be90f0b5b08ea6571d9f27c283742a6869e8906d4df3c5122d32b054d2fe64b3754390e23a6f02842c5dcedea79956f027d5c1e86a1609d2e05a3e2af01043b3aaab04aa86357de6"}}, {0xe5, &(0x7f0000000380)=@string={0xe5, 0x3, "40714ac23946d9dbeff497794047ee097b162434796b49bc9008b0eefa5bbcde466f315b6670f7d1371a9d0fb17fc4fb180cc25c64c45ce3f901ca7d71c0b9367c3a063b6c5d8320afaf9430950b34de2e8f4b4ea7dad4fae776acfcbb44e7eb25850ee02adaa8b03134f9800b185028d64f0661a0b5d8bbdca81e5b9098b3700e30544d27e735cd3e1ec4fc2dbad70378cf43435c92edda48008a4a50c1c25fe3ae981753913490ca28e23ba93a209e3b0dd5a64b6d0e849e93ab433f7025a3e958987a73dfe59d6662a23c6db8515cb90deb3a2aca29047956e06c4c119c18b9723d"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x420}}]}) (async) executing program 9: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c74, 0x40040, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1533, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'lo\x00'}) clock_gettime(0x17, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000080)={0x2b, 0x0, 0xffffffc5}) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) program crashed: INFO: task hung in nfsd_nl_listener_set_doit bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunk #1 of len 3 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 14, 5, 26, 21] detailed listing: executing program 33: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x767a, 0x0, 0x7ffffffe, 0x257, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x1000000, 0x10000004, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x144, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) ioctl$KVM_TDX_INIT_VM(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]}) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) (async) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 8: mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000500)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, 0x0, 0x90) (async) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800}]}, &(0x7f0000000200)=0x10) (async) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, 0x0, 0x0) (async) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001ec0), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000100)={0x5, {0x521, 0x1, 0x7, 0x4e0}, {0x6, 0x7, 0x0, 0x1}, {0xffffffe7, 0x3}}) executing program 8: openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0x7fffffff}}], [], 0x6b}}) syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c0001020301090229000100000000090400000002020100050200000005"], 0x0) executing program 9: r0 = syz_open_dev$vbi(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000001c0)={0x0, 0x1, 0x10, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90e, 0x6, '\x00', @p_u32=0x0}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="68fa140000002d000b00fdffffff00000000090000000457cedd575eda2d1ebc87551cefb27728412ab5647e7be52804c29a44e8274425fcbee123a2e0958a8dfcc3713092485047c27a1711ac8d33b2987199bdb53798002bb1203841c52b7bc7f6629e71d6cbdb1b647b6fbe878dd117e3621a5477dc"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000040)=[0x20, 0x4, 0x40005002, 0xffff32eb, 0x2, 0xffffdff9, 0x2d7b, 0x401, 0x0, 0x3, 0x0, 0x3, 0xfe09, 0xd2, 0x80000002], 0x1, 0x4000003}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000078000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000004c000480480001800a0001006d61746368000000380002800e000100636f6e6e627974657300000008000240000000001c00030000"], 0x100}}, 0x0) syz_usb_connect$uac1(0x0, 0xfe, &(0x7f0000000080)=ANY=[@ANYBLOB="120100020000000882050c004000010203010902ec000301fca0050904000000010100000a2401030033000201020c2402010204040f0a00e20e11240601050508000200010009000a000f05240404080724070600000109040100000102000009040101010102000009240202060001007f072401061800000a24020105030c80f11a092402010301fa081609050109ff030d030407250100090900090402000001020000090402010101025793e0e419dc00000a2402020100f9ff070511240202c500fdff0d4deb9745aeebe78c0a2402020a00a00005fe0f240201020207008f3b3b742a52320c24020240005d00816707c209058209080000fa1507"], &(0x7f0000000540)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x1, 0x0, 0x8a, 0x40, 0x83}, 0x20, &(0x7f00000001c0)={0x5, 0xf, 0x20, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x6, 0xfc01}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x1e, 0xf2, 0xfd9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x2, 0x1, 0x3}]}, 0x6, [{0xd7, &(0x7f0000000200)=@string={0xd7, 0x3, "ffef3fe5e1b918d91fbe45e55d0299cbad736ba0a610296e178d82758e8ed71341807ba6d59661ace229161c06705061cc59700208b2d5d63bbb955e9dbe53f39160894998933fb852044def4fc37c2b7fb276e21dc862cbfdbdb7f430225270b557b2559bc9705722eaf1cfe8328218cad684327d2b94e0b34e248b2c137a65cce4cd01f04f0106cff86a033c188f39ff68d878fc43bab81f472e9e679c484cd8c4b6c2cdf1bd930d4ced0340da0cb3d959048d7ae6afbf250e0be6c492f7e5f56c7e748e844254d7d4e4664874bc4fbbf1740fb9"}}, {0x6f, &(0x7f0000000300)=@string={0x6f, 0x3, "52459ffd4fd96b283eb160d5ef25b35eff9b1818b8db44f6b5a7e38883137a5d531ab63c97be90f0b5b08ea6571d9f27c283742a6869e8906d4df3c5122d32b054d2fe64b3754390e23a6f02842c5dcedea79956f027d5c1e86a1609d2e05a3e2af01043b3aaab04aa86357de6"}}, {0xe5, &(0x7f0000000380)=@string={0xe5, 0x3, "40714ac23946d9dbeff497794047ee097b162434796b49bc9008b0eefa5bbcde466f315b6670f7d1371a9d0fb17fc4fb180cc25c64c45ce3f901ca7d71c0b9367c3a063b6c5d8320afaf9430950b34de2e8f4b4ea7dad4fae776acfcbb44e7eb25850ee02adaa8b03134f9800b185028d64f0661a0b5d8bbdca81e5b9098b3700e30544d27e735cd3e1ec4fc2dbad70378cf43435c92edda48008a4a50c1c25fe3ae981753913490ca28e23ba93a209e3b0dd5a64b6d0e849e93ab433f7025a3e958987a73dfe59d6662a23c6db8515cb90deb3a2aca29047956e06c4c119c18b9723d"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x420}}]}) syz_open_dev$vbi(&(0x7f0000000380), 0x0, 0x2) (async) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000001c0)={0x0, 0x1, 0x10, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90e, 0x6, '\x00', @p_u32=0x0}}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="68fa140000002d000b00fdffffff00000000090000000457cedd575eda2d1ebc87551cefb27728412ab5647e7be52804c29a44e8274425fcbee123a2e0958a8dfcc3713092485047c27a1711ac8d33b2987199bdb53798002bb1203841c52b7bc7f6629e71d6cbdb1b647b6fbe878dd117e3621a5477dc"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) (async) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) (async) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000040)=[0x20, 0x4, 0x40005002, 0xffff32eb, 0x2, 0xffffdff9, 0x2d7b, 0x401, 0x0, 0x3, 0x0, 0x3, 0xfe09, 0xd2, 0x80000002], 0x1, 0x4000003}) (async) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000078000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000004c000480480001800a0001006d61746368000000380002800e000100636f6e6e627974657300000008000240000000001c00030000"], 0x100}}, 0x0) (async) syz_usb_connect$uac1(0x0, 0xfe, &(0x7f0000000080)=ANY=[@ANYBLOB="120100020000000882050c004000010203010902ec000301fca0050904000000010100000a2401030033000201020c2402010204040f0a00e20e11240601050508000200010009000a000f05240404080724070600000109040100000102000009040101010102000009240202060001007f072401061800000a24020105030c80f11a092402010301fa081609050109ff030d030407250100090900090402000001020000090402010101025793e0e419dc00000a2402020100f9ff070511240202c500fdff0d4deb9745aeebe78c0a2402020a00a00005fe0f240201020207008f3b3b742a52320c24020240005d00816707c209058209080000fa1507"], &(0x7f0000000540)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x1, 0x0, 0x8a, 0x40, 0x83}, 0x20, &(0x7f00000001c0)={0x5, 0xf, 0x20, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x6, 0xfc01}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x1e, 0xf2, 0xfd9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x2, 0x1, 0x3}]}, 0x6, [{0xd7, &(0x7f0000000200)=@string={0xd7, 0x3, "ffef3fe5e1b918d91fbe45e55d0299cbad736ba0a610296e178d82758e8ed71341807ba6d59661ace229161c06705061cc59700208b2d5d63bbb955e9dbe53f39160894998933fb852044def4fc37c2b7fb276e21dc862cbfdbdb7f430225270b557b2559bc9705722eaf1cfe8328218cad684327d2b94e0b34e248b2c137a65cce4cd01f04f0106cff86a033c188f39ff68d878fc43bab81f472e9e679c484cd8c4b6c2cdf1bd930d4ced0340da0cb3d959048d7ae6afbf250e0be6c492f7e5f56c7e748e844254d7d4e4664874bc4fbbf1740fb9"}}, {0x6f, &(0x7f0000000300)=@string={0x6f, 0x3, "52459ffd4fd96b283eb160d5ef25b35eff9b1818b8db44f6b5a7e38883137a5d531ab63c97be90f0b5b08ea6571d9f27c283742a6869e8906d4df3c5122d32b054d2fe64b3754390e23a6f02842c5dcedea79956f027d5c1e86a1609d2e05a3e2af01043b3aaab04aa86357de6"}}, {0xe5, &(0x7f0000000380)=@string={0xe5, 0x3, "40714ac23946d9dbeff497794047ee097b162434796b49bc9008b0eefa5bbcde466f315b6670f7d1371a9d0fb17fc4fb180cc25c64c45ce3f901ca7d71c0b9367c3a063b6c5d8320afaf9430950b34de2e8f4b4ea7dad4fae776acfcbb44e7eb25850ee02adaa8b03134f9800b185028d64f0661a0b5d8bbdca81e5b9098b3700e30544d27e735cd3e1ec4fc2dbad70378cf43435c92edda48008a4a50c1c25fe3ae981753913490ca28e23ba93a209e3b0dd5a64b6d0e849e93ab433f7025a3e958987a73dfe59d6662a23c6db8515cb90deb3a2aca29047956e06c4c119c18b9723d"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x420}}]}) (async) executing program 9: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c74, 0x40040, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1533, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'lo\x00'}) clock_gettime(0x17, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000080)={0x2b, 0x0, 0xffffffc5}) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) program crashed: INFO: task hung in nfsd_nl_listener_set_doit bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunk #2 of len 3 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 14, 21] detailed listing: executing program 33: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x767a, 0x0, 0x7ffffffe, 0x257, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x1000000, 0x10000004, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x144, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) ioctl$KVM_TDX_INIT_VM(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]}) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) (async) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 8: mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000500)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, 0x0, 0x90) (async) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800}]}, &(0x7f0000000200)=0x10) (async) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, 0x0, 0x0) (async) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001ec0), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000100)={0x5, {0x521, 0x1, 0x7, 0x4e0}, {0x6, 0x7, 0x0, 0x1}, {0xffffffe7, 0x3}}) executing program 9: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c74, 0x40040, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1533, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'lo\x00'}) clock_gettime(0x17, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000080)={0x2b, 0x0, 0xffffffc5}) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) program crashed: INFO: task hung in nfsd_nl_listener_set_doit bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <1>, <1>, <1> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: split chunk #1 of len 1 into 2 parts bisect: no way to further split the chunk bisect: split chunk #2 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 3 programs left: executing program 33: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x767a, 0x0, 0x7ffffffe, 0x257, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x1000000, 0x10000004, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x144, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) ioctl$KVM_TDX_INIT_VM(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]}) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) (async) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 8: mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000500)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, 0x0, 0x90) (async) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800}]}, &(0x7f0000000200)=0x10) (async) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, 0x0, 0x0) (async) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001ec0), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000100)={0x5, {0x521, 0x1, 0x7, 0x4e0}, {0x6, 0x7, 0x0, 0x1}, {0xffffffe7, 0x3}}) executing program 9: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c74, 0x40040, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1533, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'lo\x00'}) clock_gettime(0x17, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000080)={0x2b, 0x0, 0xffffffc5}) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) bisect: trying to concatenate bisect: concatenate 3 entries minimizing program #0 before concatenation testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 14, 21] detailed listing: executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x767a, 0x0, 0x7ffffffe, 0x257, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x1000000, 0x10000004, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x144, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) ioctl$KVM_TDX_INIT_VM(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2000000000000000000000000000000007000000000000008f00000000000000060000000000000005000000000000003107000000000000020000000000000040000000000000000200000000000000724c0000020000000000000008000000000000000400000000000000030000000000000004000000000000000100000000000000ffffff7fffffffff4f000000000000006b00000000000000f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000100000017a300000400000003000000020000005a5c0000070000000000000000000000000000000400000094040000070000001f0000000300000009000000a20000000000000000000000000000000d0000000000000001000000ffff0000000000000001000001"]}) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) (async) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) executing program 8: mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000500)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, 0x0, 0x90) (async) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800}]}, &(0x7f0000000200)=0x10) (async) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, 0x0, 0x0) (async) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001ec0), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000100)={0x5, {0x521, 0x1, 0x7, 0x4e0}, {0x6, 0x7, 0x0, 0x1}, {0xffffffe7, 0x3}}) executing program 9: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c74, 0x40040, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1533, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'lo\x00'}) clock_gettime(0x17, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000080)={0x2b, 0x0, 0xffffffc5}) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 14, 21] detailed listing: executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x767a, 0x0, 0x7ffffffe, 0x257, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x1000000, 0x10000004, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x144, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) ioctl$KVM_TDX_INIT_VM(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]}) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) (async) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 8: mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000500)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, 0x0, 0x90) (async) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800}]}, &(0x7f0000000200)=0x10) (async) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, 0x0, 0x0) (async) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001ec0), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000100)={0x5, {0x521, 0x1, 0x7, 0x4e0}, {0x6, 0x7, 0x0, 0x1}, {0xffffffe7, 0x3}}) executing program 9: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c74, 0x40040, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1533, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'lo\x00'}) clock_gettime(0x17, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000080)={0x2b, 0x0, 0xffffffc5}) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 14, 21] detailed listing: executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x767a, 0x0, 0x7ffffffe, 0x257, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x1000000, 0x10000004, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x144, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) ioctl$KVM_TDX_INIT_VM(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]}) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r0, &(0x7f0000002700)={0x18, 0x0, r8, {0x7}}, 0x18) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 8: mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000500)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, 0x0, 0x90) (async) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800}]}, &(0x7f0000000200)=0x10) (async) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, 0x0, 0x0) (async) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001ec0), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000100)={0x5, {0x521, 0x1, 0x7, 0x4e0}, {0x6, 0x7, 0x0, 0x1}, {0xffffffe7, 0x3}}) executing program 9: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c74, 0x40040, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1533, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'lo\x00'}) clock_gettime(0x17, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000080)={0x2b, 0x0, 0xffffffc5}) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 14, 21] detailed listing: executing program 0: openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x767a, 0x0, 0x7ffffffe, 0x257, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x1000000, 0x10000004, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x144, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) ioctl$KVM_TDX_INIT_VM(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]}) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 8: mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000500)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, 0x0, 0x90) (async) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800}]}, &(0x7f0000000200)=0x10) (async) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, 0x0, 0x0) (async) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001ec0), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000100)={0x5, {0x521, 0x1, 0x7, 0x4e0}, {0x6, 0x7, 0x0, 0x1}, {0xffffffe7, 0x3}}) executing program 9: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c74, 0x40040, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1533, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'lo\x00'}) clock_gettime(0x17, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000080)={0x2b, 0x0, 0xffffffc5}) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 14, 21] detailed listing: executing program 0: openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x767a, 0x0, 0x7ffffffe, 0x257, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x1000000, 0x10000004, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x144, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) ioctl$KVM_TDX_INIT_VM(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]}) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 8: mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000500)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, 0x0, 0x90) (async) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800}]}, &(0x7f0000000200)=0x10) (async) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, 0x0, 0x0) (async) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001ec0), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000100)={0x5, {0x521, 0x1, 0x7, 0x4e0}, {0x6, 0x7, 0x0, 0x1}, {0xffffffe7, 0x3}}) executing program 9: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c74, 0x40040, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1533, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'lo\x00'}) clock_gettime(0x17, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000080)={0x2b, 0x0, 0xffffffc5}) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) program crashed: lost connection to test machine suppressed program crash: lost connection to test machine testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 14, 21] detailed listing: executing program 0: openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x767a, 0x0, 0x7ffffffe, 0x257, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x1000000, 0x10000004, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x144, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) ioctl$KVM_TDX_INIT_VM(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2000000000000000000000000000000007000000000000008f00000000000000060000000000000005000000000000003107000000000000020000000000000040000000000000000200000000000000724c0000020000000000000008000000000000000400000000000000030000000000000004000000000000000100000000000000ffffff7fffffffff4f000000000000006b00000000000000f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000100000017a300000400000003000000020000005a5c0000070000000000000000000000000000000400000094040000070000001f0000000300000009000000a20000000000000000000000000000000d0000000000000001000000ffff0000000000000001000001"]}) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 8: mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000500)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, 0x0, 0x90) (async) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800}]}, &(0x7f0000000200)=0x10) (async) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, 0x0, 0x0) (async) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001ec0), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000100)={0x5, {0x521, 0x1, 0x7, 0x4e0}, {0x6, 0x7, 0x0, 0x1}, {0xffffffe7, 0x3}}) executing program 9: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c74, 0x40040, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1533, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'lo\x00'}) clock_gettime(0x17, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000080)={0x2b, 0x0, 0xffffffc5}) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 14, 21] detailed listing: executing program 0: openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x767a, 0x0, 0x7ffffffe, 0x257, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x1000000, 0x10000004, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x144, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 8: mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000500)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, 0x0, 0x90) (async) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800}]}, &(0x7f0000000200)=0x10) (async) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, 0x0, 0x0) (async) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001ec0), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000100)={0x5, {0x521, 0x1, 0x7, 0x4e0}, {0x6, 0x7, 0x0, 0x1}, {0xffffffe7, 0x3}}) executing program 9: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c74, 0x40040, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1533, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'lo\x00'}) clock_gettime(0x17, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000080)={0x2b, 0x0, 0xffffffc5}) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 14, 21] detailed listing: executing program 0: openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r4) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 8: mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000500)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, 0x0, 0x90) (async) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800}]}, &(0x7f0000000200)=0x10) (async) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, 0x0, 0x0) (async) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001ec0), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000100)={0x5, {0x521, 0x1, 0x7, 0x4e0}, {0x6, 0x7, 0x0, 0x1}, {0xffffffe7, 0x3}}) executing program 9: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c74, 0x40040, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1533, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'lo\x00'}) clock_gettime(0x17, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000080)={0x2b, 0x0, 0xffffffc5}) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 14, 21] detailed listing: executing program 0: openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 8: mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000500)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, 0x0, 0x90) (async) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800}]}, &(0x7f0000000200)=0x10) (async) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, 0x0, 0x0) (async) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001ec0), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000100)={0x5, {0x521, 0x1, 0x7, 0x4e0}, {0x6, 0x7, 0x0, 0x1}, {0xffffffe7, 0x3}}) executing program 9: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c74, 0x40040, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1533, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'lo\x00'}) clock_gettime(0x17, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000080)={0x2b, 0x0, 0xffffffc5}) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 14, 21] detailed listing: executing program 0: openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 8: mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000500)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, 0x0, 0x90) (async) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800}]}, &(0x7f0000000200)=0x10) (async) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, 0x0, 0x0) (async) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001ec0), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000100)={0x5, {0x521, 0x1, 0x7, 0x4e0}, {0x6, 0x7, 0x0, 0x1}, {0xffffffe7, 0x3}}) executing program 9: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c74, 0x40040, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1533, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'lo\x00'}) clock_gettime(0x17, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000080)={0x2b, 0x0, 0xffffffc5}) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 14, 21] detailed listing: executing program 0: openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 8: mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000500)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, 0x0, 0x90) (async) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800}]}, &(0x7f0000000200)=0x10) (async) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, 0x0, 0x0) (async) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001ec0), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000100)={0x5, {0x521, 0x1, 0x7, 0x4e0}, {0x6, 0x7, 0x0, 0x1}, {0xffffffe7, 0x3}}) executing program 9: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c74, 0x40040, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1533, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'lo\x00'}) clock_gettime(0x17, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000080)={0x2b, 0x0, 0xffffffc5}) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 21] detailed listing: executing program 0: openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 8: mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000500)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, 0x0, 0x90) (async) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800}]}, &(0x7f0000000200)=0x10) (async) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, 0x0, 0x0) (async) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001ec0), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000100)={0x5, {0x521, 0x1, 0x7, 0x4e0}, {0x6, 0x7, 0x0, 0x1}, {0xffffffe7, 0x3}}) executing program 9: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c74, 0x40040, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1533, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'lo\x00'}) clock_gettime(0x17, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000080)={0x2b, 0x0, 0xffffffc5}) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 14, 21] detailed listing: executing program 0: openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 8: mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000500)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, 0x0, 0x90) (async) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800}]}, &(0x7f0000000200)=0x10) (async) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, 0x0, 0x0) (async) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001ec0), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000100)={0x5, {0x521, 0x1, 0x7, 0x4e0}, {0x6, 0x7, 0x0, 0x1}, {0xffffffe7, 0x3}}) executing program 9: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c74, 0x40040, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1533, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'lo\x00'}) clock_gettime(0x17, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000080)={0x2b, 0x0, 0xffffffc5}) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 14, 21] detailed listing: executing program 0: read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 8: mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000500)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, 0x0, 0x90) (async) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800}]}, &(0x7f0000000200)=0x10) (async) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, 0x0, 0x0) (async) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001ec0), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000100)={0x5, {0x521, 0x1, 0x7, 0x4e0}, {0x6, 0x7, 0x0, 0x1}, {0xffffffe7, 0x3}}) executing program 9: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c74, 0x40040, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1533, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'lo\x00'}) clock_gettime(0x17, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000080)={0x2b, 0x0, 0xffffffc5}) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) program crashed: INFO: task hung in nfsd_nl_listener_set_doit minimized 14 calls -> 3 calls minimizing program #1 before concatenation testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 13, 21] detailed listing: executing program 33: read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000500)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, 0x0, 0x90) (async) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800}]}, &(0x7f0000000200)=0x10) (async) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, 0x0, 0x0) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000001ec0), 0x2, 0x0) executing program 9: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c74, 0x40040, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1533, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'lo\x00'}) clock_gettime(0x17, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000080)={0x2b, 0x0, 0xffffffc5}) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 12, 21] detailed listing: executing program 33: read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000500)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, 0x0, 0x90) (async) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800}]}, &(0x7f0000000200)=0x10) (async) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, 0x0, 0x0) (async) executing program 9: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c74, 0x40040, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1533, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'lo\x00'}) clock_gettime(0x17, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000080)={0x2b, 0x0, 0xffffffc5}) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 11, 21] detailed listing: executing program 33: read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000500)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, 0x0, 0x90) (async) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800}]}, &(0x7f0000000200)=0x10) (async) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) executing program 9: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c74, 0x40040, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1533, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'lo\x00'}) clock_gettime(0x17, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000080)={0x2b, 0x0, 0xffffffc5}) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) program crashed: lost connection to test machine suppressed program crash: lost connection to test machine testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 11, 21] detailed listing: executing program 33: read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000500)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, 0x0, 0x90) (async) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800}]}, &(0x7f0000000200)=0x10) (async) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) (async) executing program 9: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c74, 0x40040, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1533, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'lo\x00'}) clock_gettime(0x17, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000080)={0x2b, 0x0, 0xffffffc5}) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 10, 21] detailed listing: executing program 33: read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000500)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, 0x0, 0x90) (async) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800}]}, &(0x7f0000000200)=0x10) (async) write(0xffffffffffffffff, 0x0, 0x0) (async) executing program 9: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c74, 0x40040, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1533, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'lo\x00'}) clock_gettime(0x17, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000080)={0x2b, 0x0, 0xffffffc5}) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 9, 21] detailed listing: executing program 33: read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000500)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, 0x0, 0x90) (async) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) (async) write(0xffffffffffffffff, 0x0, 0x0) (async) executing program 9: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c74, 0x40040, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1533, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'lo\x00'}) clock_gettime(0x17, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000080)={0x2b, 0x0, 0xffffffc5}) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 8, 21] detailed listing: executing program 33: read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000500)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, 0x0, 0x90) (async) write(0xffffffffffffffff, 0x0, 0x0) (async) executing program 9: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c74, 0x40040, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1533, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'lo\x00'}) clock_gettime(0x17, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000080)={0x2b, 0x0, 0xffffffc5}) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 7, 21] detailed listing: executing program 33: read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000500)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) write(0xffffffffffffffff, 0x0, 0x0) (async) executing program 9: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c74, 0x40040, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1533, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'lo\x00'}) clock_gettime(0x17, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000080)={0x2b, 0x0, 0xffffffc5}) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 6, 21] detailed listing: executing program 33: read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000500)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) accept4(r0, 0x0, 0x0, 0x0) (async) write(0xffffffffffffffff, 0x0, 0x0) (async) executing program 9: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c74, 0x40040, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1533, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'lo\x00'}) clock_gettime(0x17, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000080)={0x2b, 0x0, 0xffffffc5}) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 5, 21] detailed listing: executing program 33: read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000500)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) write(0xffffffffffffffff, 0x0, 0x0) (async) executing program 9: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c74, 0x40040, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1533, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'lo\x00'}) clock_gettime(0x17, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000080)={0x2b, 0x0, 0xffffffc5}) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 4, 21] detailed listing: executing program 33: read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000500)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) write(0xffffffffffffffff, 0x0, 0x0) (async) executing program 9: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c74, 0x40040, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1533, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'lo\x00'}) clock_gettime(0x17, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000080)={0x2b, 0x0, 0xffffffc5}) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 3, 21] detailed listing: executing program 33: read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) socket$inet(0xa, 0x801, 0x84) write(0xffffffffffffffff, 0x0, 0x0) (async) executing program 9: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c74, 0x40040, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1533, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'lo\x00'}) clock_gettime(0x17, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000080)={0x2b, 0x0, 0xffffffc5}) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 2, 21] detailed listing: executing program 33: read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) (async) executing program 9: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c74, 0x40040, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1533, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'lo\x00'}) clock_gettime(0x17, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000080)={0x2b, 0x0, 0xffffffc5}) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 1, 21] detailed listing: executing program 33: read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 0: write(0xffffffffffffffff, 0x0, 0x0) (async) executing program 9: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c74, 0x40040, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1533, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'lo\x00'}) clock_gettime(0x17, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000080)={0x2b, 0x0, 0xffffffc5}) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) program crashed: INFO: task hung in nfsd_nl_listener_set_doit minimized 14 calls -> 1 calls minimizing program #2 before concatenation testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 1, 20] detailed listing: executing program 33: read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 8: write(0xffffffffffffffff, 0x0, 0x0) (async) executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c74, 0x40040, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1533, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'lo\x00'}) clock_gettime(0x17, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000080)={0x2b, 0x0, 0xffffffc5}) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 1, 19] detailed listing: executing program 33: read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 8: write(0xffffffffffffffff, 0x0, 0x0) (async) executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c74, 0x40040, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1533, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'lo\x00'}) clock_gettime(0x17, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 1, 18] detailed listing: executing program 33: read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 8: write(0xffffffffffffffff, 0x0, 0x0) (async) executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c74, 0x40040, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1533, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'lo\x00'}) clock_gettime(0x17, 0x0) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 1, 17] detailed listing: executing program 33: read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 8: write(0xffffffffffffffff, 0x0, 0x0) (async) executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c74, 0x40040, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1533, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'lo\x00'}) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 1, 16] detailed listing: executing program 33: read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 8: write(0xffffffffffffffff, 0x0, 0x0) (async) executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c74, 0x40040, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1533, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) socket$inet6(0xa, 0x2, 0x0) program crashed: lost connection to test machine suppressed program crash: lost connection to test machine testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 1, 16] detailed listing: executing program 33: read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 8: write(0xffffffffffffffff, 0x0, 0x0) (async) executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c74, 0x40040, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1533, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00'}) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 1, 16] detailed listing: executing program 33: read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 8: write(0xffffffffffffffff, 0x0, 0x0) (async) executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c74, 0x40040, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1533, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'lo\x00'}) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 1, 15] detailed listing: executing program 33: read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 8: write(0xffffffffffffffff, 0x0, 0x0) (async) executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c74, 0x40040, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1533, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'lo\x00'}) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 1, 14] detailed listing: executing program 33: read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 8: write(0xffffffffffffffff, 0x0, 0x0) (async) executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) dup(r0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00'}) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 1, 13] detailed listing: executing program 33: read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 8: write(0xffffffffffffffff, 0x0, 0x0) (async) executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00'}) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 1, 12] detailed listing: executing program 33: read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 8: write(0xffffffffffffffff, 0x0, 0x0) (async) executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00'}) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 1, 11] detailed listing: executing program 33: read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 8: write(0xffffffffffffffff, 0x0, 0x0) (async) executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00'}) program crashed: lost connection to test machine suppressed program crash: lost connection to test machine testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 1, 11] detailed listing: executing program 33: read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 8: write(0xffffffffffffffff, 0x0, 0x0) (async) executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00'}) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 1, 10] detailed listing: executing program 33: read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 8: write(0xffffffffffffffff, 0x0, 0x0) (async) executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00'}) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 1, 9] detailed listing: executing program 33: read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 8: write(0xffffffffffffffff, 0x0, 0x0) (async) executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00'}) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 1, 8] detailed listing: executing program 33: read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 8: write(0xffffffffffffffff, 0x0, 0x0) (async) executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) userfaultfd(0x80001) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00'}) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 1, 7] detailed listing: executing program 33: read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 8: write(0xffffffffffffffff, 0x0, 0x0) (async) executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00'}) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 1, 6] detailed listing: executing program 33: read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 8: write(0xffffffffffffffff, 0x0, 0x0) (async) executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00'}) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 1, 5] detailed listing: executing program 33: read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 8: write(0xffffffffffffffff, 0x0, 0x0) (async) executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00'}) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 1, 4] detailed listing: executing program 33: read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 8: write(0xffffffffffffffff, 0x0, 0x0) (async) executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00'}) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 1, 3] detailed listing: executing program 33: read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) executing program 8: write(0xffffffffffffffff, 0x0, 0x0) (async) executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00'}) program crashed: INFO: task hung in nfsd_nl_listener_set_doit minimized 21 calls -> 3 calls testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): read$FUSE-socket$nl_generic-sendmsg$nl_generic-write-socket$inet6_tcp-socket$inet6-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) write(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00'}) program crashed: INFO: task hung in nfsd_nl_listener_set_doit bisect: concatenation succeeded found reproducer with 7 syscalls minimizing guilty program testing program (duration=6m51.153301612s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): read$FUSE-socket$nl_generic-sendmsg$nl_generic-write-socket$inet6_tcp-socket$inet6 detailed listing: executing program 0: read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) write(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) program did not crash testing program (duration=6m51.153301612s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): read$FUSE-socket$nl_generic-sendmsg$nl_generic-write-socket$inet6_tcp-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) write(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00'}) program did not crash testing program (duration=6m51.153301612s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): read$FUSE-socket$nl_generic-sendmsg$nl_generic-write-socket$inet6-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) write(0xffffffffffffffff, 0x0, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00'}) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=6m51.153301612s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): read$FUSE-socket$nl_generic-sendmsg$nl_generic-socket$inet6-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00'}) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=6m51.153301612s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): read$FUSE-socket$nl_generic-socket$inet6-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00'}) program did not crash testing program (duration=6m51.153301612s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): read$FUSE-sendmsg$nl_generic-socket$inet6-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00'}) program did not crash testing program (duration=6m51.153301612s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-socket$inet6-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00'}) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=6m51.153301612s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-socket$inet6-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x400c884) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00'}) program did not crash testing program (duration=6m51.153301612s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-socket$inet6-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x400c884) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00'}) program did not crash testing program (duration=6m51.153301612s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-socket$inet6-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x400c884) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00'}) program did not crash testing program (duration=6m51.153301612s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-socket$inet6-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=6m51.153301612s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-socket$inet6-ioctl$sock_inet_SIOCSIFFLAGS program crashed: INFO: task hung in nfsd_nl_listener_set_doit simplifying C reproducer testing compiled C program (duration=6m51.153301612s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-socket$inet6-ioctl$sock_inet_SIOCSIFFLAGS program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing compiled C program (duration=6m51.153301612s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-socket$inet6-ioctl$sock_inet_SIOCSIFFLAGS program did not crash testing compiled C program (duration=6m51.153301612s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-socket$inet6-ioctl$sock_inet_SIOCSIFFLAGS program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing compiled C program (duration=6m51.153301612s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-socket$inet6-ioctl$sock_inet_SIOCSIFFLAGS program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing compiled C program (duration=6m51.153301612s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-socket$inet6-ioctl$sock_inet_SIOCSIFFLAGS program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing compiled C program (duration=6m51.153301612s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-socket$inet6-ioctl$sock_inet_SIOCSIFFLAGS program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing compiled C program (duration=6m51.153301612s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-socket$inet6-ioctl$sock_inet_SIOCSIFFLAGS program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=6m51.153301612s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-socket$inet6-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00'}) program crashed: INFO: task hung in nfsd_nl_listener_set_doit validation run: crashed=true testing program (duration=6m51.153301612s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-socket$inet6-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00'}) program crashed: INFO: task hung in nfsd_nl_listener_set_doit validation run: crashed=true testing program (duration=6m51.153301612s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-socket$inet6-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00'}) program crashed: lost connection to test machine suppressed program crash: lost connection to test machine validation run: crashed=false testing program (duration=6m51.153301612s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-socket$inet6-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00'}) program crashed: INFO: task hung in nfsd_nl_listener_set_doit validation run: crashed=true reproducing took 8h24m21.166484454s repro crashed as (corrupted=false): INFO: task syz.1.18:5992 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.18 state:D stack:27104 pid:5992 tgid:5992 ppid:5752 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x1709/0x5530 kernel/sched/core.c:7231 rt_mutex[ 275.222084][ T39] __schedule_loop kernel/sched/core.c:7308 [inline] rt_mutex[ 275.222084][ T39] rt_mutex_schedule+0x76/0xf0 kernel/sched/core.c:7604 rt_mutex_slowlock_block+0x55c/0x680 kernel/locking/rtmutex.c:1670 __rt_mutex_slowlock kernel/locking/rtmutex.c:1747 [inline] __rt_mutex_slowlock_locked kernel/locking/rtmutex.c:1787 [inline] rt_mutex_slowlock+0x2d4/0x780 kernel/locking/rtmutex.c:1827 __rt_mutex_lock kernel/locking/rtmutex.c:1842 [inline] __mutex_lock_common kernel/locking/rtmutex_api.c:560 [inline] mutex_lock_nested+0x168/0x1d0 kernel/locking/rtmutex_api.c:578 nfsd_nl_listener_set_doit+0x53b/0x1a90 fs/nfsd/nfsctl.c:2055 genl_family_rcv_msg_doit+0x233/0x340 net/netlink/genetlink.c:1114 genl_family_rcv_msg net/netlink/genetlink.c:1194 [inline] genl_rcv_msg+0x614/0x7a0 net/netlink/genetlink.c:1209 netlink_rcv_skb+0x226/0x4a0 net/netlink/af_netlink.c:2556 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1218 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline] netlink_unicast+0x7f5/0x990 net/netlink/af_netlink.c:1345 netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1900 sock_sendmsg_nosec+0x13a/0x180 net/socket.c:810 __sock_sendmsg net/socket.c:825 [inline] ____sys_sendmsg+0x565/0x870 net/socket.c:2727 ___sys_sendmsg+0x2a5/0x360 net/socket.c:2781 __sys_sendmsg net/socket.c:2813 [inline] __do_sys_sendmsg net/socket.c:2818 [inline] __se_sys_sendmsg net/socket.c:2816 [inline] __x64_sys_sendmsg+0x1b7/0x290 net/socket.c:2816 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x17b/0x530 arch/x86/entry/syscall_64.c:85 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fdf6a46e0d9 RSP: 002b:00007ffcfa69daa8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007fdf6a6f5fa0 RCX: 00007fdf6a46e0d9 RDX: 000000000400c884 RSI: 0000200000000640 RDI: 0000000000000003 RBP: 00007fdf6a505024 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fdf6a6f5fac R14: 00007fdf6a6f5fa0 R15: 00007fdf6a6f5fa0 INFO: task syz.3.20:5993 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.20 state:D stack:26528 pid:5993 tgid:5993 ppid:5755 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x1709/0x5530 kernel/sched/core.c:7231 __schedule_loop kernel/sched/core.c:7308 [inline] rt_mutex_schedule+0x76/0xf0 kernel/sched/core.c:7604 rt_mutex_slowlock_block+0x55c/0x680 kernel/locking/rtmutex.c:1670 __rt_mutex_slowlock kernel/locking/rtmutex.c:1747 [inline] __rt_mutex_slowlock_locked kernel/locking/rtmutex.c:1787 [inline] rt_mutex_slowlock+0x2d4/0x780 kernel/locking/rtmutex.c:1827 __rt_mutex_lock kernel/locking/rtmutex.c:1842 [inline] __mutex_lock_common kernel/locking/rtmutex_api.c:560 [inline] mutex_lock_nested+0x168/0x1d0 kernel/locking/rtmutex_api.c:578 nfsd_nl_listener_set_doit+0x53b/0x1a90 fs/nfsd/nfsctl.c:2055 genl_family_rcv_msg_doit+0x233/0x340 net/netlink/genetlink.c:1114 genl_family_rcv_msg net/netlink/genetlink.c:1194 [inline] genl_rcv_msg+0x614/0x7a0 net/netlink/genetlink.c:1209 netlink_rcv_skb+0x226/0x4a0 net/netlink/af_netlink.c:2556 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1218 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline] netlink_unicast+0x7f5/0x990 net/netlink/af_netlink.c:1345 netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1900 sock_sendmsg_nosec+0x13a/0x180 net/socket.c:810 __sock_sendmsg net/socket.c:825 [inline] ____sys_sendmsg+0x565/0x870 net/socket.c:2727 ___sys_sendmsg+0x2a5/0x360 net/socket.c:2781 __sys_sendmsg net/socket.c:2813 [inline] __do_sys_sendmsg net/socket.c:2818 [inline] __se_sys_sendmsg net/socket.c:2816 [inline] __x64_sys_sendmsg+0x1b7/0x290 net/socket.c:2816 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x17b/0x530 arch/x86/entry/syscall_64.c:85 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7faadf30e0d9 RSP: 002b:00007fff9584a108 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007faadf595fa0 RCX: 00007faadf30e0d9 RDX: 000000000400c884 RSI: 0000200000000640 RDI: 0000000000000003 RBP: 00007faadf3a5024 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007faadf595fac R14: 00007faadf595fa0 R15: 00007faadf595fa0 INFO: task syz.2.19:5994 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.19 state:D stack:27128 pid:5994 tgid:5994 ppid:5753 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x1709/0x5530 kernel/sched/core.c:7231 __schedule_loop kernel/sched/core.c:7308 [inline] rt_mutex_schedule+0x76/0xf0 kernel/sched/core.c:7604 rt_mutex_slowlock_block+0x55c/0x680 kernel/locking/rtmutex.c:1670 __rt_mutex_slowlock kernel/locking/rtmutex.c:1747 [inline] __rt_mutex_slowlock_locked kernel/locking/rtmutex.c:1787 [inline] rt_mutex_slowlock+0x2d4/0x780 kernel/locking/rtmutex.c:1827 __rt_mutex_lock kernel/locking/rtmutex.c:1842 [inline] __mutex_lock_common kernel/locking/rtmutex_api.c:560 [inline] mutex_lock_nested+0x168/0x1d0 kernel/locking/rtmutex_api.c:578 nfsd_nl_listener_set_doit+0x53b/0x1a90 fs/nfsd/nfsctl.c:2055 genl_family_rcv_msg_doit+0x233/0x340 net/netlink/genetlink.c:1114 genl_family_rcv_msg net/netlink/genetlink.c:1194 [inline] genl_rcv_msg+0x614/0x7a0 net/netlink/genetlink.c:1209 netlink_rcv_skb+0x226/0x4a0 net/netlink/af_netlink.c:2556 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1218 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline] netlink_unicast+0x7f5/0x990 net/netlink/af_netlink.c:1345 netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1900 sock_sendmsg_nosec+0x13a/0x180 net/socket.c:810 __sock_sendmsg net/socket.c:825 [inline] ____sys_sendmsg+0x565/0x870 net/socket.c:2727 ___sys_sendmsg+0x2a5/0x360 net/socket.c:2781 __sys_sendmsg net/socket.c:2813 [inline] __do_sys_sendmsg net/socket.c:2818 [inline] __se_sys_sendmsg net/socket.c:2816 [inline] __x64_sys_sendmsg+0x1b7/0x290 net/socket.c:2816 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x17b/0x530 arch/x86/entry/syscall_64.c:85 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f0762e6e0d9 RSP: 002b:00007fff559167c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f07630f5fa0 RCX: 00007f0762e6e0d9 RDX: 000000000400c884 RSI: 0000200000000640 RDI: 0000000000000003 RBP: 00007f0762f05024 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f07630f5fac R14: 00007f07630f5fa0 R15: 00007f07630f5fa0 Showing all locks held in the system: locks held by pr/legacy/17: 4, last CPU#0: #0: ffffffff8e3b5a40 (console_lock){+.+.}-{0:0}, at: legacy_kthread_func+0x1a3/0x250 kernel/printk/printk.c:3718 #1: ffffffff8e29d338 (console_srcu){....}-{0:0}, at: rcu_try_lock_acquire include/linux/rcupdate.h:305 [inline] #1: ffffffff8e29d338 (console_srcu){....}-{0:0}, at: srcu_read_lock_nmisafe include/linux/srcu.h:428 [inline] #1: ffffffff8e29d338 (console_srcu){....}-{0:0}, at: console_srcu_read_lock kernel/printk/printk.c:291 [inline] #1: ffffffff8e29d338 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfa/0xb90 kernel/printk/printk.c:3246 #2: ffffffff9a078558 (&port_lock_key){+.+.}-{3:3}, at: spin_lock include/linux/spinlock_rt.h:45 [inline] #2: ffffffff9a078558 (&port_lock_key){+.+.}-{3:3}, at: uart_port_lock_irqsave include/linux/serial_core.h:719 [inline] #2: ffffffff9a078558 (&port_lock_key){+.+.}-{3:3}, at: serial8250_console_write+0x17c/0x1b40 drivers/tty/serial/8250/8250_port.c:3344 #3: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #3: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #3: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __rt_spin_lock kernel/locking/spinlock_rt.c:50 [inline] #3: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 kernel/locking/spinlock_rt.c:57 locks held by kworker/1:1/37: 9, last CPU#1: #0: ffff888040623938 ((wq_completion)wg-crypt-wg2#14){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #0: ffff888040623938 ((wq_completion)wg-crypt-wg2#14){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #0: ffff888040623938 ((wq_completion)wg-crypt-wg2#14){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 kernel/workqueue.c:3344 #1: ffffc90000ac7c60 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #1: ffffc90000ac7c60 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #1: ffffc90000ac7c60 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 kernel/workqueue.c:3344 #2: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 kernel/softirq.c:163 #3: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #3: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #3: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x261/0xc50 net/core/dev.c:6679 #4: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #4: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #4: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: ip6_input+0x23/0x270 net/ipv6/ip6_input.c:544 #5: ffffffff8e259320 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 kernel/softirq.c:163 #6: ffffffff8e3c38e0 (rcu_read_lock_bh){....}-{1:3}, at: local_bh_disable include/linux/bottom_half.h:20 [inline] #6: ffffffff8e3c38e0 (rcu_read_lock_bh){....}-{1:3}, at: rcu_read_lock_bh include/linux/rcupdate.h:893 [inline] #6: ffffffff8e3c38e0 (rcu_read_lock_bh){....}-{1:3}, at: wg_packet_consume_data drivers/net/wireguard/receive.c:515 [inline] #6: ffffffff8e3c38e0 (rcu_read_lock_bh){....}-{1:3}, at: wg_packet_receive+0x106a/0x23c0 drivers/net/wireguard/receive.c:576 #7: ffffffff8e259320 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 kernel/softirq.c:163 #8: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #8: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #8: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __rt_spin_lock kernel/locking/spinlock_rt.c:50 [inline] #8: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 kernel/locking/spinlock_rt.c:57 locks held by khungtaskd/39: 1, last CPU#1: #0: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #0: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #0: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6835 locks held by kworker/u8:8/1193: 5, last CPU#1: #0: ffff8880334e8138 ((wq_completion)bat_events){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #0: ffff8880334e8138 ((wq_completion)bat_events){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #0: ffff8880334e8138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 kernel/workqueue.c:3344 #1: ffffc900067dfc60 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #1: ffffc900067dfc60 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #1: ffffc900067dfc60 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 kernel/workqueue.c:3344 #2: ffffffff8e259320 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 kernel/softirq.c:163 #3: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 kernel/softirq.c:163 #4: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #4: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #4: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __rt_spin_lock kernel/locking/spinlock_rt.c:50 [inline] #4: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 kernel/locking/spinlock_rt.c:57 locks held by kworker/u8:18/2883: 3, on CPU#1: #0: ffff888032f52938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #0: ffff888032f52938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #0: ffff888032f52938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 kernel/workqueue.c:3344 #1: ffffc9000e30fc60 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #1: ffffc9000e30fc60 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #1: ffffc9000e30fc60 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 kernel/workqueue.c:3344 #2: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:134 [inline] #2: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x123/0x16e0 net/ipv6/addrconf.c:4229 locks held by kworker/u8:24/2894: 3, on CPU#1: #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 kernel/workqueue.c:3344 #1: ffffc9000e41fc60 ((linkwatch_work).work){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #1: ffffc9000e41fc60 ((linkwatch_work).work){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #1: ffffc9000e41fc60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 kernel/workqueue.c:3344 #2: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 net/core/link_watch.c:313 locks held by getty/5362: 2, on CPU#1: #0: ffff888036e460a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc900044c32e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 drivers/tty/n_tty.c:2211 locks held by syz.0.21/5990: 2, on CPU#0: #0: ffffffff8f835c20 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53b/0x1a90 fs/nfsd/nfsctl.c:2055 locks held by syz.1.18/5992: 2, on CPU#1: #0: ffffffff8f835c20 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53b/0x1a90 fs/nfsd/nfsctl.c:2055 locks held by syz.3.20/5993: 2, on CPU#1: #0: ffffffff8f835c20 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53b/0x1a90 fs/nfsd/nfsctl.c:2055 locks held by syz.2.19/5994: 2, on CPU#1: #0: ffffffff8f835c20 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53b/0x1a90 fs/nfsd/nfsctl.c:2055 locks held by syz.4.22/6132: 2, on CPU#0: #0: ffffffff8f835c20 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53b/0x1a90 fs/nfsd/nfsctl.c:2055 locks held by syz.5.23/6160: 2, on CPU#0: #0: ffffffff8f835c20 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53b/0x1a90 fs/nfsd/nfsctl.c:2055 locks held by syz.7.25/6161: 2, on CPU#1: #0: ffffffff8f835c20 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53b/0x1a90 fs/nfsd/nfsctl.c:2055 locks held by syz.6.24/6162: 2, on CPU#1: #0: ffffffff8f835c20 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53b/0x1a90 fs/nfsd/nfsctl.c:2055 locks held by syz.8.26/6265: 2, on CPU#0: #0: ffffffff8f835c20 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53b/0x1a90 fs/nfsd/nfsctl.c:2055 locks held by syz.9.27/6288: 2, on CPU#0: #0: ffffffff8f835c20 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53b/0x1a90 fs/nfsd/nfsctl.c:2055 locks held by syz.0.28/6316: 2, on CPU#1: #0: ffffffff8f835c20 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53b/0x1a90 fs/nfsd/nfsctl.c:2055 locks held by syz.1.29/6318: 2, on CPU#0: #0: ffffffff8f835c20 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53b/0x1a90 fs/nfsd/nfsctl.c:2055 locks held by syz.2.30/6377: 2, on CPU#0: #0: ffffffff8f835c20 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53b/0x1a90 fs/nfsd/nfsctl.c:2055 locks held by syz.3.31/6438: 2, on CPU#1: #0: ffffffff8f835c20 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53b/0x1a90 fs/nfsd/nfsctl.c:2055 locks held by syz.4.32/6479: 2, on CPU#1: #0: ffffffff8f835c20 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53b/0x1a90 fs/nfsd/nfsctl.c:2055 locks held by syz.5.33/6487: 2, on CPU#0: #0: ffffffff8f835c20 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53b/0x1a90 fs/nfsd/nfsctl.c:2055 locks held by syz.6.34/6520: 2, on CPU#1: #0: ffffffff8f835c20 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53b/0x1a90 fs/nfsd/nfsctl.c:2055 locks held by syz.7.35/6574: 2, on CPU#0: #0: ffffffff8f835c20 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53b/0x1a90 fs/nfsd/nfsctl.c:2055 locks held by syz.8.36/6682: 2, on CPU#0: #0: ffffffff8f835c20 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53b/0x1a90 fs/nfsd/nfsctl.c:2055 locks held by syz.9.37/6684: 2, on CPU#0: #0: ffffffff8f835c20 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53b/0x1a90 fs/nfsd/nfsctl.c:2055 locks held by syz.0.38/6695: 2, on CPU#1: #0: ffffffff8f835c20 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53b/0x1a90 fs/nfsd/nfsctl.c:2055 locks held by syz.1.39/6726: 2, on CPU#0: #0: ffffffff8f835c20 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53b/0x1a90 fs/nfsd/nfsctl.c:2055 locks held by syz-executor/6728: 1, on CPU#0: #0: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:80 [inline] #0: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock net/core/rtnetlink.c:366 [inline] #0: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 net/core/rtnetlink.c:4194 locks held by syz-executor/6747: 1, on CPU#1: #0: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:134 [inline] #0: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 net/ipv4/devinet.c:978 locks held by syz-executor/6762: 1, on CPU#0: #0: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:134 [inline] #0: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x667/0xe00 net/ipv6/addrconf.c:5062 locks held by syz-executor/6789: 8, on CPU#1: #0: ffff888036086510 (sb_writers#7){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:2731 [inline] #0: ffff888036086510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 fs/read_write.c:683 #1: ffff888063264878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 fs/kernfs/file.c:336 #2: ffff88802a023d28 (kn->active#57){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:73 [inline] #2: ffff88802a023d28 (kn->active#57){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 fs/kernfs/file.c:337 #3: ffffffff8f038998 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 drivers/net/netdevsim/bus.c:234 #4: ffff88801c3e9160 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline] #4: ffff88801c3e9160 (&dev->mutex){....}-{4:4}, at: __device_driver_lock drivers/base/dd.c:1171 [inline] #4: ffff88801c3e9160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 drivers/base/dd.c:1369 #5: ffff888039584310 (&devlink->lock_key#17){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 drivers/net/netdevsim/dev.c:1799 #6: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 drivers/net/netdevsim/netdev.c:1191 #7: ffff88803d521070 (&dev_instance_lock_key#23){+.+.}-{4:4}, at: netdev_lock include/linux/netdevice.h:2857 [inline] #7: ffff88803d521070 (&dev_instance_lock_key#23){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5bb/0x2120 net/core/dev.c:12442 ============================================= NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 nmi_cpu_backtrace+0x274/0x2d0 lib/nmi_backtrace.c:122 nmi_trigger_cpumask_backtrace+0x17a/0x380 lib/nmi_backtrace.c:65 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline] __sys_info lib/sys_info.c:157 [inline] sys_info+0x135/0x170 lib/sys_info.c:165 check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline] watchdog+0xfd7/0x1030 kernel/hung_task.c:561 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 17 Comm: pr/legacy Not tainted syzkaller #0 PREEMPT_{RT,(full)} Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 RIP: 0010:io_serial_in+0x77/0xc0 drivers/tty/serial/8250/8250_port.c:401 Code: e8 6e 3b 65 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 2f 92 d1 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 RSP: 0018:ffffc90000167a28 EFLAGS: 00000202 RAX: 1ffffffff340f000 RBX: 00000000000003fd RCX: 0000000000000000 RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 R10: dffffc0000000000 R11: ffffffff856067f0 R12: dffffc0000000000 R13: 0000000000000000 R14: ffffffff9a078580 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fbb775ea6b0 CR3: 000000003905c000 CR4: 00000000003526f0 Call Trace: serial_in drivers/tty/serial/8250/8250.h:128 [inline] serial_lsr_in drivers/tty/serial/8250/8250.h:150 [inline] wait_for_lsr+0x190/0x300 drivers/tty/serial/8250/8250_port.c:1982 serial8250_fifo_wait_for_lsr_thre drivers/tty/serial/8250/8250_port.c:3235 [inline] serial8250_console_fifo_write drivers/tty/serial/8250/8250_port.c:3300 [inline] serial8250_console_write+0x113a/0x1b40 drivers/tty/serial/8250/8250_port.c:3385 console_emit_next_record kernel/printk/printk.c:3163 [inline] console_flush_one_record+0x667/0xb90 kernel/printk/printk.c:3268 legacy_kthread_func+0x1b6/0x250 kernel/printk/printk.c:3719 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 final repro crashed as (corrupted=false): INFO: task syz.1.18:5992 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.18 state:D stack:27104 pid:5992 tgid:5992 ppid:5752 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x1709/0x5530 kernel/sched/core.c:7231 rt_mutex[ 275.222084][ T39] __schedule_loop kernel/sched/core.c:7308 [inline] rt_mutex[ 275.222084][ T39] rt_mutex_schedule+0x76/0xf0 kernel/sched/core.c:7604 rt_mutex_slowlock_block+0x55c/0x680 kernel/locking/rtmutex.c:1670 __rt_mutex_slowlock kernel/locking/rtmutex.c:1747 [inline] __rt_mutex_slowlock_locked kernel/locking/rtmutex.c:1787 [inline] rt_mutex_slowlock+0x2d4/0x780 kernel/locking/rtmutex.c:1827 __rt_mutex_lock kernel/locking/rtmutex.c:1842 [inline] __mutex_lock_common kernel/locking/rtmutex_api.c:560 [inline] mutex_lock_nested+0x168/0x1d0 kernel/locking/rtmutex_api.c:578 nfsd_nl_listener_set_doit+0x53b/0x1a90 fs/nfsd/nfsctl.c:2055 genl_family_rcv_msg_doit+0x233/0x340 net/netlink/genetlink.c:1114 genl_family_rcv_msg net/netlink/genetlink.c:1194 [inline] genl_rcv_msg+0x614/0x7a0 net/netlink/genetlink.c:1209 netlink_rcv_skb+0x226/0x4a0 net/netlink/af_netlink.c:2556 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1218 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline] netlink_unicast+0x7f5/0x990 net/netlink/af_netlink.c:1345 netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1900 sock_sendmsg_nosec+0x13a/0x180 net/socket.c:810 __sock_sendmsg net/socket.c:825 [inline] ____sys_sendmsg+0x565/0x870 net/socket.c:2727 ___sys_sendmsg+0x2a5/0x360 net/socket.c:2781 __sys_sendmsg net/socket.c:2813 [inline] __do_sys_sendmsg net/socket.c:2818 [inline] __se_sys_sendmsg net/socket.c:2816 [inline] __x64_sys_sendmsg+0x1b7/0x290 net/socket.c:2816 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x17b/0x530 arch/x86/entry/syscall_64.c:85 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fdf6a46e0d9 RSP: 002b:00007ffcfa69daa8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007fdf6a6f5fa0 RCX: 00007fdf6a46e0d9 RDX: 000000000400c884 RSI: 0000200000000640 RDI: 0000000000000003 RBP: 00007fdf6a505024 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fdf6a6f5fac R14: 00007fdf6a6f5fa0 R15: 00007fdf6a6f5fa0 INFO: task syz.3.20:5993 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.20 state:D stack:26528 pid:5993 tgid:5993 ppid:5755 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x1709/0x5530 kernel/sched/core.c:7231 __schedule_loop kernel/sched/core.c:7308 [inline] rt_mutex_schedule+0x76/0xf0 kernel/sched/core.c:7604 rt_mutex_slowlock_block+0x55c/0x680 kernel/locking/rtmutex.c:1670 __rt_mutex_slowlock kernel/locking/rtmutex.c:1747 [inline] __rt_mutex_slowlock_locked kernel/locking/rtmutex.c:1787 [inline] rt_mutex_slowlock+0x2d4/0x780 kernel/locking/rtmutex.c:1827 __rt_mutex_lock kernel/locking/rtmutex.c:1842 [inline] __mutex_lock_common kernel/locking/rtmutex_api.c:560 [inline] mutex_lock_nested+0x168/0x1d0 kernel/locking/rtmutex_api.c:578 nfsd_nl_listener_set_doit+0x53b/0x1a90 fs/nfsd/nfsctl.c:2055 genl_family_rcv_msg_doit+0x233/0x340 net/netlink/genetlink.c:1114 genl_family_rcv_msg net/netlink/genetlink.c:1194 [inline] genl_rcv_msg+0x614/0x7a0 net/netlink/genetlink.c:1209 netlink_rcv_skb+0x226/0x4a0 net/netlink/af_netlink.c:2556 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1218 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline] netlink_unicast+0x7f5/0x990 net/netlink/af_netlink.c:1345 netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1900 sock_sendmsg_nosec+0x13a/0x180 net/socket.c:810 __sock_sendmsg net/socket.c:825 [inline] ____sys_sendmsg+0x565/0x870 net/socket.c:2727 ___sys_sendmsg+0x2a5/0x360 net/socket.c:2781 __sys_sendmsg net/socket.c:2813 [inline] __do_sys_sendmsg net/socket.c:2818 [inline] __se_sys_sendmsg net/socket.c:2816 [inline] __x64_sys_sendmsg+0x1b7/0x290 net/socket.c:2816 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x17b/0x530 arch/x86/entry/syscall_64.c:85 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7faadf30e0d9 RSP: 002b:00007fff9584a108 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007faadf595fa0 RCX: 00007faadf30e0d9 RDX: 000000000400c884 RSI: 0000200000000640 RDI: 0000000000000003 RBP: 00007faadf3a5024 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007faadf595fac R14: 00007faadf595fa0 R15: 00007faadf595fa0 INFO: task syz.2.19:5994 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.19 state:D stack:27128 pid:5994 tgid:5994 ppid:5753 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x1709/0x5530 kernel/sched/core.c:7231 __schedule_loop kernel/sched/core.c:7308 [inline] rt_mutex_schedule+0x76/0xf0 kernel/sched/core.c:7604 rt_mutex_slowlock_block+0x55c/0x680 kernel/locking/rtmutex.c:1670 __rt_mutex_slowlock kernel/locking/rtmutex.c:1747 [inline] __rt_mutex_slowlock_locked kernel/locking/rtmutex.c:1787 [inline] rt_mutex_slowlock+0x2d4/0x780 kernel/locking/rtmutex.c:1827 __rt_mutex_lock kernel/locking/rtmutex.c:1842 [inline] __mutex_lock_common kernel/locking/rtmutex_api.c:560 [inline] mutex_lock_nested+0x168/0x1d0 kernel/locking/rtmutex_api.c:578 nfsd_nl_listener_set_doit+0x53b/0x1a90 fs/nfsd/nfsctl.c:2055 genl_family_rcv_msg_doit+0x233/0x340 net/netlink/genetlink.c:1114 genl_family_rcv_msg net/netlink/genetlink.c:1194 [inline] genl_rcv_msg+0x614/0x7a0 net/netlink/genetlink.c:1209 netlink_rcv_skb+0x226/0x4a0 net/netlink/af_netlink.c:2556 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1218 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline] netlink_unicast+0x7f5/0x990 net/netlink/af_netlink.c:1345 netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1900 sock_sendmsg_nosec+0x13a/0x180 net/socket.c:810 __sock_sendmsg net/socket.c:825 [inline] ____sys_sendmsg+0x565/0x870 net/socket.c:2727 ___sys_sendmsg+0x2a5/0x360 net/socket.c:2781 __sys_sendmsg net/socket.c:2813 [inline] __do_sys_sendmsg net/socket.c:2818 [inline] __se_sys_sendmsg net/socket.c:2816 [inline] __x64_sys_sendmsg+0x1b7/0x290 net/socket.c:2816 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x17b/0x530 arch/x86/entry/syscall_64.c:85 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f0762e6e0d9 RSP: 002b:00007fff559167c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f07630f5fa0 RCX: 00007f0762e6e0d9 RDX: 000000000400c884 RSI: 0000200000000640 RDI: 0000000000000003 RBP: 00007f0762f05024 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f07630f5fac R14: 00007f07630f5fa0 R15: 00007f07630f5fa0 Showing all locks held in the system: locks held by pr/legacy/17: 4, last CPU#0: #0: ffffffff8e3b5a40 (console_lock){+.+.}-{0:0}, at: legacy_kthread_func+0x1a3/0x250 kernel/printk/printk.c:3718 #1: ffffffff8e29d338 (console_srcu){....}-{0:0}, at: rcu_try_lock_acquire include/linux/rcupdate.h:305 [inline] #1: ffffffff8e29d338 (console_srcu){....}-{0:0}, at: srcu_read_lock_nmisafe include/linux/srcu.h:428 [inline] #1: ffffffff8e29d338 (console_srcu){....}-{0:0}, at: console_srcu_read_lock kernel/printk/printk.c:291 [inline] #1: ffffffff8e29d338 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfa/0xb90 kernel/printk/printk.c:3246 #2: ffffffff9a078558 (&port_lock_key){+.+.}-{3:3}, at: spin_lock include/linux/spinlock_rt.h:45 [inline] #2: ffffffff9a078558 (&port_lock_key){+.+.}-{3:3}, at: uart_port_lock_irqsave include/linux/serial_core.h:719 [inline] #2: ffffffff9a078558 (&port_lock_key){+.+.}-{3:3}, at: serial8250_console_write+0x17c/0x1b40 drivers/tty/serial/8250/8250_port.c:3344 #3: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #3: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #3: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __rt_spin_lock kernel/locking/spinlock_rt.c:50 [inline] #3: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 kernel/locking/spinlock_rt.c:57 locks held by kworker/1:1/37: 9, last CPU#1: #0: ffff888040623938 ((wq_completion)wg-crypt-wg2#14){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #0: ffff888040623938 ((wq_completion)wg-crypt-wg2#14){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #0: ffff888040623938 ((wq_completion)wg-crypt-wg2#14){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 kernel/workqueue.c:3344 #1: ffffc90000ac7c60 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #1: ffffc90000ac7c60 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #1: ffffc90000ac7c60 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 kernel/workqueue.c:3344 #2: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 kernel/softirq.c:163 #3: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #3: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #3: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x261/0xc50 net/core/dev.c:6679 #4: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #4: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #4: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: ip6_input+0x23/0x270 net/ipv6/ip6_input.c:544 #5: ffffffff8e259320 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 kernel/softirq.c:163 #6: ffffffff8e3c38e0 (rcu_read_lock_bh){....}-{1:3}, at: local_bh_disable include/linux/bottom_half.h:20 [inline] #6: ffffffff8e3c38e0 (rcu_read_lock_bh){....}-{1:3}, at: rcu_read_lock_bh include/linux/rcupdate.h:893 [inline] #6: ffffffff8e3c38e0 (rcu_read_lock_bh){....}-{1:3}, at: wg_packet_consume_data drivers/net/wireguard/receive.c:515 [inline] #6: ffffffff8e3c38e0 (rcu_read_lock_bh){....}-{1:3}, at: wg_packet_receive+0x106a/0x23c0 drivers/net/wireguard/receive.c:576 #7: ffffffff8e259320 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 kernel/softirq.c:163 #8: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #8: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #8: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __rt_spin_lock kernel/locking/spinlock_rt.c:50 [inline] #8: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 kernel/locking/spinlock_rt.c:57 locks held by khungtaskd/39: 1, last CPU#1: #0: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #0: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #0: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6835 locks held by kworker/u8:8/1193: 5, last CPU#1: #0: ffff8880334e8138 ((wq_completion)bat_events){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #0: ffff8880334e8138 ((wq_completion)bat_events){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #0: ffff8880334e8138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 kernel/workqueue.c:3344 #1: ffffc900067dfc60 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #1: ffffc900067dfc60 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #1: ffffc900067dfc60 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 kernel/workqueue.c:3344 #2: ffffffff8e259320 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 kernel/softirq.c:163 #3: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 kernel/softirq.c:163 #4: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #4: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #4: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __rt_spin_lock kernel/locking/spinlock_rt.c:50 [inline] #4: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 kernel/locking/spinlock_rt.c:57 locks held by kworker/u8:18/2883: 3, on CPU#1: #0: ffff888032f52938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #0: ffff888032f52938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #0: ffff888032f52938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 kernel/workqueue.c:3344 #1: ffffc9000e30fc60 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #1: ffffc9000e30fc60 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #1: ffffc9000e30fc60 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 kernel/workqueue.c:3344 #2: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:134 [inline] #2: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x123/0x16e0 net/ipv6/addrconf.c:4229 locks held by kworker/u8:24/2894: 3, on CPU#1: #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 kernel/workqueue.c:3344 #1: ffffc9000e41fc60 ((linkwatch_work).work){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #1: ffffc9000e41fc60 ((linkwatch_work).work){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #1: ffffc9000e41fc60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 kernel/workqueue.c:3344 #2: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 net/core/link_watch.c:313 locks held by getty/5362: 2, on CPU#1: #0: ffff888036e460a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc900044c32e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 drivers/tty/n_tty.c:2211 locks held by syz.0.21/5990: 2, on CPU#0: #0: ffffffff8f835c20 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53b/0x1a90 fs/nfsd/nfsctl.c:2055 locks held by syz.1.18/5992: 2, on CPU#1: #0: ffffffff8f835c20 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53b/0x1a90 fs/nfsd/nfsctl.c:2055 locks held by syz.3.20/5993: 2, on CPU#1: #0: ffffffff8f835c20 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53b/0x1a90 fs/nfsd/nfsctl.c:2055 locks held by syz.2.19/5994: 2, on CPU#1: #0: ffffffff8f835c20 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53b/0x1a90 fs/nfsd/nfsctl.c:2055 locks held by syz.4.22/6132: 2, on CPU#0: #0: ffffffff8f835c20 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53b/0x1a90 fs/nfsd/nfsctl.c:2055 locks held by syz.5.23/6160: 2, on CPU#0: #0: ffffffff8f835c20 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53b/0x1a90 fs/nfsd/nfsctl.c:2055 locks held by syz.7.25/6161: 2, on CPU#1: #0: ffffffff8f835c20 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53b/0x1a90 fs/nfsd/nfsctl.c:2055 locks held by syz.6.24/6162: 2, on CPU#1: #0: ffffffff8f835c20 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53b/0x1a90 fs/nfsd/nfsctl.c:2055 locks held by syz.8.26/6265: 2, on CPU#0: #0: ffffffff8f835c20 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53b/0x1a90 fs/nfsd/nfsctl.c:2055 locks held by syz.9.27/6288: 2, on CPU#0: #0: ffffffff8f835c20 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53b/0x1a90 fs/nfsd/nfsctl.c:2055 locks held by syz.0.28/6316: 2, on CPU#1: #0: ffffffff8f835c20 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53b/0x1a90 fs/nfsd/nfsctl.c:2055 locks held by syz.1.29/6318: 2, on CPU#0: #0: ffffffff8f835c20 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53b/0x1a90 fs/nfsd/nfsctl.c:2055 locks held by syz.2.30/6377: 2, on CPU#0: #0: ffffffff8f835c20 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53b/0x1a90 fs/nfsd/nfsctl.c:2055 locks held by syz.3.31/6438: 2, on CPU#1: #0: ffffffff8f835c20 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53b/0x1a90 fs/nfsd/nfsctl.c:2055 locks held by syz.4.32/6479: 2, on CPU#1: #0: ffffffff8f835c20 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53b/0x1a90 fs/nfsd/nfsctl.c:2055 locks held by syz.5.33/6487: 2, on CPU#0: #0: ffffffff8f835c20 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53b/0x1a90 fs/nfsd/nfsctl.c:2055 locks held by syz.6.34/6520: 2, on CPU#1: #0: ffffffff8f835c20 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53b/0x1a90 fs/nfsd/nfsctl.c:2055 locks held by syz.7.35/6574: 2, on CPU#0: #0: ffffffff8f835c20 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53b/0x1a90 fs/nfsd/nfsctl.c:2055 locks held by syz.8.36/6682: 2, on CPU#0: #0: ffffffff8f835c20 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53b/0x1a90 fs/nfsd/nfsctl.c:2055 locks held by syz.9.37/6684: 2, on CPU#0: #0: ffffffff8f835c20 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53b/0x1a90 fs/nfsd/nfsctl.c:2055 locks held by syz.0.38/6695: 2, on CPU#1: #0: ffffffff8f835c20 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53b/0x1a90 fs/nfsd/nfsctl.c:2055 locks held by syz.1.39/6726: 2, on CPU#0: #0: ffffffff8f835c20 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53b/0x1a90 fs/nfsd/nfsctl.c:2055 locks held by syz-executor/6728: 1, on CPU#0: #0: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:80 [inline] #0: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock net/core/rtnetlink.c:366 [inline] #0: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 net/core/rtnetlink.c:4194 locks held by syz-executor/6747: 1, on CPU#1: #0: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:134 [inline] #0: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 net/ipv4/devinet.c:978 locks held by syz-executor/6762: 1, on CPU#0: #0: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:134 [inline] #0: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x667/0xe00 net/ipv6/addrconf.c:5062 locks held by syz-executor/6789: 8, on CPU#1: #0: ffff888036086510 (sb_writers#7){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:2731 [inline] #0: ffff888036086510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 fs/read_write.c:683 #1: ffff888063264878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 fs/kernfs/file.c:336 #2: ffff88802a023d28 (kn->active#57){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:73 [inline] #2: ffff88802a023d28 (kn->active#57){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 fs/kernfs/file.c:337 #3: ffffffff8f038998 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 drivers/net/netdevsim/bus.c:234 #4: ffff88801c3e9160 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline] #4: ffff88801c3e9160 (&dev->mutex){....}-{4:4}, at: __device_driver_lock drivers/base/dd.c:1171 [inline] #4: ffff88801c3e9160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 drivers/base/dd.c:1369 #5: ffff888039584310 (&devlink->lock_key#17){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 drivers/net/netdevsim/dev.c:1799 #6: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 drivers/net/netdevsim/netdev.c:1191 #7: ffff88803d521070 (&dev_instance_lock_key#23){+.+.}-{4:4}, at: netdev_lock include/linux/netdevice.h:2857 [inline] #7: ffff88803d521070 (&dev_instance_lock_key#23){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5bb/0x2120 net/core/dev.c:12442 ============================================= NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 nmi_cpu_backtrace+0x274/0x2d0 lib/nmi_backtrace.c:122 nmi_trigger_cpumask_backtrace+0x17a/0x380 lib/nmi_backtrace.c:65 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline] __sys_info lib/sys_info.c:157 [inline] sys_info+0x135/0x170 lib/sys_info.c:165 check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline] watchdog+0xfd7/0x1030 kernel/hung_task.c:561 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 17 Comm: pr/legacy Not tainted syzkaller #0 PREEMPT_{RT,(full)} Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 RIP: 0010:io_serial_in+0x77/0xc0 drivers/tty/serial/8250/8250_port.c:401 Code: e8 6e 3b 65 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 2f 92 d1 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 RSP: 0018:ffffc90000167a28 EFLAGS: 00000202 RAX: 1ffffffff340f000 RBX: 00000000000003fd RCX: 0000000000000000 RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 R10: dffffc0000000000 R11: ffffffff856067f0 R12: dffffc0000000000 R13: 0000000000000000 R14: ffffffff9a078580 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fbb775ea6b0 CR3: 000000003905c000 CR4: 00000000003526f0 Call Trace: serial_in drivers/tty/serial/8250/8250.h:128 [inline] serial_lsr_in drivers/tty/serial/8250/8250.h:150 [inline] wait_for_lsr+0x190/0x300 drivers/tty/serial/8250/8250_port.c:1982 serial8250_fifo_wait_for_lsr_thre drivers/tty/serial/8250/8250_port.c:3235 [inline] serial8250_console_fifo_write drivers/tty/serial/8250/8250_port.c:3300 [inline] serial8250_console_write+0x113a/0x1b40 drivers/tty/serial/8250/8250_port.c:3385 console_emit_next_record kernel/printk/printk.c:3163 [inline] console_flush_one_record+0x667/0xb90 kernel/printk/printk.c:3268 legacy_kthread_func+0x1b6/0x250 kernel/printk/printk.c:3719 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245