Extracting prog: 40m10.246966188s Minimizing prog: 43m47.820441941s Simplifying prog options: 19m4.294918358s Extracting C: 1m11.183592073s Simplifying C: 0s extracting reproducer from 37 programs testing a last program of every proc single: executing 7 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$vim2m-openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-openat$binderfs-ioctl$BINDER_WRITE_READ-ioctl$vim2m_VIDIOC_ENUM_FMT-openat$dir-fanotify_init-fanotify_mark-fanotify_mark detailed listing: executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x100, 0xffffffffffffffff}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000000)=[@increfs, @increfs, @decrefs], 0x0, 0x0, 0x0}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x17, 0x2, 0x1, "11010000001400000100b64c0000005c4b7c1500", 0x30314442}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x201, 0x26, r3, 0x0) fanotify_mark(r4, 0x441, 0x1, r3, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$null-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-prctl$PR_SCHED_CORE-sendmsg-sched_setattr-socket$nl_generic-syz_genetlink_get_family_id$l2tp-syz_open_dev$sg-ioctl-socket$nl_rdma-sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-syz_genetlink_get_family_id$l2tp-openat$procfs-read$FUSE-ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL-socket$nl_generic-ioctl$sock_SIOCGIFINDEX_80211-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_FRAME-socket$nl_generic-sendmsg$L2TP_CMD_SESSION_DELETE-sendmsg$L2TP_CMD_SESSION_GET-openat$kvm-dup detailed listing: executing program 0: openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl(r3, 0x4, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000000f14010025bd7000fcdbdf2509004500"], 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4004804) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r8 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r8, &(0x7f0000002880)={0x2020}, 0x2020) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x0, 0x10, 0x20000000, 0x1, {{0x1c, 0x4, 0x0, 0x24, 0x70, 0x68, 0x0, 0xbf, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, {[@timestamp={0x44, 0x4, 0x5a, 0x0, 0xc}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x4, 0x76, 0x0, 0x4}, @cipso={0x86, 0x3a, 0x1, [{0x2, 0xb, "5c656f8f1cbb0b72f0"}, {0x5, 0xd, "8dc3639f0e7712332531b4"}, {0x6, 0x9, "f7a5d09ba3d5fc"}, {0x2, 0xc, "f3f695d73a1b82eed5ae"}, {0x6, 0x7, "f10d083cbd"}]}, @end, @lsrr={0x83, 0x13, 0x39, [@empty, @dev={0xac, 0x14, 0x14, 0x1e}, @dev={0xac, 0x14, 0x14, 0x25}, @dev={0xac, 0x14, 0x14, 0xc}]}]}}}}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002cbd70000000000002000000", @ANYRES32=r10, @ANYBLOB="0c0099000200000026000000050018011a00000008009f00030000000800260080090000"], 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x8000) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20e03, 0x0) dup(r13) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ptrace$setregs-syz_usb_connect-openat$sequencer2 detailed listing: executing program 0: ptrace$setregs(0x1a, 0x0, 0x3, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63dd0000000009050300000000000009050cf2010002060209050f000000400000090507c6"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0xbf00) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-close_range-socket$l2tp-bind-madvise-getpid-syz_pidfd_open-setns-syz_clone-socket$kcm-sendmsg$kcm-recvmmsg-socket$alg-bind$alg-accept4-write-syz_usb_connect-ioctl$sock_qrtr_TIOCOUTQ-madvise detailed listing: executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x4008032, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$l2tp(0x2, 0x2, 0x73) bind(r0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0x12800100, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f00000007c0), 0x0, 0x40002080, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) r5 = accept4(r4, 0x0, 0x0, 0x80000) write(r5, &(0x7f0000000040)="cb", 0xfffffdef) syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r5, 0x5411, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hiddev-ioctl$HIDIOCGUSAGE-ioctl$HIDIOCGPHYS-openat$vimc0-socket$nl_xfrm-mmap-openat$ptmx-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-prctl$PR_SCHED_CORE-syz_genetlink_get_family_id$ethtool-sched_setattr-mremap-syz_open_dev$dri-openat$ttyS3-openat$procfs-socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-openat$sysfs-io_setup-io_submit-sendfile-sendmsg$nl_xfrm detailed listing: executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f0000000100)) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, r8, &(0x7f0000000180)="282fa8c2", 0x4, 0x5}]) sendfile(r5, r6, 0x0, 0x20000023896) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x14c, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x880}, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-socket$nl_generic-sendmsg$nl_generic-syz_genetlink_get_family_id$mptcp-syz_genetlink_get_family_id$nl80211-socket$pppl2tp-recvmmsg-socketpair$unix-sendmmsg$unix-syz_usb_control_io$hid-openat$sequencer2-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_SET_USER_MEMORY_REGION-openat$sysfs-socket$rds-syz_open_dev$dri-ioctl$DRM_IOCTL_WAIT_VBLANK-syz_open_dev$dri-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SET_CLIENT_CAP-ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-ioctl$DRM_IOCTL_MODE_GETPLANE-ioctl$DRM_IOCTL_MODE_SETCRTC detailed listing: executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28090900000000000109022400010000000c09043f9602030003000921ff1f710122050009058103"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x2000c011}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r2, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0x8000104}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000008c0)=""/133, 0x85}, {&(0x7f0000003d40)=""/4103, 0x1007}, {&(0x7f0000000500)=""/178, 0xb2}], 0x3}, 0x8000002}, {{0x0, 0x0, 0x0}, 0x987e}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/157, 0x9d}, {&(0x7f0000000980)=""/51, 0x33}, {&(0x7f0000000740)=""/250, 0xfa}, {&(0x7f0000000440)=""/52, 0x34}, {&(0x7f0000000680)=""/73, 0x49}, {&(0x7f0000001a00)=""/4114, 0x1012}, {&(0x7f0000000a00)=""/250, 0xfa}], 0x7}, 0x8cc}, {{0x0, 0x0, 0x0}, 0x3}], 0x5, 0x12002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000018c0)=[{{&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000000640)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c}}], 0x38, 0x20000000}}], 0x1, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x4000, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/kexec_crash_size', 0x149a82, 0x0) socket$rds(0x15, 0x5, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r8, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f0000000300)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r10, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, "b4bc323ef77d1f000071849800000000dfff00"}}) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-socket$nl_generic-sendmsg$nl_generic-syz_genetlink_get_family_id$mptcp-syz_genetlink_get_family_id$nl80211-socket$pppl2tp-recvmmsg-socketpair$unix-sendmmsg$unix-syz_usb_control_io$hid-openat$sequencer2-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_SET_USER_MEMORY_REGION-openat$sysfs-socket$rds-syz_open_dev$dri-ioctl$DRM_IOCTL_WAIT_VBLANK-syz_open_dev$dri-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SET_CLIENT_CAP-ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-ioctl$DRM_IOCTL_MODE_GETPLANE-ioctl$DRM_IOCTL_MODE_SETCRTC detailed listing: executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28090900000000000109022400010000000c09043f9602030003000921ff1f710122050009058103"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x2000c011}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r2, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0x8000104}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000008c0)=""/133, 0x85}, {&(0x7f0000003d40)=""/4103, 0x1007}, {&(0x7f0000000500)=""/178, 0xb2}], 0x3}, 0x8000002}, {{0x0, 0x0, 0x0}, 0x987e}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/157, 0x9d}, {&(0x7f0000000980)=""/51, 0x33}, {&(0x7f0000000740)=""/250, 0xfa}, {&(0x7f0000000440)=""/52, 0x34}, {&(0x7f0000000680)=""/73, 0x49}, {&(0x7f0000001a00)=""/4114, 0x1012}, {&(0x7f0000000a00)=""/250, 0xfa}], 0x7}, 0x8cc}, {{0x0, 0x0, 0x0}, 0x3}], 0x5, 0x12002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000018c0)=[{{&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000000640)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c}}], 0x38, 0x20000000}}], 0x1, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x4000, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/kexec_crash_size', 0x149a82, 0x0) socket$rds(0x15, 0x5, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r8, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f0000000300)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r10, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, "b4bc323ef77d1f000071849800000000dfff00"}}) program did not crash single: failed to extract reproducer bisect: bisecting 37 programs with base timeout 30s testing program (duration=39s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 2, 30, 27, 27, 26, 26, 6, 6, 24, 5, 2, 30, 8, 19, 29, 8, 27, 29, 29, 23, 10, 26, 30, 8, 24, 30, 27, 30, 2, 19, 27, 29, 3, 30, 8, 10] detailed listing: executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000100), 0xc, 0x1) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="623e81d1037e3a00fc000000000000000000000000000000fc000000000000000000000000000000ff0b"], 0x3a6) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_size', 0x4403c3, 0x140) read$FUSE(r3, &(0x7f00000022c0)={0x2020}, 0x2020) sendfile(r1, r3, 0x0, 0x1000000000004) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x5, 0x110, 0xffffffffffffffff, 0x0) r4 = io_uring_setup(0xad5, &(0x7f00000003c0)={0x0, 0xc45e, 0x8, 0x0, 0x1000}) close(r4) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000040)='./file0\x00', 0x0) executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x4c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) (fail_nth: 1) executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f00009bf000/0x3000)=nil, 0x3000, 0xf, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000e39000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x100) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x6dda87c55e1b1fc, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000180)={0xc}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xe}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80800}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x4b0, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {0xfff2, 0x12}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x484, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x6}, {0x34, 0x5, [{0x40, 0x8d, 0x80, 0xb7eb}, {0x9, 0x83, 0x8a, 0x8}, {0x6aa, 0x42, 0x1, 0x8}, {0x7, 0x6, 0xe, 0x3}, {0x4, 0x8, 0x4, 0xfbc}, {0x4, 0xe, 0x3, 0x3}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x343, 0xe9fb, 0x1000005, 0x5b91, 0x4, 0x1, 0x800, 0x5, 0x3, 0x3, 0x8000, 0x4, 0x6, 0x3, 0x0, 0x1ff, 0x77, 0x43, 0x4, 0x2, 0x5d, 0x8, 0x8001, 0x4, 0x3, 0x0, 0xfffff989, 0x8, 0x6, 0x71dbd584, 0x2, 0x7, 0xd8, 0x9, 0x4, 0x3, 0xfffffffe, 0x5, 0x9a, 0x1, 0x3, 0x80000001, 0x1, 0x2, 0xfffffffb, 0x7fffffff, 0x2, 0x8, 0x8, 0x10, 0x10, 0x1, 0x2, 0x4, 0x8, 0x7fff, 0x5, 0x0, 0x5, 0x6, 0x9, 0x2, 0x0, 0x3, 0x7, 0x91400, 0x8b9d, 0xff, 0x80, 0xfffffffa, 0xb, 0x8000, 0xb26f, 0x6, 0x4c, 0xff, 0x7d, 0x6, 0x81, 0x80002100, 0xfc9, 0x6, 0xfffffff0, 0x9, 0x5, 0x9, 0x80008010, 0xe, 0x2, 0x80000000, 0xff, 0x3, 0x7, 0x1, 0xa6dd, 0x7, 0xfffffff9, 0x8, 0x82, 0xff, 0x9, 0x3, 0xbdb, 0x1ff, 0x1, 0xc, 0x40, 0xffff8001, 0xffff, 0x8, 0x7fff, 0x402, 0x2, 0x2, 0x7, 0x2, 0xbce, 0x8, 0xd, 0x80, 0x4, 0xacda, 0x4, 0x3542, 0x6, 0xf79, 0x7, 0x3, 0x6, 0x0, 0x7, 0x2, 0x5, 0x100, 0x1, 0x2, 0x80000001, 0x200, 0x1, 0x9, 0x4, 0x0, 0xe200000, 0x6, 0x80000005, 0xaf6, 0x3, 0x10001, 0xe47b, 0x8, 0x3, 0x4, 0x4, 0x5, 0x0, 0x985, 0x5, 0xd, 0xf4d, 0x7, 0x8001, 0x1c4fd68f, 0x1, 0x5, 0x7fff, 0x0, 0xc1, 0x0, 0x5, 0x81, 0x3, 0x1c37, 0x3, 0xab, 0x2, 0x3, 0xb171, 0x8, 0xf, 0x2cb6, 0x6, 0x2, 0x2, 0x70, 0x80, 0x2, 0xfd, 0x5, 0xb417, 0x6, 0x400, 0x6d, 0xb, 0x401, 0x4, 0x2223, 0x2, 0x200, 0x1, 0x4, 0x1, 0x1, 0xab0, 0xd, 0x80, 0x3ff, 0x1, 0x7, 0x7, 0x7, 0xfffffffa, 0xc54, 0xfffffd18, 0x9, 0x7, 0x7, 0x2, 0x3, 0x9, 0x6, 0x7fff, 0x4, 0xffff, 0x1, 0x381, 0x400, 0x4, 0x274, 0xc, 0x5, 0x4, 0x5, 0x8, 0x1, 0x8000, 0xad, 0xc9a6, 0xfff, 0x0, 0x4, 0x9, 0x4a79, 0xdf5, 0x5, 0xfffffffe, 0x5, 0x7ff, 0x6, 0xdb, 0x4d, 0x19, 0x7ff, 0x2, 0x5, 0xff6d, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x4, 0x1000, 0x4, 0x3, {0xb, 0x2, 0x200, 0x4684, 0x80, 0xfffffffe}, {0x0, 0x2, 0x4, 0x1ff, 0x7b}, 0xfb, 0x3, 0x5}}]}]}}]}, 0x4b0}, 0x1, 0x0, 0x0, 0x1}, 0x800) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64653d300f5125d4d3e7b6f9f8fd303030303030303030303030303030303036303030", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) sendfile(r8, r8, &(0x7f0000000000)=0x7fffffffffffffff, 0x200) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c000000060a0904000000000000000002000000200004801c0001800a00010072616e67650000000c00028008000140000000080900010073797a30000000000900020073797a32000000bd1400000011000100f2000000000000000000000a"], 0x74}}, 0x0) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x403, {0x1, 0x5, 0x0, '\x00', {0x1, 0xad4, 0x8, 0x8, r11, r12, 0xc000, '\x00', 0x5, 0x8, 0x100000000, 0x6, {0x6, 0x6}, {0x20000000000004}, {0x100000000, 0x2}, {0x8, 0xa04}, 0x4, 0x80000b, 0x5, 0x3}}}}) write$FUSE_INIT(r2, &(0x7f0000001200)={0x50, 0x0, r10, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x3}}, 0x50) r13 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r13, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0xffffffff, 0x41, &(0x7f00000004c0)={0x4b5a9da54893e123, 0xf, 0x104, 0x4000, 0x3}, 0x8, 0x200, 0x208, 0x0, 0x0, 0x6, 0x0}) executing program 4: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r4, &(0x7f00000003c0)='./file0\x00', 0x231) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) executing program 4: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000011c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x4}, 0x1c) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(r1, r1) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/107, 0x0, 0x10000}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r2, &(0x7f0000004d80)={0x2020}, 0x2020) write$vhost_msg_v2(r2, &(0x7f0000000440)={0x2, 0x0, {&(0x7f0000000140)=""/128, 0x80, 0x0, 0x0, 0x2}}, 0x48) r3 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1b000000190001001a848efa961fb2d82d"], 0x1c}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendto$packet(r3, &(0x7f0000000000)='5', 0x1, 0x40, &(0x7f0000000200)={0x11, 0x8100, r6, 0x1, 0x9, 0x6, @broadcast}, 0x14) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x4c, 0xfc, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) syz_emit_ethernet(0xb5, &(0x7f0000000540)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@void, {0x8100, 0x1, 0x0, 0x1}}, {@x25={0x805, {0x3, 0x6, 0x17, "2ab53b831b7ad99e43ea20ff2c4de0e075ca4b9417e8820c749f4f1f110cf6d524eca107b265ebfb30612ea34b636c08fbda58c2a608690286a7aec98f47bfe4db816afb11493e1776dce8c54674790a43f4f394c9cb6da1439014ada1d483b7b9cd8015869c3dec76fd16859c5d315acad2ffd86a7ee01a5c383d77debb658f1656f6705a817f429b56afd1f4a4efab00"/160}}}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000042}, 0x4044010) executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28090900000000000109022400010000000c09043f9602030003000921ff1f710122050009058103"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x2000c011}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r2, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0x8000104}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000008c0)=""/133, 0x85}, {&(0x7f0000003d40)=""/4103, 0x1007}, {&(0x7f0000000500)=""/178, 0xb2}], 0x3}, 0x8000002}, {{0x0, 0x0, 0x0}, 0x987e}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/157, 0x9d}, {&(0x7f0000000980)=""/51, 0x33}, {&(0x7f0000000740)=""/250, 0xfa}, {&(0x7f0000000440)=""/52, 0x34}, {&(0x7f0000000680)=""/73, 0x49}, {&(0x7f0000001a00)=""/4114, 0x1012}, {&(0x7f0000000a00)=""/250, 0xfa}], 0x7}, 0x8cc}, {{0x0, 0x0, 0x0}, 0x3}], 0x5, 0x12002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000018c0)=[{{&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000000640)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c}}], 0x38, 0x20000000}}], 0x1, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x4000, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/kexec_crash_size', 0x149a82, 0x0) socket$rds(0x15, 0x5, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r8, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f0000000300)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r10, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, "b4bc323ef77d1f000071849800000000dfff00"}}) executing program 32: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28090900000000000109022400010000000c09043f9602030003000921ff1f710122050009058103"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x2000c011}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r2, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0x8000104}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000008c0)=""/133, 0x85}, {&(0x7f0000003d40)=""/4103, 0x1007}, {&(0x7f0000000500)=""/178, 0xb2}], 0x3}, 0x8000002}, {{0x0, 0x0, 0x0}, 0x987e}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/157, 0x9d}, {&(0x7f0000000980)=""/51, 0x33}, {&(0x7f0000000740)=""/250, 0xfa}, {&(0x7f0000000440)=""/52, 0x34}, {&(0x7f0000000680)=""/73, 0x49}, {&(0x7f0000001a00)=""/4114, 0x1012}, {&(0x7f0000000a00)=""/250, 0xfa}], 0x7}, 0x8cc}, {{0x0, 0x0, 0x0}, 0x3}], 0x5, 0x12002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000018c0)=[{{&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000000640)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c}}], 0x38, 0x20000000}}], 0x1, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x4000, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/kexec_crash_size', 0x149a82, 0x0) socket$rds(0x15, 0x5, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r8, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f0000000300)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r10, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, "b4bc323ef77d1f000071849800000000dfff00"}}) executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "21b673b9004f64c925c1534619f623f6"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b40a715dc001107db1d2a0832337bf4b"}, @NL80211_ATTR_PMK={0x14, 0xfe, "721042ecfe17222fea6f54c19d3efca3"}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x474c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x42, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x7, 0xfd, 0x1, {0x22, 0x9a2}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002210000000a15a96"], 0x0}, 0x0) executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000300)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @remote}, 0x0, {0x2, 0x0, @private}, 'syz_tun\x00'}) syz_emit_ethernet(0x7a, &(0x7f0000000800)={@broadcast, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x8, 0x6, "47f041", 0x44, 0x2f, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0x8, 0x88be, 0x4, {{0x1, 0x1, 0xe, 0x0, 0x0, 0x2, 0x4, 0x6}, 0x1, {0xf97e}}}, {0x8, 0x22eb, 0x0, {{0x3, 0x2, 0x0, 0x3, 0x1, 0x2, 0x0, 0x7}, 0x2, {0x0, 0x9, 0x2, 0x8, 0x0, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}}, 0x0) executing program 3: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0xc48}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r0, 0x0, 0x4048884) recvmsg(0xffffffffffffffff, 0x0, 0x8100) syz_clone3(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) clock_nanosleep(0x2, 0xfffffdfc, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close(r3) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_xfrm(0x10, 0x3, 0x6) executing program 1: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x88, 0x8f, 0xdb, 0x8, 0x1604, 0x8001, 0x37a3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xe6, 0xef, 0xe4, 0x0, [], [{{0x9, 0x5, 0x5}}]}}]}}]}}, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x5b16, 0x0) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x70bd28, 0x25dfdbfc, {0xa, 0x0, 0x96, 0xfd}, [@IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044064}, 0x24008004) executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000280)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00009e1000)='./file0\x00', 0x68800, 0x4) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) truncate(&(0x7f00000001c0)='./file0\x00', 0x100000000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x1, 0x4) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e23, 0x6, @private1, 0xd1}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000cc0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xcea, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)='j', 0x1}], 0x1}}], 0x1, 0x4000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000100)={r8, 0x1}, 0x8) close(r5) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r9, &(0x7f0000000380)="e6aebb12ee41b11d1e4d617d681744949b945f6601d49a", 0x17, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r9, 0x1) recvfrom(r9, 0x0, 0x0, 0x61, 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r4, 0x0, 0x0, 0x0, 0xdead, 0x0, 0x0}) executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40811}, 0x20) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x58, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x1e, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x1e, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "301ce602000079dea6b6f056d75c"}}}}}}}, 0x0) executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x4008032, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$l2tp(0x2, 0x2, 0x73) bind(r0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0x12800100, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f00000007c0), 0x0, 0x40002080, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) r5 = accept4(r4, 0x0, 0x0, 0x80000) write(r5, &(0x7f0000000040)="cb", 0xfffffdef) syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r5, 0x5411, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x204402, 0x0) readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=""/134, 0x86) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)}, 0x0) socket(0xb, 0x80000, 0xa4d3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_dev$video(&(0x7f0000000140), 0x1d24, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r6, 0xaea2, 0x100000) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, 0x0) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000040)={0x2, 0xfff, 0x4, {0x1, @pix={0xa, 0x1, 0x30314247, 0x5, 0xc3a, 0x8, 0x0, 0x9, 0xe7c26b895e284cfb, 0x1, 0x0, 0x5}}, 0x1}) mmap(&(0x7f0000e49000/0x2000)=nil, 0x2000, 0x3, 0x31, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f0000000240)) executing program 5: r0 = io_uring_setup(0x560d, &(0x7f0000000680)={0x0, 0xb586, 0x2, 0xfffffffe, 0x3bd}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002180)={'geneve1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000040)="3f031c000302140006001e008900", 0xe, 0x1, &(0x7f0000000540)={0xc9, 0x88a8, r3, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x9}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001000000000000000000d100000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a19020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)={0xac, 0x0, 0x200, 0x7, 0x25dfdbfc, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x219}}, {0x8}}}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4800c}, 0x4) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, 0x0) listen(0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000002c0)=""/139, &(0x7f0000000100)=0x8b) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@dev, @in=@loopback}}, {{@in6=@ipv4={""/10, ""/2, @remote}}, 0x0, @in=@multicast1}}, &(0x7f0000000080)=0xe8) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000380), &(0x7f00000003c0)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x9f, 0x600100) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064d1, &(0x7f0000000600)={&(0x7f0000000180), 0x0, 0x0, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xbc, 0x21, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}}, [@migrate={0x50, 0x11, [{@in=@loopback, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x64010100, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}]}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e23, @in6=@private1}}]}, 0xbc}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x34, r6, 0x303, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) executing program 5: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000004c0), 0x2200, 0x0) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000003d80)) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xf, 0x803, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) ptrace$getregset(0x4204, 0xffffffffffffffff, 0x6, &(0x7f0000002400)={&(0x7f0000000140)}) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x3, 0x0, 0x1, 0x0, {0xa, 0x4e23, 0x3, @private1, 0x7}}}, 0x3a) read$FUSE(r3, &(0x7f00000001c0)={0x2020}, 0x2020) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) r6 = socket(0x15, 0x5, 0x407f) sendmmsg$inet(r6, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002440)=[{&(0x7f0000000140)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='\nT', 0x2}], 0x1}}], 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r5, &(0x7f0000001400)=""/4076, 0xfffffeea) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x1) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0x40, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) io_setup(0xffffff7f, &(0x7f0000000280)=0x0) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) io_submit(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x2, 0x0) ioctl$KVM_HYPERV_EVENTFD(r4, 0x400caed0, &(0x7f0000000080)={0x2, r5, 0xffffffff}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r8 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$clear(0x7, r8) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x41480}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x401}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r7) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000005a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44040}, 0x8004) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000005d00)={&(0x7f0000005b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000005cc0)={&(0x7f0000005bc0)={0xa0, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000010}, 0x40) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000005dc0), 0x10b780, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000005e00)) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000005e40), 0x101100, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) bind$netlink(r3, &(0x7f0000000580)={0x10, 0x0, 0x25dfdbfd}, 0xc) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000005e80)={0x1000, 0x101, 0x14, "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"}) splice(0xffffffffffffffff, &(0x7f0000006f40)=0x9, r1, &(0x7f0000006f80)=0x2, 0xdc, 0xc) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x910, r1, 0xdcb6e000) tee(r1, 0xffffffffffffffff, 0x700000000000000, 0x5) read$FUSE(r2, &(0x7f0000007000)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f000000b300)={&(0x7f0000006fc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f000000b2c0)={&(0x7f0000009040)={0x2244, 0x19, 0x20, 0x70bd25, 0x25dfdbfb, {0x18}, [@nested={0x10c, 0x121, 0x0, 0x1, [@generic="54cd104829c4940a2d5a8a4d78c51d08016147c11b69352a3ef045b7ea554ed4e2c9f0373830548f332e9cb8506df43110e0c6b5fccd81011706cb80cce4f78c1a22e1ef26756aa1273e59b45d4d07082ba059d25de5b3bde47851", @nested={0x4, 0xd7}, @generic="f76adc2c1f7de9e29b86ad4d524cbad54a34e46074ed210f3cfb3198df82ac56f58d88eb5dad1b8547cf723a50a041644013a734a1495d77a187e27bf8a258548f582c8087ad2f8917a656324235e470af6cdc3cef919005641157b755d0d32fb28350b1ad4ed9f4659cfa26114bc1402f59781e70edfa31165a3825a62bbf011464d21504e48f265da175e25ff628a56828ea3212e8abb8fd576e3845a725abd9e9b7249ac2fcb817"]}, @generic="e30a973e5d1392504f250fc5a924565e08bf0aa523d0ecd4a5c6b58fbd28a337e61d0a5da390680f5ec08287dc8c976d7b77305a0e002c60b25798feb646d3254441b159605bdc950f7343a7b0dd397c8f11b0f6f31ead268824b7bd37dcb784c3aabec34ffcf15376e153c01e665e0ef30d3a213657171927665e90bc7cc46770a9682e0163c8f6ef0bacc3f359819a06920d1d64e6f4", @typed={0x8, 0x86, 0x0, 0x0, @pid=r4}, @nested={0x1093, 0x1d, 0x0, 0x1, [@generic="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", @typed={0x8, 0x74, 0x0, 0x0, @ipv4=@empty}, @generic="9478b6beaa40ac5d46f4d1c46ef588af2ed046e50e4c5f62cd190f3379f071ad2e478136922c6293273d0cc6ef151cfb646cde4e2f285c771d529698d71ecc3ab87c2299d224b60b94520e3ca81e16f5d54d2615d07a55adfc8b8d98dd1c0af858013810fd21423ccfa9828108f4fc951e33a680d57a2fadb9d25e1cfc278a792253aaa8f453bf"]}, @generic="52b97d752499d9353ce2bc35baf3837865ea37ab4006929f3524cb67d0ff4fa5a9e1e002437f5c6d3f6a7831dbee4fb758994eddf0b962ae83c88be0fd7c71fe13b700181a103edbd5fdc1556a159ef0132fc48b32c44585ea3bd821e1f4b95a9a165c249a9014a3b44bb0d97acb2d4559b1206680415d52f2e026451a7ab491bd74194ca56209cae67a59eb175d330bca6274c7dd962d14e81ed8defed0ef2d7feb5f458d4c36256d9e86afd9536326ab00d9406c2c101dbce250e09ad70f75cde34732df7c3a0662102f76d0476a7bbd80f9a6e6d04a369264774993536a26102704e5b45dc4a08525ee122a335ae928127407533fb3fc783d47464ffb0c6f1c89b72a4b27b05c6fe518664506d82a40a2039ac99761d92d71a85df108a9bfbc7e4d476b7b5a021666bc06eba895898ba66d39f0ad712a7f7b94bbdd1d1411d0caab7d2129ec1b6b5067d106ecf9f5d1dc4de07e0dd56de35e4dc265f1da81c5f29276e4eb012bcd399fecc7f112081a165b3c8f44bd4b95c420184165e5f0be3ef3cb8c0b585afad112a6387a483f5ddb2db1e1e5d15ba2fdd8ca54c8b62ea25c411c9b285a24ab5b784edda212eb94fd1ff877ac80cdbafd29e518688940da50d33f578961b05a1b71e5585196b9b679408d26b041a8fbeac05d46172d78c81ce2c6c0f604c3260411a591148afd5372bb2b23c023b3b6a221527e08828911848a925aead88b1a447800c37194df94d2954c7c5964587a85dbedb36b1ba8a5954f0025562f3ef63769005f2a19a6e1febb1cf0eefd63f713fcdb3992286a04bb54270c4ec96e5209f5b60e88c608658fa40a99a20e2982f89b463862914bae4f51717a57431150a09408b6e96a406bfc9dd37d778a374f98a06fec1696bce9fa199ebcecb1fcb50df6fb06911c3d8a0d1be385efb9dc2386b20f23a9785cf75df347c11fc0a659635242dff2b9ca5e66e774e0e1ad455f847c594396fdac02f121b9898b4f34186bd6a4b145ade2f2fab75381b4dc539181608c600de2532ecfc6e5f02f7b282355d5d7bb7a22f7da3ce3c05ded0aede2ffe21076804209e8b2b8487859e690523c51fba5e22f2d8aebc5f6be6a07946e6b2512d7d2e762c2db0474c9b75fc769a9fcab351de7d9289f3c36d1708dc2a26d80fd54ca5129cee6e36f79b58f8389e625260f947b507c78c3a767c04a41ab9a5044b11bf7e2921cbaef3249fe7d0f9b5ee14c108dd2edb2e91b09db317083f8fe85105fa926beb844094fd87aa19e0c9e8c1781a022635733094c2e1631784ac9d3191ba2ed08368a3d0d710a252c8b57b9fb1d9e4a38443e7255978ca405a726b834ba747ebcf1ddcc5fe10c7a7eff70434a569e17c35d2db1fe46d6e5f83883180996366c21e5c6435fd90fd725a3289806a84c402e5b80a7cbc18b1d25fb1f2aa071a9c5531c587fe8b712b5485b4ebfb2886cd70707ab2ff5f826a08e7b226a632f220a7e5d2a1d801f1b62afdf507e636d8c9ddc03682b250a605bb1290742c36396aff50b66fc2cd634b4c6b4131112dfc7a49c8911072f9d694525ab39a42f921e8dd5070a1d923f4b6486239a13b646fa8cb52769374996a27903ea89114c68b833683db30f71381a27a7edf95db029068a2579d534f84c3c72b49ae8d81e40eba4deb77f4057159c693a6d00d75ce024087dad4023df1c9b8d1dc8d1901b8d684d998ab6b8ca99a8dc4599afdda19ffadf7b5ac45b43e9195c131e6e5c5ae1128811ddfcea9db0428cf3ef348aa926d4c0793dc94b3319b5335dd7b34b417e05449e22a342c78c68e581783efe1c593b072c3b90396096fc7239c4b49155b0356ec829c134bb442d3f0c651fd3b01112140436b1abd15d73ace4106bb18b46c1ba6da3e9595aa03383b08701c2bce65a71ecd9cbc3ea36c317b3a8c48a9255e9b05754d28a61152ebb8277a6de865ebfa8789bfdc8889ad4b9d0ac3672e59ea9bc67ba9c32eea95d0b230096bf2f3441e1d2a573847ffffbbc9528eb4e280152d47009e84fe987d0c558dac0f76c9a91681da15fe600a25748038bb2b2f254c2b624379c736dde9aaa287ba91ea0a860560083a5bf94fb0a2cd5431fc03c4ac5b898bf631433be8bb868b1ab86ddfb0376e045e64818b4e1bbd7bcc34ea54c13ddf7037ad7bc3d3ee2beb591af69e0c83e89dc94f9d954316e8da83072b991d8f8f80a07f01b6c117b71aa08ffe8f4c7f9ccf6dac07b922a26788f7d296ae67d33facb7a1185e13499500ca8725ad886f016ed4bb41be6be587fd0b1a13465abae8e4559b47bfceb0b7201687712fe2df1b80384c78387b6bc37a4e20a0ea9683e06a2b87ee8a3fc8399212b9ae0713b85c0d0e5c13d4e040f352a425922c6e337ec38a1a05ab4b4c171a839fe2defa6ee5e821018ed52cdf671917fef898a27676f27bff1254c07dd6c9e9e68f8ede078de8d6ee6090f589e95b18df68759dbc894b39217f8ae22b219cea1cfe942d5ea326ef45c6170304052508acac7c9a0e22d5f853e5db51d1c28d7941f2ec954918a372759f357cb5baa9045ac3cd12d62c83f955f92823076083c85d211b3705452bd654bda34c9249adf0663e0fb7cd9d6c8e07870be1f1d15ac19274f3fa7f670c316ad2a3b1491700358eaf15f1d2413b930124183cb40d1bdcecefb706dd8e91f7eb94a786e25d02793be27486df51a7a383f0cb0c7c2215777921b20be6d74b84e8adb5c50e19405d2b7e0a12ca929a92a406270d2b59736edff407c38d011b8fb8bd61dcb676a3532cc5317a0fe43300c712e1b0e4f6e1770064e49339f026df0478bf906d78aa2108406a2a948327abf5d8f671b7b9e2b70bd2ac83bae6d08371217f36bb7da051dc9d13c1745f31bbddee43135891a1348f6645831bd838c4686e0b5fe21a7da898673f18079c827aa95388d02f3d754aee5559d272ee56eff295a9dae06b927fcc11dd76c0914b6d1990a65ec32d64566e45ee4715d1ebd10f92d5279f6d9d8fbbf73631c9efaea9bd3ea691dd34601b2c1cab99da601a8b3096673f158e80230885fd46865e2f10f99265bf3dfcfd9267cb2ef4239ecf53ab3d136d73f529f81e2799853b838eec9d36b0ff5a0ed3c782c9067924296745e452620c9518549d82265eb2ac6156a6c7788c2293d69d2ad45ca80085801c7f78ff9e4d746f350227eafb6883a42bbebd9eb887d9ff8b53cf0f642276a19183cfcac937750a6e18592830e0027e60fa892c6cbb5dc6014034ab9782b75c80433aa31b127a71a9a03d1818cc0a0e4437d6bd2e8936abf4543827353695e06370db4a4902c97a5644b363f3165bce17885f8d77c4fc8d55af7e604f2c29f77081232093aa53f83600f2dadffc69ebda4fb6eae4a6ea2cd6df72989c8f4a6d621448e2bb6c4c8638baeef92f81c66e69707468c97e9fa956ed5413bd028bb22483de9cef07f8dbfd63c07772fc81801cc6eab71f053ecec6cc6d021218fc47c4f9bf40f80a166a44527698cad8ca5fcc6869fc8f2609a0e5417d493d2c414e59424b6eff7e7fa64fd90d48e387622d339060440c0a7f99d6be23d9f6e24fcf29145c7353c6911a5ca6d1d9222eb511343589e6c7e490e8794e0c60fbbde11dfe29b7eb092321f1293e0566159766ea6d47561c63f0095be8aa0511bb42cc30dd58b0865d8bf1d0dd0c949241d9b9cd9c6949c1cbf0ccac3152276fe7adfd3c4198b9cec433429cdf224c8221b38b6ba35e7f6643fc4c052cb577386dfbc4a2a032bdc23ad6c167c57f46b1a0941bdcd81b67c1c2ea99c1d1271048cba2702d4e6c061e33a9ea3219230f219a8da3c71f4e2474fbb2256d226bb9bebe88ce7d612c69bfdebe72dc5e72b3a343dc089ae1722865d2d53e8685706f2222a538e4db0d0ed13ba4a499d3fdc77a8fb37a605f42d4b12e2d6b7d38b7942c3d07162180dedd83a1700f9981e4d5cd6f3265cebbc65b1d72add564e1df7fd85246582c571887ebf36d0ce5760b646b13a82f37c4c592340dacf9cf1bfd8abd769b278359e646e469e86f4e6e1095008a3ee6e7ef9ae7791e378b7d349c1c08c4c87b4b415c340309310b2ab49a8a685fea2c6e26cac5268a11f943ed13cdd414d9100baeee018a88be7de5b559cd800467fa18da86ffec5b6172c5cc0d968be846848f4da365b0d48c54e006948b136f276097b5ade98de320373fe187934e5db4752458326ec82f5faa5b6e153699ab286498cd28175e66c8db59abd11b50229e496aaf2a64e3c22f5b774164799eb3f91392555f65c85fcb4e0b772801848d0b65aef43defc3b926f968e1092f0728ce9732f86b85fc98d04ec665fef6f7d65b7a3ac87b174327890819c768684aa12ca61484c11517020d0df226f344918764e6788a003481a27d4339a829467e44e8c85b13ba2a52fee97245fc91ea9be2da0e1ffc4c1e3b3faf51e82406754e2779d9bf80cb430bf79a297468b0fb762631082a87dea5ce49bc131281f289e36b7bb38d53050a658a821a669fca7b88d2c098d7619b1d4d684d424fc2609fe865a20410f8877521b1912896423df472b15c53b2206f7cbdb125cd16522e19b501e9102872c7a8a2c46b64d700d55da4857fcb14db7afa42252820a0c8f282cbe44e6b218616fc27ce6be13c9e51bd3541241651fe5b6da9723a0d673e7659ac0220d284fd18a2db85de842bc49ac7ed9ff73bf85f521b64ab0bbc9d4919924ac3dee65bacf0d0fa18661f8d9a368a9aefda01812193a240cbb696d1effe7dc45501c545bb5ec152bf1dfa8be13c5583755b1a5929f14dcbc2fe83042ad25f59ce5898b9d6475980e9051443b7a3dec7947f9620c808b74669048f9f8fdd1c1f1e4578dce01a12b36b337b2f100caff08e82ff1d63a9e9645de9d0787734db05b7b9b8887259042b84f3ca76ebee6954a0e0fd557d2c9a7e62bccbdd20cc96446cddba8a7cf595f6dfaa79ba2a2ff22e9e21f4cf068442216132511a30de65621c8f88a5abcb5745b397edecae6f7e7b0278ddb8d4ebd7d0a4234bf7c129651c6cb1bbcc0fe7e950c9b969eefec1c4b75087553ab75bd0d22b2029e2410b347306049ff91066a0722d8655587e6469c4e91d49958601d4a31973dd50f203d53e83f37c56d0875bf20c09c20e09f172fadfcab0b973ab227a79a886db9510437e421c9e02b4bfedd6ac01c4e90321ca35a538836124ed9a8119f12edbac2fee7fe43a942af1dd1fb94376f6b692c47ea37404bdf2dd14abb530be7d1358668ae4e956de12d78dfce85dc02fdd1a51c0cddfb5d9b4c4909433dad6dbfe8d612c80de7a907e20c03892088c31249e2c42bc8564f8425922b3dfa2e2ccfbaca4135daa51af47c400f9dcb38b98e0d4ac573822a566fa40b918cf82f5e7b04d4e47d41d1699c6404a1d8971dcb98e35c59c2678b063dc3b8ca59a8696cfcc0d1886c69070afd7f2600e954d90073ac7aeafb9e2d1296b740ab8d5aa5e272e4b01205e13443ecfbc8239a30f0aa07ba2bf391652aa556ab23e20de3c1970f084539d852bb24fadd22676a8590dd44b665cfdd3658e04fd64d02488d258af1e02956c9e149b94305205e7a2e7298eb91236bace59f5bbb5be941ddb7fda58d6a50088c3b5494a7951ae675ad32b4a6e5fade9f04ff3a008041549bfe6d0d45abf69ab9f16786fa00c2e118d38ff1a93925c38b10064ab5876d8069196982bb101ba3b60f1fe31d86c7be62f132e11ed085ca491e0a96f0"]}, 0x2244}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r5 = signalfd(0xffffffffffffffff, &(0x7f000000b500)={[0x5]}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000101011300000000000000000a0000000c001980080002001d00000030000280070001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000b6c0)={0x0, 0x0, &(0x7f000000b680)={&(0x7f000000b600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSET={0x3c, 0xb, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x20000010}, 0x88) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f000000b7c0)={&(0x7f000000b700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f000000b780)={&(0x7f000000b740)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040005}, 0x10) sendmsg$kcm(r5, 0x0, 0x40805) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000010e00)="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") executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01032abd7000fbc0df2516000000140001"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x840) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9}, 0x18}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) unshare(0x2000400) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r3, 0x107, 0x15, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x420}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x3c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x91f}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x8001}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x3ff}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x5}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20000804) executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r2, 0x400, 0x1) close(r2) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x32) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000001000)=[{{&(0x7f0000000140)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/41, 0x29}, {&(0x7f0000000300)=""/112, 0x70}, {&(0x7f00000003c0)=""/115, 0x73}], 0x3, &(0x7f0000000480)=""/172, 0xac}, 0x3}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000540)=""/159, 0x9f}, {&(0x7f0000000600)=""/57, 0x39}], 0x2, &(0x7f0000000680)}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/20, 0x14}, {&(0x7f0000000700)=""/110, 0x6e}], 0x2, &(0x7f00000007c0)=""/113, 0x71}, 0x7}, {{&(0x7f0000000840)=@un=@abs, 0x80, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/55, 0x37}, {&(0x7f0000000900)=""/32, 0x20}, {&(0x7f0000000940)=""/62, 0x3e}, {&(0x7f0000000980)=""/131, 0x83}], 0x4, &(0x7f0000000a80)=""/241, 0xf1}, 0xffff}, {{&(0x7f0000000b80)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000c00)=""/241, 0xf1}], 0x1, &(0x7f0000000d40)=""/148, 0x94}, 0x5}, {{&(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000e80)=""/19, 0x13}], 0x1, &(0x7f0000000f00)=""/211, 0xd3}, 0x7}], 0x6, 0x2, &(0x7f00000001c0)={0x77359400}) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4080, 0xff0}], 0x1, 0x0, 0x0, 0x0) dup(r3) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000001180), r3) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000002240)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002200)={&(0x7f00000011c0)={0x3c, r4, 0x10, 0x70bd26, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}}, 0x404c041) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001ac0)={r7, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x15, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24fdc26f1a95d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffffffffffff6570128218a0d22915ff6eddb10000800400", [0xc]}) recvmsg$can_raw(r3, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/203, 0xcb}, {&(0x7f0000002480)=""/43, 0x2b}, {&(0x7f00000024c0)=""/49, 0x31}, {&(0x7f0000002500)=""/60, 0x3c}, {&(0x7f0000002540)=""/26, 0x1a}, {&(0x7f0000002580)=""/239, 0xef}, {&(0x7f0000002680)=""/79, 0x4f}], 0x8, &(0x7f0000002780)=""/26, 0x1a}, 0x100) executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="ef000072e81144d502e9b2757a580e0d5568c425f86ea128d34e59c0c65cbdf969759a2399d9a16ac1d0ca985d6d3c172a190c8d8791b41eba02a15cce7b663e0ea00e2b1c51a1eed7a5d3587b6a61e7c40fa012c4eec6627a70a361fe52edcb783d0a387f199e3403aa6ca40ae7fb356b76b9efe5495201c554f04df040"], 0xc8) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffe, 0x0, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0xc8}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xa) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB="330300000000000000001c0000002000018008000300000000001400020068737230"], 0x34}}, 0x200080c0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00005cbd7000fcdbdf25880099210c00991669528b003a0000007d8cb2085b14c50bb0653febeb6a111a3069de56e61538516279b87c505b0da4340ea6c98c3d70037ccb21696c72564d7c87"], 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x4881) epoll_create(0x1) rseq(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) unshare(0x20000400) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = syz_clone(0x30a0f00, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x1, 0x7, 0x30, 0x3, 0x6, r6}) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) bind(r0, &(0x7f0000000140)=@tipc=@name={0x1e, 0x2, 0x1, {{0x40, 0x4}, 0x3}}, 0x80) executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40811}, 0x20) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x58, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x1e, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x1e, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "301ce602000079dea6b6f056d75c"}}}}}}}, 0x0) executing program 1: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0xc48}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r0, 0x0, 0x4048884) recvmsg(0xffffffffffffffff, 0x0, 0x8100) syz_clone3(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) clock_nanosleep(0x2, 0xfffffdfc, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close(r3) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_xfrm(0x10, 0x3, 0x6) executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f0000000100)) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, r8, &(0x7f0000000180)="282fa8c2", 0x4, 0x5}]) sendfile(r5, r6, 0x0, 0x20000023896) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x14c, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x880}, 0x0) executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0xc, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x0, 0x0, 0x800008, 0xc, 0x3, 0x8, 0x1, 0xb, 0x93f, 0x7fffffff, 0x51, 0x8, 0x803, 0xfffffffa, 0x3ff, 0x2, 0x7, 0x10001, 0x3, 0x1, 0x8, 0x6, 0x9, 0x7, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x8, 0x0, 0x2, 0xffff, 0x6, 0x939, 0x5, 0x9, 0x2, 0x4f, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x2, 0x56f00ca6, 0x5, 0x2a, 0x1, 0x22], [0x1, 0x9, 0x9, 0x1, 0x5, 0xe, 0x800, 0xc, 0xfffffffa, 0x2329, 0xfd8, 0x1, 0x5, 0x5, 0x0, 0x24e, 0x1, 0xfffffff7, 0x2, 0x3, 0x5, 0x9, 0x82, 0x8, 0x1, 0x40, 0xa3, 0x8, 0xffffffff, 0x5, 0x10000, 0x1, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xa9, 0x101, 0x10, 0x2, 0x7, 0x7, 0x8, 0x5, 0x8000, 0x800, 0x5, 0xc5, 0x6, 0x1, 0x9, 0x8, 0x3, 0xfffffff7, 0x3, 0x24b, 0x1ff, 0x2a0, 0x5, 0x6, 0x8, 0x7, 0x7], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x6, 0x5, 0x8001, 0x7, 0x5, 0x2, 0x7fffffff, 0x8000, 0x4, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x9, 0x5, 0x5, 0x4, 0x9, 0xc93, 0xffffff3c, 0x8b2, 0x7, 0x0, 0xff, 0x140, 0x2, 0x4, 0xb, 0x4, 0x6, 0x7, 0x7c13, 0x1, 0x1, 0x7, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x0, 0xffffff00, 0x100, 0x7, 0x2, 0x0, 0x9, 0xdd, 0xfe83, 0x9, 0xc3, 0x7751c64, 0x800007a3], [0x9, 0x3889, 0xffff9a7f, 0x200, 0x3, 0x2, 0x3, 0x1, 0x5, 0x4, 0x3, 0x1f, 0x3, 0x6, 0x6, 0x2, 0x9, 0x101, 0x2, 0x66608000, 0x9, 0x7ff, 0x6, 0x5, 0xa476, 0x5, 0x9, 0xffff, 0xd, 0x0, 0xffffff81, 0x5, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x7, 0x20000000, 0x8, 0x1d, 0x4000b329, 0xec000000, 0x2, 0x1904, 0x4, 0x9, 0x8, 0x7ff, 0x80, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x10000, 0x9371, 0x4f89, 0x7, 0x580, 0x10001, 0x80, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[], 0x148}}, 0x20040000) r1 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r5 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r6, 0xc0040d07, &(0x7f0000000040)=0x121) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) lseek(r7, 0x4, 0x2) getdents64(r7, 0xffffffffffffffff, 0x43) executing program 1: syz_open_dev$vbi(&(0x7f0000000180), 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000640)={{0xa, 0xc}, 'port0\x00', 0x92, 0x0, 0x2, 0x80000001, 0x4c, 0x6, 0x9, 0x0, 0x3, 0xf7}) r3 = syz_io_uring_setup(0x5019, &(0x7f0000000980)={0x0, 0x4156, 0x20, 0x2, 0x80000000}, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) r9 = io_uring_setup(0x4939, &(0x7f0000000500)={0x0, 0x5b70, 0x2000, 0x1, 0x2ec, 0x0, r7}) r10 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) ioctl$SNDCTL_SEQ_SYNC(r10, 0x5101) io_uring_register$IORING_REGISTER_PROBE(r9, 0x8, &(0x7f0000000a00)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x3a) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340), 0x0, 0x2, 0x0, 0x0, r8}) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r12, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r12, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt(r12, 0x1, 0x8, &(0x7f0000000e80)="b6d38a68f7", 0x5) sendto$inet6(r12, &(0x7f0000000240)="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", 0x140, 0x40055, &(0x7f00000001c0)={0xa, 0x4e22, 0x398, @empty, 0x10}, 0x1c) shutdown(r12, 0x1) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r7, 0xc01064ab, &(0x7f0000000440)={0x1, r11, r8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0), &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4, 0x0, 0x8}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0xf030000, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x9, '\x00', @string=&(0x7f0000000080)=0x1}}) executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x4008032, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$l2tp(0x2, 0x2, 0x73) bind(r0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0x12800100, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f00000007c0), 0x0, 0x40002080, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) r5 = accept4(r4, 0x0, 0x0, 0x80000) write(r5, &(0x7f0000000040)="cb", 0xfffffdef) syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r5, 0x5411, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x204402, 0x0) readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=""/134, 0x86) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="2e00000010008108090f9bec674cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_dev$video(&(0x7f0000000140), 0x1d24, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r6, 0xaea2, 0x100000) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, 0x0) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000040)={0x2, 0xfff, 0x4, {0x1, @pix={0xa, 0x1, 0x30314247, 0x5, 0xc3a, 0x8, 0x0, 0x9, 0xe7c26b895e284cfb, 0x1, 0x0, 0x5}}, 0x1}) mmap(&(0x7f0000e49000/0x2000)=nil, 0x2000, 0x3, 0x31, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f0000000240)) executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000004c0), 0x2200, 0x0) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000003d80)) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xf, 0x803, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) ptrace$getregset(0x4204, 0xffffffffffffffff, 0x6, &(0x7f0000002400)={&(0x7f0000000140)}) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x3, 0x0, 0x1, 0x0, {0xa, 0x4e23, 0x3, @private1, 0x7}}}, 0x3a) read$FUSE(r3, &(0x7f00000001c0)={0x2020}, 0x2020) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) r6 = socket(0x15, 0x5, 0x407f) sendmmsg$inet(r6, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002440)=[{&(0x7f0000000140)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='\nT', 0x2}], 0x1}}], 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r5, &(0x7f0000001400)=""/4076, 0xfffffeea) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) executing program 1: ptrace$setregs(0x1a, 0x0, 0x3, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63dd0000000009050300000000000009050cf2010002060209050f000000400000090507c6"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0xbf00) executing program 2: openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl(r3, 0x4, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000000f14010025bd7000fcdbdf2509004500"], 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4004804) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r8 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r8, &(0x7f0000002880)={0x2020}, 0x2020) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x0, 0x10, 0x20000000, 0x1, {{0x1c, 0x4, 0x0, 0x24, 0x70, 0x68, 0x0, 0xbf, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, {[@timestamp={0x44, 0x4, 0x5a, 0x0, 0xc}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x4, 0x76, 0x0, 0x4}, @cipso={0x86, 0x3a, 0x1, [{0x2, 0xb, "5c656f8f1cbb0b72f0"}, {0x5, 0xd, "8dc3639f0e7712332531b4"}, {0x6, 0x9, "f7a5d09ba3d5fc"}, {0x2, 0xc, "f3f695d73a1b82eed5ae"}, {0x6, 0x7, "f10d083cbd"}]}, @end, @lsrr={0x83, 0x13, 0x39, [@empty, @dev={0xac, 0x14, 0x14, 0x1e}, @dev={0xac, 0x14, 0x14, 0x25}, @dev={0xac, 0x14, 0x14, 0xc}]}]}}}}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002cbd70000000000002000000", @ANYRES32=r10, @ANYBLOB="0c0099000200000026000000050018011a00000008009f00030000000800260080090000"], 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x8000) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20e03, 0x0) dup(r13) executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40811}, 0x20) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x58, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x1e, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x1e, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "301ce602000079dea6b6f056d75c"}}}}}}}, 0x0) executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x100, 0xffffffffffffffff}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000000)=[@increfs, @increfs, @decrefs], 0x0, 0x0, 0x0}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x17, 0x2, 0x1, "11010000001400000100b64c0000005c4b7c1500", 0x30314442}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x201, 0x26, r3, 0x0) fanotify_mark(r4, 0x441, 0x1, r3, 0x0) program did not crash replaying the whole log did not cause a kernel crash single: executing 7 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$vim2m-openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-openat$binderfs-ioctl$BINDER_WRITE_READ-ioctl$vim2m_VIDIOC_ENUM_FMT-openat$dir-fanotify_init-fanotify_mark-fanotify_mark detailed listing: executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x100, 0xffffffffffffffff}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000000)=[@increfs, @increfs, @decrefs], 0x0, 0x0, 0x0}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x17, 0x2, 0x1, "11010000001400000100b64c0000005c4b7c1500", 0x30314442}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x201, 0x26, r3, 0x0) fanotify_mark(r4, 0x441, 0x1, r3, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$null-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-prctl$PR_SCHED_CORE-sendmsg-sched_setattr-socket$nl_generic-syz_genetlink_get_family_id$l2tp-syz_open_dev$sg-ioctl-socket$nl_rdma-sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-syz_genetlink_get_family_id$l2tp-openat$procfs-read$FUSE-ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL-socket$nl_generic-ioctl$sock_SIOCGIFINDEX_80211-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_FRAME-socket$nl_generic-sendmsg$L2TP_CMD_SESSION_DELETE-sendmsg$L2TP_CMD_SESSION_GET-openat$kvm-dup detailed listing: executing program 0: openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl(r3, 0x4, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000000f14010025bd7000fcdbdf2509004500"], 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4004804) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r8 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r8, &(0x7f0000002880)={0x2020}, 0x2020) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x0, 0x10, 0x20000000, 0x1, {{0x1c, 0x4, 0x0, 0x24, 0x70, 0x68, 0x0, 0xbf, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, {[@timestamp={0x44, 0x4, 0x5a, 0x0, 0xc}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x4, 0x76, 0x0, 0x4}, @cipso={0x86, 0x3a, 0x1, [{0x2, 0xb, "5c656f8f1cbb0b72f0"}, {0x5, 0xd, "8dc3639f0e7712332531b4"}, {0x6, 0x9, "f7a5d09ba3d5fc"}, {0x2, 0xc, "f3f695d73a1b82eed5ae"}, {0x6, 0x7, "f10d083cbd"}]}, @end, @lsrr={0x83, 0x13, 0x39, [@empty, @dev={0xac, 0x14, 0x14, 0x1e}, @dev={0xac, 0x14, 0x14, 0x25}, @dev={0xac, 0x14, 0x14, 0xc}]}]}}}}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002cbd70000000000002000000", @ANYRES32=r10, @ANYBLOB="0c0099000200000026000000050018011a00000008009f00030000000800260080090000"], 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x8000) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20e03, 0x0) dup(r13) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ptrace$setregs-syz_usb_connect-openat$sequencer2 detailed listing: executing program 0: ptrace$setregs(0x1a, 0x0, 0x3, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63dd0000000009050300000000000009050cf2010002060209050f000000400000090507c6"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0xbf00) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-close_range-socket$l2tp-bind-madvise-getpid-syz_pidfd_open-setns-syz_clone-socket$kcm-sendmsg$kcm-recvmmsg-socket$alg-bind$alg-accept4-write-syz_usb_connect-ioctl$sock_qrtr_TIOCOUTQ-madvise detailed listing: executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x4008032, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$l2tp(0x2, 0x2, 0x73) bind(r0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0x12800100, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f00000007c0), 0x0, 0x40002080, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) r5 = accept4(r4, 0x0, 0x0, 0x80000) write(r5, &(0x7f0000000040)="cb", 0xfffffdef) syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r5, 0x5411, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hiddev-ioctl$HIDIOCGUSAGE-ioctl$HIDIOCGPHYS-openat$vimc0-socket$nl_xfrm-mmap-openat$ptmx-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-prctl$PR_SCHED_CORE-syz_genetlink_get_family_id$ethtool-sched_setattr-mremap-syz_open_dev$dri-openat$ttyS3-openat$procfs-socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-openat$sysfs-io_setup-io_submit-sendfile-sendmsg$nl_xfrm detailed listing: executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f0000000100)) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, r8, &(0x7f0000000180)="282fa8c2", 0x4, 0x5}]) sendfile(r5, r6, 0x0, 0x20000023896) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x14c, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x880}, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-socket$nl_generic-sendmsg$nl_generic-syz_genetlink_get_family_id$mptcp-syz_genetlink_get_family_id$nl80211-socket$pppl2tp-recvmmsg-socketpair$unix-sendmmsg$unix-syz_usb_control_io$hid-openat$sequencer2-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_SET_USER_MEMORY_REGION-openat$sysfs-socket$rds-syz_open_dev$dri-ioctl$DRM_IOCTL_WAIT_VBLANK-syz_open_dev$dri-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SET_CLIENT_CAP-ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-ioctl$DRM_IOCTL_MODE_GETPLANE-ioctl$DRM_IOCTL_MODE_SETCRTC detailed listing: executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28090900000000000109022400010000000c09043f9602030003000921ff1f710122050009058103"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x2000c011}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r2, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0x8000104}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000008c0)=""/133, 0x85}, {&(0x7f0000003d40)=""/4103, 0x1007}, {&(0x7f0000000500)=""/178, 0xb2}], 0x3}, 0x8000002}, {{0x0, 0x0, 0x0}, 0x987e}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/157, 0x9d}, {&(0x7f0000000980)=""/51, 0x33}, {&(0x7f0000000740)=""/250, 0xfa}, {&(0x7f0000000440)=""/52, 0x34}, {&(0x7f0000000680)=""/73, 0x49}, {&(0x7f0000001a00)=""/4114, 0x1012}, {&(0x7f0000000a00)=""/250, 0xfa}], 0x7}, 0x8cc}, {{0x0, 0x0, 0x0}, 0x3}], 0x5, 0x12002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000018c0)=[{{&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000000640)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c}}], 0x38, 0x20000000}}], 0x1, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x4000, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/kexec_crash_size', 0x149a82, 0x0) socket$rds(0x15, 0x5, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r8, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f0000000300)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r10, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, "b4bc323ef77d1f000071849800000000dfff00"}}) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-socket$nl_generic-sendmsg$nl_generic-syz_genetlink_get_family_id$mptcp-syz_genetlink_get_family_id$nl80211-socket$pppl2tp-recvmmsg-socketpair$unix-sendmmsg$unix-syz_usb_control_io$hid-openat$sequencer2-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_SET_USER_MEMORY_REGION-openat$sysfs-socket$rds-syz_open_dev$dri-ioctl$DRM_IOCTL_WAIT_VBLANK-syz_open_dev$dri-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SET_CLIENT_CAP-ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-ioctl$DRM_IOCTL_MODE_GETPLANE-ioctl$DRM_IOCTL_MODE_SETCRTC detailed listing: executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28090900000000000109022400010000000c09043f9602030003000921ff1f710122050009058103"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x2000c011}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r2, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0x8000104}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000008c0)=""/133, 0x85}, {&(0x7f0000003d40)=""/4103, 0x1007}, {&(0x7f0000000500)=""/178, 0xb2}], 0x3}, 0x8000002}, {{0x0, 0x0, 0x0}, 0x987e}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/157, 0x9d}, {&(0x7f0000000980)=""/51, 0x33}, {&(0x7f0000000740)=""/250, 0xfa}, {&(0x7f0000000440)=""/52, 0x34}, {&(0x7f0000000680)=""/73, 0x49}, {&(0x7f0000001a00)=""/4114, 0x1012}, {&(0x7f0000000a00)=""/250, 0xfa}], 0x7}, 0x8cc}, {{0x0, 0x0, 0x0}, 0x3}], 0x5, 0x12002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000018c0)=[{{&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000000640)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c}}], 0x38, 0x20000000}}], 0x1, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x4000, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/kexec_crash_size', 0x149a82, 0x0) socket$rds(0x15, 0x5, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r8, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f0000000300)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r10, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, "b4bc323ef77d1f000071849800000000dfff00"}}) program did not crash single: failed to extract reproducer bisect: bisecting 37 programs with base timeout 1m40s testing program (duration=1m49s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 2, 30, 27, 27, 26, 26, 6, 6, 24, 5, 2, 30, 8, 19, 29, 8, 27, 29, 29, 23, 10, 26, 30, 8, 24, 30, 27, 30, 2, 19, 27, 29, 3, 30, 8, 10] detailed listing: executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000100), 0xc, 0x1) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="623e81d1037e3a00fc000000000000000000000000000000fc000000000000000000000000000000ff0b"], 0x3a6) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_size', 0x4403c3, 0x140) read$FUSE(r3, &(0x7f00000022c0)={0x2020}, 0x2020) sendfile(r1, r3, 0x0, 0x1000000000004) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x5, 0x110, 0xffffffffffffffff, 0x0) r4 = io_uring_setup(0xad5, &(0x7f00000003c0)={0x0, 0xc45e, 0x8, 0x0, 0x1000}) close(r4) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000040)='./file0\x00', 0x0) executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x4c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) (fail_nth: 1) executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f00009bf000/0x3000)=nil, 0x3000, 0xf, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000e39000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x100) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x6dda87c55e1b1fc, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000180)={0xc}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xe}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80800}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x4b0, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {0xfff2, 0x12}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x484, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x6}, {0x34, 0x5, [{0x40, 0x8d, 0x80, 0xb7eb}, {0x9, 0x83, 0x8a, 0x8}, {0x6aa, 0x42, 0x1, 0x8}, {0x7, 0x6, 0xe, 0x3}, {0x4, 0x8, 0x4, 0xfbc}, {0x4, 0xe, 0x3, 0x3}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x343, 0xe9fb, 0x1000005, 0x5b91, 0x4, 0x1, 0x800, 0x5, 0x3, 0x3, 0x8000, 0x4, 0x6, 0x3, 0x0, 0x1ff, 0x77, 0x43, 0x4, 0x2, 0x5d, 0x8, 0x8001, 0x4, 0x3, 0x0, 0xfffff989, 0x8, 0x6, 0x71dbd584, 0x2, 0x7, 0xd8, 0x9, 0x4, 0x3, 0xfffffffe, 0x5, 0x9a, 0x1, 0x3, 0x80000001, 0x1, 0x2, 0xfffffffb, 0x7fffffff, 0x2, 0x8, 0x8, 0x10, 0x10, 0x1, 0x2, 0x4, 0x8, 0x7fff, 0x5, 0x0, 0x5, 0x6, 0x9, 0x2, 0x0, 0x3, 0x7, 0x91400, 0x8b9d, 0xff, 0x80, 0xfffffffa, 0xb, 0x8000, 0xb26f, 0x6, 0x4c, 0xff, 0x7d, 0x6, 0x81, 0x80002100, 0xfc9, 0x6, 0xfffffff0, 0x9, 0x5, 0x9, 0x80008010, 0xe, 0x2, 0x80000000, 0xff, 0x3, 0x7, 0x1, 0xa6dd, 0x7, 0xfffffff9, 0x8, 0x82, 0xff, 0x9, 0x3, 0xbdb, 0x1ff, 0x1, 0xc, 0x40, 0xffff8001, 0xffff, 0x8, 0x7fff, 0x402, 0x2, 0x2, 0x7, 0x2, 0xbce, 0x8, 0xd, 0x80, 0x4, 0xacda, 0x4, 0x3542, 0x6, 0xf79, 0x7, 0x3, 0x6, 0x0, 0x7, 0x2, 0x5, 0x100, 0x1, 0x2, 0x80000001, 0x200, 0x1, 0x9, 0x4, 0x0, 0xe200000, 0x6, 0x80000005, 0xaf6, 0x3, 0x10001, 0xe47b, 0x8, 0x3, 0x4, 0x4, 0x5, 0x0, 0x985, 0x5, 0xd, 0xf4d, 0x7, 0x8001, 0x1c4fd68f, 0x1, 0x5, 0x7fff, 0x0, 0xc1, 0x0, 0x5, 0x81, 0x3, 0x1c37, 0x3, 0xab, 0x2, 0x3, 0xb171, 0x8, 0xf, 0x2cb6, 0x6, 0x2, 0x2, 0x70, 0x80, 0x2, 0xfd, 0x5, 0xb417, 0x6, 0x400, 0x6d, 0xb, 0x401, 0x4, 0x2223, 0x2, 0x200, 0x1, 0x4, 0x1, 0x1, 0xab0, 0xd, 0x80, 0x3ff, 0x1, 0x7, 0x7, 0x7, 0xfffffffa, 0xc54, 0xfffffd18, 0x9, 0x7, 0x7, 0x2, 0x3, 0x9, 0x6, 0x7fff, 0x4, 0xffff, 0x1, 0x381, 0x400, 0x4, 0x274, 0xc, 0x5, 0x4, 0x5, 0x8, 0x1, 0x8000, 0xad, 0xc9a6, 0xfff, 0x0, 0x4, 0x9, 0x4a79, 0xdf5, 0x5, 0xfffffffe, 0x5, 0x7ff, 0x6, 0xdb, 0x4d, 0x19, 0x7ff, 0x2, 0x5, 0xff6d, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x4, 0x1000, 0x4, 0x3, {0xb, 0x2, 0x200, 0x4684, 0x80, 0xfffffffe}, {0x0, 0x2, 0x4, 0x1ff, 0x7b}, 0xfb, 0x3, 0x5}}]}]}}]}, 0x4b0}, 0x1, 0x0, 0x0, 0x1}, 0x800) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64653d300f5125d4d3e7b6f9f8fd303030303030303030303030303030303036303030", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) sendfile(r8, r8, &(0x7f0000000000)=0x7fffffffffffffff, 0x200) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c000000060a0904000000000000000002000000200004801c0001800a00010072616e67650000000c00028008000140000000080900010073797a30000000000900020073797a32000000bd1400000011000100f2000000000000000000000a"], 0x74}}, 0x0) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x403, {0x1, 0x5, 0x0, '\x00', {0x1, 0xad4, 0x8, 0x8, r11, r12, 0xc000, '\x00', 0x5, 0x8, 0x100000000, 0x6, {0x6, 0x6}, {0x20000000000004}, {0x100000000, 0x2}, {0x8, 0xa04}, 0x4, 0x80000b, 0x5, 0x3}}}}) write$FUSE_INIT(r2, &(0x7f0000001200)={0x50, 0x0, r10, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x3}}, 0x50) r13 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r13, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0xffffffff, 0x41, &(0x7f00000004c0)={0x4b5a9da54893e123, 0xf, 0x104, 0x4000, 0x3}, 0x8, 0x200, 0x208, 0x0, 0x0, 0x6, 0x0}) executing program 4: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r4, &(0x7f00000003c0)='./file0\x00', 0x231) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) executing program 4: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000011c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x4}, 0x1c) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(r1, r1) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/107, 0x0, 0x10000}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r2, &(0x7f0000004d80)={0x2020}, 0x2020) write$vhost_msg_v2(r2, &(0x7f0000000440)={0x2, 0x0, {&(0x7f0000000140)=""/128, 0x80, 0x0, 0x0, 0x2}}, 0x48) r3 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1b000000190001001a848efa961fb2d82d"], 0x1c}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendto$packet(r3, &(0x7f0000000000)='5', 0x1, 0x40, &(0x7f0000000200)={0x11, 0x8100, r6, 0x1, 0x9, 0x6, @broadcast}, 0x14) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x4c, 0xfc, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) syz_emit_ethernet(0xb5, &(0x7f0000000540)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@void, {0x8100, 0x1, 0x0, 0x1}}, {@x25={0x805, {0x3, 0x6, 0x17, "2ab53b831b7ad99e43ea20ff2c4de0e075ca4b9417e8820c749f4f1f110cf6d524eca107b265ebfb30612ea34b636c08fbda58c2a608690286a7aec98f47bfe4db816afb11493e1776dce8c54674790a43f4f394c9cb6da1439014ada1d483b7b9cd8015869c3dec76fd16859c5d315acad2ffd86a7ee01a5c383d77debb658f1656f6705a817f429b56afd1f4a4efab00"/160}}}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000042}, 0x4044010) executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28090900000000000109022400010000000c09043f9602030003000921ff1f710122050009058103"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x2000c011}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r2, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0x8000104}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000008c0)=""/133, 0x85}, {&(0x7f0000003d40)=""/4103, 0x1007}, {&(0x7f0000000500)=""/178, 0xb2}], 0x3}, 0x8000002}, {{0x0, 0x0, 0x0}, 0x987e}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/157, 0x9d}, {&(0x7f0000000980)=""/51, 0x33}, {&(0x7f0000000740)=""/250, 0xfa}, {&(0x7f0000000440)=""/52, 0x34}, {&(0x7f0000000680)=""/73, 0x49}, {&(0x7f0000001a00)=""/4114, 0x1012}, {&(0x7f0000000a00)=""/250, 0xfa}], 0x7}, 0x8cc}, {{0x0, 0x0, 0x0}, 0x3}], 0x5, 0x12002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000018c0)=[{{&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000000640)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c}}], 0x38, 0x20000000}}], 0x1, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x4000, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/kexec_crash_size', 0x149a82, 0x0) socket$rds(0x15, 0x5, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r8, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f0000000300)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r10, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, "b4bc323ef77d1f000071849800000000dfff00"}}) executing program 32: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28090900000000000109022400010000000c09043f9602030003000921ff1f710122050009058103"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x2000c011}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r2, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0x8000104}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000008c0)=""/133, 0x85}, {&(0x7f0000003d40)=""/4103, 0x1007}, {&(0x7f0000000500)=""/178, 0xb2}], 0x3}, 0x8000002}, {{0x0, 0x0, 0x0}, 0x987e}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/157, 0x9d}, {&(0x7f0000000980)=""/51, 0x33}, {&(0x7f0000000740)=""/250, 0xfa}, {&(0x7f0000000440)=""/52, 0x34}, {&(0x7f0000000680)=""/73, 0x49}, {&(0x7f0000001a00)=""/4114, 0x1012}, {&(0x7f0000000a00)=""/250, 0xfa}], 0x7}, 0x8cc}, {{0x0, 0x0, 0x0}, 0x3}], 0x5, 0x12002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000018c0)=[{{&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000000640)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c}}], 0x38, 0x20000000}}], 0x1, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x4000, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/kexec_crash_size', 0x149a82, 0x0) socket$rds(0x15, 0x5, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r8, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f0000000300)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r10, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, "b4bc323ef77d1f000071849800000000dfff00"}}) executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "21b673b9004f64c925c1534619f623f6"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b40a715dc001107db1d2a0832337bf4b"}, @NL80211_ATTR_PMK={0x14, 0xfe, "721042ecfe17222fea6f54c19d3efca3"}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x474c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x42, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x7, 0xfd, 0x1, {0x22, 0x9a2}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002210000000a15a96"], 0x0}, 0x0) executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000300)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @remote}, 0x0, {0x2, 0x0, @private}, 'syz_tun\x00'}) syz_emit_ethernet(0x7a, &(0x7f0000000800)={@broadcast, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x8, 0x6, "47f041", 0x44, 0x2f, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0x8, 0x88be, 0x4, {{0x1, 0x1, 0xe, 0x0, 0x0, 0x2, 0x4, 0x6}, 0x1, {0xf97e}}}, {0x8, 0x22eb, 0x0, {{0x3, 0x2, 0x0, 0x3, 0x1, 0x2, 0x0, 0x7}, 0x2, {0x0, 0x9, 0x2, 0x8, 0x0, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}}, 0x0) executing program 3: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0xc48}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r0, 0x0, 0x4048884) recvmsg(0xffffffffffffffff, 0x0, 0x8100) syz_clone3(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) clock_nanosleep(0x2, 0xfffffdfc, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close(r3) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_xfrm(0x10, 0x3, 0x6) executing program 1: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x88, 0x8f, 0xdb, 0x8, 0x1604, 0x8001, 0x37a3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xe6, 0xef, 0xe4, 0x0, [], [{{0x9, 0x5, 0x5}}]}}]}}]}}, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x5b16, 0x0) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x70bd28, 0x25dfdbfc, {0xa, 0x0, 0x96, 0xfd}, [@IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044064}, 0x24008004) executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000280)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00009e1000)='./file0\x00', 0x68800, 0x4) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) truncate(&(0x7f00000001c0)='./file0\x00', 0x100000000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x1, 0x4) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e23, 0x6, @private1, 0xd1}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000cc0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xcea, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)='j', 0x1}], 0x1}}], 0x1, 0x4000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000100)={r8, 0x1}, 0x8) close(r5) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r9, &(0x7f0000000380)="e6aebb12ee41b11d1e4d617d681744949b945f6601d49a", 0x17, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r9, 0x1) recvfrom(r9, 0x0, 0x0, 0x61, 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r4, 0x0, 0x0, 0x0, 0xdead, 0x0, 0x0}) executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40811}, 0x20) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x58, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x1e, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x1e, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "301ce602000079dea6b6f056d75c"}}}}}}}, 0x0) executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x4008032, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$l2tp(0x2, 0x2, 0x73) bind(r0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0x12800100, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f00000007c0), 0x0, 0x40002080, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) r5 = accept4(r4, 0x0, 0x0, 0x80000) write(r5, &(0x7f0000000040)="cb", 0xfffffdef) syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r5, 0x5411, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x204402, 0x0) readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=""/134, 0x86) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)}, 0x0) socket(0xb, 0x80000, 0xa4d3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_dev$video(&(0x7f0000000140), 0x1d24, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r6, 0xaea2, 0x100000) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, 0x0) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000040)={0x2, 0xfff, 0x4, {0x1, @pix={0xa, 0x1, 0x30314247, 0x5, 0xc3a, 0x8, 0x0, 0x9, 0xe7c26b895e284cfb, 0x1, 0x0, 0x5}}, 0x1}) mmap(&(0x7f0000e49000/0x2000)=nil, 0x2000, 0x3, 0x31, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f0000000240)) executing program 5: r0 = io_uring_setup(0x560d, &(0x7f0000000680)={0x0, 0xb586, 0x2, 0xfffffffe, 0x3bd}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002180)={'geneve1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000040)="3f031c000302140006001e008900", 0xe, 0x1, &(0x7f0000000540)={0xc9, 0x88a8, r3, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x9}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001000000000000000000d100000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a19020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)={0xac, 0x0, 0x200, 0x7, 0x25dfdbfc, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x219}}, {0x8}}}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4800c}, 0x4) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, 0x0) listen(0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000002c0)=""/139, &(0x7f0000000100)=0x8b) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@dev, @in=@loopback}}, {{@in6=@ipv4={""/10, ""/2, @remote}}, 0x0, @in=@multicast1}}, &(0x7f0000000080)=0xe8) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000380), &(0x7f00000003c0)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x9f, 0x600100) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064d1, &(0x7f0000000600)={&(0x7f0000000180), 0x0, 0x0, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xbc, 0x21, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}}, [@migrate={0x50, 0x11, [{@in=@loopback, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x64010100, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}]}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e23, @in6=@private1}}]}, 0xbc}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x34, r6, 0x303, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) executing program 5: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000004c0), 0x2200, 0x0) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000003d80)) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xf, 0x803, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) ptrace$getregset(0x4204, 0xffffffffffffffff, 0x6, &(0x7f0000002400)={&(0x7f0000000140)}) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x3, 0x0, 0x1, 0x0, {0xa, 0x4e23, 0x3, @private1, 0x7}}}, 0x3a) read$FUSE(r3, &(0x7f00000001c0)={0x2020}, 0x2020) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) r6 = socket(0x15, 0x5, 0x407f) sendmmsg$inet(r6, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002440)=[{&(0x7f0000000140)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='\nT', 0x2}], 0x1}}], 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r5, &(0x7f0000001400)=""/4076, 0xfffffeea) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x1) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0x40, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) io_setup(0xffffff7f, &(0x7f0000000280)=0x0) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) io_submit(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x2, 0x0) ioctl$KVM_HYPERV_EVENTFD(r4, 0x400caed0, &(0x7f0000000080)={0x2, r5, 0xffffffff}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r8 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$clear(0x7, r8) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x41480}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x401}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r7) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000005a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44040}, 0x8004) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000005d00)={&(0x7f0000005b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000005cc0)={&(0x7f0000005bc0)={0xa0, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000010}, 0x40) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000005dc0), 0x10b780, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000005e00)) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000005e40), 0x101100, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) bind$netlink(r3, &(0x7f0000000580)={0x10, 0x0, 0x25dfdbfd}, 0xc) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000005e80)={0x1000, 0x101, 0x14, "4b118cae8f61f967a4e1e35c244d7ea0c53f5812fcfa38d52a755fee29c696431482cbd7a472e7ac214c433d0247aef97c3a2ea702b0d1fa346812ba18e9e6e4a69be828d15cf7ae62be7cfada5eba29d36ed2de2b85326a8ee7a7f6985134dd37a94ef95bd521ff3304f663ebb48d20ff1cf53acd52c5660808192f63b857d20e92856c5dbf899305825d29d6770e3e0c78ccc7c7c3b30f032f726be4261c9f5752a01aa9f6abbf2105ab626cfd66cccdbc0271217d9ac40419ac291225ff759c5ccfec58f892d0575fe3ae11b08df6fae863e619af7ba113fb03f953e9f50f935901133ec2fc8320a18ffe4687629f3c42edaea0d99754962c6ee7694f70315c2d94a7506e9d0492134d07b04cfd8531071c574aa0921ac6a2d2bad32da8a5b7c67b9c1a553c9dcf573750eafa0b747b84926b9fd3a452fa432c0a16f6f4b7d57957881bd499cf9cd3451b0d92f3cd5ff87b43e8853f95ae1afa2bba4a635d9840d353157359cefdccd892be520276735f7481a124ed4623b39bf54465de6676e5294a68e959c5aa69f08dbdf4312627685371348528c3b7415d25c60f2ef011289c17799115e0e69be041a03a9350aa21c6e7fa851ec86ab3846cf90a16474fc7e85cb7d3e2016e07bbaa1e5244a4702262fd76b9c38db200b74f20b30ddb28d9fc709152b0109af474f61ec73566ad9bc922e8e7000f55d948fe766399a102fecca961c07bac5990959ebc7570679480547a8393aea3d4cb0eb12e0ff824093b12b2ab044b113f2c40bbde7fa018b4242123aa1c11cc84c81cb8a9adf072cd548d5bd6a3501f73e0c7922c356fa55226a564e86813d8ffb10409c41fee3fdfeba60ba5e2ece37691761e7938eb299df152cf4e4d4983445cba0258549516f93f3619f489d10e9267f09d3df35f5aa0a48d2bfa3ae48e2ebc230977a4d8d8c10f9025ce2c348a82343b38838138015fe307c89dacfba4c88e927993d518cbf9f81b21bd1b8552cc60177021862b16644401b6ae7c39eb0988361e6276245336f58fbfbc004dc90f0f2a8dc72ff11954f4a1c3344562b3400d60581d3a678cb84eb5731993a62115013cb4fbdd2f665d046fee26fc857fc506baa7c4bbeb0dc4636cac7216640602b87a1f61bc06f30d6d222c6127a65e0c422594a5d38f3372b63760e6a79f316e13c763400c4d2db5ba022d346ef8e74be2c830e19c66cbd2e6cef6d2866ca6ec4cb8b556c2a52047fb43f1ab37fdb286494c4a4c21dda2ef188d6d258aeb18db7bada4fc64c8109a8babd5ec99dbcb51be71079332ab34d4f72da8009409806273d8319b6b7137d03c5379aa0ec1e3a47c5ff683e7ded14232371c3cf67af970a02050cb954b8b2a6e7abd46aa62a80567565cd6ffeca1fc8e8e6a9f0842e454fa15f412949c4cbb8a67c445e4c3040a6d34f19df51f0341f10c1a554a25484f214e0093b18a11ad7f35b0f9385c10d5996d35bf12257e2d466127c109fdf38780b0d9fa085f5b2f2661e36636a31607b9079ad36e972ecc09ddb37f123840538139445bdb3a3ccf3cd82047e6b6f50ab6113dc6d9ad502c816364eeaf1a5277e08184a65204fa4b2760518a81294171fafde7c44ee7ae5b59adeef5f6483cdfc6052ac9ec3992c7113c388936576fe1f8345652edd7956428e682793db84fab18519e3c03d7fd5b7a5c1611146d0932677c9d518aab50237747f85c97f238741b9bd82f6e107bc29502856a857abf562aa279a561ac45cb60876f4617b8f50ff6059350355a8c4689ba89a5839670a178038d99eb6c5d5b4baf36f07a6f463846a5b872d5f77fe749b9a9c651eeedd6e19ae1d5ab7c840ac9a0f2cc7e8a2871ed0a8fbbea2889c32efc0fa4fbf4067bbe9e134f1e5b9651bfe61de3b3ffb3253147cec9c488ec236ecc12f8e1c6784db3da567ec367f38a84aff2b4ee07ccf6466b0d1bf63f0b559b708a60732fdf5932884540915fc85eb8d3d368ee882cf9eb1a5fa3cb41f41c7e850e159c54557f045aabfe5820ac48fe7122df2967c583a85b74639f1a8c5067561bf0712403327449333aa3ceaae42a702e9c7eba5956eb1cd25ff6aaf24c6668f230594a7882c065e7fa0c11009450022710559e563b03cf9fde6d7247d07636740822e30ab481fe99c6fb6a2e847432ba1daf04f9e37aa99ff80b233d9aafc55a44b25d13c3983c299f51a63ab21e65f6a0414a5e8ef73266772137a7f28586e79c2e27908fc74ae08ea88b241851999c18e7e0490191b3b1a7ec6a1720b9832c02a7b80a205a23e4c4e9c8cade2f88215c1e2a159a9cb46d0709d51572c034a82a10fedd65637b2a1f40756c52b6c331935d67b760090b824ea0ed8fefbf9b3a090b048fe60086edcd3bfa0efdf93104214ddca8d6b848b6863894efe8211fb909961e727b94e5224e11ef460eb4cb45cb0bc49ce4b3f8ef853e9d1ad1457cfab0c6bf2b5354d2e12146a5064bf9545ee97996293e87eb2ed4349fd811d0888c5e67c57f4e6f5a218cb503d76fb7f8afb2c0718e23051f3a9c9df9c6a8e08b44ce8ab937606017fb29a35c47b4e2a721f236ead22f5e716b97b0cc69cfb4a4cf7c1b01a0883071d7c8236602087af4ccfe55233787955b9a15e935d2add2da3f20af5881c1041f4c9c134ac663d0ef73a671edf050c61395babc68af1397d94f724a0c00f7357d8919838ddfde12b20027b53870ca70f2371547ca389b4fc6682d8864e375fe1d5aa1aa363e4ed5dd7fee09be2ac12dcf4fb256281d7dca0c2ae6e7c62a5bb00ec779ee2b1f739813d3a7106214b9e7a101188d1c44e27e3e2bb9fbeb1dce6df83980e507fcd2a518e4e939f3b9176eb376ac633ac184d1086afa3ece152d9932e986f4e0e7d783f368b5c62d4827aae4bdc1a741543fc6d3e920d7c4a4036c385add6a47ddf0190f28c289e30f227c3376f1d495a8ad1dd5d87a3cae6d9394466b78a8b061b9d2dcb5251a723ca358cf4f443b6a37793eeefcefe160d7b8852e21958017b946e08cf8ee25a83bfb6ba41858c051e475282b34250485b0898defb2e760f61acd788e7a91bca99af8299cf5ab512b7f6565f94f2f4f45c837145081e0a06ce28935ecde4f0dd1657528afc4470cc156f7d202df26a613df85e41294397a20064c06eb684810fd60c60f1e16d14e039ddfa8403de4a6edc8783511c1418dfa6ffba6b0d28921b24b27d9f047d96e75f6bc6edf22efedc8d9ba9d5b81b2a67238bbb5d629b8d7e6a5ce764fb9211be4c809f63cfcfed439a9dd0dcd32ceb1ed50080b0b9ef5e574a957fc5cbd987b8519226c13c0ee82b53763f55d55bd96dae1a2027cbe511165edf47ec21b9f1781c132415e3a1deb99c1acfd795c044813daef71eda1bd617083ddd8bfcabf8f46c09ad1245b83a75d089c1266cdbbb40706c61d4a1d6a10d6b40ffaf98763b4c9c6cf72480a96925d32cb69006418115433f95932f8a55286cc5d93ae656b15721ab464740d8da78e926a95754cd891d32527e745a851149764a6987acc51a129339e25555eb35411f4964499389a5f2ee2b092a868f21d16b8386b6d26080cc596bfc10edd5aed04274a443491f10fadc3cc99edcd2cae188a0689ed0dd7dac3ef02c7e0bc117e014155dd3ec8a74d3b57601ccae40d60e8f2907f0ee6c0ebf6d0cf4737c499e00242164f35dda2a07858be3b50fcf9e13bcca6176c0ab8f8585eb2aa6d77fc1f2793862767490f7fff584426a914014a34c06c91bb3b03469c53a0c35a0e78810573f015329d35076c36daaaf9e7e466b77f85d08958a2515cb4249bf5c55a197d69485665713013158398ab276e2408cf008a9bb845a08349cd71e85621d9052a3f528cb544e682cfb9fa415d633236e38afd0eadcd0c2976494d531b6bacd6c520f1964b622d47bcf7ac2ca0e71b5cef091e32394489c5de9348a9e2d8b838e54ecc88ed4dc774ee4fcbab9f5eea2b537a50fa097c9eb366a596ce7914743f8e9d6f191e2787f7e110f5ee2f28cd0edfc75174f30f17abea1a00a15aae8afb286127a1405073ba5af1767f19c0e64c2c2a1c07960e4b189634c69e5e40eac2bbf66a02991eb02b30131488d4254ee2c5f50ad5e18965f348094e8122a8e83af312ce39c48aecf096a55eac614ff3ec2a5c6f4cd2ca18ba208fa3ee6ae869999e1b75e22546ef7c33feb7a05a47d6bf0772e70b710489b1d448c4f6e6445abdc97cfe04f7bc8eb45d393f5e8a13824a890717115674d42c43698a1f9de00a903e809d64dc6881132f3d669871867c828bd41aea1dae16f70d8b69f536367a788fba721f965156def8d8ed7aa2882a3e0543e17bee58623a8fa3b440b82d0679bebd0fc547e10e71d88e8cdb76cb280ba33535e9e56fc8b12b7f364b4ce37dde02750ceaac8d6e468e9aada90a4dcba0b361cd95c8495c395119b2855d74aeea73776f5198881ef8dc63ceb36c8aef024cc180580f70f9741a33daf445e6a450241ad2489e89d6a04ba92518653008d12c8392dc1f8475e2c165ec9670fb30f62f41aca529756a9012dfcbf3eb64caa5664532e1edde3f47dbe6a924185667fd538d9a4f558084890a196e6e0be78e8e7e350dba3ffa022b07fefc996c029487be791c49af8b7b40631d1484068147c20fc45126bc7ebadec853d95c5dcba0f9ecd42a805c4ec12c7aa63790635b3e4a7919552b6437d59fab69c1449b7c8d557e57cf96c0d4db31f389e411a3eb63ea04bbcbbc93540a85ba26e1a84723a1ee2c94cb804c12b785a8d7acd63268406ce721a8452e36524ddad6449081c286b1ef80e9bae290be4b891cc552e3489f0165c37278cd373b849d723148c7e0c97ea0bbda9e7f9768db850f210a1d12f48418758ec658b634c1bb4b4b80c7ef2b31325425d22d933fd0d437e5065757475d204c4843b3758d01c5d87e2934d526859bd047cb009d096f5aef6f7e4a67382cf25d637bd9bb74cc92589a9016f32182a14d6fd1442ceb99d066aa5ee960efbfe42dc6ef14c8459cd0060c7f6d6f1be5dd85a6766dabfbeedd7ff433a3338ba76cd3e09b85e60096743f9c1ed5be1908c6781d4ce7f3eb32d9eac84c571ec6175d9569260b94001f9b7ea881f1ae7ba26aa120a82514673ac221be522fc3a62dc2467fe92e6209c51111cce30cade1cf275a403f9785144b26c851e618ac018bf4d0fbd81344ca4dee3d5c7e80e9c25ebe7589b959dca814122a4da813f0ec6db3d5a5c00e4848935abc5b6eee9af0f7fa245f3b54c7fcc35b69f555cd9290df92ffe9ee1c89cd90ea87bc427a0542bbd58f9de1cbd26d6a64948ceab323d873471c29563cfa1224a335e3b464eeb75c46c5a60204b05cc076b87100c11fc44e0633298f56ba0facffbdfc1b591a561e0190d2ef657f59587c9bf9f7e33715822a10669355acf2d6d487a40c890a30de350623351c096f0aafe2aea705644d983dd3325d47ea1ef330d584354eeca684907ade18b187d5633daf03ae0338708b66bbc8dc27e0f3308d9b7d1b1dd0bc9201edc7dc38ef8e836b49a2303e4bf75ae97c85a5766c25bfb5e80ced62a6017fe3c467bcacee76bed7d34eff69e4d3c61a8a321c0d6361623af4d295cbb5de18027f56f1d2c5cdf16b07928dd72e07d818a2698e71a615d79aa0f9761853437f5f7cbacb7edbd556adafd9a08a1a07a77f47086b1807570bdc96dc54cb7da1792f22bba8eea4d59834c44001c75872d0d2d58cfeb83971180cc13838efed51f7a22c065722958ae3e4e4"}) splice(0xffffffffffffffff, &(0x7f0000006f40)=0x9, r1, &(0x7f0000006f80)=0x2, 0xdc, 0xc) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x910, r1, 0xdcb6e000) tee(r1, 0xffffffffffffffff, 0x700000000000000, 0x5) read$FUSE(r2, &(0x7f0000007000)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f000000b300)={&(0x7f0000006fc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f000000b2c0)={&(0x7f0000009040)={0x2244, 0x19, 0x20, 0x70bd25, 0x25dfdbfb, {0x18}, [@nested={0x10c, 0x121, 0x0, 0x1, [@generic="54cd104829c4940a2d5a8a4d78c51d08016147c11b69352a3ef045b7ea554ed4e2c9f0373830548f332e9cb8506df43110e0c6b5fccd81011706cb80cce4f78c1a22e1ef26756aa1273e59b45d4d07082ba059d25de5b3bde47851", @nested={0x4, 0xd7}, @generic="f76adc2c1f7de9e29b86ad4d524cbad54a34e46074ed210f3cfb3198df82ac56f58d88eb5dad1b8547cf723a50a041644013a734a1495d77a187e27bf8a258548f582c8087ad2f8917a656324235e470af6cdc3cef919005641157b755d0d32fb28350b1ad4ed9f4659cfa26114bc1402f59781e70edfa31165a3825a62bbf011464d21504e48f265da175e25ff628a56828ea3212e8abb8fd576e3845a725abd9e9b7249ac2fcb817"]}, @generic="e30a973e5d1392504f250fc5a924565e08bf0aa523d0ecd4a5c6b58fbd28a337e61d0a5da390680f5ec08287dc8c976d7b77305a0e002c60b25798feb646d3254441b159605bdc950f7343a7b0dd397c8f11b0f6f31ead268824b7bd37dcb784c3aabec34ffcf15376e153c01e665e0ef30d3a213657171927665e90bc7cc46770a9682e0163c8f6ef0bacc3f359819a06920d1d64e6f4", @typed={0x8, 0x86, 0x0, 0x0, @pid=r4}, @nested={0x1093, 0x1d, 0x0, 0x1, [@generic="e746941ecc7b94f1b04d78966c81fb2c679e7c07f556ae8e23640d4a3e6bc619731fd9fbe522fe8f1d57803eefe5ef752596ba0d37f024590ee4127583af0fe72b68aeca984480ed23b87dc59b7ccd83a7578563cca84fa40a177d88c52f6e3d2a1a911a9c2bdb218658c25bd2c4c0f060d40779182b83f48d994a3a465187b57f68e1277adbdd539eccffd22678e59671bb04c31a1364ba7f5668e0496d82085214eff5683146b7f1477713bcf0236456a709bcece76026fad8baee1a4fa3344a474eb731e6658eae031c8b4e6ad12190657e21d80c3e7f7fe4b39b68b3718451401869be4b67ddc81f2f3ae18ea5e23833568a79ef7aca8c1aab08b14be47a30ae87245e5205a19427341fa958e4ec135981e4be0ddfd50458821ae0c9f99db44a1974a94daa3de74fe494f86ef4ddbfc9521c30c993aefbf99370cf80eb54867d4d0fdd0a20d7dd5f96c0c35ca37484268ebf155a84af479cd6eeb395ade3dddf7c2b8f8ca96409dc2d816c5556ccdf9ffdf110c5d1434a718ad5437e7cbe48ce0c4d203dd75cde45bde4fc42099fb63ceee82712bee8eadc29126577c70aa636642819781b23c5257a38cd1e1348bde1d218989f1863c24eea077bcc4fe3e6dd8395545a63d75654e7bb1b7b02fbcd48fe958b572ba74007637868e37a446537155c5a549b502f75d7d2488e3c953b0e78f420430e129c8b6f2b2b34048635f852bce988e28804ae50031fcb734ad9c16a03e8c5c2af09c22897e89f48f098d74cda65591471e322bc680f9b03d8709b49e2328fabed4002b388573e1f7be6f7f586c2b021c9f98fbdbd450db56842cb58f3be8811be1f9f5bd31f68a08abb18455a3aaa4b34fdc033426faec215825ae672813d1acdc816276bed336ec9ecb89ae2130f54ee9acbaf7abb32f3a25402db443d4497e640f1ba41940b2a35076406872da800e2a068a2c58f32fa6f612b9a31d1681d253b42ad40673b5b3d634efb6f4473c19ebb84a9bdcc3cbcafb7ee569cc1d74ff071a18e2d0ca2308263af6f787069aac9733fda8af04d7aeb006afb2f6fbf0f1ba797562140cb968faa2b03e02667fa0059139f2c1c4f995a2d3eb53ea449aedc61be9d6b52c3ffbd9228789cea4e5371b2254e7602b9c1d85517f824e6a4d8945597bd241c801f54198805082e9a6d740d6f3c9416fc2057ae3d816f753d7aaee4a4976e092988e616caefb645c329a5e553bf042b0454b4e33cfc03671980508c7fda130c694c77609ccf90c02c7a011dacaa1fd9e2102e923ed5cbaca7bd4fe82e3b7efaa6877a20a112b94e5d1c7545d7b17d9e3780ae5b95241ce1b157477f7656555b3d15d84ede5629bd7acd260268c41a95bd073bdd613f0c3415b70c10465aed3b49fb057dc43b77da99332d352f868b701541e7be5298978b2f5195a59d523f01b8582021659314a78be2d44022cf233f531354707d439c803ecabc4e441b1af86b328038b1d40999082105314879b8e655bfcc0590bd04f315f69478169db65a7cfe27106b74537982f408092d6a06b259165b63917d264b3dac0aff7d9b68c91b82565000fa6af757c57e5c34a7b7397c7361a780ced77c087232680deba7a473f5ed8b2f17625d7c8b637248e8eaae0f41bd12aa7e01206b1abb03d035015ef95df72588c4977bcd71b7dfa5eb818cb00eca457995d042601b3b14a0aad0e53fc13bc6a0ef5ec62de55507b2b9c5041e5398323550d867d848953c2ad4b14d0487f3f37743531c880352d7bfc115202eeb4f08590878bc727f741ef0711a969a4a484cc5d9c53f8b12f1fd4763e171fc27ba4cbc96647dc4b11d17ee62375f9b9177a36cec881041dc8641f801e757b51bea6e8f4e96e1e8f893a6bf76855b17d7227c75082e6d9ddf6ad352a08e04d468fe910b9ae412899e9ca0604eaad149e8c1866772a38d463d061e9ea9b7b76276b095053f9fb4a534273dfaa0fa7b383a0689201db926d0792458b784ed60664c4b048454fd063610e0fa306d046bce645a4617b2ad9c8edf272a40644cfe7f510b35a7f739d4f67c555b7613f5aa149624943430db946c06008fd4a4d6d53af3a578c3a45778467d72d5e2c6c62f5095b33401c61005e2da6541e749ad935e321a32c842f0fbd9d8eb80133ebbbba7a80cf11a1257d6d8e7c44bcf6d0f521648a6de70e1bb7697d29268539dbe1f87d47698a3e554df4aeab486db08f8f566d66ed9e378219dc74eeccd9be63c3053ba98afa906282f14162ec22d4ae69b9cff9575140c945ebe3284072592a1465cf589642520416ff45edebe70838dfee59e583eca04f2e258038c4a39b9a123eae2ae626a0fd8a7d5aa6570b7b2864f3a054096472410ce1c64f23bf56dde695e8d5cb678d7ce80fb3e1a0e6537205e8229c8ecc43dfeea4998dfa4c6a82e6780d6a10c2f12ee919a74d98a022d4d711e763da5620bace3079e6e0e7a7b494acb277fd58f2602d403aaf0bbbdcc75d5700da75db303e67c1f9dde3577e9a8a7f05658a2f65fbebd6c90b7916c94ca6cca71ee8587eb55b8f214fc64f6a0524e14520f47cdcfa7e95cecda442219a1dd721f07ace87b4c2d27e027de5a8d56fd7c5ac9e61c3794aaa11925ac8eb0066b1ca2c3f2b722c39bae89341e3448e180e6e54b5a4fd94b1f71b02fcc6b07039e6e164145fb899e06201275cd21a7e228905d41c52b521434bfdf44854b2111563ed4513eb001f0c1a0685125e73d0d9e265c81b59e7691adad863845db8371b2d15d1f67505cea571e98de7b5c10096a4643af2f5f67cb44284fb67e4e7d6091dd316ba74ccec794c5c1b2d32afda886ac24005dc21b327c5c2cf7259267dbaf96162b04298c2d38e4e4a52029c238433acb53bf10619f745c46c81e9ac3e727f8fc8b009a3034b43ac1ec2ea5613edf02ee0622b56280c1bef3a3d009cc768d42b9cad3eb2447ee66cfc1bc0be848f17225540972f9802e088c220e280821b430968c92290c326e838c9a38ea4a6cae132894de050ff99b8273d5048c439af7c98cc4bc3b0a4fe2f20319836a2a268a72e5aee42b5068e9f0d59851d51a9c49fefe36243e4cefdb82abacdf6b88526410d783fb45d93005d7ce2b7f6fcdd9aa9dbcd296c233d550e0328e5ed77dcacea85bc1448892cbdfb5fd564ffeea0eef089f817933514a2348b499f038efa04a748c93d6b624759c3f2b326a86b14ce38cecba4881d3ea4ee04e67ec9370d13a3df3cda4dbf80d2976fff20a574920ba6c02b817fd0e4be80d3beb8ec7c82b68fd9a09bb1388c2ce29134bef5cf2d35d563f94682e614587602d011d4b531741b4c18f59f9edf94b98568a7e8880beb8ff1a83080d5975a0cce6c299f7d0af110a893983f2e7ca9eff3b1e06cdb5b6362001ae1bca5ac7ebb07ed8cba5df91af49d9d3918be3f3accecc483b9c0b0798aa7a919760787d90c918b3f3de2c1719a4c8e4535cd2f791f5a8583b9072f36f07d4c93b1e0874df8e0ced5fc7514ebf90e916216f0d52460110fff965da1b39e4e9a1bccd2698ecf12bca78f6e1139e4c4964adcc488609028c3ae5124945df1fc5ca44d7a7e61505915019a79350733f0ea159be138098d51893436f0523a3975c5b1e00c64f2cc1557a4f1a60b367fe1c32177fc9537438c3ba390b275a089969415589da1d888fdbe676ec05787f81579d578460dea2b3575293852702ad58e0c5b8e62626de303d77b341c1c3f88453da9369adced1e694055d5cdef7a80e9689d3b3269b0560ec69c3680c95b9252624637e4a1b86de534fe2981c6cd36914acbfb6d3d25a7b90885324e4fd7abefe830491e1a7851ceb26dcfbffe047b0315b0d608e417a1e8fe04386fc2007989cb2ce4b17a4f75263117aa36248174b54a5522bbff044491a9369248c648e1e93cecd0c360f89c18a7ca092932a119d836ea2f9bc2408b5af6ca56d64ae56b6a3c00f1d08acbde43110c0e6803eed2f11a4638c936461cb63776bc03ad3cbff58a0e3b0cca5052a18a5793a2850bb0680966569c9ed9b29d2b4f229ac72ce942d3ff87aff775cb3c2456c2739e8046c3c9f1f2a6faebff01b43e604566140a02684a1b0f3509ddd2348cefd617c30fb3d6ad8a2b595db0dd222cc268847f54218519d5c76f5c518acdbc6b53b69ecf9b98f52c5c3d17bb3df719a35af5e2195f86da6adaf1f6bb1060f11d4e29dfc944107905d0681736cdf841eacaa11ebd0e9b44ef52b2d41b63c96aef83d33400846b87c28120254752b2fb659341292f01fe630361f6cbf1192562f752b250f08b02b2f458ac6d8a1757d5bccaaadceda82d7ca75f14d19b00debfd1760d3b52a80dede1792e73bc9d290d811343fcfd746331371dfda6571cb5ddc45dc73b8b5a0156e0948b99730f4909b5a4dc79c056b2d62aeefd3ef2863b7c63c6f8c91935e71169f60157ced03dbed0077ac28120e955d32ab0884d8845eb3eb28faf89cfb448567002011f25872622fb0c87a4c2d54eaa1f52ace9fc70c2ef48090e15e836edb7879fe84a0ff22c7cb2ebbea43961114b2a46585d30673f6c2385cb6015ab153cdd38d4fa928ba50d297db224f6ed4713d2cd86807713ce1fca45220825abc687590308d2d1ffffeba8ef658672daa36c64499e0a8c50dc7d2c5087ba79ddf9d04087ae74f99e57a1472a5e30e8cb4bc11ed10e3c3c852795badf25dff36903859b76c6ba9915072fa38676b52dd4f29f6bc893a9eda4c333b5a4c8b247c995fd36224237f05348269aa6a914c846e22a419d27b21ac95232f855f6520740d271ed2f8889f9508252aeac64234546e8f1f4b1efaadfec3c26e3f65dc3ab77222f1970cd3e84fef1eeebff4f9513ddef5520c054a2998d2ac8b7f6ccffae293beb48e9153a054b936db664e250e9e7ce8dbefd6b147e66b4901b3332727e2b63b83616356a016ec784d2378fddd86fc62471d706b72f1f7b7b24fc8d65fba467726d308e53b2a3e6269449a9538d3f818de6a56493a09e6b539237af012f67f70fa98c04cc01960427630e69d7414438c4d23742ced5fabb95db26f3a25151d12c392607cc248e6fe246c99c347b484856486f822a83f3f49af2d7970b20a59773cf810ff66ce91a5684dec3dab0aadd07f3f2135b5d535aaad8eb9734278b4b4ac6af173f19f0762cddd5439e7f83e83186ceca8958b922085fe9ff1c3133386210787e7cc3ed6d4f7ad0e3c236dcbe301cbfc7e9e452c35fb6178a99a67abe83e0ba4353fba332df9531c713a274441ae877ebab6571af5a567f7e28380b51b49f06cc4b522d46cc0aedc4635bc40e9e68be53cdbfecad8a0471c15f9210b6463672f63c4e55327677bc91404b4a5e86c50a1a8ac485832e3fa25f819a6af7092ddeff6485cd1b1e3f50ebd86230b32145f1e93533410227bd3e7e8f82568115fdb721d55a8af7e5138d4bea9fa865a3f9bfb68eeff29e3a3778d1b1d031df91695142642a73dfad7a686e09e5c4020bcd5d9b9c47395646b70c894da8aa8b1d9f92771cf9b504a1c5372c7fff734c5a1bc4db53b43186210bf3a54707730983a84d8953ae6fd8c59ed69f1ce123c2942ab4226c21972112e443932b9bccc9e4525ef7c84d3c895df65f3c42e08894f011087c5e2d4de63b258b83de5484e6313a60f1e4fbf7c45e06ba92c37f210d46767ea19c379e542ab268a16fda7df3180f25fcd8bcb1db89894406e52d8165e7168b158fb9791dfa7d44ac3f697725976fea442fc667e3399311f3396958f", @typed={0x8, 0x74, 0x0, 0x0, @ipv4=@empty}, @generic="9478b6beaa40ac5d46f4d1c46ef588af2ed046e50e4c5f62cd190f3379f071ad2e478136922c6293273d0cc6ef151cfb646cde4e2f285c771d529698d71ecc3ab87c2299d224b60b94520e3ca81e16f5d54d2615d07a55adfc8b8d98dd1c0af858013810fd21423ccfa9828108f4fc951e33a680d57a2fadb9d25e1cfc278a792253aaa8f453bf"]}, @generic="52b97d752499d9353ce2bc35baf3837865ea37ab4006929f3524cb67d0ff4fa5a9e1e002437f5c6d3f6a7831dbee4fb758994eddf0b962ae83c88be0fd7c71fe13b700181a103edbd5fdc1556a159ef0132fc48b32c44585ea3bd821e1f4b95a9a165c249a9014a3b44bb0d97acb2d4559b1206680415d52f2e026451a7ab491bd74194ca56209cae67a59eb175d330bca6274c7dd962d14e81ed8defed0ef2d7feb5f458d4c36256d9e86afd9536326ab00d9406c2c101dbce250e09ad70f75cde34732df7c3a0662102f76d0476a7bbd80f9a6e6d04a369264774993536a26102704e5b45dc4a08525ee122a335ae928127407533fb3fc783d47464ffb0c6f1c89b72a4b27b05c6fe518664506d82a40a2039ac99761d92d71a85df108a9bfbc7e4d476b7b5a021666bc06eba895898ba66d39f0ad712a7f7b94bbdd1d1411d0caab7d2129ec1b6b5067d106ecf9f5d1dc4de07e0dd56de35e4dc265f1da81c5f29276e4eb012bcd399fecc7f112081a165b3c8f44bd4b95c420184165e5f0be3ef3cb8c0b585afad112a6387a483f5ddb2db1e1e5d15ba2fdd8ca54c8b62ea25c411c9b285a24ab5b784edda212eb94fd1ff877ac80cdbafd29e518688940da50d33f578961b05a1b71e5585196b9b679408d26b041a8fbeac05d46172d78c81ce2c6c0f604c3260411a591148afd5372bb2b23c023b3b6a221527e08828911848a925aead88b1a447800c37194df94d2954c7c5964587a85dbedb36b1ba8a5954f0025562f3ef63769005f2a19a6e1febb1cf0eefd63f713fcdb3992286a04bb54270c4ec96e5209f5b60e88c608658fa40a99a20e2982f89b463862914bae4f51717a57431150a09408b6e96a406bfc9dd37d778a374f98a06fec1696bce9fa199ebcecb1fcb50df6fb06911c3d8a0d1be385efb9dc2386b20f23a9785cf75df347c11fc0a659635242dff2b9ca5e66e774e0e1ad455f847c594396fdac02f121b9898b4f34186bd6a4b145ade2f2fab75381b4dc539181608c600de2532ecfc6e5f02f7b282355d5d7bb7a22f7da3ce3c05ded0aede2ffe21076804209e8b2b8487859e690523c51fba5e22f2d8aebc5f6be6a07946e6b2512d7d2e762c2db0474c9b75fc769a9fcab351de7d9289f3c36d1708dc2a26d80fd54ca5129cee6e36f79b58f8389e625260f947b507c78c3a767c04a41ab9a5044b11bf7e2921cbaef3249fe7d0f9b5ee14c108dd2edb2e91b09db317083f8fe85105fa926beb844094fd87aa19e0c9e8c1781a022635733094c2e1631784ac9d3191ba2ed08368a3d0d710a252c8b57b9fb1d9e4a38443e7255978ca405a726b834ba747ebcf1ddcc5fe10c7a7eff70434a569e17c35d2db1fe46d6e5f83883180996366c21e5c6435fd90fd725a3289806a84c402e5b80a7cbc18b1d25fb1f2aa071a9c5531c587fe8b712b5485b4ebfb2886cd70707ab2ff5f826a08e7b226a632f220a7e5d2a1d801f1b62afdf507e636d8c9ddc03682b250a605bb1290742c36396aff50b66fc2cd634b4c6b4131112dfc7a49c8911072f9d694525ab39a42f921e8dd5070a1d923f4b6486239a13b646fa8cb52769374996a27903ea89114c68b833683db30f71381a27a7edf95db029068a2579d534f84c3c72b49ae8d81e40eba4deb77f4057159c693a6d00d75ce024087dad4023df1c9b8d1dc8d1901b8d684d998ab6b8ca99a8dc4599afdda19ffadf7b5ac45b43e9195c131e6e5c5ae1128811ddfcea9db0428cf3ef348aa926d4c0793dc94b3319b5335dd7b34b417e05449e22a342c78c68e581783efe1c593b072c3b90396096fc7239c4b49155b0356ec829c134bb442d3f0c651fd3b01112140436b1abd15d73ace4106bb18b46c1ba6da3e9595aa03383b08701c2bce65a71ecd9cbc3ea36c317b3a8c48a9255e9b05754d28a61152ebb8277a6de865ebfa8789bfdc8889ad4b9d0ac3672e59ea9bc67ba9c32eea95d0b230096bf2f3441e1d2a573847ffffbbc9528eb4e280152d47009e84fe987d0c558dac0f76c9a91681da15fe600a25748038bb2b2f254c2b624379c736dde9aaa287ba91ea0a860560083a5bf94fb0a2cd5431fc03c4ac5b898bf631433be8bb868b1ab86ddfb0376e045e64818b4e1bbd7bcc34ea54c13ddf7037ad7bc3d3ee2beb591af69e0c83e89dc94f9d954316e8da83072b991d8f8f80a07f01b6c117b71aa08ffe8f4c7f9ccf6dac07b922a26788f7d296ae67d33facb7a1185e13499500ca8725ad886f016ed4bb41be6be587fd0b1a13465abae8e4559b47bfceb0b7201687712fe2df1b80384c78387b6bc37a4e20a0ea9683e06a2b87ee8a3fc8399212b9ae0713b85c0d0e5c13d4e040f352a425922c6e337ec38a1a05ab4b4c171a839fe2defa6ee5e821018ed52cdf671917fef898a27676f27bff1254c07dd6c9e9e68f8ede078de8d6ee6090f589e95b18df68759dbc894b39217f8ae22b219cea1cfe942d5ea326ef45c6170304052508acac7c9a0e22d5f853e5db51d1c28d7941f2ec954918a372759f357cb5baa9045ac3cd12d62c83f955f92823076083c85d211b3705452bd654bda34c9249adf0663e0fb7cd9d6c8e07870be1f1d15ac19274f3fa7f670c316ad2a3b1491700358eaf15f1d2413b930124183cb40d1bdcecefb706dd8e91f7eb94a786e25d02793be27486df51a7a383f0cb0c7c2215777921b20be6d74b84e8adb5c50e19405d2b7e0a12ca929a92a406270d2b59736edff407c38d011b8fb8bd61dcb676a3532cc5317a0fe43300c712e1b0e4f6e1770064e49339f026df0478bf906d78aa2108406a2a948327abf5d8f671b7b9e2b70bd2ac83bae6d08371217f36bb7da051dc9d13c1745f31bbddee43135891a1348f6645831bd838c4686e0b5fe21a7da898673f18079c827aa95388d02f3d754aee5559d272ee56eff295a9dae06b927fcc11dd76c0914b6d1990a65ec32d64566e45ee4715d1ebd10f92d5279f6d9d8fbbf73631c9efaea9bd3ea691dd34601b2c1cab99da601a8b3096673f158e80230885fd46865e2f10f99265bf3dfcfd9267cb2ef4239ecf53ab3d136d73f529f81e2799853b838eec9d36b0ff5a0ed3c782c9067924296745e452620c9518549d82265eb2ac6156a6c7788c2293d69d2ad45ca80085801c7f78ff9e4d746f350227eafb6883a42bbebd9eb887d9ff8b53cf0f642276a19183cfcac937750a6e18592830e0027e60fa892c6cbb5dc6014034ab9782b75c80433aa31b127a71a9a03d1818cc0a0e4437d6bd2e8936abf4543827353695e06370db4a4902c97a5644b363f3165bce17885f8d77c4fc8d55af7e604f2c29f77081232093aa53f83600f2dadffc69ebda4fb6eae4a6ea2cd6df72989c8f4a6d621448e2bb6c4c8638baeef92f81c66e69707468c97e9fa956ed5413bd028bb22483de9cef07f8dbfd63c07772fc81801cc6eab71f053ecec6cc6d021218fc47c4f9bf40f80a166a44527698cad8ca5fcc6869fc8f2609a0e5417d493d2c414e59424b6eff7e7fa64fd90d48e387622d339060440c0a7f99d6be23d9f6e24fcf29145c7353c6911a5ca6d1d9222eb511343589e6c7e490e8794e0c60fbbde11dfe29b7eb092321f1293e0566159766ea6d47561c63f0095be8aa0511bb42cc30dd58b0865d8bf1d0dd0c949241d9b9cd9c6949c1cbf0ccac3152276fe7adfd3c4198b9cec433429cdf224c8221b38b6ba35e7f6643fc4c052cb577386dfbc4a2a032bdc23ad6c167c57f46b1a0941bdcd81b67c1c2ea99c1d1271048cba2702d4e6c061e33a9ea3219230f219a8da3c71f4e2474fbb2256d226bb9bebe88ce7d612c69bfdebe72dc5e72b3a343dc089ae1722865d2d53e8685706f2222a538e4db0d0ed13ba4a499d3fdc77a8fb37a605f42d4b12e2d6b7d38b7942c3d07162180dedd83a1700f9981e4d5cd6f3265cebbc65b1d72add564e1df7fd85246582c571887ebf36d0ce5760b646b13a82f37c4c592340dacf9cf1bfd8abd769b278359e646e469e86f4e6e1095008a3ee6e7ef9ae7791e378b7d349c1c08c4c87b4b415c340309310b2ab49a8a685fea2c6e26cac5268a11f943ed13cdd414d9100baeee018a88be7de5b559cd800467fa18da86ffec5b6172c5cc0d968be846848f4da365b0d48c54e006948b136f276097b5ade98de320373fe187934e5db4752458326ec82f5faa5b6e153699ab286498cd28175e66c8db59abd11b50229e496aaf2a64e3c22f5b774164799eb3f91392555f65c85fcb4e0b772801848d0b65aef43defc3b926f968e1092f0728ce9732f86b85fc98d04ec665fef6f7d65b7a3ac87b174327890819c768684aa12ca61484c11517020d0df226f344918764e6788a003481a27d4339a829467e44e8c85b13ba2a52fee97245fc91ea9be2da0e1ffc4c1e3b3faf51e82406754e2779d9bf80cb430bf79a297468b0fb762631082a87dea5ce49bc131281f289e36b7bb38d53050a658a821a669fca7b88d2c098d7619b1d4d684d424fc2609fe865a20410f8877521b1912896423df472b15c53b2206f7cbdb125cd16522e19b501e9102872c7a8a2c46b64d700d55da4857fcb14db7afa42252820a0c8f282cbe44e6b218616fc27ce6be13c9e51bd3541241651fe5b6da9723a0d673e7659ac0220d284fd18a2db85de842bc49ac7ed9ff73bf85f521b64ab0bbc9d4919924ac3dee65bacf0d0fa18661f8d9a368a9aefda01812193a240cbb696d1effe7dc45501c545bb5ec152bf1dfa8be13c5583755b1a5929f14dcbc2fe83042ad25f59ce5898b9d6475980e9051443b7a3dec7947f9620c808b74669048f9f8fdd1c1f1e4578dce01a12b36b337b2f100caff08e82ff1d63a9e9645de9d0787734db05b7b9b8887259042b84f3ca76ebee6954a0e0fd557d2c9a7e62bccbdd20cc96446cddba8a7cf595f6dfaa79ba2a2ff22e9e21f4cf068442216132511a30de65621c8f88a5abcb5745b397edecae6f7e7b0278ddb8d4ebd7d0a4234bf7c129651c6cb1bbcc0fe7e950c9b969eefec1c4b75087553ab75bd0d22b2029e2410b347306049ff91066a0722d8655587e6469c4e91d49958601d4a31973dd50f203d53e83f37c56d0875bf20c09c20e09f172fadfcab0b973ab227a79a886db9510437e421c9e02b4bfedd6ac01c4e90321ca35a538836124ed9a8119f12edbac2fee7fe43a942af1dd1fb94376f6b692c47ea37404bdf2dd14abb530be7d1358668ae4e956de12d78dfce85dc02fdd1a51c0cddfb5d9b4c4909433dad6dbfe8d612c80de7a907e20c03892088c31249e2c42bc8564f8425922b3dfa2e2ccfbaca4135daa51af47c400f9dcb38b98e0d4ac573822a566fa40b918cf82f5e7b04d4e47d41d1699c6404a1d8971dcb98e35c59c2678b063dc3b8ca59a8696cfcc0d1886c69070afd7f2600e954d90073ac7aeafb9e2d1296b740ab8d5aa5e272e4b01205e13443ecfbc8239a30f0aa07ba2bf391652aa556ab23e20de3c1970f084539d852bb24fadd22676a8590dd44b665cfdd3658e04fd64d02488d258af1e02956c9e149b94305205e7a2e7298eb91236bace59f5bbb5be941ddb7fda58d6a50088c3b5494a7951ae675ad32b4a6e5fade9f04ff3a008041549bfe6d0d45abf69ab9f16786fa00c2e118d38ff1a93925c38b10064ab5876d8069196982bb101ba3b60f1fe31d86c7be62f132e11ed085ca491e0a96f0"]}, 0x2244}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r5 = signalfd(0xffffffffffffffff, &(0x7f000000b500)={[0x5]}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000101011300000000000000000a0000000c001980080002001d00000030000280070001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000b6c0)={0x0, 0x0, &(0x7f000000b680)={&(0x7f000000b600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSET={0x3c, 0xb, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x20000010}, 0x88) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f000000b7c0)={&(0x7f000000b700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f000000b780)={&(0x7f000000b740)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040005}, 0x10) sendmsg$kcm(r5, 0x0, 0x40805) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000010e00)="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") executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01032abd7000fbc0df2516000000140001"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x840) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9}, 0x18}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) unshare(0x2000400) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r3, 0x107, 0x15, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x420}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x3c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x91f}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x8001}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x3ff}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x5}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20000804) executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r2, 0x400, 0x1) close(r2) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x32) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000001000)=[{{&(0x7f0000000140)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/41, 0x29}, {&(0x7f0000000300)=""/112, 0x70}, {&(0x7f00000003c0)=""/115, 0x73}], 0x3, &(0x7f0000000480)=""/172, 0xac}, 0x3}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000540)=""/159, 0x9f}, {&(0x7f0000000600)=""/57, 0x39}], 0x2, &(0x7f0000000680)}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/20, 0x14}, {&(0x7f0000000700)=""/110, 0x6e}], 0x2, &(0x7f00000007c0)=""/113, 0x71}, 0x7}, {{&(0x7f0000000840)=@un=@abs, 0x80, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/55, 0x37}, {&(0x7f0000000900)=""/32, 0x20}, {&(0x7f0000000940)=""/62, 0x3e}, {&(0x7f0000000980)=""/131, 0x83}], 0x4, &(0x7f0000000a80)=""/241, 0xf1}, 0xffff}, {{&(0x7f0000000b80)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000c00)=""/241, 0xf1}], 0x1, &(0x7f0000000d40)=""/148, 0x94}, 0x5}, {{&(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000e80)=""/19, 0x13}], 0x1, &(0x7f0000000f00)=""/211, 0xd3}, 0x7}], 0x6, 0x2, &(0x7f00000001c0)={0x77359400}) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4080, 0xff0}], 0x1, 0x0, 0x0, 0x0) dup(r3) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000001180), r3) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000002240)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002200)={&(0x7f00000011c0)={0x3c, r4, 0x10, 0x70bd26, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}}, 0x404c041) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001ac0)={r7, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x15, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24fdc26f1a95d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffffffffffff6570128218a0d22915ff6eddb10000800400", [0xc]}) recvmsg$can_raw(r3, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/203, 0xcb}, {&(0x7f0000002480)=""/43, 0x2b}, {&(0x7f00000024c0)=""/49, 0x31}, {&(0x7f0000002500)=""/60, 0x3c}, {&(0x7f0000002540)=""/26, 0x1a}, {&(0x7f0000002580)=""/239, 0xef}, {&(0x7f0000002680)=""/79, 0x4f}], 0x8, &(0x7f0000002780)=""/26, 0x1a}, 0x100) executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="ef000072e81144d502e9b2757a580e0d5568c425f86ea128d34e59c0c65cbdf969759a2399d9a16ac1d0ca985d6d3c172a190c8d8791b41eba02a15cce7b663e0ea00e2b1c51a1eed7a5d3587b6a61e7c40fa012c4eec6627a70a361fe52edcb783d0a387f199e3403aa6ca40ae7fb356b76b9efe5495201c554f04df040"], 0xc8) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffe, 0x0, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0xc8}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xa) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB="330300000000000000001c0000002000018008000300000000001400020068737230"], 0x34}}, 0x200080c0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00005cbd7000fcdbdf25880099210c00991669528b003a0000007d8cb2085b14c50bb0653febeb6a111a3069de56e61538516279b87c505b0da4340ea6c98c3d70037ccb21696c72564d7c87"], 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x4881) epoll_create(0x1) rseq(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) unshare(0x20000400) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = syz_clone(0x30a0f00, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x1, 0x7, 0x30, 0x3, 0x6, r6}) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) bind(r0, &(0x7f0000000140)=@tipc=@name={0x1e, 0x2, 0x1, {{0x40, 0x4}, 0x3}}, 0x80) executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40811}, 0x20) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x58, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x1e, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x1e, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "301ce602000079dea6b6f056d75c"}}}}}}}, 0x0) executing program 1: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0xc48}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r0, 0x0, 0x4048884) recvmsg(0xffffffffffffffff, 0x0, 0x8100) syz_clone3(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) clock_nanosleep(0x2, 0xfffffdfc, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close(r3) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_xfrm(0x10, 0x3, 0x6) executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f0000000100)) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, r8, &(0x7f0000000180)="282fa8c2", 0x4, 0x5}]) sendfile(r5, r6, 0x0, 0x20000023896) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x14c, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x880}, 0x0) executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0xc, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x0, 0x0, 0x800008, 0xc, 0x3, 0x8, 0x1, 0xb, 0x93f, 0x7fffffff, 0x51, 0x8, 0x803, 0xfffffffa, 0x3ff, 0x2, 0x7, 0x10001, 0x3, 0x1, 0x8, 0x6, 0x9, 0x7, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x8, 0x0, 0x2, 0xffff, 0x6, 0x939, 0x5, 0x9, 0x2, 0x4f, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x2, 0x56f00ca6, 0x5, 0x2a, 0x1, 0x22], [0x1, 0x9, 0x9, 0x1, 0x5, 0xe, 0x800, 0xc, 0xfffffffa, 0x2329, 0xfd8, 0x1, 0x5, 0x5, 0x0, 0x24e, 0x1, 0xfffffff7, 0x2, 0x3, 0x5, 0x9, 0x82, 0x8, 0x1, 0x40, 0xa3, 0x8, 0xffffffff, 0x5, 0x10000, 0x1, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xa9, 0x101, 0x10, 0x2, 0x7, 0x7, 0x8, 0x5, 0x8000, 0x800, 0x5, 0xc5, 0x6, 0x1, 0x9, 0x8, 0x3, 0xfffffff7, 0x3, 0x24b, 0x1ff, 0x2a0, 0x5, 0x6, 0x8, 0x7, 0x7], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x6, 0x5, 0x8001, 0x7, 0x5, 0x2, 0x7fffffff, 0x8000, 0x4, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x9, 0x5, 0x5, 0x4, 0x9, 0xc93, 0xffffff3c, 0x8b2, 0x7, 0x0, 0xff, 0x140, 0x2, 0x4, 0xb, 0x4, 0x6, 0x7, 0x7c13, 0x1, 0x1, 0x7, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x0, 0xffffff00, 0x100, 0x7, 0x2, 0x0, 0x9, 0xdd, 0xfe83, 0x9, 0xc3, 0x7751c64, 0x800007a3], [0x9, 0x3889, 0xffff9a7f, 0x200, 0x3, 0x2, 0x3, 0x1, 0x5, 0x4, 0x3, 0x1f, 0x3, 0x6, 0x6, 0x2, 0x9, 0x101, 0x2, 0x66608000, 0x9, 0x7ff, 0x6, 0x5, 0xa476, 0x5, 0x9, 0xffff, 0xd, 0x0, 0xffffff81, 0x5, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x7, 0x20000000, 0x8, 0x1d, 0x4000b329, 0xec000000, 0x2, 0x1904, 0x4, 0x9, 0x8, 0x7ff, 0x80, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x10000, 0x9371, 0x4f89, 0x7, 0x580, 0x10001, 0x80, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[], 0x148}}, 0x20040000) r1 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r5 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r6, 0xc0040d07, &(0x7f0000000040)=0x121) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) lseek(r7, 0x4, 0x2) getdents64(r7, 0xffffffffffffffff, 0x43) executing program 1: syz_open_dev$vbi(&(0x7f0000000180), 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000640)={{0xa, 0xc}, 'port0\x00', 0x92, 0x0, 0x2, 0x80000001, 0x4c, 0x6, 0x9, 0x0, 0x3, 0xf7}) r3 = syz_io_uring_setup(0x5019, &(0x7f0000000980)={0x0, 0x4156, 0x20, 0x2, 0x80000000}, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) r9 = io_uring_setup(0x4939, &(0x7f0000000500)={0x0, 0x5b70, 0x2000, 0x1, 0x2ec, 0x0, r7}) r10 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) ioctl$SNDCTL_SEQ_SYNC(r10, 0x5101) io_uring_register$IORING_REGISTER_PROBE(r9, 0x8, &(0x7f0000000a00)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x3a) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340), 0x0, 0x2, 0x0, 0x0, r8}) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r12, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r12, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt(r12, 0x1, 0x8, &(0x7f0000000e80)="b6d38a68f7", 0x5) sendto$inet6(r12, &(0x7f0000000240)="3afdc679464f0d8b290d5307123733b973d54623b912ef9b93e9aa796b0eed7c158e61a65713783d54bafac7f6386d80a752462f1efd1e99ad0530ddb4064768c12bfa6164dbb85e0e0a9b56d83647a10c4f6826eec5704c7564fc1340276f7bdb52059c22b2cf5f2c6a3c236388b55a3b1d4ac61068c7cba0eb7adc07ff4cfc25337387555abf956685dc78709d944f992b67c7f91169318afbec4967c1bc5dcb0e088cfabfb5c7038220e833ab432314b00e70281d917ef1d6b591798d07722e69c9500052e5ee4e8e44d1c6ad854219d35e9082f952ed713bc658fcc33336cc13094b9a168c9dc2c6c20d1fea5e3d1b04c06c42ffd55386475b532bf328530c41a47c534462e08e6622ffd65aadc31d5b6408c9dd58c8f670566618472d59e70d80ea12a2806c6ba5e3d60e9ab8ecd39ff4af81d704813a9d4965a8bf33bf", 0x140, 0x40055, &(0x7f00000001c0)={0xa, 0x4e22, 0x398, @empty, 0x10}, 0x1c) shutdown(r12, 0x1) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r7, 0xc01064ab, &(0x7f0000000440)={0x1, r11, r8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0), &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4, 0x0, 0x8}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0xf030000, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x9, '\x00', @string=&(0x7f0000000080)=0x1}}) executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x4008032, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$l2tp(0x2, 0x2, 0x73) bind(r0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0x12800100, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f00000007c0), 0x0, 0x40002080, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) r5 = accept4(r4, 0x0, 0x0, 0x80000) write(r5, &(0x7f0000000040)="cb", 0xfffffdef) syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r5, 0x5411, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x204402, 0x0) readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=""/134, 0x86) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="2e00000010008108090f9bec674cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_dev$video(&(0x7f0000000140), 0x1d24, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r6, 0xaea2, 0x100000) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, 0x0) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000040)={0x2, 0xfff, 0x4, {0x1, @pix={0xa, 0x1, 0x30314247, 0x5, 0xc3a, 0x8, 0x0, 0x9, 0xe7c26b895e284cfb, 0x1, 0x0, 0x5}}, 0x1}) mmap(&(0x7f0000e49000/0x2000)=nil, 0x2000, 0x3, 0x31, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f0000000240)) executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000004c0), 0x2200, 0x0) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000003d80)) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xf, 0x803, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) ptrace$getregset(0x4204, 0xffffffffffffffff, 0x6, &(0x7f0000002400)={&(0x7f0000000140)}) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x3, 0x0, 0x1, 0x0, {0xa, 0x4e23, 0x3, @private1, 0x7}}}, 0x3a) read$FUSE(r3, &(0x7f00000001c0)={0x2020}, 0x2020) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) r6 = socket(0x15, 0x5, 0x407f) sendmmsg$inet(r6, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002440)=[{&(0x7f0000000140)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='\nT', 0x2}], 0x1}}], 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r5, &(0x7f0000001400)=""/4076, 0xfffffeea) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) executing program 1: ptrace$setregs(0x1a, 0x0, 0x3, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63dd0000000009050300000000000009050cf2010002060209050f000000400000090507c6"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0xbf00) executing program 2: openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl(r3, 0x4, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000000f14010025bd7000fcdbdf2509004500"], 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4004804) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r8 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r8, &(0x7f0000002880)={0x2020}, 0x2020) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x0, 0x10, 0x20000000, 0x1, {{0x1c, 0x4, 0x0, 0x24, 0x70, 0x68, 0x0, 0xbf, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, {[@timestamp={0x44, 0x4, 0x5a, 0x0, 0xc}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x4, 0x76, 0x0, 0x4}, @cipso={0x86, 0x3a, 0x1, [{0x2, 0xb, "5c656f8f1cbb0b72f0"}, {0x5, 0xd, "8dc3639f0e7712332531b4"}, {0x6, 0x9, "f7a5d09ba3d5fc"}, {0x2, 0xc, "f3f695d73a1b82eed5ae"}, {0x6, 0x7, "f10d083cbd"}]}, @end, @lsrr={0x83, 0x13, 0x39, [@empty, @dev={0xac, 0x14, 0x14, 0x1e}, @dev={0xac, 0x14, 0x14, 0x25}, @dev={0xac, 0x14, 0x14, 0xc}]}]}}}}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002cbd70000000000002000000", @ANYRES32=r10, @ANYBLOB="0c0099000200000026000000050018011a00000008009f00030000000800260080090000"], 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x8000) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20e03, 0x0) dup(r13) executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40811}, 0x20) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x58, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x1e, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x1e, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "301ce602000079dea6b6f056d75c"}}}}}}}, 0x0) executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x100, 0xffffffffffffffff}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000000)=[@increfs, @increfs, @decrefs], 0x0, 0x0, 0x0}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x17, 0x2, 0x1, "11010000001400000100b64c0000005c4b7c1500", 0x30314442}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x201, 0x26, r3, 0x0) fanotify_mark(r4, 0x441, 0x1, r3, 0x0) program did not crash replaying the whole log did not cause a kernel crash single: executing 7 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$vim2m-openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-openat$binderfs-ioctl$BINDER_WRITE_READ-ioctl$vim2m_VIDIOC_ENUM_FMT-openat$dir-fanotify_init-fanotify_mark-fanotify_mark detailed listing: executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x100, 0xffffffffffffffff}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000000)=[@increfs, @increfs, @decrefs], 0x0, 0x0, 0x0}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x17, 0x2, 0x1, "11010000001400000100b64c0000005c4b7c1500", 0x30314442}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x201, 0x26, r3, 0x0) fanotify_mark(r4, 0x441, 0x1, r3, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$null-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-prctl$PR_SCHED_CORE-sendmsg-sched_setattr-socket$nl_generic-syz_genetlink_get_family_id$l2tp-syz_open_dev$sg-ioctl-socket$nl_rdma-sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-syz_genetlink_get_family_id$l2tp-openat$procfs-read$FUSE-ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL-socket$nl_generic-ioctl$sock_SIOCGIFINDEX_80211-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_FRAME-socket$nl_generic-sendmsg$L2TP_CMD_SESSION_DELETE-sendmsg$L2TP_CMD_SESSION_GET-openat$kvm-dup detailed listing: executing program 0: openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl(r3, 0x4, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000000f14010025bd7000fcdbdf2509004500"], 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4004804) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r8 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r8, &(0x7f0000002880)={0x2020}, 0x2020) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x0, 0x10, 0x20000000, 0x1, {{0x1c, 0x4, 0x0, 0x24, 0x70, 0x68, 0x0, 0xbf, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, {[@timestamp={0x44, 0x4, 0x5a, 0x0, 0xc}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x4, 0x76, 0x0, 0x4}, @cipso={0x86, 0x3a, 0x1, [{0x2, 0xb, "5c656f8f1cbb0b72f0"}, {0x5, 0xd, "8dc3639f0e7712332531b4"}, {0x6, 0x9, "f7a5d09ba3d5fc"}, {0x2, 0xc, "f3f695d73a1b82eed5ae"}, {0x6, 0x7, "f10d083cbd"}]}, @end, @lsrr={0x83, 0x13, 0x39, [@empty, @dev={0xac, 0x14, 0x14, 0x1e}, @dev={0xac, 0x14, 0x14, 0x25}, @dev={0xac, 0x14, 0x14, 0xc}]}]}}}}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002cbd70000000000002000000", @ANYRES32=r10, @ANYBLOB="0c0099000200000026000000050018011a00000008009f00030000000800260080090000"], 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x8000) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20e03, 0x0) dup(r13) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ptrace$setregs-syz_usb_connect-openat$sequencer2 detailed listing: executing program 0: ptrace$setregs(0x1a, 0x0, 0x3, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63dd0000000009050300000000000009050cf2010002060209050f000000400000090507c6"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0xbf00) program crashed: KASAN: slab-use-after-free Write in snd_usbmidi_do_output single: successfully extracted reproducer found reproducer with 3 syscalls minimizing guilty program testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ptrace$setregs-syz_usb_connect detailed listing: executing program 0: ptrace$setregs(0x1a, 0x0, 0x3, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63dd0000000009050300000000000009050cf2010002060209050f000000400000090507c6"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ptrace$setregs-openat$sequencer2 detailed listing: executing program 0: ptrace$setregs(0x1a, 0x0, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0xbf00) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-openat$sequencer2 detailed listing: executing program 0: syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63dd0000000009050300000000000009050cf2010002060209050f000000400000090507c6"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0xbf00) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ptrace$setregs-syz_usb_connect-openat$sequencer2 detailed listing: executing program 0: ptrace$setregs(0x1a, 0x0, 0x3, 0x0) syz_usb_connect(0x0, 0x51, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0xbf00) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ptrace$setregs-syz_usb_connect-openat$sequencer2 detailed listing: executing program 0: ptrace$setregs(0x1a, 0x0, 0x3, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0xbf00) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ptrace$setregs-syz_usb_connect-openat$sequencer2 detailed listing: executing program 0: ptrace$setregs(0x1a, 0x0, 0x3, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63dd0000000009050300000000000009050cf2010002060209050f000000400000090507c6"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0xbf00) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ptrace$setregs-syz_usb_connect-openat$sequencer2 detailed listing: executing program 0: ptrace$setregs(0x1a, 0x0, 0x3, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63dd0000000009050300000000000009050cf2010002060209050f000000400000090507c6"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x181c82, 0xbf00) program did not crash extracting C reproducer testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ptrace$setregs-syz_usb_connect-openat$sequencer2 program crashed: KASAN: slab-use-after-free Write in snd_usbmidi_in_urb_complete a never seen crash title: KASAN: slab-use-after-free Write in snd_usbmidi_in_urb_complete, ignore simplifying guilty program options testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ptrace$setregs-syz_usb_connect-openat$sequencer2 detailed listing: executing program 0: ptrace$setregs(0x1a, 0x0, 0x3, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63dd0000000009050300000000000009050cf2010002060209050f000000400000090507c6"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0xbf00) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ptrace$setregs-syz_usb_connect-openat$sequencer2 detailed listing: executing program 0: ptrace$setregs(0x1a, 0x0, 0x3, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63dd0000000009050300000000000009050cf2010002060209050f000000400000090507c6"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0xbf00) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ptrace$setregs-syz_usb_connect-openat$sequencer2 detailed listing: executing program 0: ptrace$setregs(0x1a, 0x0, 0x3, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63dd0000000009050300000000000009050cf2010002060209050f000000400000090507c6"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0xbf00) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ptrace$setregs-syz_usb_connect-openat$sequencer2 detailed listing: executing program 0: ptrace$setregs(0x1a, 0x0, 0x3, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63dd0000000009050300000000000009050cf2010002060209050f000000400000090507c6"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0xbf00) program did not crash validation run: crashed=false testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ptrace$setregs-syz_usb_connect-openat$sequencer2 detailed listing: executing program 0: ptrace$setregs(0x1a, 0x0, 0x3, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63dd0000000009050300000000000009050cf2010002060209050f000000400000090507c6"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0xbf00) program did not crash validation run: crashed=false testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ptrace$setregs-syz_usb_connect-openat$sequencer2 detailed listing: executing program 0: ptrace$setregs(0x1a, 0x0, 0x3, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63dd0000000009050300000000000009050cf2010002060209050f000000400000090507c6"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0xbf00) program crashed: general protection fault in snd_usbmidi_do_output validation run: crashed=true testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ptrace$setregs-syz_usb_connect-openat$sequencer2 detailed listing: executing program 0: ptrace$setregs(0x1a, 0x0, 0x3, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63dd0000000009050300000000000009050cf2010002060209050f000000400000090507c6"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0xbf00) program crashed: lost connection to test machine suppressed program crash: lost connection to test machine validation run: crashed=false testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ptrace$setregs-syz_usb_connect-openat$sequencer2 detailed listing: executing program 0: ptrace$setregs(0x1a, 0x0, 0x3, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63dd0000000009050300000000000009050cf2010002060209050f000000400000090507c6"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0xbf00) program did not crash validation run: crashed=false testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ptrace$setregs-syz_usb_connect-openat$sequencer2 detailed listing: executing program 0: ptrace$setregs(0x1a, 0x0, 0x3, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63dd0000000009050300000000000009050cf2010002060209050f000000400000090507c6"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0xbf00) program did not crash validation run: crashed=false testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ptrace$setregs-syz_usb_connect-openat$sequencer2 detailed listing: executing program 0: ptrace$setregs(0x1a, 0x0, 0x3, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63dd0000000009050300000000000009050cf2010002060209050f000000400000090507c6"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0xbf00) program did not crash validation run: crashed=false testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ptrace$setregs-syz_usb_connect-openat$sequencer2 detailed listing: executing program 0: ptrace$setregs(0x1a, 0x0, 0x3, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63dd0000000009050300000000000009050cf2010002060209050f000000400000090507c6"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0xbf00) program did not crash validation run: crashed=false testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ptrace$setregs-syz_usb_connect-openat$sequencer2 detailed listing: executing program 0: ptrace$setregs(0x1a, 0x0, 0x3, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63dd0000000009050300000000000009050cf2010002060209050f000000400000090507c6"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0xbf00) program did not crash validation run: crashed=false testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ptrace$setregs-syz_usb_connect-openat$sequencer2 detailed listing: executing program 0: ptrace$setregs(0x1a, 0x0, 0x3, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63dd0000000009050300000000000009050cf2010002060209050f000000400000090507c6"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0xbf00) program crashed: general protection fault in snd_usbmidi_do_output validation run: crashed=true reproducing took 2h38m58.953200328s repro crashed as (corrupted=false): Oops: general protection fault, probably for non-canonical address 0xdffffc0000000011: 0000 [#1] SMP KASAN PTI KASAN: null-ptr-deref in range [0x0000000000000088-0x000000000000008f] CPU: 1 UID: 0 PID: 5237 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 RIP: 0010:snd_usbmidi_do_output+0x199/0x560 sound/usb/midi.c:310 Code: 5c 24 48 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 88 8b ec f8 48 8b 1b 4c 8d ab 88 00 00 00 4d 89 ef 49 c1 ef 03 <43> 0f b6 04 37 84 c0 0f 85 44 02 00 00 41 c7 45 00 00 00 00 00 48 RSP: 0018:ffffc90000a08ab8 EFLAGS: 00010006 RAX: 1ffff1100f9e9101 RBX: 0000000000000000 RCX: ffff88805e57da00 RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000007 RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 R10: dffffc0000000000 R11: fffff52000141134 R12: 0000000000000001 R13: 0000000000000088 R14: dffffc0000000000 R15: 0000000000000011 FS: 00007f3bf7dd3880(0000) GS:ffff888125d13000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000c008053000 CR3: 000000005dce2000 CR4: 00000000003526f0 Call Trace: snd_usbmidi_error_timer+0x316/0x660 sound/usb/midi.c:362 call_timer_fn+0x17b/0x5f0 kernel/time/timer.c:1747 expire_timers kernel/time/timer.c:1798 [inline] __run_timers kernel/time/timer.c:2372 [inline] __run_timer_base+0x61a/0x860 kernel/time/timer.c:2384 run_timer_base kernel/time/timer.c:2393 [inline] run_timer_softirq+0xb7/0x180 kernel/time/timer.c:2403 handle_softirqs+0x283/0x870 kernel/softirq.c:579 __do_softirq kernel/softirq.c:613 [inline] invoke_softirq kernel/softirq.c:453 [inline] __irq_exit_rcu+0xca/0x1f0 kernel/softirq.c:680 irq_exit_rcu+0x9/0x30 kernel/softirq.c:696 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1050 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1050 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:__module_address+0x14/0x3e0 kernel/module/main.c:3815 Code: 33 ff ff ff 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 41 57 41 56 41 55 41 54 53 48 3b 3d 6c 60 36 0c <0f> 82 8a 02 00 00 48 3b 3d 67 60 36 0c 0f 87 7d 02 00 00 49 89 fd RSP: 0018:ffffc90003bbf0f0 EFLAGS: 00000213 RAX: 0000000000000001 RBX: ffffffff81aab64d RCX: adda5dd218824800 RDX: 0000000000000000 RSI: ffffffff8be33f60 RDI: 00007f3bf76a7407 RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff81aab64d R10: ffffc90003bbf1f8 R11: ffffffff81ac3b00 R12: ffff88805e57da00 R13: ffff888024a9a000 R14: 00007f3bf76a7407 R15: 1ffff92000777e3e __module_text_address kernel/module/main.c:3871 [inline] is_module_text_address+0x88/0x1e0 kernel/module/main.c:3846 kernel_text_address+0x94/0xe0 kernel/extable.c:119 __kernel_text_address+0xd/0x40 kernel/extable.c:79 unwind_get_return_address+0x4d/0x90 arch/x86/kernel/unwind_orc.c:369 arch_stack_walk+0xfc/0x150 arch/x86/kernel/stacktrace.c:26 stack_trace_save+0x9c/0xe0 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:47 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:68 poison_kmalloc_redzone mm/kasan/common.c:388 [inline] __kasan_kmalloc+0x93/0xb0 mm/kasan/common.c:405 kasan_kmalloc include/linux/kasan.h:260 [inline] __do_kmalloc_node mm/slub.c:4376 [inline] __kmalloc_noprof+0x27a/0x4f0 mm/slub.c:4388 kmalloc_noprof include/linux/slab.h:909 [inline] tomoyo_realpath_from_path+0xe3/0x5d0 security/tomoyo/realpath.c:251 tomoyo_get_realpath security/tomoyo/file.c:151 [inline] tomoyo_check_open_permission+0x1c1/0x3b0 security/tomoyo/file.c:771 security_file_open+0xb1/0x270 security/security.c:3144 do_dentry_open+0x384/0x13f0 fs/open.c:942 vfs_open+0x3b/0x340 fs/open.c:1095 do_open fs/namei.c:3887 [inline] path_openat+0x2ee5/0x3830 fs/namei.c:4046 do_filp_open+0x1fa/0x410 fs/namei.c:4073 do_sys_openat2+0x121/0x1c0 fs/open.c:1435 do_sys_open fs/open.c:1450 [inline] __do_sys_openat fs/open.c:1466 [inline] __se_sys_openat fs/open.c:1461 [inline] __x64_sys_openat+0x138/0x170 fs/open.c:1461 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f3bf76a7407 Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff RSP: 002b:00007ffe8bad7b50 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007f3bf7dd3880 RCX: 00007f3bf76a7407 RDX: 0000000000080141 RSI: 000055626d58002e RDI: ffffffffffffff9c RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000000 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:snd_usbmidi_do_output+0x199/0x560 sound/usb/midi.c:310 Code: 5c 24 48 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 88 8b ec f8 48 8b 1b 4c 8d ab 88 00 00 00 4d 89 ef 49 c1 ef 03 <43> 0f b6 04 37 84 c0 0f 85 44 02 00 00 41 c7 45 00 00 00 00 00 48 RSP: 0018:ffffc90000a08ab8 EFLAGS: 00010006 RAX: 1ffff1100f9e9101 RBX: 0000000000000000 RCX: ffff88805e57da00 RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000007 RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 R10: dffffc0000000000 R11: fffff52000141134 R12: 0000000000000001 R13: 0000000000000088 R14: dffffc0000000000 R15: 0000000000000011 FS: 00007f3bf7dd3880(0000) GS:ffff888125d13000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000c008053000 CR3: 000000005dce2000 CR4: 00000000003526f0 ---------------- Code disassembly (best guess): 0: 5c pop %rsp 1: 24 48 and $0x48,%al 3: 48 89 d8 mov %rbx,%rax 6: 48 c1 e8 03 shr $0x3,%rax a: 42 80 3c 30 00 cmpb $0x0,(%rax,%r14,1) f: 74 08 je 0x19 11: 48 89 df mov %rbx,%rdi 14: e8 88 8b ec f8 call 0xf8ec8ba1 19: 48 8b 1b mov (%rbx),%rbx 1c: 4c 8d ab 88 00 00 00 lea 0x88(%rbx),%r13 23: 4d 89 ef mov %r13,%r15 26: 49 c1 ef 03 shr $0x3,%r15 * 2a: 43 0f b6 04 37 movzbl (%r15,%r14,1),%eax <-- trapping instruction 2f: 84 c0 test %al,%al 31: 0f 85 44 02 00 00 jne 0x27b 37: 41 c7 45 00 00 00 00 movl $0x0,0x0(%r13) 3e: 00 3f: 48 rex.W final repro crashed as (corrupted=false): Oops: general protection fault, probably for non-canonical address 0xdffffc0000000011: 0000 [#1] SMP KASAN PTI KASAN: null-ptr-deref in range [0x0000000000000088-0x000000000000008f] CPU: 1 UID: 0 PID: 5237 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 RIP: 0010:snd_usbmidi_do_output+0x199/0x560 sound/usb/midi.c:310 Code: 5c 24 48 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 88 8b ec f8 48 8b 1b 4c 8d ab 88 00 00 00 4d 89 ef 49 c1 ef 03 <43> 0f b6 04 37 84 c0 0f 85 44 02 00 00 41 c7 45 00 00 00 00 00 48 RSP: 0018:ffffc90000a08ab8 EFLAGS: 00010006 RAX: 1ffff1100f9e9101 RBX: 0000000000000000 RCX: ffff88805e57da00 RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000007 RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 R10: dffffc0000000000 R11: fffff52000141134 R12: 0000000000000001 R13: 0000000000000088 R14: dffffc0000000000 R15: 0000000000000011 FS: 00007f3bf7dd3880(0000) GS:ffff888125d13000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000c008053000 CR3: 000000005dce2000 CR4: 00000000003526f0 Call Trace: snd_usbmidi_error_timer+0x316/0x660 sound/usb/midi.c:362 call_timer_fn+0x17b/0x5f0 kernel/time/timer.c:1747 expire_timers kernel/time/timer.c:1798 [inline] __run_timers kernel/time/timer.c:2372 [inline] __run_timer_base+0x61a/0x860 kernel/time/timer.c:2384 run_timer_base kernel/time/timer.c:2393 [inline] run_timer_softirq+0xb7/0x180 kernel/time/timer.c:2403 handle_softirqs+0x283/0x870 kernel/softirq.c:579 __do_softirq kernel/softirq.c:613 [inline] invoke_softirq kernel/softirq.c:453 [inline] __irq_exit_rcu+0xca/0x1f0 kernel/softirq.c:680 irq_exit_rcu+0x9/0x30 kernel/softirq.c:696 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1050 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1050 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:__module_address+0x14/0x3e0 kernel/module/main.c:3815 Code: 33 ff ff ff 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 41 57 41 56 41 55 41 54 53 48 3b 3d 6c 60 36 0c <0f> 82 8a 02 00 00 48 3b 3d 67 60 36 0c 0f 87 7d 02 00 00 49 89 fd RSP: 0018:ffffc90003bbf0f0 EFLAGS: 00000213 RAX: 0000000000000001 RBX: ffffffff81aab64d RCX: adda5dd218824800 RDX: 0000000000000000 RSI: ffffffff8be33f60 RDI: 00007f3bf76a7407 RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff81aab64d R10: ffffc90003bbf1f8 R11: ffffffff81ac3b00 R12: ffff88805e57da00 R13: ffff888024a9a000 R14: 00007f3bf76a7407 R15: 1ffff92000777e3e __module_text_address kernel/module/main.c:3871 [inline] is_module_text_address+0x88/0x1e0 kernel/module/main.c:3846 kernel_text_address+0x94/0xe0 kernel/extable.c:119 __kernel_text_address+0xd/0x40 kernel/extable.c:79 unwind_get_return_address+0x4d/0x90 arch/x86/kernel/unwind_orc.c:369 arch_stack_walk+0xfc/0x150 arch/x86/kernel/stacktrace.c:26 stack_trace_save+0x9c/0xe0 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:47 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:68 poison_kmalloc_redzone mm/kasan/common.c:388 [inline] __kasan_kmalloc+0x93/0xb0 mm/kasan/common.c:405 kasan_kmalloc include/linux/kasan.h:260 [inline] __do_kmalloc_node mm/slub.c:4376 [inline] __kmalloc_noprof+0x27a/0x4f0 mm/slub.c:4388 kmalloc_noprof include/linux/slab.h:909 [inline] tomoyo_realpath_from_path+0xe3/0x5d0 security/tomoyo/realpath.c:251 tomoyo_get_realpath security/tomoyo/file.c:151 [inline] tomoyo_check_open_permission+0x1c1/0x3b0 security/tomoyo/file.c:771 security_file_open+0xb1/0x270 security/security.c:3144 do_dentry_open+0x384/0x13f0 fs/open.c:942 vfs_open+0x3b/0x340 fs/open.c:1095 do_open fs/namei.c:3887 [inline] path_openat+0x2ee5/0x3830 fs/namei.c:4046 do_filp_open+0x1fa/0x410 fs/namei.c:4073 do_sys_openat2+0x121/0x1c0 fs/open.c:1435 do_sys_open fs/open.c:1450 [inline] __do_sys_openat fs/open.c:1466 [inline] __se_sys_openat fs/open.c:1461 [inline] __x64_sys_openat+0x138/0x170 fs/open.c:1461 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f3bf76a7407 Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff RSP: 002b:00007ffe8bad7b50 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007f3bf7dd3880 RCX: 00007f3bf76a7407 RDX: 0000000000080141 RSI: 000055626d58002e RDI: ffffffffffffff9c RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000000 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:snd_usbmidi_do_output+0x199/0x560 sound/usb/midi.c:310 Code: 5c 24 48 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 88 8b ec f8 48 8b 1b 4c 8d ab 88 00 00 00 4d 89 ef 49 c1 ef 03 <43> 0f b6 04 37 84 c0 0f 85 44 02 00 00 41 c7 45 00 00 00 00 00 48 RSP: 0018:ffffc90000a08ab8 EFLAGS: 00010006 RAX: 1ffff1100f9e9101 RBX: 0000000000000000 RCX: ffff88805e57da00 RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000007 RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 R10: dffffc0000000000 R11: fffff52000141134 R12: 0000000000000001 R13: 0000000000000088 R14: dffffc0000000000 R15: 0000000000000011 FS: 00007f3bf7dd3880(0000) GS:ffff888125d13000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000c008053000 CR3: 000000005dce2000 CR4: 00000000003526f0 ---------------- Code disassembly (best guess): 0: 5c pop %rsp 1: 24 48 and $0x48,%al 3: 48 89 d8 mov %rbx,%rax 6: 48 c1 e8 03 shr $0x3,%rax a: 42 80 3c 30 00 cmpb $0x0,(%rax,%r14,1) f: 74 08 je 0x19 11: 48 89 df mov %rbx,%rdi 14: e8 88 8b ec f8 call 0xf8ec8ba1 19: 48 8b 1b mov (%rbx),%rbx 1c: 4c 8d ab 88 00 00 00 lea 0x88(%rbx),%r13 23: 4d 89 ef mov %r13,%r15 26: 49 c1 ef 03 shr $0x3,%r15 * 2a: 43 0f b6 04 37 movzbl (%r15,%r14,1),%eax <-- trapping instruction 2f: 84 c0 test %al,%al 31: 0f 85 44 02 00 00 jne 0x27b 37: 41 c7 45 00 00 00 00 movl $0x0,0x0(%r13) 3e: 00 3f: 48 rex.W